Trojan.Encoder.38583

Technical Information

To ensure autorun and distribution

Modifies the following registry keys

[HKLM\Software\Microsoft\Windows\CurrentVersion\Run] 'System32_' = '<SYSTEM32>\System32_.DLL.vbs'

Malicious functions

Reads files which store third party applications passwords

%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\dashborder_144.bmp
%HOMEPATH%\desktop\dashborder_192.bmp
%HOMEPATH%\desktop\dashborder_96.bmp
%HOMEPATH%\desktop\default.bmp
%HOMEPATH%\desktop\dial.bmp
%HOMEPATH%\desktop\february_catalogue__2015.doc
%HOMEPATH%\desktop\ovp25012015.doc
%HOMEPATH%\desktop\tileimage.bmp
%HOMEPATH%\desktop\toolbar.bmp
%HOMEPATH%\desktop\trivial-merge.html
%HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc

Modifies file system

Creates the following files

<SYSTEM32>\system32_.dll.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\symbol.txt.vbs
%ProgramFiles%\winrar\whatsnew.txt.vbs
%ProgramFiles%\winrar\readme.txt.vbs
%ProgramFiles%\winrar\rar.txt.vbs
%ProgramFiles%\winrar\license.txt.vbs
%ProgramFiles%\windows nt\tabletextservice\tabletextserviceyi.txt.vbs
%ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedzhengma.txt.vbs
%ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedshuangpin.txt.vbs
%ProgramFiles%\windows nt\tabletextservice\tabletextservicesimplifiedquanpin.txt.vbs
%ProgramFiles%\windows nt\tabletextservice\tabletextservicedayi.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\centeuro.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\adobe\zdingbat.txt.vbs
%ProgramFiles%\microsoft office\office14\accessweb\servwrap.asp.vbs
%ProgramFiles%\microsoft office\office14\splashscreen.bmp.vbs
%ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg.vbs
%ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg.vbs
%ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg.vbs
%ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg.vbs
%ProgramFiles%\windows nt\tabletextservice\tabletextservicearray.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_ca\readme_en_ca.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\corpchar.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\abbreviations\en_gb\list.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\abbreviations\en_ca\list.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\adobe\products.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_us_posix.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_us.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_gb_euro.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_gb.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\languagenames2\displaylanguagenames.en_ca.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1258.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1257.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1254.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1253.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1252.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1251.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\win\cp1250.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\ukraine.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\turkish.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\symbol.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\romanian.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\roman.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\iceland.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\greek.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\cyrillic.txt.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg.vbs
%ProgramFiles%\windows nt\tabletextservice\tabletextserviceamharic.txt.vbs
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\mappings\mac\croatian.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\abbreviations\en_us\list.txt.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03012u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02039u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02223u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02208u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02074u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02071u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02062u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02058u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02040u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02417u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02398u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01607u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01562u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01478u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01332u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01265u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01247u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01236u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01235u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02466u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03011u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02291u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02758u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02757u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02756u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02755u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02754u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02753u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02752u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02750u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02749u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02748u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02746u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02742u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02740u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02738u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02736u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02503u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02470u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_ca\readme_th_en_ca_v2.txt.vbs
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\sitesecurityservicestate.txt.vbs
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\securitypreloadstate.txt.vbs
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\pkcs11.txt.vbs
%APPDATA%\thunderbird\profiles\chdgbv82.default-release\alternateservices.txt.vbs
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\gmp-widevinecdm\4.10.1582.2\license.txt.vbs
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\trrblacklist.txt.vbs
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\sitesecurityservicestate.txt.vbs
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\securitypreloadstate.txt.vbs
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\pkcs11.txt.vbs
%APPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\alternateservices.txt.vbs
%WINDIR%\ocsetup_cbs_uninstall_searchengine-client-package.txt.vbs
%WINDIR%\ehome\en-us\playready_eula.txt.vbs
%TEMP%\microsoft visual c++ 2010 x86 redistributable setup_20230912_171631997-msi_vc_red.msi.txt.vbs
%TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_extended_x64.msi.txt.vbs
%TEMP%\microsoft .net framework 4 setup_20230912_172639823-msi_netfx_core_x64.msi.txt.vbs
%TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt.vbs
%TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt.vbs
%TEMP%\dd_vcredistui12db.txt.vbs
%TEMP%\dd_vcredistmsi12db.txt.vbs
%TEMP%\dd_setuputility.txt.vbs
%TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt.vbs
%TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.vbs
%TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171623793-msi_vc_red.msi.txt.vbs
%TEMP%\microsoft visual c++ 2010 x64 redistributable setup_20230912_171604215-msi_vc_red.msi.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\affdescription.txt.vbs
%WINDIR%\ehome\en-us\playready_eula_oem.txt.vbs
<SYSTEM32>\tdc.ocx.vbs
<SYSTEM32>\sysmon.ocx.vbs
<SYSTEM32>\msdxm.ocx.vbs
<SYSTEM32>\hhctrl.ocx.vbs
<SYSTEM32>\dmview.ocx.vbs
%WINDIR%\installer\$patchcache$\managed\68ab67ca7da73301b744caf070e41400\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109f100c0400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109f100a0c00100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109f10090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109e60090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109b10090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109ab0090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109a10090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109810090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109610090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109510090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109340090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109340000000100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\000041091a0090400100000000f01fec\cachesize.txt.vbs
%WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.6029\servwrap.asp.vbs
%WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.4763\richtx32.ocx.vbs
%WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\cachesize.txt.vbs
%LOCALAPPDATA%\microsoft\internet explorer\brndlog.txt.vbs
C:\users\public\music\sample music\sleep away.mp3.vbs
%WINDIR%\ehome\en-us\epgtos.txt.vbs
C:\users\public\music\sample music\maid with the flaxen hair.mp3.vbs
C:\users\public\music\sample music\kalimba.mp3.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_us\added.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_bulgarian.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt.vbs
%ProgramFiles(x86)%\steam\logs\bootstrap_log.txt.vbs
%ProgramFiles(x86)%\opera\29.0.1795.47\resources\license.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_us\excluded.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_gb\excluded.txt.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_gb\added.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_ca\excluded.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\supplementaldictionaries\en_ca\added.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_us\readme_en_us.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\wordnet_license.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\readme_en_gb.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\readme.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\license.txt.vbs
%CommonProgramFiles(x86)%\adobe\reader\dc\linguistics\providers\plugins2\adobehunspellplugin\dictionaries\en_gb\changelog.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt.vbs
%ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicesimplifiedzhengma.txt.vbs
%ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicesimplifiedshuangpin.txt.vbs
%ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicesimplifiedquanpin.txt.vbs
%ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicedayi.txt.vbs
%ProgramFiles(x86)%\windows nt\tabletextservice\tabletextservicearray.txt.vbs
%ProgramFiles(x86)%\windows nt\tabletextservice\tabletextserviceamharic.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_vietnamese.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_latam.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt.vbs
%ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt.vbs
%ProgramFiles(x86)%\windows nt\tabletextservice\tabletextserviceyi.txt.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101860.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101859.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101858.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101857.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101864.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101862.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101863.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101865.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101867.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101866.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\circle_glass_thumbnail.bmp.vbs
%CommonProgramFiles%\microsoft shared\stationery\peacock.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\tanspecks.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\stars.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\softblue.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\small_news.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\shadesofblue.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\sand_paper.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\roses.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\psychedelic.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\pretty_peacock.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\pine_lumber.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\orangecircles.jpg.vbs
%CommonProgramFiles%\services\verisign.bmp.vbs
%CommonProgramFiles%\microsoft shared\stationery\notebook.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\monet.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\handprints.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\greenbubbles.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\garden.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\blue_gradient.jpg.vbs
%CommonProgramFiles%\microsoft shared\stationery\bears.jpg.vbs
%CommonProgramFiles%\microsoft shared\smart tag\metconv.txt.vbs
%CommonProgramFiles%\microsoft shared\grphflt\ms.jpg.vbs
C:\autoexec.bat
%ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg.vbs
<SYSTEM32>\catroot2\dberr.txt.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\blackrectangle.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\heart_glass_thumbnail.bmp.vbs
%CommonProgramFiles%\microsoft shared\stationery\white_chocolate.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg.vbs
%ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.vbs
%ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.vbs
%ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.vbs
%ProgramFiles%\java\jre1.8.0_45\welcome.html.vbs
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.vbs
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.vbs
%ProgramFiles%\java\jre1.8.0_45\readme.txt.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\scene_button_style_default_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_widescreen_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_travel_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_specialocc_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_scrapbook_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_postage_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_plain_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_photo_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_performance_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_highlights_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_glass_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangle_babypink_thumbnail.bmp.vbs
%ProgramFiles%\dvd maker\shared\dvdstyles\cloud_thumbnail.bmp.vbs
<SYSTEM32>\wshom.ocx.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0101861.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01035u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\ph00780u.bmp.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg.vbs
%ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg.vbs
<DRIVERS>\gmreadme.txt.vbs

Deletes the following files

%WINDIR%\ocsetup_cbs_uninstall_searchengine-client-package.txt
%WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\aspdotnet_logo.jpg
%WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\darkblue_grad.jpg
%WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\help.jpg
%WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\security_watermark.jpg
%WINDIR%\microsoft.net\framework64\v2.0.50727\asp.netwebadminfiles\images\topgradrepeat.jpg
%WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\aspdotnet_logo.jpg
%WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\darkblue_grad.jpg
%WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\help.jpg
%WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\topgradrepeat.jpg
<SYSTEM32>\catroot2\dberr.txt
%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\dhtmlheader.html
%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\header.bmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\splashscreen.bmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\client\watermark.bmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\dhtmlheader.html
%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\header.bmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\splashscreen.bmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\setupcache\extended\watermark.bmp
%WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\topgradrepeat.jpg
%WINDIR%\microsoft.net\framework64\v4.0.30319\asp.netwebadminfiles\images\security_watermark.jpg
%WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\security_watermark.jpg
%WINDIR%\installer\$patchcache$\managed\00004109810090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.4763\richtx32.ocx
%WINDIR%\installer\$patchcache$\managed\00004109110000000100000000f01fec\14.0.6029\servwrap.asp
%WINDIR%\installer\$patchcache$\managed\000041091a0090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109340000000100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109340090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109510090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109610090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109a10090400100000000f01fec\cachesize.txt
%WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\darkblue_grad.jpg
%WINDIR%\installer\$patchcache$\managed\00004109ab0090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109b10090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109e60090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109f10090400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109f100a0c00100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\00004109f100c0400100000000f01fec\cachesize.txt
%WINDIR%\installer\$patchcache$\managed\68ab67ca7da73301b744caf070e41400\cachesize.txt
%WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\aspdotnet_logo.jpg
%WINDIR%\microsoft.net\framework\v4.0.30319\asp.netwebadminfiles\images\help.jpg
<SYSTEM32>\restore\machineguid.txt

Modifies the following files

%CommonProgramFiles%\microsoft shared\grphflt\ms.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg
%ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip
%ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt
%ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt
%ProgramFiles%\java\jre1.8.0_45\welcome.html
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt
%ProgramFiles%\java\jre1.8.0_45\readme.txt
%CommonProgramFiles%\microsoft shared\smart tag\metconv.txt
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg

Modifies multiple files.

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial