Technical Information
Malicious functions:
Creates and executes the following:
- '%TEMP%\xmlUpdater.exe' "%TEMP%\stylesLexerModel.xml" "%TEMP%\stylers_remove.xml" "%APPDATA%\Notepad++\stylers.xml"
- '%TEMP%\nsa3.tmp\ns7.tmp' "%TEMP%\xmlUpdater.exe" "%TEMP%\stylesLexerModel.xml" "%TEMP%\stylers_remove.xml" "%APPDATA%\Notepad++\stylers.xml"
- '%TEMP%\xmlUpdater.exe' "%TEMP%\stylesGlobalModel.xml" "%TEMP%\stylers.model.xml" "%APPDATA%\Notepad++\stylers.xml"
- '%TEMP%\nsa3.tmp\ns9.tmp' "%TEMP%\xmlUpdater.exe" "%TEMP%\stylesLexerModel.xml" "%TEMP%\stylers.model.xml" "%APPDATA%\Notepad++\stylers.xml"
- '%TEMP%\xmlUpdater.exe' "%TEMP%\stylesLexerModel.xml" "%TEMP%\stylers.model.xml" "%APPDATA%\Notepad++\stylers.xml"
- '%TEMP%\nsa3.tmp\ns8.tmp' "%TEMP%\xmlUpdater.exe" "%TEMP%\stylesLexerModel.xml" "%TEMP%\stylers.model.xml" "%APPDATA%\Notepad++\stylers.xml"
- '%TEMP%\xmlUpdater.exe' "%TEMP%\langsModel.xml" "%TEMP%\langs.model.xml" "%APPDATA%\Notepad++\langs.xml"
- '%TEMP%\nsa3.tmp\ns4.tmp' "%TEMP%\xmlUpdater.exe" "%TEMP%\langsModel.xml" "%TEMP%\langs.model.xml" "%APPDATA%\Notepad++\langs.xml"
- '%TEMP%\Setup.exe' /S
- '%TEMP%\nsa3.tmp\ns6.tmp' "%TEMP%\xmlUpdater.exe" "%TEMP%\stylesGlobalModel.xml" "%TEMP%\stylers.model.xml" "%APPDATA%\Notepad++\stylers.xml"
- '%TEMP%\xmlUpdater.exe' "%TEMP%\configModel.xml" "%TEMP%\config.model.xml" "%APPDATA%\Notepad++\config.xml"
- '%TEMP%\nsa3.tmp\ns5.tmp' "%TEMP%\xmlUpdater.exe" "%TEMP%\configModel.xml" "%TEMP%\config.model.xml" "%APPDATA%\Notepad++\config.xml"
Executes the following:
- '<SYSTEM32>\regsvr32.exe' /s "%PROGRAM_FILES%\Notepad++\NppShell_06.dll"
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
Modifies file system :
Creates the following files:
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\shortcuts-run-menu.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\switching-between-documents.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\upgrading.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\session-management.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\settings.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\shell-extension.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\windows-dialog.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\right-left-rtl.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\shortcuts-view-menu.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\system-tray.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\folding.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\hiding-lines.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\multi-view.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\document-properties.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\commands.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\control-files.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\credits.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\file-management.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\macros.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\plugins.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\further-help.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\gui-elements.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\languages.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\shortcuts-edit-menu.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\standard-operations.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\file-management\activating-file.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\overtype.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\printing.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\selecting-text.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\file-management\closing-files.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\file-management\read-only-files.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\file-management\shortcuts-file-menu.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\further-help\bug-reports.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\file-management\creating-new-files.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\file-management\editing-files.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\file-management\opening-and-saving-files.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\zooming.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\document-properties\encoding.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\document-properties\newline-format.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\unprintable-characters.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\viewing-modes.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\display\wrapping.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\auto-completion.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\indentation.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\mouse-gestures.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\other-editing-tools.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\column-mode-editing.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\commenting.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\editing\exiting-notepad.html
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\shortcut_mapper_scint.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\srwindow.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\styler_config.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\run.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\save_shortcut.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\shortcut_mapper.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\styler_config_default.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\closeAll.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\closeFile.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\copy.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\summary.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\systemtray.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\windows.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\find.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\goto.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\incremental_search.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\docswitch.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\fif.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\fif_result.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\macro_multiple.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\multiview_zoom.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\preferences.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\replace.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\main.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\multiSel.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\multiview.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\stopRecord.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\syncH.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\syncV.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\saveRecord.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\showPannel.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\startRecord.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\undo.png
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-online-document.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\document-properties\encoding.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\command-line.html
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\wrap.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\zoomIn.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\zoomOut.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\indentGuide.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\newFile.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\openFile.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\cut.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\find.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\findReplace.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\paste.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\redo.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\saveAll.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\saveFile.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\playRecord.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\playRecord_m.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Toolbar\print.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\dblog5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\local.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\feedback\images\throbber.gif
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\views\css\views5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\views\images\status-active.gif
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\script5dbc.js
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_06.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_07.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_08.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\style5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_01.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_02.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\cck\theme\content-module5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\ckeditor\ckeditor5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\dhtml_menu\dhtml_menu5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\images\Pier.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\captcha\captcha5dbc.js
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\cck\modules\fieldgroup\fieldgroup5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\dhtml_menu\dhtml_menu5dbc.js
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\fancy_login\scripts\fancy_login5dbc.js
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\feedback\feedback5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\feedback\feedback5dbc.js
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\fancy_login\css\fancy_login5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\fancy_login\images\ajax-loader.gif
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\modules\fancy_login\images\popup.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\rounded-block.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\tab-left.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\tab-right.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\preface-wrapper-bg.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\raquo.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\rounded-block-inner.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\theme_settings\fixed5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\user\password.html
- %PROGRAM_FILES%\Notepad++\user.manual\user\register.html
- %PROGRAM_FILES%\Notepad++\uninstall.exe
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\theme_settings\fonts_15dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\default\files\acquia_marina_favicon.gif
- %PROGRAM_FILES%\Notepad++\user.manual\user\login.html
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_15.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\block-gradient.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\blue-button.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_12.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_13.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\icons\tnt_icon_14.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\close-quote.gif
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\green-bullet.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\green-checkmark.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\open-quote.gif
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\content-gradient.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\drop-bottom.png
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\themes\acquia_marina\images\form-bg.png
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\incremental-search.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\marking-search-results.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\normal-search.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\brace-matching.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\dialog-free-search.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\go-dialog.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\replacing.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\smart-highighting.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\session-management\loading-sessions.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\session-management\saving-sessions.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\search-results.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\searching-files.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\shortcuts-search-menu.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\gui-elements\context-menu.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\gui-elements\dockable-windows.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\gui-elements\menu.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\further-help\feature-requests.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\further-help\main-website-and-forums.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\further-help\patches.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\gui-elements\status-bar.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\languages\external-lexers.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\languages\user-defined-languages.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\searching\bookmarks.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\gui-elements\tab-bar.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\gui-elements\tool-bar.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\languages\built-languages.html
- %PROGRAM_FILES%\Notepad++\user.manual\misc\tree.png
- %PROGRAM_FILES%\Notepad++\user.manual\modules\book\book5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\modules\node\node5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\misc\progress.gif
- %PROGRAM_FILES%\Notepad++\user.manual\misc\throbber.gif
- %PROGRAM_FILES%\Notepad++\user.manual\misc\tree-bottom.png
- %PROGRAM_FILES%\Notepad++\user.manual\modules\system\defaults5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\modules\user\user5dbc.js
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\css\home.css
- %PROGRAM_FILES%\Notepad++\user.manual\sites\all\images\NppCommunityLogo.png
- %PROGRAM_FILES%\Notepad++\user.manual\modules\system\system-menus5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\modules\system\system5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\modules\user\user5dbc.css
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\switching-between-documents\document-switcher.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\switching-between-documents\mru-most-recently-used-switching.html
- %PROGRAM_FILES%\Notepad++\user.manual\misc\draggable.png
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\settings\preferences.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\settings\shortcut-mapper.html
- %PROGRAM_FILES%\Notepad++\user.manual\documentation\notepad-user-manual\settings\styler-configurator.html
- %PROGRAM_FILES%\Notepad++\user.manual\misc\drupal5dbc.js
- %PROGRAM_FILES%\Notepad++\user.manual\misc\menu-expanded.png
- %PROGRAM_FILES%\Notepad++\user.manual\misc\menu-leaf.png
- %PROGRAM_FILES%\Notepad++\user.manual\misc\powered-blue-80x15.png
- %PROGRAM_FILES%\Notepad++\user.manual\misc\grippie.png
- %PROGRAM_FILES%\Notepad++\user.manual\misc\jquery5dbc.js
- %PROGRAM_FILES%\Notepad++\user.manual\misc\menu-collapsed.png
- %TEMP%\nppLocalization\indonesian.xml
- %TEMP%\nppLocalization\italian.xml
- %TEMP%\nppLocalization\japanese.xml
- %TEMP%\nppLocalization\hebrew.xml
- %TEMP%\nppLocalization\hindi.xml
- %TEMP%\nppLocalization\hungarian.xml
- %TEMP%\nppLocalization\kabyle.xml
- %TEMP%\nppLocalization\kyrgyz.xml
- %TEMP%\nppLocalization\latvian.xml
- %TEMP%\nppLocalization\ligurian.xml
- %TEMP%\nppLocalization\kannada.xml
- %TEMP%\nppLocalization\kazakh.xml
- %TEMP%\nppLocalization\korean.xml
- %TEMP%\nppLocalization\extremaduran.xml
- %TEMP%\nppLocalization\farsi.xml
- %TEMP%\nppLocalization\finnish.xml
- %TEMP%\nppLocalization\english.xml
- %TEMP%\nppLocalization\english_customizable.xml
- %TEMP%\nppLocalization\esperanto.xml
- %TEMP%\nppLocalization\french.xml
- %TEMP%\nppLocalization\german.xml
- %TEMP%\nppLocalization\greek.xml
- %TEMP%\nppLocalization\gujarati.xml
- %TEMP%\nppLocalization\friulian.xml
- %TEMP%\nppLocalization\galician.xml
- %TEMP%\nppLocalization\georgian.xml
- %TEMP%\nppLocalization\serbianCyrillic.xml
- %TEMP%\nppLocalization\sinhala.xml
- %TEMP%\nppLocalization\slovak.xml
- %TEMP%\nppLocalization\samogitian.xml
- %TEMP%\nppLocalization\sardinian.xml
- %TEMP%\nppLocalization\serbian.xml
- %TEMP%\nppLocalization\slovenian.xml
- %TEMP%\nppLocalization\tagalog.xml
- %TEMP%\nppLocalization\tamil.xml
- %TEMP%\nppLocalization\telugu.xml
- %TEMP%\nppLocalization\spanish.xml
- %TEMP%\nppLocalization\spanish_ar.xml
- %TEMP%\nppLocalization\swedish.xml
- %TEMP%\nppLocalization\malay.xml
- %TEMP%\nppLocalization\marathi.xml
- %TEMP%\nppLocalization\mongolian.xml
- %TEMP%\nppLocalization\lithuanian.xml
- %TEMP%\nppLocalization\luxembourgish.xml
- %TEMP%\nppLocalization\macedonian.xml
- %TEMP%\nppLocalization\norwegian.xml
- %TEMP%\nppLocalization\portuguese.xml
- %TEMP%\nppLocalization\romanian.xml
- %TEMP%\nppLocalization\russian.xml
- %TEMP%\nppLocalization\nynorsk.xml
- %TEMP%\nppLocalization\occitan.xml
- %TEMP%\nppLocalization\polish.xml
- %TEMP%\nsa3.tmp\ns7.tmp
- %TEMP%\nsa3.tmp\ns8.tmp
- %TEMP%\nsa3.tmp\ns9.tmp
- %TEMP%\nsa3.tmp\ns5.tmp
- %TEMP%\nsa3.tmp\ns6.tmp
- %APPDATA%\Notepad++\contextMenu.xml
- %PROGRAM_FILES%\Notepad++\stylers.model.xml
- %PROGRAM_FILES%\Notepad++\contextMenu.xml
- %PROGRAM_FILES%\Notepad++\functionList.xml
- %APPDATA%\Notepad++\functionList.xml
- %PROGRAM_FILES%\Notepad++\langs.model.xml
- %PROGRAM_FILES%\Notepad++\config.model.xml
- %TEMP%\langsModel.xml
- %TEMP%\configModel.xml
- %TEMP%\stylesGlobalModel.xml
- %TEMP%\aut1.tmp
- %TEMP%\Setup.exe
- %TEMP%\xmlUpdater.exe
- %TEMP%\stylesLexerModel.xml
- %TEMP%\stylers.model.xml
- %TEMP%\nsa3.tmp\nsExec.dll
- %TEMP%\nsa3.tmp\ns4.tmp
- %TEMP%\stylers_remove.xml
- %TEMP%\langs.model.xml
- %TEMP%\config.model.xml
- %TEMP%\nppLocalization\bosnian.xml
- %TEMP%\nppLocalization\brazilian_portuguese.xml
- %TEMP%\nppLocalization\bulgarian.xml
- %TEMP%\nppLocalization\basque.xml
- %TEMP%\nppLocalization\belarusian.xml
- %TEMP%\nppLocalization\bengali.xml
- %TEMP%\nppLocalization\catalan.xml
- %TEMP%\nppLocalization\czech.xml
- %TEMP%\nppLocalization\danish.xml
- %TEMP%\nppLocalization\dutch.xml
- %TEMP%\nppLocalization\chinese.xml
- %TEMP%\nppLocalization\chineseSimplified.xml
- %TEMP%\nppLocalization\croatian.xml
- %PROGRAM_FILES%\Notepad++\change.log
- %PROGRAM_FILES%\Notepad++\notepad++.exe
- %PROGRAM_FILES%\Notepad++\readme.txt
- %PROGRAM_FILES%\Notepad++\shortcuts.xml
- %PROGRAM_FILES%\Notepad++\license.txt
- %PROGRAM_FILES%\Notepad++\SciLexer.dll
- %PROGRAM_FILES%\Notepad++\localization\english.xml
- %TEMP%\nppLocalization\aragonese.xml
- %TEMP%\nppLocalization\aranese.xml
- %TEMP%\nppLocalization\azerbaijani.xml
- %TEMP%\nppLocalization\afrikaans.xml
- %TEMP%\nppLocalization\albanian.xml
- %TEMP%\nppLocalization\arabic.xml
- %PROGRAM_FILES%\Notepad++\themes\Solarized.xml
- %PROGRAM_FILES%\Notepad++\themes\Solarized-light.xml
- %PROGRAM_FILES%\Notepad++\themes\HotFudgeSundae.xml
- %PROGRAM_FILES%\Notepad++\themes\vim Dark Blue.xml
- %PROGRAM_FILES%\Notepad++\themes\Bespin.xml
- %PROGRAM_FILES%\Notepad++\themes\Zenburn.xml
- %PROGRAM_FILES%\Notepad++\themes\khaki.xml
- %PROGRAM_FILES%\Notepad++\updater\libcurl.dll
- %PROGRAM_FILES%\Notepad++\updater\gup.xml
- %PROGRAM_FILES%\Notepad++\updater\License.txt
- %PROGRAM_FILES%\Notepad++\themes\MossyLawn.xml
- %PROGRAM_FILES%\Notepad++\themes\Navajo.xml
- %PROGRAM_FILES%\Notepad++\updater\GUP.exe
- %PROGRAM_FILES%\Notepad++\themes\Choco.xml
- %PROGRAM_FILES%\Notepad++\themes\Hello Kitty.xml
- %PROGRAM_FILES%\Notepad++\themes\Mono Industrial.xml
- %PROGRAM_FILES%\Notepad++\plugins\mimeTools.dll
- %PROGRAM_FILES%\Notepad++\plugins\NppConverter.dll
- %PROGRAM_FILES%\Notepad++\themes\Black board.xml
- %PROGRAM_FILES%\Notepad++\themes\Monokai.xml
- %PROGRAM_FILES%\Notepad++\themes\Twilight.xml
- %PROGRAM_FILES%\Notepad++\themes\Vibrant Ink.xml
- %PROGRAM_FILES%\Notepad++\themes\Deep Black.xml
- %PROGRAM_FILES%\Notepad++\themes\Obsidian.xml
- %PROGRAM_FILES%\Notepad++\themes\Plastic Code Wrap.xml
- %PROGRAM_FILES%\Notepad++\themes\Ruby Blue.xml
- %PROGRAM_FILES%\Notepad++\user.manual\Images\readonly.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\saved.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\unsaved.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\hide_start.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\radiooff.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\radioon.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\autocomp.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\column_editor.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\contextmenu.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\docking.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\col_edit_after.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\col_edit_before.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\Screenshots\columnSel.png
- %PROGRAM_FILES%\Notepad++\user.manual\index.html
- %PROGRAM_FILES%\Notepad++\user.manual\user.html
- %PROGRAM_FILES%\Notepad++\user.manual\Images\checkboxoff.png
- %PROGRAM_FILES%\Notepad++\updater\gpl.txt
- %PROGRAM_FILES%\Notepad++\updater\readme.txt
- %PROGRAM_FILES%\Notepad++\user.manual\faq.html
- %PROGRAM_FILES%\Notepad++\user.manual\Images\checkboxon.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\fold_min.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\fold_plus.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\hide_end.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\closeTabButton.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\fold_bar.png
- %PROGRAM_FILES%\Notepad++\user.manual\Images\fold_line.png
- %PROGRAM_FILES%\Notepad++\plugins\APIs\cs.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\html.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\rc.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\c.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\cpp.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\java.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\sql.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\perl.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\javascript.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\python.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\php.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\css.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\vb.xml
- %TEMP%\nppLocalization\urdu.xml
- %TEMP%\nppLocalization\uyghur.xml
- %TEMP%\nppLocalization\uzbek.xml
- %TEMP%\nppLocalization\thai.xml
- %TEMP%\nppLocalization\turkish.xml
- %TEMP%\nppLocalization\ukrainian.xml
- %TEMP%\nppLocalization\uzbekCyrillic.xml
- %ALLUSERSPROFILE%\Start Menu\Programs\Notepad++\Notepad++.lnk
- %TEMP%\nsa3.tmp\System.dll
- %PROGRAM_FILES%\Notepad++\NppShell_06.dll
- %TEMP%\nppLocalization\vietnamese.xml
- %TEMP%\nppLocalization\welsh.xml
- %TEMP%\nsa3.tmp\UserInfo.dll
- %PROGRAM_FILES%\Notepad++\plugins\doc\NppFTP\license_NppFTP.txt
- %PROGRAM_FILES%\Notepad++\plugins\doc\NppFTP\license_libssh.txt
- %PROGRAM_FILES%\Notepad++\plugins\doc\NppFTP\license_OpenSSL.txt
- %PROGRAM_FILES%\Notepad++\plugins\Config\Hunspell\en_US.dic
- %PROGRAM_FILES%\Notepad++\plugins\Config\Hunspell\README_en_US.txt
- %PROGRAM_FILES%\Notepad++\plugins\NppFTP.dll
- %PROGRAM_FILES%\Notepad++\plugins\doc\NppFTP\license_TiXML.txt
- %PROGRAM_FILES%\Notepad++\plugins\NppExport.dll
- %PROGRAM_FILES%\Notepad++\plugins\PluginManager.dll
- %PROGRAM_FILES%\Notepad++\updater\gpup.exe
- %PROGRAM_FILES%\Notepad++\plugins\doc\NppFTP\license_ZLIB.txt
- %PROGRAM_FILES%\Notepad++\plugins\doc\NppFTP\license_UTCP.htm
- %PROGRAM_FILES%\Notepad++\plugins\doc\NppFTP\Readme.txt
- %PROGRAM_FILES%\Notepad++\plugins\APIs\tex.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\xml.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\nsis.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\actionscript.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\lisp.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\vhdl.xml
- %PROGRAM_FILES%\Notepad++\plugins\APIs\cmake.xml
- %PROGRAM_FILES%\Notepad++\plugins\Config\Hunspell\en_GB.dic
- %PROGRAM_FILES%\Notepad++\plugins\Config\Hunspell\README_en_GB.txt
- %PROGRAM_FILES%\Notepad++\plugins\Config\Hunspell\en_US.aff
- %PROGRAM_FILES%\Notepad++\plugins\DSpellCheck.dll
- %PROGRAM_FILES%\Notepad++\plugins\Config\Hunspell\dictionary.lst
- %PROGRAM_FILES%\Notepad++\plugins\Config\Hunspell\en_GB.aff
Sets the 'hidden' attribute to the following files:
- %TEMP%\Setup.exe
Deletes the following files:
- %TEMP%\nsa3.tmp\ns9.tmp
- %TEMP%\nsa3.tmp\ns8.tmp
- %TEMP%\nsa3.tmp\ns7.tmp
- %TEMP%\nsa3.tmp\UserInfo.dll
- %TEMP%\nsa3.tmp\System.dll
- %TEMP%\nsa3.tmp\nsExec.dll
- %TEMP%\nsa3.tmp\ns5.tmp
- %TEMP%\nsa3.tmp\ns4.tmp
- %TEMP%\aut1.tmp
- %TEMP%\nsa3.tmp\ns6.tmp
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
Miscellaneous:
Searches for the following windows:
- ClassName: 'Shell_TrayWnd' WindowName: ''
