Trojan.Encoder.32738

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\join.avi
<Drive name for removable media>:\sioc.rdf
<Drive name for removable media>:\hypothyroidism_slides.pptx
<Drive name for removable media>:\stoc13_ml_quoc_le.pptx
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Drive name for removable media>:\asaprojectcompetition.pptx
<Drive name for removable media>:\waterresourcesag.pptx
<Drive name for removable media>:\samieee_obiee_presentation.pptx
<Drive name for removable media>:\roozenedowebinar.pptx
<Drive name for removable media>:\digest.rdf
<Drive name for removable media>:\taxus_baccata.rdf
<Drive name for removable media>:\accountsreceivable.ppt
<Drive name for removable media>:\ksearch_esa_talk.ppt
<Drive name for removable media>:\sim_gametheory_to_finance.ppt
<Drive name for removable media>:\mappingconcepthubberlin.ppt
<Drive name for removable media>:\metac.ppt
<Drive name for removable media>:\proposaltemplates.ppt
<Drive name for removable media>:\irgeek.pem
<Drive name for removable media>:\tunpersonalca1.pem
<Drive name for removable media>:\contenttypes.rdf
<Drive name for removable media>:\elvisimp.rdf
<Drive name for removable media>:\swc_2009-03-02.rdf
<Drive name for removable media>:\schema.rdf
<Drive name for removable media>:\subjectclassification.zip
<Drive name for removable media>:\fiche_inscription_2015.zip
<Drive name for removable media>:\applicant.xlsx
<Drive name for removable media>:\price030215.zip
<Drive name for removable media>:\2013_finalsummaryforweb.xlsx
<Drive name for removable media>:\national_autism_preparation_programs.xlsx
<Drive name for removable media>:\cee_mmsprogram_summary_public.xlsx
<Drive name for removable media>:\fiche_inscription_2015.xls
<Drive name for removable media>:\removedtitles_records.xls
<Drive name for removable media>:\calculatorworksheet.xls
<Drive name for removable media>:\price030215.xls
<Drive name for removable media>:\guide_reorganization_mapping.xls
<Drive name for removable media>:\excel_example.xls
<Drive name for removable media>:\fungalnameauthors.rtf
<Drive name for removable media>:\waterlandhealthkano.rtf
<Drive name for removable media>:\myhrvoldhanssenbiharfamine.rtf
<Drive name for removable media>:\contractualdeadlines.xls
<Drive name for removable media>:\productos.xls
<Drive name for removable media>:\20140114.rdf
<Drive name for removable media>:\delongcacert.pem
<Drive name for removable media>:\1sm_price.zip
<Drive name for removable media>:\hhhlcert.pem
<Drive name for removable media>:\10thingscondoms.pdf
<Drive name for removable media>:\weeklysheet1215.doc
<Drive name for removable media>:\aoc_saq_d_v3_merchant.docx
<Drive name for removable media>:\cveuropeo.doc
<Drive name for removable media>:\uep_form_786_bulletin_1726i602.doc
<Drive name for removable media>:\hanni_umami_chapter.doc
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\contosoroot.cer
<Drive name for removable media>:\testee.cer
<Drive name for removable media>:\lisp_success.doc
<Drive name for removable media>:\sdkfailsafeemulator.cer
<Drive name for removable media>:\dashborder_144.bmp
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\tileimage.bmp
<Drive name for removable media>:\coffee.bmp
<Drive name for removable media>:\default.bmp
<Drive name for removable media>:\archer.avi
<Drive name for removable media>:\split.avi
<Drive name for removable media>:\380713-readme.txt
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\ovp25012015.doc
<Drive name for removable media>:\about.htm
<Drive name for removable media>:\glidescope_review_rev_010.docx
<Drive name for removable media>:\2015-02-worms-nanoparticle-toxicity.pdf
<Drive name for removable media>:\2015-02-patients-topic-work-related-asthma-jobs.pdf
<Drive name for removable media>:\7790_preview.pdf
<Drive name for removable media>:\firefly1.mov
<Drive name for removable media>:\video_1.mp4
<Drive name for removable media>:\fil_20060629111052.pdf
<Drive name for removable media>:\video.mp4
<Drive name for removable media>:\dag2_panel1_320_ref.mov
<Drive name for removable media>:\etc6_m_1.mov
<Drive name for removable media>:\168.jpeg
<Drive name for removable media>:\about.html
<Drive name for removable media>:\iisstart.html
<Drive name for removable media>:\alert.html
<Drive name for removable media>:\tree_view.htm
<Drive name for removable media>:\garden.htm
<Drive name for removable media>:\advice_process.htm
<Drive name for removable media>:\iisstart.htm
<Drive name for removable media>:\alert.htm
<Drive name for removable media>:\ituneshelpunavailable.htm
<Drive name for removable media>:\ck.pem
<Drive name for removable media>:\price.zip

Modifies file system

Creates the following files

%TEMP%\n7myqu1b.0.cs
C:\far2\documentation\eng\380713-readme.txt
C:\far2\addons\xlat\380713-readme.txt
C:\far2\addons\setup\380713-readme.txt
C:\far2\pluginsdk\headers.pas\380713-readme.txt
C:\far2\plugins\align\380713-readme.txt
C:\far2\plugins\editcase\380713-readme.txt
C:\far2\pluginsdk\headers.c\380713-readme.txt
C:\far2\plugins\macroview\380713-readme.txt
C:\far2\plugins\ftp\380713-readme.txt
C:\far2\plugins\farcmds\380713-readme.txt
C:\far2\plugins\emenu\380713-readme.txt
C:\far2\plugins\filecase\380713-readme.txt
C:\far2\documentation\rus\380713-readme.txt
C:\far2\encyclopedia\tap\380713-readme.txt
C:\far2\plugins\network\380713-readme.txt
%ProgramFiles(x86)%\microsoft office\office10\380713-readme.txt
C:\far2\plugins\tmppanel\380713-readme.txt
%ProgramFiles(x86)%\k-lite codec pack\icaros\380713-readme.txt
C:\far2\plugins\proclist\380713-readme.txt
%ProgramFiles(x86)%\opera\assets\380713-readme.txt
%ProgramFiles(x86)%\pidgin\plugins\380713-readme.txt
%ProgramFiles(x86)%\pidgin\gtk\380713-readme.txt
%ProgramFiles(x86)%\pidgin\ca-certs\380713-readme.txt
%ProgramFiles(x86)%\steam\bin\380713-readme.txt
%ProgramFiles(x86)%\pidgin\sounds\purple\380713-readme.txt
%ProgramFiles(x86)%\steam\controller_base\380713-readme.txt
%ProgramFiles(x86)%\steam\resource\380713-readme.txt
C:\far2\addons\macros\380713-readme.txt
C:\far2\plugins\compare\380713-readme.txt
C:\far2\addons\colors\380713-readme.txt
%ProgramFiles%\firefox\380713-readme.txt
%ALLUSERSPROFILE%\microsoft help\380713-readme.txt
%TEMP%\n7myqu1b.out
%TEMP%\csce32d.tmp
%TEMP%\rese33e.tmp
%TEMP%\n7myqu1b.dll
%TEMP%\br54pdon.0.cs
%TEMP%\br54pdon.cmdline
%TEMP%\br54pdon.out
%TEMP%\csce82c.tmp
%TEMP%\rese83d.tmp
%TEMP%\br54pdon.dll
D:\380713-readme.txt
C:\far2\380713-readme.txt
%ALLUSERSPROFILE%\380713-readme.txt
%TEMP%\n7myqu1b.cmdline
C:\far2\encyclopedia\380713-readme.txt
C:\far2\fexcept\380713-readme.txt
%ProgramFiles(x86)%\k-lite codec pack\380713-readme.txt
%ProgramFiles(x86)%\mirc\380713-readme.txt
%ProgramFiles(x86)%\msbuild\380713-readme.txt
%ProgramFiles(x86)%\opera\380713-readme.txt
%ProgramFiles(x86)%\qip 2012\380713-readme.txt
%ProgramFiles(x86)%\steam\380713-readme.txt
C:\totalcmd\380713-readme.txt
%ProgramFiles(x86)%\winamp\380713-readme.txt
C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\380713-readme.txt
%ALLUSERSPROFILE%\microsoft toolkit\380713-readme.txt
%HOMEPATH%\380713-readme.txt
C:\totalcmd\language\380713-readme.txt
C:\far2\addons\380713-readme.txt
%ProgramFiles(x86)%\steam\graphics\380713-readme.txt
%ProgramFiles(x86)%\steam\resource\fonts\380713-readme.txt

Deletes the following files

%TEMP%\rese33e.tmp
%TEMP%\csce32d.tmp
%TEMP%\n7myqu1b.dll
%TEMP%\n7myqu1b.cmdline
%TEMP%\n7myqu1b.pdb
%TEMP%\n7myqu1b.0.cs
%TEMP%\n7myqu1b.out
%TEMP%\rese83d.tmp
%TEMP%\csce82c.tmp
%TEMP%\br54pdon.0.cs
%TEMP%\br54pdon.pdb
%TEMP%\br54pdon.cmdline
%TEMP%\br54pdon.dll
%TEMP%\br54pdon.out

Moves the following files

from %ProgramFiles(x86)%\k-lite codec pack\unins000.dat to %ProgramFiles(x86)%\k-lite codec pack\cfc25cad271d.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\barcodefont.ttf to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\b484c1af44bcef8.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\barcodefont.txt to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\d0946968b70f40e.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\checkbox\checkbox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\checkbox\9407b3cd1ff6.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\combobox\combobox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\combobox\8c6d0b20179f.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\dropdownlist\dropdownlist.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\dropdownlist\199956f89318dc47.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\guiobjects.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\4fd43ad67bc766.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\historyeditbox.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\da53bfc14ed94564.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\historyeditbox.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\4bc3b26b6c47e6a045f.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\historyeditbox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\historyeditbox\c670d392350c1329d8.380713
from %ProgramFiles(x86)%\steam\graphics\broadcast\icon_close_default.tga to %ProgramFiles(x86)%\steam\graphics\broadcast\e97a119e0490c48a66ea57.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\menubutton.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\bc2bdace5c01.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\menubutton.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\79411f712259f7a.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\droidsansthai-regular.ttf to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\0288b7aa9044aae9845306be9.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\menubutton.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\menubutton\bedfce3f5f941a.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\pathpicker\pathpicker.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\pathpicker\7a4f29ab29f189.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\popupitem.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\d08558e197c.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\popupitem.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\614c1aaa98b14e.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\popupmenu.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\popupmenu\469b3b9dd939e.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\statusbar\statusbar.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\statusbar\aea06148dbb36.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tabsheet\tabsheet.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tabsheet\c36bc9a46a1b.380713
from %ProgramFiles(x86)%\steam\graphics\broadcast\icon_close_hover.tga to %ProgramFiles(x86)%\steam\graphics\broadcast\853e38a4b1b98d0b06af.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\titlebox\titlebox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\titlebox\c7e36c819611.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\tooltips-elements.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\dea093ffebbb7fe30ec15.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\tooltips.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\06b64ebd41.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\tooltips.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\87872facc488d.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\tooltips.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\tooltips\6c30540b1b7a.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\about.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\16b9cd8b0b.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\about.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\5f75feaef.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\msgbox\msgbox.xml to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\msgbox\8cfda657b1.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\default_keybinds.cfg to %ProgramFiles(x86)%\steam\tenfoot\resource\0df6217022796df0867a.380713
from %ProgramFiles(x86)%\steam\public\ssa\eula_english_bigpicture.html to %ProgramFiles(x86)%\steam\public\ssa\efefda5ae94b1404b56d6fdbed50.380713
from %ProgramFiles(x86)%\steam\resource\layout\appdownloadpanel.layout to %ProgramFiles(x86)%\steam\resource\layout\379403bd065ae3eae19887e.380713
from %ProgramFiles(x86)%\steam\resource\layout\app_validation_dialog.layout to %ProgramFiles(x86)%\steam\resource\layout\f0fcc9066589bcfd78f68a3c2576.380713
from %ProgramFiles(x86)%\steam\package\tenfoot_all.zip.bd1519d47a9aed716a567a0661bf80bddc2883c4 to %ProgramFiles(x86)%\steam\package\7db4e2d3cf7602fc00e4d854fca98f233447bcc3ae3d7721d74e6787.380713
from %ProgramFiles(x86)%\steam\steam\drivercheck\240\dxsupport_reqs.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\240\e48e874433a4e73598.380713
from %ProgramFiles(x86)%\steam\friends\achievementnotification.res to %ProgramFiles(x86)%\steam\friends\d0822f92527f386d40749e7e9d6.380713
from %ProgramFiles(x86)%\steam\public\appdownloadnotification.res to %ProgramFiles(x86)%\steam\public\7fa16651afe544d7347ac211a14.380713
from %ProgramFiles(x86)%\steam\public\account.html to %ProgramFiles(x86)%\steam\public\568b0f94fe38.380713
from %ProgramFiles(x86)%\steam\public\c11.tga to %ProgramFiles(x86)%\steam\public\bc6987a.380713
from %ProgramFiles(x86)%\winamp\lang\winamp-pt-br.wlz to %ProgramFiles(x86)%\winamp\lang\e7f8081e37d1bcca.380713
from %ProgramFiles(x86)%\steam\public\ssasubpanel.res to %ProgramFiles(x86)%\steam\public\5679587035e1f9b.380713
from %ProgramFiles(x86)%\winamp\lang\winamp-pl-pl.wlz to %ProgramFiles(x86)%\winamp\lang\61f9df6270a958ae.380713
from %ProgramFiles(x86)%\winamp\lang\winamp-nl-nl.wlz to %ProgramFiles(x86)%\winamp\lang\1e6492c64b098516.380713
from %ProgramFiles(x86)%\winamp\lang\winamp-ko-kr.wlz to %ProgramFiles(x86)%\winamp\lang\a1142a4007222a28.380713
from %ProgramFiles(x86)%\winamp\lang\winamp-ja-jp.wlz to %ProgramFiles(x86)%\winamp\lang\f4727fef1b249d66.380713
from %ProgramFiles(x86)%\steam\resource\layout\broadcast_chatbanner.layout to %ProgramFiles(x86)%\steam\resource\layout\9ee656b5509cf1b8d30b02318dc.380713
from %ProgramFiles(x86)%\steam\public\c1.tga to %ProgramFiles(x86)%\steam\public\90efd8.380713
from %ProgramFiles(x86)%\steam\public\ssadialog.res to %ProgramFiles(x86)%\steam\public\63d35bdfe0473.380713
from %ProgramFiles(x86)%\steam\public\screenshotnotification.res to %ProgramFiles(x86)%\steam\public\8b6595fede219a1647c634c69a.380713
from %ProgramFiles(x86)%\steam\public\screenshoterrornotification.res to %ProgramFiles(x86)%\steam\public\cf5652b9b66060738a49421b6d1885e.380713
from %ProgramFiles(x86)%\steam\public\c10.tga to %ProgramFiles(x86)%\steam\public\11c90a4.380713
from %ProgramFiles(x86)%\steam\public\psnaccountsetupdialog.res to %ProgramFiles(x86)%\steam\public\b909f764bfddbad0db55bae43.380713
from %ProgramFiles(x86)%\winamp\skins\big bento\about\about.xml to %ProgramFiles(x86)%\winamp\skins\big bento\about\b5f56e650.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt to %ProgramFiles(x86)%\steam\servers\459b4c96a3fc37bac1ecbf90.380713
from %ProgramFiles(x86)%\winamp\lang\winamp-ro-ro.wlz to %ProgramFiles(x86)%\winamp\lang\7390aa812bd943e5.380713
from %ProgramFiles(x86)%\steam\package\tenfoot_dicts_all.zip.c74a3a9beb77a280cfd8761b901a80ed0f6a3173 to %ProgramFiles(x86)%\steam\package\a4ecc37fca1f7eb35e72f03f35fdbf7811bd6381d9281d6a802d1e0e09ac6a.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\wacs\freetype\freetype.wac to %ProgramFiles(x86)%\winamp\plugins\freeform\wacs\freetype\3d83d4865adc.380713
from %ProgramFiles(x86)%\steam\resource\invite.tga to %ProgramFiles(x86)%\steam\resource\aeece37c4c.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\about.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\about\2b06c5a.380713
from %ProgramFiles(x86)%\steam\resource\filecopydialog.res to %ProgramFiles(x86)%\steam\resource\80ccbc5ad68facc9fb.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\license_cjk.txt to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\240f5e6bd524a54.380713
from %ProgramFiles(x86)%\steam\servers\dialogserverpassword.res to %ProgramFiles(x86)%\steam\servers\5104f6e9659a650d6b1b54d9.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt to %ProgramFiles(x86)%\steam\servers\35ff72468162d397705455c6e.380713
from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_autoretry.res to %ProgramFiles(x86)%\steam\servers\e4985e25b538a0b4a78434d7f331.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt to %ProgramFiles(x86)%\steam\servers\e0a39bfdfa3effee7b78851eb.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt to %ProgramFiles(x86)%\steam\servers\b691011c19fc37273068f52d702b.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt to %ProgramFiles(x86)%\steam\servers\19730e58ac6eb6e2f9ed1436.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt to %ProgramFiles(x86)%\steam\servers\a490706ee91f7c16ea553f951.380713
from %ProgramFiles(x86)%\steam\friends\addfriendresultsubpanel_success.res to %ProgramFiles(x86)%\steam\friends\94fe89810b97811f82d85f3a397229badfb.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\debug.sym to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\953135813.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt to %ProgramFiles(x86)%\steam\servers\531505592241e96d2f2775bcfbd.380713
from %ProgramFiles(x86)%\steam\servers\dialogaddserver.res to %ProgramFiles(x86)%\steam\servers\fe845c387e7ce8f3fb9.380713
from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_singleplayer.res to %ProgramFiles(x86)%\steam\servers\8e351d57ca47c4f4c123fa64c5b5831.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt to %ProgramFiles(x86)%\steam\servers\6642c079a92b1a1d7ac0639d13c.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\notosanscjkjp-regular.otf to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\7949c10e29e7ed878e2554892.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt to %ProgramFiles(x86)%\steam\servers\fc38ac1d280841e4dc490b2c0.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt to %ProgramFiles(x86)%\steam\servers\b694955f5bc603363622f271.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt to %ProgramFiles(x86)%\steam\servers\3000599f6733ff646f3b62017.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt to %ProgramFiles(x86)%\steam\servers\f7715bb7c8864e7a211d5fb7a.380713
from %ProgramFiles(x86)%\steam\servers\dialoggameinfo_nonsteam.res to %ProgramFiles(x86)%\steam\servers\81650d37274cf7dc4853751b143.380713
from %ProgramFiles(x86)%\steam\resource\layout\gamespage_grid.layout to %ProgramFiles(x86)%\steam\resource\layout\16a3d452c729e4142a7e1.380713
from %ProgramFiles(x86)%\steam\public\ssa\eula_italian_bigpicture.html to %ProgramFiles(x86)%\steam\public\ssa\385fbb06028b34b3bb26d830902c.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt to %ProgramFiles(x86)%\steam\servers\c8c016c2360d2cf4cb1ed963832.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt to %ProgramFiles(x86)%\steam\servers\50b8c9d517fa81a5b2a7bdf4.380713
from %ProgramFiles(x86)%\steam\graphics\btndefbottomleft.tga to %ProgramFiles(x86)%\steam\graphics\c23e61a7ab11d4f80e03.380713
from %ProgramFiles(x86)%\steam\steam\drivercheck\2400\dxsupport_reqs.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\2400\f3ca6191579967ac83.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\standardframe.maki to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\67a61cf884a1466ac2.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt to %ProgramFiles(x86)%\steam\servers\d73d28cf3bd16f299eec6d5c9f.380713
from %ProgramFiles(x86)%\steam\servers\vacbannedconnrefuseddialog.res to %ProgramFiles(x86)%\steam\servers\c95c339f6be1e81da1d463ddb5c844.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt to %ProgramFiles(x86)%\steam\servers\e747754deab89ffab3d0b2007.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt to %ProgramFiles(x86)%\steam\servers\4dae23dbd10523d3a5c9a2dd3.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt to %ProgramFiles(x86)%\steam\servers\27b40990a9dace2390995821.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\tenfoot.uifont to %ProgramFiles(x86)%\steam\tenfoot\resource\fonts\97b2908d734f49.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\betabutton4.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\cd7f30f24f3b86f.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\bg_gradient_mask.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\30084f4b5a01405b3e0e.380713
from %ProgramFiles(x86)%\steam\resource\layout\broadcast_firsttime.layout to %ProgramFiles(x86)%\steam\resource\layout\60f7a684bfad1d1085ef4ce10d.380713
from %ProgramFiles(x86)%\steam\resource\layout\broadcast_livebanner.layout to %ProgramFiles(x86)%\steam\resource\layout\392f60e1a87efb98e3741a6eedd.380713
from %ProgramFiles(x86)%\steam\steam\drivercheck\2400\dxsupport.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\2400\bc5fbe366d078.380713
from %ProgramFiles(x86)%\steam\resource\layout\chattitlepanel.layout to %ProgramFiles(x86)%\steam\resource\layout\79b62e983cfff216c8beb.380713
from %ProgramFiles(x86)%\steam\friends\addfriendenterdetailssubpanel.res to %ProgramFiles(x86)%\steam\friends\8938dc93d51f7c8a374e21e95dba0dd14.380713
from %ProgramFiles(x86)%\steam\public\ssa\eula_french_bigpicture.html to %ProgramFiles(x86)%\steam\public\ssa\af1f57be2aeebc780b80a907c6e.380713
from %ProgramFiles(x86)%\steam\public\refreshlogindialog.res to %ProgramFiles(x86)%\steam\public\c4e03f05f4a23850e58602.380713
from %ProgramFiles(x86)%\steam\package\tenfoot_fonts_all.zip.505590f6014431a95a9750073e466372f3e98d88 to %ProgramFiles(x86)%\steam\package\3f653faaef17a171ac62aa8c3b842b36525b67dd265da3e018d2b5213f565a.380713
from %ProgramFiles(x86)%\steam\friends\addfriendresultsubpanel.res to %ProgramFiles(x86)%\steam\friends\8424b288953c8444f18caae1a8a.380713
from %ProgramFiles(x86)%\steam\package\strings_all.zip.53f00b54cffc710742dd4bd3e60f27417582fee5 to %ProgramFiles(x86)%\steam\package\35fa639e241955b48b0eaa86a62ccab1a8bb86dc951a6f9b9f5a8cc8.380713
from %ProgramFiles(x86)%\steam\public\ssa\eula_german_bigpicture.html to %ProgramFiles(x86)%\steam\public\ssa\7577aff5f86ce34369442913dfc.380713
from %ProgramFiles(x86)%\steam\package\strings_en_all.zip.cb080e501f60c33549dc909fc83e724c03bb3b87 to %ProgramFiles(x86)%\steam\package\eb2fee1220f2eb61bc8590e1d9613e7a2a631c8405ec6b2546cd4511bd6.380713
from %ProgramFiles(x86)%\steam\resource\layout\choosepurchaseorauthorization.layout to %ProgramFiles(x86)%\steam\resource\layout\914eeb27f675d0b204a40a0cf584487a67fc.380713
from %ProgramFiles(x86)%\steam\servers\dialoggameinfo.res to %ProgramFiles(x86)%\steam\servers\c52715453603084545.380713
from %ProgramFiles(x86)%\steam\servers\icon_bots.tga to %ProgramFiles(x86)%\steam\servers\684a3cbf5d865.380713
from %ProgramFiles(x86)%\steam\servers\dialogserverbrowser.res to %ProgramFiles(x86)%\steam\servers\4ebdf42d2b86e631bde5af1.380713
from %ProgramFiles(x86)%\steam\servers\icon_bots_column.tga to %ProgramFiles(x86)%\steam\servers\38191f5288554e608303.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt to %ProgramFiles(x86)%\steam\servers\57167eacfc8e0a6fc384c7300f.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt to %ProgramFiles(x86)%\steam\servers\5f058932b8b5499385a21c4.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt to %ProgramFiles(x86)%\steam\servers\5ab73611c9d4c282d16d481.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt to %ProgramFiles(x86)%\steam\servers\3aef6ef6a9c9f5314981bbf0cc.380713
from %ProgramFiles(x86)%\steam\servers\game_ready.wav to %ProgramFiles(x86)%\steam\servers\0123790f374331.380713
from %ProgramFiles(x86)%\steam\package\tenfoot_images_all.zip.3f5109256d433f180d0ea066398bbad9804ba276 to %ProgramFiles(x86)%\steam\package\3ab9d54d07f58efd3e8f8bf96aabbe9ae4eab06825d292fe9f0fce9e726575e.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt to %ProgramFiles(x86)%\steam\servers\65c9574273bda570e7161b9dd5.380713
from %ProgramFiles(x86)%\steam\friends\addfriendresultsubpanel_failure.res to %ProgramFiles(x86)%\steam\friends\c6b0fde1fa0513ac0f35954f02a346e4212.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\images\abutton.tga to %ProgramFiles(x86)%\steam\tenfoot\resource\images\3e034f13db6.380713
from %ProgramFiles(x86)%\steam\graphics\btndefbottom.tga to %ProgramFiles(x86)%\steam\graphics\c5daf450fb205bd2.380713
from %ProgramFiles(x86)%\steam\graphics\bigpicturebg.tga to %ProgramFiles(x86)%\steam\graphics\bd33f880f5389a9f.380713
from %ProgramFiles(x86)%\steam\resource\icon_warning_yellow.tga to %ProgramFiles(x86)%\steam\resource\49288e69704790ba36c8114.380713
from %ProgramFiles(x86)%\steam\resource\icon_warning.tga to %ProgramFiles(x86)%\steam\resource\93f28fa55146b92e.380713
from %ProgramFiles(x86)%\pidgin\plugins\.dll to %ProgramFiles(x86)%\pidgin\plugins\c651.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\aol_member_ca.pem to %ProgramFiles(x86)%\pidgin\ca-certs\046030a5494fdf6de.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\baltimore_cybertrust_root.pem to %ProgramFiles(x86)%\pidgin\ca-certs\ced006f59ccfe9812010b82429568.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\cacert_class3.pem to %ProgramFiles(x86)%\pidgin\ca-certs\4b35536de11e25e23.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\cacert_root.pem to %ProgramFiles(x86)%\pidgin\ca-certs\fe78a1dd449e1d0.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\digicerthighassuranceca-3.pem to %ProgramFiles(x86)%\pidgin\ca-certs\f850899bb630630174117f90539c5.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\digicerthighassuranceevrootca.pem to %ProgramFiles(x86)%\pidgin\ca-certs\99e97850ec634f5f5e3a713e29d05ba1b.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\deutsche_telekom_root_ca_2.pem to %ProgramFiles(x86)%\pidgin\ca-certs\d7ac51d14999f5f1250ae487a91e96.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\entrust.net_secure_server_ca.pem to %ProgramFiles(x86)%\pidgin\ca-certs\16663da29f8dae038f996a6e3addfff6.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\verisign_international_server_class_3_ca.pem to %ProgramFiles(x86)%\pidgin\ca-certs\1c12e4ec6f8d54f34ad9e2fe5b6e0a5dd3c62ad4ce7e.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\valicert_class_2_va.pem to %ProgramFiles(x86)%\pidgin\ca-certs\d7f62f68539031dfb874cfe.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\america_online_root_certification_authority_1.pem to %ProgramFiles(x86)%\pidgin\ca-certs\b86f08bee42380cc44e13d131b977fbfec33f45a71bdd4b17.380713
from %ProgramFiles(x86)%\steam\bin\icudtl.dat to %ProgramFiles(x86)%\steam\bin\3368f03d00.380713
from %ProgramFiles(x86)%\steam\bin\debug.log to %ProgramFiles(x86)%\steam\bin\53a730dcb.380713
from %ProgramFiles(x86)%\steam\bin\devtools_resources.pak to %ProgramFiles(x86)%\steam\bin\19a7ef30e3d4c0499566d6.380713
from %ProgramFiles(x86)%\steam\bin\cef.pak to %ProgramFiles(x86)%\steam\bin\86615bf.380713
from %ProgramFiles(x86)%\steam\bin\mssmp3.asi to %ProgramFiles(x86)%\steam\bin\4e498b9154.380713
from %ProgramFiles(x86)%\steam\bin\natives_blob.bin to %ProgramFiles(x86)%\steam\bin\2a8d00fbdb3ed44c.380713
from %ProgramFiles(x86)%\steam\libav_h264-56.dll.crypt to %ProgramFiles(x86)%\steam\74404bd6e20f0a84c4e322d.380713
from %ProgramFiles(x86)%\pidgin\sounds\purple\send.wav to %ProgramFiles(x86)%\pidgin\sounds\purple\c2902b4f.380713
from %ProgramFiles(x86)%\steam\controller_base\bigpicture.vdf to %ProgramFiles(x86)%\steam\controller_base\8207ddc3113897.380713
from %ProgramFiles(x86)%\steam\controller_base\streamingclient.vdf to %ProgramFiles(x86)%\steam\controller_base\a0e69cc6ba6090326e3.380713
from %ProgramFiles(x86)%\steam\controller_base\streamingclient_bigpicture.vdf to %ProgramFiles(x86)%\steam\controller_base\dd0946a234f8eb991ec2b4d775c49b.380713
from %ProgramFiles(x86)%\steam\graphics\achievementbg.tga to %ProgramFiles(x86)%\steam\graphics\f5808dbb96686bbc0.380713
from %ProgramFiles(x86)%\steam\graphics\achievementbg_recent.tga to %ProgramFiles(x86)%\steam\graphics\e237cf1be8826d5c3bb8c49c.380713
from %ProgramFiles(x86)%\opera\installation_status.xml to %ProgramFiles(x86)%\opera\5d75c0c92c8de50ba1e6723.380713
from %ProgramFiles(x86)%\mirc\mirc.chm to %ProgramFiles(x86)%\mirc\632315bd.380713
from %ProgramFiles(x86)%\pidgin\gtk\contents to %ProgramFiles(x86)%\pidgin\gtk\8815c17b.380713
from %ProgramFiles(x86)%\opera\installer_prefs.json to %ProgramFiles(x86)%\opera\27e0d81c393ebe2a4f24.380713
from %ProgramFiles(x86)%\mirc\readme.txt to %ProgramFiles(x86)%\mirc\3796d48158.380713
from %ProgramFiles%\firefox\blocklist.xml to %ProgramFiles%\firefox\f1a4ed50f7cee.380713
from %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets to %ProgramFiles(x86)%\msbuild\8ebf6d67fbac64b537d02b4162d3a01c4.380713
from %ProgramFiles(x86)%\opera\server_tracking_data to %ProgramFiles(x86)%\opera\dda208b8a8ef0738a559.380713
from %ProgramFiles(x86)%\opera\resources.pri to %ProgramFiles(x86)%\opera\700238a9e67aa.380713
from %ProgramFiles(x86)%\opera\launcher.visualelementsmanifest.xml to %ProgramFiles(x86)%\opera\c232581939b50100d9626b294b3c8bdc625.380713
from %ProgramFiles(x86)%\qip 2012\unins000.msg to %ProgramFiles(x86)%\qip 2012\579a88a7fc21.380713
from %ProgramFiles(x86)%\qip 2012\unins000.dat to %ProgramFiles(x86)%\qip 2012\224798932fef.380713
from %ProgramFiles(x86)%\steam\libav_h264-56.dll.md5 to %ProgramFiles(x86)%\steam\b4356f98f28cd273b0351.380713
from %ProgramFiles(x86)%\steam\libx264-142.dll.md5 to %ProgramFiles(x86)%\steam\e4b8354dc0ab6795a1d.380713
from %ProgramFiles(x86)%\winamp\pconfig.dcf to %ProgramFiles(x86)%\winamp\c0cb52754ff.380713
from %ProgramFiles(x86)%\winamp\paths.ini to %ProgramFiles(x86)%\winamp\382fc2c3e.380713
from %ProgramFiles(x86)%\winamp\install.ini to %ProgramFiles(x86)%\winamp\35e27d19af6.380713
from %ProgramFiles(x86)%\winamp\whatsnew.txt to %ProgramFiles(x86)%\winamp\857fe9d034bc.380713
from %ProgramFiles(x86)%\steam\graphics\avatarbordergolden.tga to %ProgramFiles(x86)%\steam\graphics\5df88a89c7cdf12b8b29d6.380713
from %ProgramFiles(x86)%\winamp\system\auth.w5s to %ProgramFiles(x86)%\winamp\system\2ca04ca8.380713
from %ProgramFiles%\firefox\application.ini to %ProgramFiles%\firefox\58dddcfc1a7e519.380713
from %ProgramFiles%\firefox\freebl3.chk to %ProgramFiles%\firefox\a754d6732e8.380713
from %ProgramFiles%\firefox\dependentlibs.list to %ProgramFiles%\firefox\95af7bc6f137edda68.380713
from %ProgramFiles%\firefox\crashreporter_override.ini to %ProgramFiles%\firefox\af5bc02394ed6aeced894ae02e.380713
from %ProgramFiles%\firefox\chrome.manifest to %ProgramFiles%\firefox\9c09fb88269b7f6.380713
from %ProgramFiles%\firefox\platform.ini to %ProgramFiles%\firefox\2b0f7fd8e6dd.380713
from %ProgramFiles%\firefox\readme.txt to %ProgramFiles%\firefox\ad660e863f.380713
from %ProgramFiles%\firefox\softokn3.chk to %ProgramFiles%\firefox\701c96575504.380713
from %ProgramFiles%\firefox\updater.ini to %ProgramFiles%\firefox\37554e7a7a8.380713
from %ProgramFiles(x86)%\microsoft office\office10\thdic.lex to %ProgramFiles(x86)%\microsoft office\office10\88aa17ba1.380713
from %ProgramFiles(x86)%\k-lite codec pack\icaros\icaros license.txt to %ProgramFiles(x86)%\k-lite codec pack\icaros\758bc17210859181f3.380713
from %ProgramFiles(x86)%\k-lite codec pack\icaros\ffmpeg license.txt to %ProgramFiles(x86)%\k-lite codec pack\icaros\61aefc12848f9430ab.380713
from %ProgramFiles(x86)%\mirc\versions.txt to %ProgramFiles(x86)%\mirc\64934cb7da06.380713
from %ProgramFiles(x86)%\mirc\ircintro.chm to %ProgramFiles(x86)%\mirc\f5c7eb8ef5a3.380713
from %ProgramFiles%\firefox\nssdbm3.chk to %ProgramFiles%\firefox\07934ccb1d4.380713
from %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt to %ProgramFiles(x86)%\steam\servers\3dc472f9958b30ea0dda51.380713
from %ProgramFiles(x86)%\steam\graphics\avatarborderingame.tga to %ProgramFiles(x86)%\steam\graphics\17cda3a1008b623db8fd30.380713
from %ProgramFiles(x86)%\steam\graphics\avatarborderonline.tga to %ProgramFiles(x86)%\steam\graphics\39c19674c356d1ee2dfc5e.380713
from %ProgramFiles(x86)%\steam\resource\icon_password.tga to %ProgramFiles(x86)%\steam\resource\ea413c80a154c55f5.380713
from %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt to %ProgramFiles(x86)%\steam\public\195f5194081b8681fc4df43cf7b.380713
from %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt to %ProgramFiles(x86)%\steam\public\3aa15733992d2644ae36ffbf0e6f.380713
from %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt to %ProgramFiles(x86)%\steam\public\9dc9eb4fa121803bff54b5023456.380713
from %ProgramFiles(x86)%\steam\steam\drivercheck\220\dxsupport.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\220\d07cc4e59ee48.380713
from %ProgramFiles(x86)%\steam\package\bins_cef_win32.zip.4447a3d2f9ac1e2fbc533033cf235404866a27a7 to %ProgramFiles(x86)%\steam\package\93db71d48b3689803b298b45de6f448f4d0b25fcbb73086262328713685.380713
from %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt to %ProgramFiles(x86)%\steam\public\59bc099bb5f41f2fc2924587fd2.380713
from %ProgramFiles(x86)%\steam\package\bins_codecs_win32.zip.4d5d0cec7d7c337abfbd8be9d020c06e6928b1c2 to %ProgramFiles(x86)%\steam\package\e5902cedf87144c3f2700212ab1fba9d03831f620d2bbc96fea619247f4e5f.380713
from %ProgramFiles(x86)%\steam\package\bins_misc_win32.zip.1db89a4dcad9b10b32243aa6a9de7c4d71d7fce7 to %ProgramFiles(x86)%\steam\package\2342ff3a0458d087af66f5a598e8df0c3b1189900ca65df7227499ac1448.380713
from %ProgramFiles(x86)%\steam\package\bins_win32.zip.c3ecb4b509fab15dec05a4686a38071da3f5b32a to %ProgramFiles(x86)%\steam\package\fc2aae4a067d5fda978536bb7132b886345f80a7142fb1392835bbb.380713
from %ProgramFiles(x86)%\steam\steam\drivercheck\220\dxsupport_reqs.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\220\7ab789b26dade5b54f.380713
from %ProgramFiles(x86)%\pidgin\ca-certs\addtrust_external_root.pem to %ProgramFiles(x86)%\pidgin\ca-certs\63f66e9b0ee525167659c794f6.380713
from %ProgramFiles(x86)%\steam\package\gamesforwindows_win32.zip.2cbf7a087f4452016065bb75c9b025dbc6885e32 to %ProgramFiles(x86)%\steam\package\ac9944c7f7ec3b2ba7d323cd7624185a63c919bc88e67da5bd18b56514142e460c.380713
from %ProgramFiles(x86)%\steam\package\remoteui_all.zip.ba22fb168ed139d9979cdd1cefbd911e3ed3529c to %ProgramFiles(x86)%\steam\package\9977e3110da20fa720cedd5bf026a1eeb8c66be66c7563dca08b6cc1f.380713
from %ProgramFiles(x86)%\steam\package\resources_all.zip.e13bd8e3ea04b9ccbdd9cdb20ffa3a3ed0c55841 to %ProgramFiles(x86)%\steam\package\23d69beeb1ac169bb5e555a10b9cac27838c319c01bc02fc68dfea6cc0.380713
from %ProgramFiles(x86)%\steam\package\resources_misc_all.zip.6b98785251045457e56ce493e4974efc336c1912 to %ProgramFiles(x86)%\steam\package\0c21b6c56f78cf31ca76bbf619c6bc6663a41f09bea10f101f060070879703f.380713
from %ProgramFiles(x86)%\steam\package\ssa_noarch.zip.7cb02fff8f34cc739f6b7098cf1a36494a94653e to %ProgramFiles(x86)%\steam\package\223d71c1ba9515e4ae25a48b7862000a7084f88fa2421695667c884.380713
from %ProgramFiles(x86)%\steam\package\ssa_win32.zip.adc4b0a71d32370b39174c74c7ff563113b1116f to %ProgramFiles(x86)%\steam\package\1a2c973d34f56c47a2aa6b215c2a67cf54a050a48ee443aedab809.380713
from %ProgramFiles(x86)%\steam\steam\drivercheck\240\dxsupport.cfg to %ProgramFiles(x86)%\steam\steam\drivercheck\240\af5c027c38b00.380713
from %ProgramFiles(x86)%\steam\resource\icon_steam.tga to %ProgramFiles(x86)%\steam\resource\e0c3966da112f7.380713
from %ProgramFiles(x86)%\steam\package\steam_client_win32.installed to %ProgramFiles(x86)%\steam\package\84bd04fcf14f147baa389d98de9c.380713
from %ProgramFiles(x86)%\steam\resource\icon_steam_disabled.tga to %ProgramFiles(x86)%\steam\resource\11fecd23726e4c45685ddcb.380713
from %ProgramFiles(x86)%\steam\package\steam_client_win32.manifest to %ProgramFiles(x86)%\steam\package\4bdb0185394781897f1422e4e3b.380713
from %ProgramFiles(x86)%\steam\resource\icon_trade_request.tga to %ProgramFiles(x86)%\steam\resource\61eb7075a93f67caa93929.380713
from %ProgramFiles(x86)%\steam\package\steam_win32.zip.08396f3b6b20aee64f6e22dd2eff32b5be16b930 to %ProgramFiles(x86)%\steam\package\993bdc3d1b45124c4ae82294d1754aee577ebf98f0c6c09ba3e30799.380713
from %ProgramFiles(x86)%\steam\graphics\bg_security_wizard.tga to %ProgramFiles(x86)%\steam\graphics\589a2bbd68758b0f3177e4.380713
from %ProgramFiles(x86)%\steam\package\public_all.zip.cead2b93e0927b8f764d31fa410ac5f1e8c39233 to %ProgramFiles(x86)%\steam\package\f2f77f8d072710f589b0280a003795364c162a76a75d852949a3188.380713
from %ProgramFiles(x86)%\steam\tenfoot\resource\browser\webkit.css to %ProgramFiles(x86)%\steam\tenfoot\resource\browser\44996f6c01.380713
from %ProgramFiles(x86)%\winamp\skins\big bento\about\about.maki to %ProgramFiles(x86)%\winamp\skins\big bento\about\afae9c86c5.380713
from %ProgramFiles(x86)%\steam\resource\icon_newfolder.tga to %ProgramFiles(x86)%\steam\resource\2a6d23f0caea829bef.380713
from %ProgramFiles(x86)%\steam\resource\icon_info.tga to %ProgramFiles(x86)%\steam\resource\f983346c45d38.380713
from %ProgramFiles(x86)%\steam\resource\battery_dim.tga to %ProgramFiles(x86)%\steam\resource\a1e58da34015a16.380713
from %ProgramFiles(x86)%\steam\resource\camera1.wav to %ProgramFiles(x86)%\steam\resource\b661c7f3007.380713
from %ProgramFiles(x86)%\steam\graphics\avatar_184blank.tga to %ProgramFiles(x86)%\steam\graphics\69431aabaa35e7e87c6.380713
from %ProgramFiles(x86)%\steam\graphics\avatar_32blank.tga to %ProgramFiles(x86)%\steam\graphics\a0f3fcd7a4b719677f.380713
from %ProgramFiles(x86)%\steam\resource\chatty.tga to %ProgramFiles(x86)%\steam\resource\626094c7fb.380713
from %ProgramFiles(x86)%\steam\graphics\avatar_64blank.tga to %ProgramFiles(x86)%\steam\graphics\77605f7cd6daa98daf.380713
from %ProgramFiles(x86)%\steam\resource\createtokendialog.res to %ProgramFiles(x86)%\steam\resource\7e4562646c1bfebf5b3d8.380713
from %ProgramFiles(x86)%\steam\graphics\beta.tga to %ProgramFiles(x86)%\steam\graphics\b7f9be09.380713
from %ProgramFiles(x86)%\steam\graphics\beta_hover.tga to %ProgramFiles(x86)%\steam\graphics\f61af4b794b0df.380713
from %ProgramFiles(x86)%\steam\resource\easynotification.res to %ProgramFiles(x86)%\steam\resource\3da69d6c76db693c6f22.380713
from %ProgramFiles(x86)%\steam\resource\edittokendialog.res to %ProgramFiles(x86)%\steam\resource\3562aa25e355b635fef.380713
from %ProgramFiles(x86)%\steam\resource\battery_border.tga to %ProgramFiles(x86)%\steam\resource\8ba3c969ab49b27e68.380713
from %ProgramFiles(x86)%\steam\graphics\bg_security_code_entry.tga to %ProgramFiles(x86)%\steam\graphics\aa8a8f7542965d7f62b25f6f6c.380713
from %ProgramFiles(x86)%\steam\graphics\avatarborderoffline.tga to %ProgramFiles(x86)%\steam\graphics\03782f84b22969326d732b3.380713
from %ProgramFiles(x86)%\steam\resource\filecopyoverwriteprompt.res to %ProgramFiles(x86)%\steam\resource\4643d345c8e8abd950a44dab10a.380713
from %ProgramFiles(x86)%\steam\resource\fonts\marlett.ttf to %ProgramFiles(x86)%\steam\resource\fonts\01a35351382.380713
from %ProgramFiles(x86)%\steam\resource\icon_blank.tga to %ProgramFiles(x86)%\steam\resource\33cd8374e4e4ce.380713
from %ProgramFiles(x86)%\steam\resource\icon_clear_field.tga to %ProgramFiles(x86)%\steam\resource\9f094dde78348db48bba.380713
from %ProgramFiles(x86)%\steam\resource\icon_community_preview.tga to %ProgramFiles(x86)%\steam\resource\28e1e569b846f2697132f1cca5.380713
from %ProgramFiles(x86)%\steam\resource\icon_error_red.tga to %ProgramFiles(x86)%\steam\resource\fadd5adafefee4ab06.380713
from %ProgramFiles(x86)%\steam\resource\icon_file.tga to %ProgramFiles(x86)%\steam\resource\7837e75800f65.380713
from %ProgramFiles(x86)%\steam\resource\icon_folder.tga to %ProgramFiles(x86)%\steam\resource\bbda3b7fdf2f819.380713
from %ProgramFiles(x86)%\steam\resource\icon_folderup.tga to %ProgramFiles(x86)%\steam\resource\0b02d72a581e79caa.380713
from %ProgramFiles(x86)%\steam\resource\icon_folder_selected.tga to %ProgramFiles(x86)%\steam\resource\4129604b30085e83025ee150.380713
from %ProgramFiles(x86)%\steam\resource\icon_gift.tga to %ProgramFiles(x86)%\steam\resource\065b312f88791.380713
from %ProgramFiles(x86)%\steam\resource\icon_hlicon1.tga to %ProgramFiles(x86)%\steam\resource\2bf79b88e6bc6712.380713
from %ProgramFiles(x86)%\steam\resource\battery_bright.tga to %ProgramFiles(x86)%\steam\resource\0fb4e201792e4480a8.380713
from %ProgramFiles(x86)%\steam\resource\icon_hlicon2.tga to %ProgramFiles(x86)%\steam\resource\0d98180520a348c6.380713
from %ProgramFiles(x86)%\steam\resource\fileopendialog.res to %ProgramFiles(x86)%\steam\resource\0eb0c6da8fc8fbd05c.380713
from %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\titlebar.m to %ProgramFiles(x86)%\winamp\plugins\freeform\xml\wasabi\scripts\38f407d3c6.380713

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Creates and executes the following

'%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\n7myqu1b.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE33E.tmp" "%TEMP%\CSCE32D.tmp"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\br54pdon.cmdline"' (with hidden window)
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE83D.tmp" "%TEMP%\CSCE82C.tmp"' (with hidden window)

Executes the following

'%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\n7myqu1b.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE33E.tmp" "%TEMP%\CSCE32D.tmp"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\csc.exe' /noconfig /fullpaths @"%TEMP%\br54pdon.cmdline"
'%WINDIR%\microsoft.net\framework64\v2.0.50727\cvtres.exe' /NOLOGO /READONLY /MACHINE:IX86 "/OUT:%TEMP%\RESE83D.tmp" "%TEMP%\CSCE82C.tmp"

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial