Trojan.Encoder.41375

Technical Information

Modifies file system

Creates the following files

<Current directory>\stepdata.txt
C:\documents and settings\user\desktop\contosoroot.cer
%ProgramFiles%\microsoft office\office14\onenote\recovery info.txt
%ProgramFiles%\microsoft office\office14\outlookautodiscover\recovery info.txt
C:\documents and settings\user\desktop\cveuropeo.doc
%ProgramFiles%\microsoft office\office14\pagesize\recovery info.txt
C:\documents and settings\user\desktop\dialmap.bmp
%ProgramFiles%\microsoft office\office14\proof\1033\recovery info.txt
C:\documents and settings\user\desktop\february_catalogue__2015.doc
%ProgramFiles%\microsoft office\office14\proof\1036\recovery info.txt
C:\documents and settings\user\desktop\glidescope_review_rev_010.docx
C:\documents and settings\user\desktop\google chrome.lnk
C:\documents and settings\user\desktop\telegram.lnk
C:\documents and settings\user\desktop\hanni_umami_chapter.doc
C:\documents and settings\user\desktop\lisp_success.doc
C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv
%ProgramFiles%\microsoft office\office14\proof\recovery info.txt
C:\documents and settings\user\desktop\pmd.cer
C:\documents and settings\user\desktop\sdksampleunprivdeveloper.cer
%ProgramFiles%\microsoft office\office14\pubba\recovery info.txt
C:\documents and settings\user\desktop\sdszfo.docx
C:\documents and settings\user\desktop\split.avi
%ProgramFiles%\microsoft office\office14\pubwiz\recovery info.txt
%ProgramFiles%\microsoft office\office14\media\recovery info.txt
%ProgramFiles%\microsoft office\office14\proof\3082\recovery info.txt
C:\documents and settings\user\desktop\contoso.cer
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\fancy\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\recovery info.txt
C:\documents and settings\user\contacts\user.contact
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts2\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttool\project report type\basic\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\recovery info.txt
%ProgramFiles%\microsoft office\office14\library\solver\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\welcome tool\recovery info.txt
C:\documents and settings\user\desktop\applicantform_en.doc
%ProgramFiles%\microsoft office\office14\groove\xml files\recovery info.txt
C:\documents and settings\user\desktop\archer.avi
%ProgramFiles%\microsoft office\office14\infopathom\infopathomformservices\infopathomformservicesv12\recovery info.txt
%ProgramFiles%\microsoft office\office14\infopathom\infopathomformservices\recovery info.txt
%ProgramFiles%\microsoft office\office14\infopathom\infopathomv12\recovery info.txt
%ProgramFiles%\microsoft office\office14\infopathom\recovery info.txt
C:\documents and settings\user\desktop\chromesetup.exe
%ProgramFiles%\microsoft office\office14\library\analysis\recovery info.txt
%ProgramFiles%\microsoft office\office14\library\recovery info.txt
C:\documents and settings\user\desktop\winmine.exe
%ProgramFiles%\mozilla thunderbird\isp\recovery info.txt
%ProgramFiles%\microsoft office\office14\samples\recovery info.txt
%ProgramFiles%\mozilla firefox\browser\features\recovery info.txt
C:\documents and settings\user\favorites\microsoft websites\microsoft at home.url
%ProgramFiles%\mozilla firefox\browser\visualelements\recovery info.txt
C:\documents and settings\user\favorites\microsoft websites\microsoft at work.url
%ProgramFiles%\mozilla firefox\browser\recovery info.txt
%ProgramFiles%\mozilla firefox\defaults\pref\recovery info.txt
%ProgramFiles%\mozilla firefox\distibution\recovery info.txt
C:\documents and settings\user\favorites\microsoft websites\microsoft store.url
C:\documents and settings\user\favorites\msn websites\msn autos.url
C:\documents and settings\user\favorites\msn websites\msn entertainment.url
C:\documents and settings\user\favorites\msn websites\msn sports.url
%ProgramFiles%\microsoft office\office14\queries\recovery info.txt
C:\documents and settings\user\favorites\msn websites\msnbc news.url
%ProgramFiles%\mozilla firefox\fonts\recovery info.txt
C:\documents and settings\user\favorites\msn websites\msn.url
%ProgramFiles%\mozilla firefox\gmp-clearkey\0.1\recovery info.txt
%ProgramFiles%\mozilla firefox\uninstall\recovery info.txt
%ProgramFiles%\mozilla firefox\recovery info.txt
%ProgramFiles%\mozilla thunderbird\defaults\messenger\recovery info.txt
%ProgramFiles%\mozilla thunderbird\defaults\pref\recovery info.txt
%ProgramFiles%\mozilla thunderbird\features\recovery info.txt
%ProgramFiles%\mozilla thunderbird\fonts\recovery info.txt
C:\documents and settings\user\favorites\microsoft websites\ie add-on site.url
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\oasis\recovery info.txt
C:\documents and settings\user\favorites\microsoft websites\ie site on microsoft.com.url
C:\documents and settings\user\desktop\tcm851ax32.exe
%ProgramFiles%\microsoft office\office14\recovery info.txt
%ProgramFiles%\microsoft office\stationery\1033\recovery info.txt
C:\documents and settings\user\desktop\tileimage.bmp
C:\documents and settings\user\desktop\uep_form_786_bulletin_1726i602.doc
%ProgramFiles%\microsoft office\templates\1033\access\datatype\recovery info.txt
%ProgramFiles%\microsoft office\templates\1033\access\part\recovery info.txt
%ProgramFiles%\microsoft office\templates\1033\access\wss\recovery info.txt
%ProgramFiles%\microsoft office\templates\1033\access\recovery info.txt
%ProgramFiles%\microsoft office\templates\1033\fax\recovery info.txt
%ProgramFiles%\microsoft office\templates\1033\onenote\14\notebook templates\recovery info.txt
C:\documents and settings\user\desktop\testee.cer
%ProgramFiles%\microsoft sync framework\v1.0\runtime\x64\recovery info.txt
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\recovery info.txt
%ProgramFiles%\microsoft office\templates\1033\recovery info.txt
%ProgramFiles%\microsoft office\templates\presentation designs\recovery info.txt
C:\documents and settings\user\favorites\links\web slice gallery.url
C:\documents and settings\user\favorites\links for united states\gobiernousa.gov.url
C:\documents and settings\user\favorites\links for united states\usa.gov.url
%ProgramFiles%\microsoft sql server compact edition\v3.5\recovery info.txt
%ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\recovery info.txt
%ProgramFiles%\microsoft sync framework\v1.0\runtime\x64\resources\1033\recovery info.txt
C:\documents and settings\user\desktop\wrar520.exe
%ProgramFiles%\microsoft synchronization services\ado.net\v1.0\recovery info.txt
C:\documents and settings\user\favorites\msn websites\msn money.url
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lime\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightorange\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\brightyellow\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\graycheck\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\lime\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\slate\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\solutions\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\swirl\recovery info.txt
%ProgramFiles%\microsoft office\office14\addins\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\pubftscm\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\pubspapr\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\quickstyles\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\recovery info.txt
%ProgramFiles%\microsoft office\office14\1036\recovery info.txt
%ProgramFiles%\microsoft office\office14\3082\recovery info.txt
%ProgramFiles%\microsoft office\office14\accessweb\recovery info.txt
%ProgramFiles%\microsoft office\office14\accwiz\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts2\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue\recovery info.txt
C:\documents and settings\default\sendto\mail recipient.mapimail
C:\documents and settings\all users\start menu\programs\winrar\winrar.lnk
C:\documents and settings\all users\start menu\programs\xps viewer.lnk
C:\documents and settings\all users\sun\java\java update\jaureglist.xml
C:\documents and settings\all users\start menu\windows update.lnk
C:\documents and settings\default\ntuser.dat.log1
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms
C:\documents and settings\default\sendto\compressed (zipped) folder.zfsendtotarget
C:\documents and settings\default\sendto\desktop (create shortcut).desklink
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms
C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk
C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk
C:\documents and settings\default\sendto\fax recipient.lnk
C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk
C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk
C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk
C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk
C:\documents and settings\default\start menu\programs\accessories\notepad.lnk
%ProgramFiles%\microsoft office\office14\1033\bibliography\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\dataservices\recovery info.txt
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\americana\recovery info.txt
C:\documents and settings\default\start menu\programs\accessories\run.lnk
C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk
%ProgramFiles%\microsoft office\office14\groove\sounds\people\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\desert\recovery info.txt
%ProgramFiles%\microsoft office\office14\bibliography\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\americana\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\babyblue\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\biscay\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightyellow\recovery info.txt
C:\documents and settings\public\libraries\recordedtv.library-ms
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\desert\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\lime\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\oasis\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\softblue\recovery info.txt
%ProgramFiles%\microsoft office\office14\bibliography\style\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\springgreen\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\sts2\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\babyblue\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\biscay\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightorange\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck\recovery info.txt
C:\documents and settings\default\start menu\programs\maintenance\help.lnk
%ProgramFiles%\microsoft office\office14\groove\certificates\verisign\components\recovery info.txt
%ProgramFiles%\microsoft office\office14\borders\recovery info.txt
%ProgramFiles%\microsoft office\office14\convert\1033\recovery info.txt
%ProgramFiles%\microsoft office\office14\convert\recovery info.txt
%ProgramFiles%\microsoft office\office14\document parts\1033\14\recovery info.txt
%ProgramFiles%\microsoft office\office14\en\recovery info.txt
C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk
%ProgramFiles%\microsoft office\office14\forms\1033\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\components\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\managedobjects\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\certificates\groove.net\servers\recovery info.txt
%ProgramFiles%\microsoft office\office14\bibliography\sort\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\sounds\places\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\sounds\things\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\toolbmps\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\calendar\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\commondata\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\computers\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\discussion\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\documentshare\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\recovery info.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\recovery info.txt
C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk
%ProgramFiles%\mozilla thunderbird\uninstall\recovery info.txt
%ProgramFiles%\mozilla thunderbird\visualelements\recovery info.txt
%ProgramFiles%\mozilla thunderbird\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\pl-pl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\pt-br\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\ro-ro\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\root\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\ru-ru\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\sk-sk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\sl-si\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\sv-se\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\tr-tr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\de-de\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\nl-nl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\nb-no\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\libs\jquery.ui.touch-punch\0.2.2\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\libs\require\2.1.15\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\misc\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\css\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\images\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\ca-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\cs-cz\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\da-dk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\uk-ua\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\zh-tw\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\ru-ru\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\zh-cn\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\de-de\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\sl-si\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\sv-se\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\tr-tr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\uk-ua\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\zh-cn\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\zh-tw\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\ca-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\cs-cz\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\it-it\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\ko-kr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\ja-jp\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\en-gb\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\en-il\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\es-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\eu-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\fi-fi\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\fr-fr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\fr-ma\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\hr-hr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\hu-hu\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\da-dk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\files\dev\nls\en-ae\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\sk-sk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\en-ae\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\eu-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account-select\js\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\css\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\images\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\da-dk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\de-de\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\en-gb\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\es-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\fi-fi\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\fr-fr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account-select\css\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\it-it\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\nl-nl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\pt-br\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\root\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\sv-se\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\plugins\rhp\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\plugins\selection-action-plugins\cpdf\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\plugins\selection-action-plugins\epdf\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\plugins\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\ja-jp\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\aicuc\js\nls\nb-no\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\en-il\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\en-gb\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\zh-cn\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\fi-fi\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\fr-fr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\fr-ma\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\hr-hr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\hu-hu\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\it-it\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\ja-jp\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\ko-kr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\zh-tw\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\es-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\nb-no\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\ro-ro\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\root\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\ru-ru\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\sk-sk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\sl-si\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\sv-se\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\tr-tr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\uk-ua\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\nl-nl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\pl-pl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\add-account\js\nls\pt-br\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\root\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\ro-ro\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\pt-br\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\browser\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\legal\enu\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\locale\en_us\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\ca-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\locales\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\tracker\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\css\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\hi_contrast\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\file_types\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\hi_contrast\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win-scrollbar\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\win8-scrollbar\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\images\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\pi_brokers\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins3d\prc\recovery info.txt
C:\documents and settings\user\links\downloads.lnk
%ProgramFiles%\windows media player\skins\recovery info.txt
%ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.5\recovery info.txt
%ProgramFiles%\reference assemblies\microsoft\framework\v3.0\redistlist\recovery info.txt
%ProgramFiles%\reference assemblies\microsoft\framework\v3.0\recovery info.txt
%ProgramFiles%\reference assemblies\microsoft\framework\v3.5\redistlist\recovery info.txt
%ProgramFiles%\reference assemblies\microsoft\framework\v3.5\recovery info.txt
%ProgramFiles%\windows journal\en-us\recovery info.txt
%ProgramFiles%\windows journal\templates\recovery info.txt
%ProgramFiles%\windows journal\recovery info.txt
%ProgramFiles%\windows media player\en-us\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\cs-cz\recovery info.txt
%ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\recovery info.txt
%ProgramFiles%\windows media player\recovery info.txt
%ProgramFiles%\winrar\recovery info.txt
C:\documents and settings\user\favorites\windows live\get windows live.url
C:\documents and settings\user\favorites\windows live\windows live gallery.url
C:\documents and settings\user\favorites\windows live\windows live mail.url
%ProgramFiles(x86)%\adobe\acrobat reader dc\esl\recovery info.txt
C:\documents and settings\user\favorites\windows live\windows live spaces.url
C:\documents and settings\user\links\desktop.lnk
C:\documents and settings\user\links\recentplaces.lnk
%ProgramFiles%\windows media player\network sharing\recovery info.txt
%ProgramFiles%\windows media player\media renderer\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\air\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\da-dk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\ca-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\cs-cz\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\da-dk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\de-de\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\en-ae\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\en-gb\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\en-il\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\es-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\zh-tw\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\uk-ua\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app-api\dev\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\eu-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\hr-hr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\hu-hu\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\it-it\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\ja-jp\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\ko-kr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\nb-no\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\nl-nl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\pl-pl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\fi-fi\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\fr-fr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\core\dev\nls\fr-ma\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\zh-cn\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\tr-tr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\de-de\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\en-gb\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\en-il\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\es-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\eu-es\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\fi-fi\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\fr-fr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\fr-ma\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\hr-hr\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\hu-hu\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\it-it\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\en-ae\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\ja-jp\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\nb-no\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\nl-nl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\pl-pl\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\pt-br\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\ro-ro\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\root\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\ru-ru\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\sk-sk\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\sl-si\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\sv-se\recovery info.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\app\dev\nls\ko-kr\recovery info.txt
C:\documents and settings\all users\start menu\programs\winrar\winrar help.lnk
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\css\recovery info.txt
C:\documents and settings\all users\start menu\programs\windows media player.lnk
%ProgramFiles%\microsoft office\media\office14\recovery info.txt
C:\documents and settings\user\favorites\links for united states\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\wwintl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\visintl.dll.trx_dll
C:\documents and settings\user\favorites\microsoft websites\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlintl32.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\wwintl.rest.trx_dll
C:\documents and settings\user\favorites\msn websites\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlslicer.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlintl32.rest.trx_dll
C:\documents and settings\user\favorites\windows live\recovery info.txt
C:\documents and settings\user\local settings\history\history.ie5\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\msointl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\envelopr.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\grintl32.dll.trx_dll
C:\documents and settings\user\local settings\microsoft\feeds\feeds for united states~\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\grintl32.rest.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\mapir.dll.trx_dll
C:\documents and settings\user\local settings\microsoft\feeds\microsoft feeds~\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\mor6int.rest.trx_dll
C:\documents and settings\user\local settings\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\webslices~\recovery info.txt
C:\documents and settings\user\local settings\microsoft\feeds\recovery info.txt
C:\documents and settings\user\local settings\microsoft\feeds cache\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\visbrres.dll.trx_dll
C:\documents and settings\user\links\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\stintl.dll.trx_dll
C:\documents and settings\default\start menu\programs\accessories\system tools\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\omsintl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\onintl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\onintl.rest.trx_dll
C:\documents and settings\default\sendto\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\outllibr.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\outlwvw.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\outllibr.rest.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\ppintl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\ppintl.rest.trx_dll
C:\documents and settings\default\start menu\programs\accessories\accessibility\recovery info.txt
C:\documents and settings\default\start menu\programs\accessories\recovery info.txt
C:\documents and settings\user\desktop\recovery info.txt
C:\documents and settings\default\start menu\programs\maintenance\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\pub6intl.dll.trx_dll
C:\documents and settings\default\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\pub6intl.rest.trx_dll
C:\documents and settings\public\libraries\recovery info.txt
C:\documents and settings\public\recorded tv\sample media\recovery info.txt
C:\documents and settings\user\contacts\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\pubwzint.rest.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\sgres.dll.trx_dll
C:\documents and settings\user\cookies\recovery info.txt
C:\documents and settings\user\favorites\links\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\pubwzint.rest.trx_dll
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile15.bmp
C:\documents and settings\all users\microsoft\office\uicaptions\3082\onintl.dll.trx_dll
C:\documents and settings\all users\microsoft\rac\publisheddata\racwmidatabase.sdf
C:\documents and settings\user\local settings\thunderbird\profiles\rehh7ft5.default-release\cache2\entries\recovery info.txt
C:\documents and settings\all users\microsoft\rac\statedata\racmetadata.dat
C:\documents and settings\all users\microsoft\rac\statedata\racdatabase.sdf
C:\documents and settings\all users\microsoft\rac\statedata\racwmidatabookmarks.dat
C:\documents and settings\user\local settings\thunderbird\profiles\rehh7ft5.default-release\startupcache\recovery info.txt
C:\documents and settings\user\local settings\thunderbird\profiles\rehh7ft5.default-release\recovery info.txt
C:\documents and settings\user\recent\automaticdestinations\recovery info.txt
C:\documents and settings\user\recent\customdestinations\recovery info.txt
C:\documents and settings\user\searches\recovery info.txt
C:\documents and settings\user\sendto\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\msointl.rest.trx_dll
C:\documents and settings\user\start menu\programs\accessories\accessibility\recovery info.txt
C:\documents and settings\user\start menu\programs\accessories\system tools\recovery info.txt
C:\documents and settings\user\start menu\programs\accessories\recovery info.txt
C:\documents and settings\user\start menu\programs\google chrome\recovery info.txt
C:\documents and settings\user\start menu\programs\maintenance\recovery info.txt
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile10.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile11.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile12.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile13.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile14.bmp
C:\documents and settings\all users\microsoft\officesoftwareprotectionplatform\tokens.dat
C:\documents and settings\all users\microsoft\office\uicaptions\1036\msointl.rest.trx_dll
C:\documents and settings\user\local settings\<INETFILES>\content.word\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\pub6intl.rest.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\onintl.rest.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\outllibr.dll.trx_dll
C:\documents and settings\user\local settings\microsoft\media player\sync playlists\en-us\0000b8ef\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\outllibr.rest.trx_dll
C:\documents and settings\user\local settings\microsoft\media player\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\outlwvw.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\ppintl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\ppintl.rest.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\pub6intl.dll.trx_dll
C:\documents and settings\user\local settings\microsoft\windows media\12.0\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\3082\omsintl.dll.trx_dll
C:\documents and settings\all users\microsoft\officesoftwareprotectionplatform\cache\cache.dat
C:\documents and settings\all users\microsoft\office\uicaptions\3082\sgres.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\visbrres.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\stintl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\visintl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\wwintl.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlintl32.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlintl32.rest.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\wwintl.rest.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlslicer.dll.trx_dll
C:\documents and settings\user\local settings\temp\recovery info.txt
C:\documents and settings\user\local settings\<INETFILES>\content.ie5\recovery info.txt
C:\documents and settings\all users\microsoft\rac\statedata\racwmieventdata.dat
C:\documents and settings\all users\microsoft\office\uicaptions\1036\msointl.dll.trx_dll
C:\documents and settings\all users\start menu\programs\games\recovery info.txt
C:\documents and settings\all users\microsoft\network\downloader\recovery info.txt
C:\documents and settings\all users\documents\my music\sample music\sleep away.mp3
C:\documents and settings\all users\documents\my pictures\sample pictures\chrysanthemum.jpg
C:\documents and settings\all users\documents\my pictures\sample pictures\desert.jpg
C:\documents and settings\all users\documents\my pictures\sample pictures\hydrangeas.jpg
C:\documents and settings\all users\documents\my pictures\sample pictures\jellyfish.jpg
C:\documents and settings\all users\documents\my pictures\sample pictures\koala.jpg
C:\documents and settings\all users\microsoft\office\uicaptions\1036\recovery info.txt
C:\documents and settings\all users\documents\my pictures\sample pictures\penguins.jpg
C:\documents and settings\all users\documents\my pictures\sample pictures\lighthouse.jpg
C:\documents and settings\all users\microsoft\office\uicaptions\3082\recovery info.txt
C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.lck
C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d
C:\documents and settings\all users\microsoft\officesoftwareprotectionplatform\cache\recovery info.txt
C:\documents and settings\all users\microsoft\officesoftwareprotectionplatform\recovery info.txt
C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w
C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w
C:\documents and settings\all users\microsoft\rac\publisheddata\recovery info.txt
C:\documents and settings\all users\microsoft\rac\statedata\recovery info.txt
C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h
C:\documents and settings\all users\documents\my videos\sample videos\wildlife.wmv
C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d
C:\documents and settings\all users\microsoft\mf\recovery info.txt
C:\documents and settings\all users\documents\my pictures\sample pictures\tulips.jpg
C:\documents and settings\all users\microsoft\identitycrl\recovery info.txt
C:\documents and settings\all users\desktop\steam.lnk
<Current directory>\recovery info.txt
C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini
C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\recovery info.txt
C:\documents and settings\all users\desktop\recovery info.txt
C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.exe
C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini
C:\documents and settings\all users\desktop\acrobat reader dc.lnk
C:\documents and settings\all users\desktop\firefox.lnk
C:\documents and settings\all users\desktop\mozilla thunderbird.lnk
C:\documents and settings\all users\desktop\opera.lnk
C:\documents and settings\all users\documents\my music\sample music\recovery info.txt
C:\documents and settings\all users\documents\my music\sample music\maid with the flaxen hair.mp3
C:\documents and settings\all users\documents\my pictures\sample pictures\recovery info.txt
C:\documents and settings\all users\documents\my videos\sample videos\recovery info.txt
C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\recovery info.txt
C:\documents and settings\all users\microsoft\crypto\rsa\s-1-5-18\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\recovery info.txt
C:\documents and settings\all users\documents\my music\sample music\kalimba.mp3
C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png
C:\documents and settings\all users\microsoft\office\uicaptions\1036\mor6int.rest.trx_dll
C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q
C:\documents and settings\all users\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\recovery info.txt
C:\documents and settings\all users\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\recovery info.txt
C:\documents and settings\all users\start menu\programs\accessories\accessibility\recovery info.txt
C:\documents and settings\all users\start menu\programs\accessories\system tools\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\envelopr.dll.trx_dll
C:\documents and settings\all users\start menu\programs\accessories\tablet pc\recovery info.txt
C:\documents and settings\all users\start menu\programs\accessories\windows powershell\recovery info.txt
C:\documents and settings\all users\start menu\programs\accessories\recovery info.txt
C:\documents and settings\all users\start menu\programs\administrative tools\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\grintl32.dll.trx_dll
C:\documents and settings\all users\start menu\programs\java\recovery info.txt
C:\documents and settings\all users\microsoft\user account pictures\recovery info.txt
C:\documents and settings\all users\start menu\programs\maintenance\recovery info.txt
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\recovery info.txt
C:\documents and settings\all users\microsoft\office\uicaptions\1036\mapir.dll.trx_dll
C:\documents and settings\all users\microsoft\office\uicaptions\1036\grintl32.rest.trx_dll
C:\documents and settings\all users\start menu\programs\microsoft office\recovery info.txt
C:\documents and settings\all users\start menu\programs\sharepoint\recovery info.txt
C:\documents and settings\all users\start menu\programs\steam\recovery info.txt
C:\documents and settings\all users\start menu\programs\winrar\recovery info.txt
C:\documents and settings\all users\start menu\programs\recovery info.txt
C:\documents and settings\all users\start menu\recovery info.txt
C:\documents and settings\all users\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\recovery info.txt
C:\documents and settings\all users\sun\java\java update\recovery info.txt
C:\documents and settings\all users\microsoft\mf\pending.grl
C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png
C:\documents and settings\all users\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814
C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png
C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml
C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png
C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png
C:\documents and settings\all users\microsoft help\recovery info.txt
C:\documents and settings\all users\oracle\java\installcache_x64\recovery info.txt
C:\documents and settings\all users\oracle\java\javapath\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png
C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml
C:\documents and settings\all users\microsoft\user account pictures\default pictures\recovery info.txt
C:\documents and settings\all users\microsoft\mf\active.grl
C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml
C:\documents and settings\all users\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\resource.xml
C:\documents and settings\all users\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml
C:\documents and settings\all users\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\recovery info.txt
C:\documents and settings\all users\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml
C:\documents and settings\all users\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\resource.xml
C:\documents and settings\all users\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\recovery info.txt
C:\documents and settings\all users\microsoft\identitycrl\ppcrlconfig.dll
C:\documents and settings\all users\microsoft\identitycrl\ppcrlui.dll
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile16.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile17.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile18.bmp
C:\documents and settings\all users\start menu\programs\administrative tools\computer management.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\event viewer.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\iscsi initiator.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\memory diagnostics tool.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\performance monitor.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\print management.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\security configuration management.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\system configuration.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\services.lnk
C:\documents and settings\all users\start menu\programs\maintenance\create recovery disc.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\data sources (odbc).lnk
C:\documents and settings\all users\start menu\programs\administrative tools\component services.lnk
C:\documents and settings\all users\start menu\programs\firefox.lnk
C:\documents and settings\all users\start menu\programs\games\gameexplorer.lnk
C:\documents and settings\all users\start menu\programs\java\check for updates.lnk
C:\documents and settings\all users\start menu\programs\java\about java.lnk
C:\documents and settings\all users\start menu\programs\java\configure java.lnk
C:\documents and settings\all users\start menu\programs\java\get help.lnk
C:\documents and settings\all users\start menu\programs\java\visit java.com.lnk
C:\documents and settings\all users\start menu\programs\maintenance\backup and restore center.lnk
C:\documents and settings\all users\start menu\programs\maintenance\remote assistance.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\task scheduler.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\windows powershell modules.lnk
C:\documents and settings\all users\start menu\programs\accessories\networkprojection.lnk
C:\documents and settings\all users\start menu\programs\administrative tools\windows firewall with advanced security.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\system information.lnk
C:\documents and settings\all users\start menu\programs\accessories\remote desktop connection.lnk
C:\documents and settings\all users\start menu\programs\accessories\sound recorder.lnk
C:\documents and settings\all users\start menu\programs\accessories\sticky notes.lnk
C:\documents and settings\all users\start menu\programs\accessories\sync center.lnk
C:\documents and settings\all users\start menu\programs\accessories\snipping tool.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\dfrgui.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\character map.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\resource monitor.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\disk cleanup.lnk
C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell ise.lnk
C:\documents and settings\all users\start menu\programs\acrobat reader dc.lnk
C:\documents and settings\all users\start menu\programs\accessories\wordpad.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\windows easy transfer reports.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\windows easy transfer.lnk
C:\documents and settings\all users\start menu\programs\accessories\tablet pc\tabtip.lnk
C:\documents and settings\all users\start menu\programs\accessories\tablet pc\shapecollector.lnk
C:\documents and settings\all users\start menu\programs\accessories\tablet pc\windows journal.lnk
C:\documents and settings\all users\start menu\programs\accessories\welcome center.lnk
C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell ise (x86).lnk
C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell (x86).lnk
C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\system restore.lnk
C:\documents and settings\all users\start menu\programs\accessories\system tools\task scheduler.lnk
C:\documents and settings\all users\start menu\programs\accessories\paint.lnk
C:\documents and settings\all users\start menu\programs\media center.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft infopath filler 2010.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft word 2010.lnk
C:\documents and settings\all users\start menu\programs\mozilla thunderbird.lnk
C:\documents and settings\all users\start menu\programs\opera.lnk
C:\documents and settings\all users\start menu\programs\sharepoint\microsoft sharepoint workspace 2010.lnk
C:\documents and settings\all users\start menu\programs\steam\steam support center.url
%ProgramFiles%\microsoft office\clipart\publisher\backgrounds\recovery info.txt
%ProgramFiles%\microsoft office\document themes 14\theme colors\recovery info.txt
%ProgramFiles%\microsoft office\document themes 14\theme effects\recovery info.txt
%ProgramFiles%\microsoft office\document themes 14\theme fonts\recovery info.txt
%ProgramFiles%\microsoft office\clipart\pub60cor\recovery info.txt
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft sharepoint workspace 2010.lnk
%ProgramFiles%\microsoft office\document themes 14\recovery info.txt
%ProgramFiles%\microsoft office\media\cagcat10\1033\recovery info.txt
%ProgramFiles%\microsoft office\media\cagcat10\recovery info.txt
%ProgramFiles%\microsoft office\media\office14\1033\recovery info.txt
C:\documents and settings\all users\start menu\programs\windows fax and scan.lnk
C:\documents and settings\all users\start menu\programs\windows dvd maker.lnk
%ProgramFiles%\microsoft office\media\office14\autoshap\recovery info.txt
%ProgramFiles%\microsoft office\media\office14\bullets\recovery info.txt
%ProgramFiles%\microsoft office\media\office14\lines\recovery info.txt
C:\documents and settings\all users\start menu\programs\winrar\console rar manual.lnk
C:\documents and settings\all users\start menu\programs\sidebar.lnk
C:\documents and settings\all users\start menu\programs\steam\steam.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft excel 2010.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft access 2010.lnk
%ProgramFiles%\java\jre1.8.0_45\lib\security\recovery info.txt
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\digital certificate for vba projects.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft clip organizer.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office 2010 language preferences.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office 2010 upload center.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office picture manager.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft onenote 2010.lnk
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft outlook 2010.lnk
%ProgramFiles%\java\jre1.8.0_45\bin\plugin2\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\lib\recovery info.txt
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft infopath designer 2010.lnk
%ProgramFiles%\java\jre1.8.0_45\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\bin\server\recovery info.txt
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft publisher 2010.lnk
%ProgramFiles%\java\jre1.8.0_45\lib\cmm\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\lib\deploy\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\lib\ext\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\lib\fonts\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\lib\jfr\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\lib\management\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\bin\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\lib\amd64\recovery info.txt
C:\documents and settings\all users\start menu\programs\microsoft office\microsoft powerpoint 2010.lnk
C:\documents and settings\all users\start menu\programs\accessories\math input panel.lnk
C:\documents and settings\all users\start menu\programs\accessories\mobility center.lnk
C:\documents and settings\all users\start menu\programs\accessories\displayswitch.lnk
C:\documents and settings\all users\microsoft\user account pictures\user.bmp
C:\documents and settings\all users\microsoft help\hx.hxn
C:\documents and settings\all users\microsoft help\ms.excel.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.excel.dev.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.graph.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.groove.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.infopath.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.infopatheditor.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.msaccess.14.1033.hxn
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile44.bmp
C:\documents and settings\all users\microsoft help\ms.winword.14.1033.hxn
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile42.bmp
C:\documents and settings\all users\microsoft help\ms.mstore.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.mspub.dev.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.ois.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.onenote.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.outlook.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.outlook.dev.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.powerpnt.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.powerpnt.dev.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.setlang.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.msouc.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.msaccess.dev.14.1033.hxn
C:\documents and settings\all users\microsoft help\ms.mspub.14.1033.hxn
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile41.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile31.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile20.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile21.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile22.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile23.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile24.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile25.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile26.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile27.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile28.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile43.bmp
C:\documents and settings\all users\microsoft help\ms.winword.dev.14.1033.hxn
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile19.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile32.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile33.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile35.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile34.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile36.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile37.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile38.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile39.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile40.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile30.bmp
C:\documents and settings\all users\microsoft\user account pictures\default pictures\usertile29.bmp
C:\documents and settings\all users\microsoft\user account pictures\guest.bmp
C:\documents and settings\all users\microsoft help\nslist.hxl
%ProgramFiles%\dvd maker\shared\dvdstyles\recovery info.txt
%ProgramFiles%\dvd maker\recovery info.txt
%ProgramFiles%\java\jre1.8.0_45\bin\dtplugin\recovery info.txt
C:\documents and settings\all users\oracle\java\javapath\javaws.exe
C:\documents and settings\all users\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\state.rsm
C:\documents and settings\all users\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe
C:\documents and settings\all users\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\vc_redist.x64.exe
C:\documents and settings\all users\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm
C:\documents and settings\all users\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\state.rsm
%ProgramFiles%\dvd maker\shared\dvdstyles\vignette\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\travel\recovery info.txt
%ProgramFiles%\dvd maker\shared\recovery info.txt
C:\documents and settings\all users\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe
C:\documents and settings\all users\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\state.rsm
C:\documents and settings\all users\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe
C:\documents and settings\all users\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe
C:\documents and settings\all users\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\state.rsm
C:\documents and settings\all users\start menu\default programs.lnk
C:\documents and settings\all users\start menu\programs\accessories\accessibility\speech recognition.lnk
C:\documents and settings\all users\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\vc_redist.x64.exe
C:\documents and settings\all users\start menu\programs\accessories\calculator.lnk
C:\documents and settings\all users\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\state.rsm
C:\documents and settings\all users\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm
C:\documents and settings\all users\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\vc_redist.x86.exe
%ProgramFiles%\dvd maker\shared\dvdstyles\videowall\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\stacking\recovery info.txt
C:\documents and settings\all users\oracle\java\javapath\java.exe
C:\documents and settings\user\start menu\programs\winrar\recovery info.txt
C:\documents and settings\user\start menu\programs\recovery info.txt
C:\documents and settings\user\recovery info.txt
%ProgramFiles%\dvd maker\en-us\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\full\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\recovery info.txt
C:\documents and settings\user\start menu\programs\telegram desktop\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\push\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\recovery info.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\recovery info.txt
C:\documents and settings\all users\oracle\java\installcache_x64\baseimagefam8
%ProgramFiles%\dvd maker\shared\dvdstyles\sports\recovery info.txt
C:\documents and settings\all users\oracle\java\javapath\javaw.exe
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\recovery info.txt
C:\documents and settings\all users\start menu\programs\winrar\what is new in the latest version.lnk
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\combinepdf\images\recovery info.txt

Moves the following files

from C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini to C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft excel 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft excel 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft access 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft access 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\media center.lnk to C:\documents and settings\all users\start menu\programs\media center.lnk.rox
from C:\documents and settings\all users\start menu\programs\maintenance\create recovery disc.lnk to C:\documents and settings\all users\start menu\programs\maintenance\create recovery disc.lnk.rox
from C:\documents and settings\all users\start menu\programs\maintenance\remote assistance.lnk to C:\documents and settings\all users\start menu\programs\maintenance\remote assistance.lnk.rox
from C:\documents and settings\all users\start menu\programs\maintenance\backup and restore center.lnk to C:\documents and settings\all users\start menu\programs\maintenance\backup and restore center.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft infopath filler 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft infopath filler 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\java\visit java.com.lnk to C:\documents and settings\all users\start menu\programs\java\visit java.com.lnk.rox
from C:\documents and settings\all users\start menu\programs\java\configure java.lnk to C:\documents and settings\all users\start menu\programs\java\configure java.lnk.rox
from C:\documents and settings\all users\start menu\programs\java\check for updates.lnk to C:\documents and settings\all users\start menu\programs\java\check for updates.lnk.rox
from C:\documents and settings\all users\start menu\programs\java\about java.lnk to C:\documents and settings\all users\start menu\programs\java\about java.lnk.rox
from C:\documents and settings\all users\start menu\programs\games\gameexplorer.lnk to C:\documents and settings\all users\start menu\programs\games\gameexplorer.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\windows powershell modules.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\windows powershell modules.lnk.rox
from C:\documents and settings\all users\start menu\programs\firefox.lnk to C:\documents and settings\all users\start menu\programs\firefox.lnk.rox
from C:\documents and settings\all users\start menu\programs\java\get help.lnk to C:\documents and settings\all users\start menu\programs\java\get help.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft infopath designer 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft infopath designer 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\digital certificate for vba projects.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\digital certificate for vba projects.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft clip organizer.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft clip organizer.lnk.rox
from C:\documents and settings\all users\start menu\programs\steam\steam.lnk to C:\documents and settings\all users\start menu\programs\steam\steam.lnk.rox
from C:\documents and settings\all users\start menu\programs\sidebar.lnk to C:\documents and settings\all users\start menu\programs\sidebar.lnk.rox
from C:\documents and settings\all users\start menu\programs\steam\steam support center.url to C:\documents and settings\all users\start menu\programs\steam\steam support center.url.rox
from C:\documents and settings\all users\start menu\programs\opera.lnk to C:\documents and settings\all users\start menu\programs\opera.lnk.rox
from C:\documents and settings\all users\start menu\programs\sharepoint\microsoft sharepoint workspace 2010.lnk to C:\documents and settings\all users\start menu\programs\sharepoint\microsoft sharepoint workspace 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\mozilla thunderbird.lnk to C:\documents and settings\all users\start menu\programs\mozilla thunderbird.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft word 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft word 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft sharepoint workspace 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft sharepoint workspace 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft publisher 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft publisher 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft powerpoint 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft powerpoint 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft outlook 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft outlook 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft onenote 2010.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft onenote 2010.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office picture manager.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office picture manager.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office 2010 upload center.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office 2010 upload center.lnk.rox
from C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office 2010 language preferences.lnk to C:\documents and settings\all users\start menu\programs\microsoft office\microsoft office 2010 tools\microsoft office 2010 language preferences.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\windows firewall with advanced security.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\windows firewall with advanced security.lnk.rox
from C:\documents and settings\all users\start menu\programs\windows fax and scan.lnk to C:\documents and settings\all users\start menu\programs\windows fax and scan.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\task scheduler.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\task scheduler.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\system configuration.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\system configuration.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\windows easy transfer.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\windows easy transfer.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\windows easy transfer reports.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\windows easy transfer reports.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\task scheduler.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\task scheduler.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\system information.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\system information.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\system restore.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\system restore.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\disk cleanup.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\disk cleanup.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\tablet pc\tabtip.lnk to C:\documents and settings\all users\start menu\programs\accessories\tablet pc\tabtip.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\resource monitor.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\resource monitor.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\character map.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\character map.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\snipping tool.lnk to C:\documents and settings\all users\start menu\programs\accessories\snipping tool.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\sync center.lnk to C:\documents and settings\all users\start menu\programs\accessories\sync center.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\sticky notes.lnk to C:\documents and settings\all users\start menu\programs\accessories\sticky notes.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\sound recorder.lnk to C:\documents and settings\all users\start menu\programs\accessories\sound recorder.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\remote desktop connection.lnk to C:\documents and settings\all users\start menu\programs\accessories\remote desktop connection.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\system tools\dfrgui.lnk to C:\documents and settings\all users\start menu\programs\accessories\system tools\dfrgui.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\tablet pc\shapecollector.lnk to C:\documents and settings\all users\start menu\programs\accessories\tablet pc\shapecollector.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\tablet pc\windows journal.lnk to C:\documents and settings\all users\start menu\programs\accessories\tablet pc\windows journal.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\welcome center.lnk to C:\documents and settings\all users\start menu\programs\accessories\welcome center.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\security configuration management.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\security configuration management.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\print management.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\print management.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\performance monitor.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\performance monitor.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\memory diagnostics tool.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\memory diagnostics tool.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\iscsi initiator.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\iscsi initiator.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\event viewer.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\event viewer.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\computer management.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\computer management.lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\data sources (odbc).lnk to C:\documents and settings\all users\start menu\programs\administrative tools\data sources (odbc).lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\component services.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\component services.lnk.rox
from C:\documents and settings\all users\start menu\programs\acrobat reader dc.lnk to C:\documents and settings\all users\start menu\programs\acrobat reader dc.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\wordpad.lnk to C:\documents and settings\all users\start menu\programs\accessories\wordpad.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell ise.lnk to C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell ise.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell.lnk to C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell (x86).lnk to C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell (x86).lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell ise (x86).lnk to C:\documents and settings\all users\start menu\programs\accessories\windows powershell\windows powershell ise (x86).lnk.rox
from C:\documents and settings\all users\start menu\programs\administrative tools\services.lnk to C:\documents and settings\all users\start menu\programs\administrative tools\services.lnk.rox
from C:\documents and settings\all users\start menu\programs\windows dvd maker.lnk to C:\documents and settings\all users\start menu\programs\windows dvd maker.lnk.rox
from C:\documents and settings\all users\start menu\programs\winrar\console rar manual.lnk to C:\documents and settings\all users\start menu\programs\winrar\console rar manual.lnk.rox
from C:\documents and settings\all users\start menu\programs\winrar\what is new in the latest version.lnk to C:\documents and settings\all users\start menu\programs\winrar\what is new in the latest version.lnk.rox
from C:\documents and settings\user\favorites\windows live\windows live spaces.url to C:\documents and settings\user\favorites\windows live\windows live spaces.url.rox
from C:\documents and settings\user\favorites\windows live\windows live mail.url to C:\documents and settings\user\favorites\windows live\windows live mail.url.rox
from C:\documents and settings\user\favorites\windows live\get windows live.url to C:\documents and settings\user\favorites\windows live\get windows live.url.rox
from C:\documents and settings\user\favorites\windows live\windows live gallery.url to C:\documents and settings\user\favorites\windows live\windows live gallery.url.rox
from C:\documents and settings\user\favorites\msn websites\msn.url to C:\documents and settings\user\favorites\msn websites\msn.url.rox
from C:\documents and settings\user\favorites\msn websites\msnbc news.url to C:\documents and settings\user\favorites\msn websites\msnbc news.url.rox
from C:\documents and settings\user\links\recentplaces.lnk to C:\documents and settings\user\links\recentplaces.lnk.rox
from C:\documents and settings\user\links\desktop.lnk to C:\documents and settings\user\links\desktop.lnk.rox
from C:\documents and settings\user\favorites\msn websites\msn entertainment.url to C:\documents and settings\user\favorites\msn websites\msn entertainment.url.rox
from C:\documents and settings\user\favorites\msn websites\msn autos.url to C:\documents and settings\user\favorites\msn websites\msn autos.url.rox
from C:\documents and settings\user\favorites\microsoft websites\microsoft store.url to C:\documents and settings\user\favorites\microsoft websites\microsoft store.url.rox
from C:\documents and settings\user\favorites\microsoft websites\microsoft at work.url to C:\documents and settings\user\favorites\microsoft websites\microsoft at work.url.rox
from C:\documents and settings\user\favorites\microsoft websites\microsoft at home.url to C:\documents and settings\user\favorites\microsoft websites\microsoft at home.url.rox
from C:\documents and settings\user\favorites\microsoft websites\ie add-on site.url to C:\documents and settings\user\favorites\microsoft websites\ie add-on site.url.rox
from C:\documents and settings\user\favorites\msn websites\msn sports.url to C:\documents and settings\user\favorites\msn websites\msn sports.url.rox
from %ProgramFiles%\dvd maker\secretst.ttf to %ProgramFiles%\dvd maker\secretst.ttf.rox
from C:\documents and settings\user\links\downloads.lnk to C:\documents and settings\user\links\downloads.lnk.rox
from %ProgramFiles%\dvd maker\rtstreamsource.ax to %ProgramFiles%\dvd maker\rtstreamsource.ax.rox
from %ProgramFiles%\dvd maker\pipetran.dll to %ProgramFiles%\dvd maker\pipetran.dll.rox
from %ProgramFiles%\dvd maker\rtstreamsink.ax to %ProgramFiles%\dvd maker\rtstreamsink.ax.rox
from %ProgramFiles%\dvd maker\pipeline.dll to %ProgramFiles%\dvd maker\pipeline.dll.rox
from %ProgramFiles%\dvd maker\omdproject.dll to %ProgramFiles%\dvd maker\omdproject.dll.rox
from %ProgramFiles%\dvd maker\omdbase.dll to %ProgramFiles%\dvd maker\omdbase.dll.rox
from %ProgramFiles%\dvd maker\offset.ax to %ProgramFiles%\dvd maker\offset.ax.rox
from %ProgramFiles%\dvd maker\eurosti.ttf to %ProgramFiles%\dvd maker\eurosti.ttf.rox
from %ProgramFiles%\dvd maker\fieldswitch.ax to %ProgramFiles%\dvd maker\fieldswitch.ax.rox
from %ProgramFiles%\dvd maker\en-us\omdproject.dll.mui to %ProgramFiles%\dvd maker\en-us\omdproject.dll.mui.rox
from %ProgramFiles%\dvd maker\en-us\wmm2clip.dll.mui to %ProgramFiles%\dvd maker\en-us\wmm2clip.dll.mui.rox
from %ProgramFiles%\dvd maker\dvdmaker.exe to %ProgramFiles%\dvd maker\dvdmaker.exe.rox
from %ProgramFiles%\dvd maker\en-us\dvdmaker.exe.mui to %ProgramFiles%\dvd maker\en-us\dvdmaker.exe.mui.rox
from %ProgramFiles%\dvd maker\directshowtap.ax to %ProgramFiles%\dvd maker\directshowtap.ax.rox
from %ProgramFiles%\dvd maker\bod_r.ttf to %ProgramFiles%\dvd maker\bod_r.ttf.rox
from C:\documents and settings\user\favorites\microsoft websites\ie site on microsoft.com.url to C:\documents and settings\user\favorites\microsoft websites\ie site on microsoft.com.url.rox
from C:\documents and settings\user\favorites\msn websites\msn money.url to C:\documents and settings\user\favorites\msn websites\msn money.url.rox
from C:\documents and settings\user\desktop\wrar520.exe to C:\documents and settings\user\desktop\wrar520.exe.rox
from C:\documents and settings\user\favorites\links for united states\usa.gov.url to C:\documents and settings\user\favorites\links for united states\usa.gov.url.rox
from C:\documents and settings\user\favorites\links for united states\gobiernousa.gov.url to C:\documents and settings\user\favorites\links for united states\gobiernousa.gov.url.rox
from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.rox
from C:\documents and settings\default\sendto\fax recipient.lnk to C:\documents and settings\default\sendto\fax recipient.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\ease of access.lnk.rox
from C:\documents and settings\default\sendto\mail recipient.mapimail to C:\documents and settings\default\sendto\mail recipient.mapimail.rox
from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.rox
from C:\documents and settings\default\sendto\desktop (create shortcut).desklink to C:\documents and settings\default\sendto\desktop (create shortcut).desklink.rox
from C:\documents and settings\default\sendto\compressed (zipped) folder.zfsendtotarget to C:\documents and settings\default\sendto\compressed (zipped) folder.zfsendtotarget.rox
from C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf to C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.rox
from C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\narrator.lnk.rox
from C:\documents and settings\default\ntuser.dat.log1 to C:\documents and settings\default\ntuser.dat.log1.rox
from C:\documents and settings\all users\start menu\windows update.lnk to C:\documents and settings\all users\start menu\windows update.lnk.rox
from C:\documents and settings\all users\start menu\programs\xps viewer.lnk to C:\documents and settings\all users\start menu\programs\xps viewer.lnk.rox
from C:\documents and settings\all users\start menu\programs\winrar\winrar.lnk to C:\documents and settings\all users\start menu\programs\winrar\winrar.lnk.rox
from C:\documents and settings\all users\start menu\programs\winrar\winrar help.lnk to C:\documents and settings\all users\start menu\programs\winrar\winrar help.lnk.rox
from C:\documents and settings\all users\start menu\programs\windows media player.lnk to C:\documents and settings\all users\start menu\programs\windows media player.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\paint.lnk to C:\documents and settings\all users\start menu\programs\accessories\paint.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\notepad.lnk to C:\documents and settings\default\start menu\programs\accessories\notepad.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\on-screen keyboard.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\run.lnk to C:\documents and settings\default\start menu\programs\accessories\run.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk to C:\documents and settings\default\start menu\programs\accessories\accessibility\magnify.lnk.rox
from C:\documents and settings\user\favorites\links\web slice gallery.url to C:\documents and settings\user\favorites\links\web slice gallery.url.rox
from C:\documents and settings\user\desktop\tcm851ax32.exe to C:\documents and settings\user\desktop\tcm851ax32.exe.rox
from C:\documents and settings\user\desktop\winmine.exe to C:\documents and settings\user\desktop\winmine.exe.rox
from C:\documents and settings\user\desktop\telegram.lnk to C:\documents and settings\user\desktop\telegram.lnk.rox
from C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv to C:\documents and settings\public\recorded tv\sample media\win7_scenic-demoshort_raw.wtv.rox
from C:\documents and settings\user\desktop\google chrome.lnk to C:\documents and settings\user\desktop\google chrome.lnk.rox
from C:\documents and settings\user\desktop\chromesetup.exe to C:\documents and settings\user\desktop\chromesetup.exe.rox
from C:\documents and settings\user\contacts\user.contact to C:\documents and settings\user\contacts\user.contact.rox
from C:\documents and settings\public\libraries\recordedtv.library-ms to C:\documents and settings\public\libraries\recordedtv.library-ms.rox
from C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk to C:\documents and settings\default\start menu\programs\accessories\windows explorer.lnk.rox
from C:\documents and settings\default\start menu\programs\maintenance\help.lnk to C:\documents and settings\default\start menu\programs\maintenance\help.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\private character editor.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\control panel.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk to C:\documents and settings\default\start menu\programs\accessories\system tools\computer.lnk.rox
from C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk to C:\documents and settings\default\start menu\programs\accessories\command prompt.lnk.rox
from %ProgramFiles%\dvd maker\audiodepthconverter.ax to %ProgramFiles%\dvd maker\audiodepthconverter.ax.rox
from C:\documents and settings\all users\start menu\programs\accessories\networkprojection.lnk to C:\documents and settings\all users\start menu\programs\accessories\networkprojection.lnk.rox
from C:\documents and settings\all users\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\vc_redist.x64.exe to C:\documents and settings\all users\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\vc_redist.x64.exe.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\msointl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\msointl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\msointl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\msointl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\mor6int.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\mor6int.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\grintl32.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\grintl32.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\mapir.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\mapir.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\grintl32.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\grintl32.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\omsintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\omsintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\envelopr.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\envelopr.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\identitycrl\ppcrlui.dll to C:\documents and settings\all users\microsoft\identitycrl\ppcrlui.dll.rox
from C:\documents and settings\all users\microsoft\mf\active.grl to C:\documents and settings\all users\microsoft\mf\active.grl.rox
from C:\documents and settings\all users\microsoft\identitycrl\ppcrlconfig.dll to C:\documents and settings\all users\microsoft\identitycrl\ppcrlconfig.dll.rox
from C:\documents and settings\all users\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\resource.xml to C:\documents and settings\all users\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\resource.xml.rox
from C:\documents and settings\all users\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml to C:\documents and settings\all users\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\tasks.xml.rox
from C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml to C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\tasks.xml.rox
from C:\documents and settings\all users\microsoft\mf\pending.grl to C:\documents and settings\all users\microsoft\mf\pending.grl.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\onintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\onintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\onintl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\onintl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\outllibr.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\outllibr.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlslicer.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlslicer.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\wwintl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\wwintl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlintl32.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlintl32.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\visintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\visintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\wwintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\wwintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\visbrres.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\visbrres.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\stintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\stintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\sgres.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\sgres.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\pubwzint.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\pubwzint.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\pub6intl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\pub6intl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\pub6intl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\pub6intl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\ppintl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\ppintl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\ppintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\ppintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\outllibr.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\outllibr.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\outlwvw.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\outlwvw.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\resource.xml to C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\resource.xml.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlintl32.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\1036\xlintl32.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml to C:\documents and settings\all users\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\resource.xml.rox
from C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png to C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\background.png.rox
from C:\documents and settings\all users\documents\my pictures\sample pictures\jellyfish.jpg to C:\documents and settings\all users\documents\my pictures\sample pictures\jellyfish.jpg.rox
from C:\documents and settings\all users\documents\my pictures\sample pictures\hydrangeas.jpg to C:\documents and settings\all users\documents\my pictures\sample pictures\hydrangeas.jpg.rox
from C:\documents and settings\all users\documents\my pictures\sample pictures\desert.jpg to C:\documents and settings\all users\documents\my pictures\sample pictures\desert.jpg.rox
from C:\documents and settings\all users\documents\my pictures\sample pictures\chrysanthemum.jpg to C:\documents and settings\all users\documents\my pictures\sample pictures\chrysanthemum.jpg.rox
from C:\documents and settings\all users\documents\my music\sample music\sleep away.mp3 to C:\documents and settings\all users\documents\my music\sample music\sleep away.mp3.rox
from C:\documents and settings\all users\documents\my music\sample music\maid with the flaxen hair.mp3 to C:\documents and settings\all users\documents\my music\sample music\maid with the flaxen hair.mp3.rox
from C:\documents and settings\all users\documents\my pictures\sample pictures\koala.jpg to C:\documents and settings\all users\documents\my pictures\sample pictures\koala.jpg.rox
from C:\documents and settings\all users\documents\my music\sample music\kalimba.mp3 to C:\documents and settings\all users\documents\my music\sample music\kalimba.mp3.rox
from C:\documents and settings\all users\desktop\opera.lnk to C:\documents and settings\all users\desktop\opera.lnk.rox
from C:\documents and settings\all users\desktop\mozilla thunderbird.lnk to C:\documents and settings\all users\desktop\mozilla thunderbird.lnk.rox
from C:\documents and settings\all users\desktop\firefox.lnk to C:\documents and settings\all users\desktop\firefox.lnk.rox
from C:\documents and settings\all users\desktop\acrobat reader dc.lnk to C:\documents and settings\all users\desktop\acrobat reader dc.lnk.rox
from C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini to C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.ini.rox
from C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.exe to C:\documents and settings\all users\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.exe.rox
from C:\documents and settings\all users\desktop\steam.lnk to C:\documents and settings\all users\desktop\steam.lnk.rox
from C:\documents and settings\all users\documents\my pictures\sample pictures\penguins.jpg to C:\documents and settings\all users\documents\my pictures\sample pictures\penguins.jpg.rox
from C:\documents and settings\all users\documents\my pictures\sample pictures\lighthouse.jpg to C:\documents and settings\all users\documents\my pictures\sample pictures\lighthouse.jpg.rox
from C:\documents and settings\all users\documents\my pictures\sample pictures\tulips.jpg to C:\documents and settings\all users\documents\my pictures\sample pictures\tulips.jpg.rox
from C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml to C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\behavior.xml.rox
from C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png to C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\superbar.png.rox
from C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png to C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\overlay.png.rox
from C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png to C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\device.png.rox
from C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml to C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\behavior.xml.rox
from C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png to C:\documents and settings\all users\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\background.png.rox
from C:\documents and settings\all users\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814 to C:\documents and settings\all users\microsoft\crypto\rsa\s-1-5-18\6d14e4b1d8ca773bab785d1be032546e_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814.rox
from C:\documents and settings\all users\documents\my videos\sample videos\wildlife.wmv to C:\documents and settings\all users\documents\my videos\sample videos\wildlife.wmv.rox
from C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q to C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help{9daa54e8-cd95-4107-8e7f-ba3f24732d95}.h1q.rox
from C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.lck to C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.lck.rox
from C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d to C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mvalidator.h1d.rox
from C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h to C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mtoc_help.h1h.rox
from C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w to C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_bestbet.h1w.rox
from C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w to C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w.rox
from C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d to C:\documents and settings\all users\microsoft\assistance\client\1.0\en-us\help_cvalidator.h1d.rox
from C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png to C:\documents and settings\all users\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\watermark.png.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\envelopr.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\envelopr.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\grintl32.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\grintl32.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\grintl32.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\grintl32.rest.trx_dll.rox
from C:\documents and settings\all users\oracle\java\javapath\javaws.exe to C:\documents and settings\all users\oracle\java\javapath\javaws.exe.rox
from C:\documents and settings\all users\oracle\java\javapath\javaw.exe to C:\documents and settings\all users\oracle\java\javapath\javaw.exe.rox
from C:\documents and settings\all users\oracle\java\javapath\java.exe to C:\documents and settings\all users\oracle\java\javapath\java.exe.rox
from C:\documents and settings\all users\microsoft help\nslist.hxl to C:\documents and settings\all users\microsoft help\nslist.hxl.rox
from C:\documents and settings\all users\microsoft help\ms.winword.dev.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.winword.dev.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.winword.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.winword.14.1033.hxn.rox
from C:\documents and settings\all users\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe to C:\documents and settings\all users\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\vcredist_x64.exe.rox
from C:\documents and settings\all users\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\state.rsm to C:\documents and settings\all users\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\state.rsm.rox
from C:\documents and settings\all users\microsoft help\ms.powerpnt.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.powerpnt.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.outlook.dev.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.outlook.dev.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.outlook.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.outlook.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.onenote.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.onenote.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.ois.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.ois.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.mspub.dev.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.mspub.dev.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.setlang.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.setlang.14.1033.hxn.rox
from C:\documents and settings\all users\start menu\programs\accessories\mobility center.lnk to C:\documents and settings\all users\start menu\programs\accessories\mobility center.lnk.rox
from C:\documents and settings\all users\oracle\java\installcache_x64\baseimagefam8 to C:\documents and settings\all users\oracle\java\installcache_x64\baseimagefam8.rox
from C:\documents and settings\all users\start menu\programs\accessories\displayswitch.lnk to C:\documents and settings\all users\start menu\programs\accessories\displayswitch.lnk.rox
from C:\documents and settings\all users\start menu\programs\accessories\calculator.lnk to C:\documents and settings\all users\start menu\programs\accessories\calculator.lnk.rox
from C:\documents and settings\all users\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\vc_redist.x64.exe to C:\documents and settings\all users\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\vc_redist.x64.exe.rox
from C:\documents and settings\all users\start menu\programs\accessories\accessibility\speech recognition.lnk to C:\documents and settings\all users\start menu\programs\accessories\accessibility\speech recognition.lnk.rox
from C:\documents and settings\all users\start menu\default programs.lnk to C:\documents and settings\all users\start menu\default programs.lnk.rox
from C:\documents and settings\all users\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\state.rsm to C:\documents and settings\all users\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\state.rsm.rox
from C:\documents and settings\all users\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe to C:\documents and settings\all users\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\vcredist_x86.exe.rox
from C:\documents and settings\all users\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe to C:\documents and settings\all users\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\vcredist_x64.exe.rox
from C:\documents and settings\all users\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\state.rsm to C:\documents and settings\all users\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\state.rsm.rox
from C:\documents and settings\all users\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\vc_redist.x86.exe to C:\documents and settings\all users\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\vc_redist.x86.exe.rox
from C:\documents and settings\all users\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm to C:\documents and settings\all users\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\state.rsm.rox
from C:\documents and settings\all users\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\state.rsm to C:\documents and settings\all users\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\state.rsm.rox
from C:\documents and settings\all users\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe to C:\documents and settings\all users\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\vcredist_x86.exe.rox
from C:\documents and settings\all users\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\state.rsm to C:\documents and settings\all users\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\state.rsm.rox
from C:\documents and settings\all users\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm to C:\documents and settings\all users\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\state.rsm.rox
from C:\documents and settings\all users\microsoft help\ms.mstore.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.mstore.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.powerpnt.dev.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.powerpnt.dev.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.mspub.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.mspub.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.msouc.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.msouc.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.msaccess.dev.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.msaccess.dev.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\outllibr.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\outllibr.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\pubwzint.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\pubwzint.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\pub6intl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\pub6intl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\ppintl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\ppintl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\ppintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\ppintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\outllibr.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\outllibr.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\outlwvw.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\outlwvw.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\onintl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\onintl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\sgres.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\sgres.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\onintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\onintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\msointl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\msointl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\omsintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\omsintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\msointl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\msointl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\mapir.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\mapir.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\mor6int.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\mor6int.rest.trx_dll.rox
from C:\documents and settings\all users\start menu\programs\accessories\math input panel.lnk to C:\documents and settings\all users\start menu\programs\accessories\math input panel.lnk.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\stintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\stintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\visbrres.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\visbrres.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\wwintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\wwintl.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\pub6intl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\pub6intl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft help\ms.msaccess.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.msaccess.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.infopatheditor.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.infopatheditor.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.infopath.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.infopath.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.groove.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.groove.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.graph.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.graph.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.excel.dev.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.excel.dev.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\ms.excel.14.1033.hxn to C:\documents and settings\all users\microsoft help\ms.excel.14.1033.hxn.rox
from C:\documents and settings\all users\microsoft help\hx.hxn to C:\documents and settings\all users\microsoft help\hx.hxn.rox
from C:\documents and settings\all users\microsoft\rac\statedata\racdatabase.sdf to C:\documents and settings\all users\microsoft\rac\statedata\racdatabase.sdf.rox
from C:\documents and settings\all users\microsoft\rac\publisheddata\racwmidatabase.sdf to C:\documents and settings\all users\microsoft\rac\publisheddata\racwmidatabase.sdf.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlslicer.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlslicer.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\wwintl.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\wwintl.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlintl32.rest.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlintl32.rest.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlintl32.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\xlintl32.dll.trx_dll.rox
from C:\documents and settings\all users\microsoft\office\uicaptions\3082\visintl.dll.trx_dll to C:\documents and settings\all users\microsoft\office\uicaptions\3082\visintl.dll.trx_dll.rox
from %ProgramFiles%\dvd maker\shared\common.fxh to %ProgramFiles%\dvd maker\shared\common.fxh.rox

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'ap#.#pify.org':80
'19#.#43.1.139':80

TCP

HTTP GET requests

http://ap#.#pify.org/

HTTP POST requests

http://19#.#43.1.139/Ujdu8jjooue/biweax.php

UDP

DNS ASK ap#.#pify.org

Tecnologie

Termini

Formazione ed informazione

Falsi miti

Technical Information

Curing recommendations

Free trial