Trojan.Encoder.41247

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%APPDATA%\microsoft\windows\start menu\programs\startup\desktop.ini.jaffastinks

Malicious functions

Reads files which store third party applications passwords

%LOCALAPPDATA%\google\chrome\user data\default\cookies
%HOMEPATH%\desktop\sdkfailsafeemulator.cer
%HOMEPATH%\desktop\region-north-karelia.jpeg
%HOMEPATH%\desktop\nwfieldnotes1966.docx
%HOMEPATH%\desktop\lisp_success.doc
%HOMEPATH%\desktop\ituneshelpunavailable.html
%HOMEPATH%\desktop\hanni_umami_chapter.doc
%HOMEPATH%\desktop\dialmap.bmp
%HOMEPATH%\desktop\dashborder_192.bmp
%HOMEPATH%\desktop\sdksampleunprivdeveloper.cer
%HOMEPATH%\desktop\dashborder_120.bmp
%HOMEPATH%\desktop\archer.avi
%HOMEPATH%\desktop\alert.html
%HOMEPATH%\desktop\about.html
%HOMEPATH%\desktop\1189.jpeg
%APPDATA%\thunderbird\profiles.ini
%APPDATA%\mozilla\firefox\profiles.ini
%LOCALAPPDATA%\google\chrome\user data\default\web data
%LOCALAPPDATA%\google\chrome\user data\default\login data
%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\split.avi

Modifies file system

Creates the following files

%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\42.0.2311.135.manifest.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\desktop.ini.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\firefox.lnk.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\google chrome.lnk.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\internet explorer.lnk.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\opera.lnk.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows explorer.lnk.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\launch internet explorer browser.lnk.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\shows desktop.lnk.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\user pinned\taskbar\windows media player.lnk.jaffastinks
%APPDATA%\microsoft\office\recent\templates.lnk.jaffastinks
%APPDATA%\microsoft\protect\credhist.jaffastinks
%APPDATA%\microsoft\protect\s-1-5-21-3691498038-2086406363-2140527554-1000\01dce7f8-5d1f-4649-b59e-c1c72774584c.jaffastinks
%APPDATA%\microsoft\protect\s-1-5-21-3691498038-2086406363-2140527554-1000\preferred.jaffastinks
%APPDATA%\microsoft\templates\normal.dotm.jaffastinks
%APPDATA%\microsoft\templates\~$normal.dotm.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\window switcher.lnk.jaffastinks
%APPDATA%\microsoft\office\mso1033.acl.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\google chrome.lnk.jaffastinks
%APPDATA%\microsoft\crypto\rsa\s-1-5-21-3691498038-2086406363-2140527554-1000\f58155b4b1d5a524ca0261c3ee99fb50_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814.jaffastinks
%APPDATA%\microsoft\windows\libraries\desktop.ini.jaffastinks
%TEMP%\fxsapidebuglogfile.txt.jaffastinks
%TEMP%\~df1c0d5ee4055c1f81.tmp.jaffastinks
%TEMP%\~df8d723064e716ca50.tmp.jaffastinks
%TEMP%\~dfaca7670d62df867a.tmp.jaffastinks
%TEMP%\~dfc78fc63dfdf4d4c6.tmp.jaffastinks
%TEMP%\~dfe342335b88d162ec.tmp.jaffastinks
%TEMP%\~dfe77cd3e83867c434.tmp.jaffastinks
%LOCALAPPDATA%\thunderbird\profiles\rehh7ft5.default-release\.startup-incomplete.jaffastinks
%LOCALAPPDATA%\thunderbird\profiles\rehh7ft5.default-release\cache2\entries\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f.jaffastinks
%LOCALAPPDATA%\thunderbird\profiles\rehh7ft5.default-release\startupcache\startupcache.8.little.jaffastinks
%LOCALAPPDATA%\thunderbird\profiles\rehh7ft5.default-release\startupcache\webext.sc.lz4.jaffastinks
%LOCALAPPDATA%low\microsoft\internet explorer\services\search_{0633ee93-d776-472f-a0ff-e1416b8b2e3a}.ico.jaffastinks
%LOCALAPPDATA%low\oracle\java\au\au.msi.jaffastinks
%LOCALAPPDATA%low\sun\java\deployment\deployment.properties.jaffastinks
%LOCALAPPDATA%low\sun\java\jre1.8.0_45_x64\jre1.8.0_45.msi.jaffastinks
%APPDATA%\microsoft\uproof\custom.dic.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\startupcache\urlcache.bin.jaffastinks
%APPDATA%\microsoft\internet explorer\quick launch\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\grid_(cm).wmf.jaffastinks
%APPDATA%\microsoft\windows\libraries\documents.library-ms.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\on-screen keyboard.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\command prompt.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\notepad.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\run.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\computer.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\control panel.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\internet explorer (no add-ons).lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\system tools\private character editor.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\windows explorer.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\administrative tools\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\google chrome\google chrome.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\internet explorer (64-bit).lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\internet explorer.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\maintenance\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\narrator.lnk.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\startupcache\urlcache-current.bin.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\startupcache\webext.sc.lz4.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\libraries\pictures.library-ms.jaffastinks
%APPDATA%\microsoft\windows\libraries\videos.library-ms.jaffastinks
%APPDATA%\microsoft\windows\recent\automaticdestinations\1b4dd67f29cb1962.automaticdestinations-ms.jaffastinks
%APPDATA%\microsoft\windows\recent\customdestinations\1b4dd67f29cb1962.customdestinations-ms.jaffastinks
%APPDATA%\microsoft\windows\recent\customdestinations\590aee7bdd69b59b.customdestinations-ms.jaffastinks
%APPDATA%\microsoft\windows\recent\customdestinations\5afe4de1b92fc382.customdestinations-ms.jaffastinks
%APPDATA%\microsoft\windows\recent\customdestinations\6824f4a902c78fbd.customdestinations-ms.jaffastinks
%APPDATA%\microsoft\windows\recent\customdestinations\75d15cab93918253.customdestinations-ms.jaffastinks
%APPDATA%\microsoft\windows\recent\customdestinations\7e4dca80246863e3.customdestinations-ms.jaffastinks
%APPDATA%\microsoft\windows\recent\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\sendto\compressed (zipped) folder.zfsendtotarget.jaffastinks
%APPDATA%\microsoft\windows\sendto\desktop (create shortcut).desklink.jaffastinks
%APPDATA%\microsoft\windows\sendto\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\sendto\documents.mydocs.jaffastinks
%APPDATA%\microsoft\windows\sendto\fax recipient.lnk.jaffastinks
%APPDATA%\microsoft\windows\sendto\mail recipient.mapimail.jaffastinks
%APPDATA%\microsoft\windows\start menu\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\ease of access.lnk.jaffastinks
%APPDATA%\microsoft\windows\libraries\music.library-ms.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\startupcache\startupcache.8.little.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\startupcache\scriptcache-current.bin.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\startupcache\scriptcache-child-current.bin.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\11_all_pictures.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\12_all_video.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\windows\burn\burn\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows\explorer\explorerstartuplog.etl.jaffastinks
%LOCALAPPDATA%\microsoft\windows\explorer\explorerstartuplog_runonce.etl.jaffastinks
%LOCALAPPDATA%\microsoft\windows\history\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows\history\history.ie5\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\604pwz7f\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\bg0n0zou\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\bg0n0zou\favicon[1].ico.jaffastinks
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\dzhkzdlo\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\q1e129qo\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.word\~wrs{9e6d3765-e7b6-4d84-97b8-657fba251c17}.tmp.jaffastinks
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\08_video_rated_at_4_or_5_stars.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\06_pictures_rated_4_or_5_stars.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\10_all_music.wpl.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\maintenance\help.lnk.jaffastinks
%LOCALAPPDATA%\microsoft\windows\usrclass.dat{66bf0c06-582d-11ef-b5f9-0800271c0327}.tm.blf.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\05_pictures_taken_in_the_last_month.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\17h8i54k\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\17h8i54k\fwlink[1].jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\9lygctr1\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\9lygctr1\fwlink[1].jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\9lygctr1\fwlink[2].jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\aowdc71i\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\aowdc71i\fwlink[1].jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\09emkjp8\fwlink[2].jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\internet explorer\brndlog.txt.jaffastinks
%LOCALAPPDATA%\microsoft\media player\currentdatabase_372.wmdb.jaffastinks
%LOCALAPPDATA%\microsoft\media player\localmls_3.wmdb.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\01_music_auto_rated_at_5_stars.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\02_music_added_in_the_last_month.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\03_music_rated_at_4_or_5_stars.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\04_music_played_in_the_last_month.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\internet explorer\brndlog.bak.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\07_tv_recorded_in_the_last_week.wpl.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\accessories\accessibility\magnify.lnk.jaffastinks
%LOCALAPPDATA%\microsoft\windows\usrclass.dat{66bf0c06-582d-11ef-b5f9-0800271c0327}.tmcontainer00000000000000000001.regtrans-ms.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\account{1d0d1e96-6169-4226-a636-c473a451d46e}.oeaccount.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\music.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\seyes.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\shorthand.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\stucco.gif.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\tiki.gif.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\to_do_list.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\wrinkled_paper.gif.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\windowsmail.msmessagestore.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\windowsmail.pat.jaffastinks
%LOCALAPPDATA%\microsoft\windows media\12.0\wmsdkns.dtd.jaffastinks
%LOCALAPPDATA%\microsoft\windows sidebar\settings.ini.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\cache2\entries\0eddf8c091e2fed62e44bedddc1723f5bf38fe4f.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\cache2\entries\58efa56db4bffecb0eda547894bc9a057159e22f.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\cache2\entries\9c571ec4d1abdf04dec3542cba1cbcdb49632bf7.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\cache2\entries\ca7b107e288f94eb98b38094e8c5546e41a7b930.jaffastinks
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\offlinecache\index.sqlite.jaffastinks
%LOCALAPPDATA%\microsoft\windows\usrclass.dat{66bf0c06-582d-11ef-b5f9-0800271c0327}.tmcontainer00000000000000000002.regtrans-ms.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\month_calendar.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows\wer\reportqueue\critical_microsoft .net f_5deabd23d637fc27acf7bfdd613025667396c824_cab_0a8d2661\report.wer.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\memo.emf.jaffastinks
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b8ef\09_music_played_the_most.wpl.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\account{49daee1e-b8c9-42d9-bd2a-f82d72ca194a}.oeaccount.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\account{c6052b95-cd9e-475f-a733-cd297b9f0c0d}.oeaccount.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\backup\new\edb00001.log.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\backup\new\windowsmail.msmessagestore.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\backup\new\windowsmail.pat.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\edb.chk.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\edb.log.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\edb00001.log.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\edbres00001.jrs.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\edbres00002.jrs.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\cave_drawings.gif.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\connectivity.gif.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\desktop.ini.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\dotted_lines.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\genko_1.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\genko_2.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\graph.emf.jaffastinks
%LOCALAPPDATA%\microsoft\windows mail\stationery\grid_(inch).wmf.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\user.js.jaffastinks
%HOMEPATH%\videos\desktop.ini.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\winrar\console rar manual.lnk.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\sessioncheckpoints.json.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\sitesecurityservicestate.txt.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\storage\permanent\chrome\.metadata-v2.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\storage.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\times.json.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\search.json.mozlz4.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\securitypreloadstate.txt.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\webappsstore.sqlite.jaffastinks
%HOMEPATH%\contacts\desktop.ini.jaffastinks
%HOMEPATH%\contacts\user.contact.jaffastinks
%HOMEPATH%\desktop\chromesetup.exe.jaffastinks
%HOMEPATH%\desktop\desktop.ini.jaffastinks
%HOMEPATH%\desktop\dotnetfx45_full_setup.exe.jaffastinks
%HOMEPATH%\desktop\google chrome.lnk.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\xulstore.json.jaffastinks
%APPDATA%\thunderbird\profiles.ini.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\saved-telemetry-pings\fec8b5cf-e9a0-4cf7-b788-f1bad94c2cc2.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\saved-telemetry-pings\a231c87b-227a-4be7-9b0a-acb8c08103e2.jaffastinks
%HOMEPATH%\desktop\skypesetup.exe.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\datareporting\state.json.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\directorytree.json.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\enigmail.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\extension-preferences.json.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\extensions.json.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\favicons.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\formhistory.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\global-messages-db.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\history.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\openpgp.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\parent.lock.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\permissions.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\pkcs11.txt.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\places.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\prefs.js.jaffastinks
%HOMEPATH%\desktop\notepad.exe.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\datareporting\archived\2024-08\1723416118155.a231c87b-227a-4be7-9b0a-acb8c08103e2.first-shutdown.jsonlz4.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\saved-telemetry-pings\e09e81b6-b02f-4209-be75-530270eb15e8.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\telegram desktop\telegram.lnk.jaffastinks
%HOMEPATH%\desktop\telegram.lnk.jaffastinks
%HOMEPATH%\favorites\windows live\windows live gallery.url.jaffastinks
%HOMEPATH%\favorites\windows live\windows live mail.url.jaffastinks
%HOMEPATH%\favorites\windows live\windows live spaces.url.jaffastinks
%HOMEPATH%\links\desktop.ini.jaffastinks
%HOMEPATH%\links\desktop.lnk.jaffastinks
%HOMEPATH%\links\downloads.lnk.jaffastinks
%HOMEPATH%\links\recentplaces.lnk.jaffastinks
%HOMEPATH%\music\desktop.ini.jaffastinks
%HOMEPATH%\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.jaffastinks
%HOMEPATH%\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.jaffastinks
%HOMEPATH%\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.jaffastinks
%HOMEPATH%\ntuser.ini.jaffastinks
%HOMEPATH%\pictures\desktop.ini.jaffastinks
%HOMEPATH%\saved games\desktop.ini.jaffastinks
%HOMEPATH%\searches\desktop.ini.jaffastinks
%HOMEPATH%\searches\everywhere.search-ms.jaffastinks
%HOMEPATH%\searches\indexed locations.search-ms.jaffastinks
%HOMEPATH%\favorites\windows live\get windows live.url.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\datareporting\archived\2024-08\1723416118154.fec8b5cf-e9a0-4cf7-b788-f1bad94c2cc2.main.jsonlz4.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\datareporting\session-state.json.jaffastinks
%HOMEPATH%\favorites\msn websites\msn sports.url.jaffastinks
%HOMEPATH%\desktop\wrar520.exe.jaffastinks
%HOMEPATH%\documents\desktop.ini.jaffastinks
%HOMEPATH%\downloads\desktop.ini.jaffastinks
%HOMEPATH%\favorites\desktop.ini.jaffastinks
%HOMEPATH%\favorites\links\desktop.ini.jaffastinks
%HOMEPATH%\favorites\links\web slice gallery.url.jaffastinks
%HOMEPATH%\favorites\links for united states\desktop.ini.jaffastinks
%HOMEPATH%\favorites\links for united states\gobiernousa.gov.url.jaffastinks
%HOMEPATH%\favorites\links for united states\usa.gov.url.jaffastinks
%HOMEPATH%\favorites\microsoft websites\ie add-on site.url.jaffastinks
%HOMEPATH%\favorites\microsoft websites\ie site on microsoft.com.url.jaffastinks
%HOMEPATH%\favorites\microsoft websites\microsoft at home.url.jaffastinks
%HOMEPATH%\favorites\microsoft websites\microsoft at work.url.jaffastinks
%HOMEPATH%\favorites\microsoft websites\microsoft store.url.jaffastinks
%HOMEPATH%\favorites\msn websites\msn autos.url.jaffastinks
%HOMEPATH%\favorites\msn websites\msn entertainment.url.jaffastinks
%HOMEPATH%\favorites\msn websites\msn money.url.jaffastinks
%HOMEPATH%\favorites\msn websites\msn.url.jaffastinks
%HOMEPATH%\desktop\winmine.exe.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\datareporting\archived\2024-08\1723416118071.e09e81b6-b02f-4209-be75-530270eb15e8.new-profile.jsonlz4.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\crashes\store.json.mozlz4.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\cookies.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\extension-preferences.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\extensions.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\favicons.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\favicons.sqlite-shm.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\favicons.sqlite-wal.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\formhistory.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\handlers.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\permissions.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\pkcs11.txt.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\places.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\places.sqlite-shm.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\places.sqlite-wal.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\prefs.js.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\saved-telemetry-pings\5ef45117-f126-4176-8609-edb7f996f858.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\saved-telemetry-pings\71d39899-113e-4a90-b1d6-a0ddeee2b177.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\datareporting\archived\2024-08\1723416117246.5ef45117-f126-4176-8609-edb7f996f858.first-shutdown.jsonlz4.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\datareporting\archived\2024-08\1723416117223.e02cbed0-86f0-4963-b66a-5d4a2cc83071.event.jsonlz4.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\datareporting\state.json.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\telegram desktop\uninstall telegram.lnk.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\saved-telemetry-pings\98eb6582-9918-4d79-9779-3f25cee729b9.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\datareporting\archived\2024-08\1723416117185.71d39899-113e-4a90-b1d6-a0ddeee2b177.new-profile.jsonlz4.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\winrar\winrar help.lnk.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\winrar\winrar.lnk.jaffastinks
%APPDATA%\mozilla\firefox\crash reports\installtime20200708170202.jaffastinks
%APPDATA%\mozilla\firefox\installs.ini.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\addons.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\addonstartup.json.lz4.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\alternateservices.txt.jaffastinks
%APPDATA%\microsoft\windows\start menu\programs\winrar\what is new in the latest version.lnk.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\bookmarkbackups\bookmarks-2024-09-02_11_de2a2eo29nunltkagq5ija==.jsonlz4.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\compatibility.ini.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\containers.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\content-prefs.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\cookies.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\cookies.sqlite-shm.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\cookies.sqlite-wal.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\crashes\store.json.mozlz4.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\broadcast-listeners.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\datareporting\archived\2024-08\1723416117244.98eb6582-9918-4d79-9779-3f25cee729b9.main.jsonlz4.jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\09emkjp8\fwlink[1].jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\saved-telemetry-pings\e02cbed0-86f0-4963-b66a-5d4a2cc83071.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\sessioncheckpoints.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\xulstore.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\q0evdndb.default\times.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\q0evdndb.default\user.js.jaffastinks
%APPDATA%\mozilla\firefox\profiles.ini.jaffastinks
%APPDATA%\telegram desktop\telegram.exe.jaffastinks
%APPDATA%\telegram desktop\unins000.exe.jaffastinks
%APPDATA%\telegram desktop\updater.exe.jaffastinks
%APPDATA%\thunderbird\crash reports\installtime20210406220621.jaffastinks
%APPDATA%\thunderbird\installs.ini.jaffastinks
%APPDATA%\thunderbird\profiles\dm02c46v.default\times.json.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\abook.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\addons.json.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\addonstartup.json.lz4.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\alternateservices.txt.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\blist.sqlite.jaffastinks
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\compatibility.ini.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\search.json.mozlz4.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\webappsstore.sqlite-wal.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\securitypreloadstate.txt.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\webappsstore.sqlite-shm.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\datareporting\session-state.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\sessionstore-backups\previous.jsonlz4.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\sessionstore-backups\recovery.jsonlz4.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\sessionstore-backups\upgrade.jsonlz4-20200708170202.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\shield-preference-experiments.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\sitesecurityservicestate.txt.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\default\moz-extension+++d6b3ddfc-c8d2-4cb7-a730-29f01af6f4b1^usercontextid=4294967295\.metadata-v2.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\default\moz-extension+++d6b3ddfc-c8d2-4cb7-a730-29f01af6f4b1^usercontextid=4294967295\idb\3647222921wleabceoxlt-eengsairo.sql...
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\.metadata-v2.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\1451318868ntouromlalnodry--epcr.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\1657114595amcateirvtisty.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\2823318777ntouromlalnodry--naod.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\2918063365piupsah.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\3561288849sdhlie.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage.sqlite.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\times.json.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\trrblacklist.txt.jaffastinks
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\webappsstore.sqlite.jaffastinks
%HOMEPATH%\favorites\msn websites\msnbc news.url.jaffastinks
%LOCALAPPDATA%\microsoft\feeds cache\09emkjp8\desktop.ini.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\session storage\lock.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\lock.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\log.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\manifest-000001.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension state\000003.log.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension state\current.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension state\lock.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\000003.log.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\current.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension state\log.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\icon_16.png.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\main.js.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\manifest.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\manifest.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ar\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\bg\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extension state\manifest-000001.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\icon_128.png.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\databases\databases.db-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\current session.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\cs\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\visualelements\smalllogo.png.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\visualelements\splash-620x300.png.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\widevinecdmadapter.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\xinput1_3.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\chrome.exe.jaffastinks
%LOCALAPPDATA%\google\chrome\application\debug.log.jaffastinks
%LOCALAPPDATA%\google\chrome\application\visualelementsmanifest.xml.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\cache\data_0.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\cache\data_1.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\cache\data_2.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\cache\data_3.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\cache\index.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\chromedwritefontcache.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\cookies.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\cookies-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ca\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\snapshot_blob.bin.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\databases\databases.db.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ro.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\da\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\nl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\no\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_br\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_pt\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ro\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ru\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sk\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sv\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\th\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\tr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\uk\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\vi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_cn\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_tw\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ms\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\secondarytile.png.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\visualelements\logo.png.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ko\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\el\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_gb\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_us\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es_419\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\et\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\eu\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fil\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\he\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hu\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\id\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\it\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ja\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lt\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\de\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\resources.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\pepperflash\pepflashplayer.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\pepperflash\manifest.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ar.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\bg.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\bn.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ca.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\cs.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\da.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\de.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\el.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\en-gb.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\en-us.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\es-419.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\es.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\et.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fa.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fi.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\libexif.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\setup.exe.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\am.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\manifest.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fil.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\chrome.7z.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_100_percent.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_200_percent.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_child.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_elf.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_watcher.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\d3dcompiler_47.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\docs.crx.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\drive.crx.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\gmail.crx.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\search.crx.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\youtube.crx.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\delegate_execute.exe.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\extensions\external_extensions.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\ffmpegsumo.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\icudtl.dat.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\external_extensions.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\libegl.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lv\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fr.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hi.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sr.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sv.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sw.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ta.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\te.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\th.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\tr.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\uk.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\vi.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\zh-cn.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\zh-tw.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\metro_driver.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\nacl64.exe.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\nacl_irt_x86_32.nexe.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\nacl_irt_x86_64.nexe.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\natives_blob.bin.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\gu.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sl.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\he.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sk.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\libglesv2.dll.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hr.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hu.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\id.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\it.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ja.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\kn.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ko.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\lt.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\lv.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ml.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\mr.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ms.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\nb.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\nl.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pl.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pt-br.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pt-pt.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ru.pak.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ko\messages.json.jaffastinks
%LOCALAPPDATA%\microsoft\feeds\microsoft feeds~\msnbc news~.feed-ms.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ca\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_pt\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_br\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_cn\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_tw\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\favicons.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\favicons-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\gpucache\data_0.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\google profile.ico.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ar\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\gpucache\data_1.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\session storage\manifest-000001.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\shortcuts.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\shortcuts-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\top sites.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\top sites-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\visited links.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\web data.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\web data-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\first run.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\local state.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\safe browsing cookies.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\safe browsing cookies-journal.jaffastinks
%LOCALAPPDATA%\microsoft\feeds\feeds for united states~\popular government questions from usa~dgov~.feed-ms.jaffastinks
%LOCALAPPDATA%\microsoft\feeds\feeds for united states~\usa~dgov updates~c news and features~.feed-ms.jaffastinks
%LOCALAPPDATA%\microsoft\feeds\feedsstore.feedsdb-ms.jaffastinks
%LOCALAPPDATA%\microsoft\feeds\microsoft feeds~\microsoft at home~.feed-ms.jaffastinks
%LOCALAPPDATA%\microsoft\feeds\microsoft feeds~\microsoft at work~.feed-ms.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\session storage\log.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\session storage\000003.log.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\gpucache\data_3.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\gpucache\index.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\history.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\history-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\759e.tmp.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\75ae.tmp.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\9c2.tmp.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\9d3.tmp.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\login data.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\login data-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\network action predictor.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\network action predictor-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\preferences.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\quotamanager.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\quotamanager-journal.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\readme.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\secure preferences.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\session storage\current.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\gpucache\data_2.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\manifest.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_pt\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ro\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ru\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sk\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sv\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\th\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\tr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\uk\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\vi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_cn\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_tw\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\manifest.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ar\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\no\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lv\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_br\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\bg\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\bg\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lt\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\da\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\de\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\el\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\en\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\es\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fil\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\cs\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hu\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\id\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\it\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ja\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ko\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\he\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\nl\messages.json.jaffastinks
%LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\webslices~\web slice gallery~.feed-ms.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ca\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\de\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\no\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_br\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_pt\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ro\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ru\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sk\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sv\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\th\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\tr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\uk\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\vi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_cn\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_tw\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\cs\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\nl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\da\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lv\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pl\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\el\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_gb\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_us\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es_419\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\et\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fil\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\he\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hi\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hr\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hu\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\id\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\it\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ja\messages.json.jaffastinks
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lt\messages.json.jaffastinks
<Current directory>\ransom_note.txt

Substitutes the following files

%LOCALAPPDATA%\Microsoft\Windows\Explorer\thumbcache_idx.db
%LOCALAPPDATA%\Microsoft\Windows\Explorer\thumbcache_32.db
%LOCALAPPDATA%\Microsoft\Windows\Explorer\thumbcache_96.db
%LOCALAPPDATA%\Microsoft\Windows\Explorer\thumbcache_256.db
%LOCALAPPDATA%\Microsoft\Windows\Explorer\thumbcache_1024.db
%LOCALAPPDATA%\Microsoft\Windows\Explorer\thumbcache_sr.db

Changes user data files extensions (Trojan.Encoder).

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial