Technical Information
- %HOMEPATH%\Start Menu\Programs\Startup\backup.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\backup.exe
- hidden files
- file extensions
- Registry Editor (RegEdit)
- 'C:\Far2\Plugins\ExtSearch\backup.exe' C:\Far2\Plugins\ExtSearch\
- '%ALLUSERSPROFILE%\Documents\backup.exe' %CommonProgramFiles%\Microsoft Shared\Triedit\
- '%WINDIR%\assembly\backup.exe' %WINDIR%\assembly\
- '%PROGRAM_FILES%\FireFox\chrome\browser\skin\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\skin\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\data.exe' /pid=816
- '%CommonProgramFiles%\Services\backup.exe' %CommonProgramFiles%\Services\
- '%PROGRAM_FILES%\Internet Explorer\MUI\backup.exe' %PROGRAM_FILES%\Internet Explorer\MUI\
- '%WINDIR%\AppPatch\backup.exe' %WINDIR%\AppPatch\
- '%PROGRAM_FILES%\FireFox\chrome\en-US\backup.exe' %PROGRAM_FILES%\FireFox\chrome\en-US\
- '%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\
- '%ALLUSERSPROFILE%\Documents\My Music\My Playlists\backup.exe' %PROGRAM_FILES%\FireFox\defaults\
- '%ALLUSERSPROFILE%\Start Menu\Programs\backup.exe' %PROGRAM_FILES%\Messenger\
- '%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks\
- '%CommonProgramFiles%\Microsoft Shared\VC\backup.exe' %CommonProgramFiles%\Microsoft Shared\VC\
- '%HOMEPATH%\Desktop\backup.exe' <Auxiliary element>
- '%HOMEPATH%\Cookies\backup.exe' %PROGRAM_FILES%\Internet Explorer\PLUGINS\
- '%PROGRAM_FILES%\FireFox\defaults\autoconfig\backup.exe' %PROGRAM_FILES%\FireFox\defaults\autoconfig\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\backup.exe' <Auxiliary element>
- '%PROGRAM_FILES%\Internet Explorer\MUI\0409\backup.exe' %PROGRAM_FILES%\Internet Explorer\MUI\0409\
- '%CommonProgramFiles%\SpeechEngines\backup.exe' %CommonProgramFiles%\SpeechEngines\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\backup.exe' /pid=256
- '%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\backup.exe' %PROGRAM_FILES%\FireFox\chrome\en-US\locale\
- 'C:\Far2\Plugins\EMenu\backup.exe' C:\Far2\Plugins\EMenu\
- '%PROGRAM_FILES%\FireFox\chrome\browser\content\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\content\
- '%CommonProgramFiles%\Microsoft Shared\Speech\1033\backup.exe' %CommonProgramFiles%\Microsoft Shared\Speech\1033\
- 'C:\Far2\Plugins\DrawLine\backup.exe' C:\Far2\Plugins\DrawLine\
- '%CommonProgramFiles%\MSSoap\Binaries\Resources\1033\backup.exe' %CommonProgramFiles%\MSSoap\Binaries\Resources\1033\
- 'C:\Far2\Plugins\Colorer\hrd\console\backup.exe' C:\Far2\Plugins\Colorer\hrd\console\
- '%WINDIR%\backup.exe' %WINDIR%\
- 'C:\Far2\Plugins\Colorer\hrd\backup.exe' C:\Far2\Plugins\Colorer\hrd\
- '%CommonProgramFiles%\Microsoft Shared\Speech\backup.exe' %CommonProgramFiles%\Microsoft Shared\Speech\
- '%CommonProgramFiles%\MSSoap\Binaries\Resources\backup.exe' %CommonProgramFiles%\MSSoap\Binaries\Resources\
- 'C:\Far2\Plugins\Compare\backup.exe' C:\Far2\Plugins\Compare\
- '%PROGRAM_FILES%\FireFox\chrome\browser\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\
- '%PROGRAM_FILES%\FireFox\components\System Restore.exe' %PROGRAM_FILES%\FireFox\components\
- '%PROGRAM_FILES%\FireFox\chrome\browser\content\branding\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\content\branding\
- '%PROGRAM_FILES%\Internet Explorer\Connection Wizard\backup.exe' %PROGRAM_FILES%\Internet Explorer\Connection Wizard\
- '%CommonProgramFiles%\Microsoft Shared\TextConv\backup.exe' %CommonProgramFiles%\Microsoft Shared\TextConv\
- '%CommonProgramFiles%\ODBC\Data Sources\backup.exe' %CommonProgramFiles%\ODBC\Data Sources\
- 'C:\Far2\Plugins\Colorer\hrd\console\contrib\backup.exe' C:\Far2\Plugins\Colorer\hrd\console\contrib\
- '%CommonProgramFiles%\Microsoft Shared\Stationery\backup.exe' %CommonProgramFiles%\Microsoft Shared\Stationery\
- '%CommonProgramFiles%\ODBC\backup.exe' %CommonProgramFiles%\ODBC\
- '%PROGRAM_FILES%\Internet Explorer\backup.exe' %PROGRAM_FILES%\Internet Explorer\
- '%WINDIR%\addins\backup.exe' %WINDIR%\addins\
- 'C:\Far2\Plugins\EditCase\backup.exe' C:\Far2\Plugins\EditCase\
- 'C:\Far2\Addons\Colors\Custom Highlighting\backup.exe' %PROGRAM_FILES%\FireFox\defaults\pref\
- 'C:\Far2\Plugins\arclite\backup.exe' /pid=2704
- '%CommonProgramFiles%\System\ado\System Restore.exe' %CommonProgramFiles%\System\ado\
- '%CommonProgramFiles%\Microsoft Shared\DW\1028\backup.exe' %PROGRAM_FILES%\FireFox\defaults\profile\chrome\
- '%WINDIR%\Connection Wizard\backup.exe' %WINDIR%\Connection Wizard\
- 'C:\Far2\Plugins\AutoWrap\backup.exe' %PROGRAM_FILES%\Microsoft.NET\
- 'C:\Far2\Plugins\Align\backup.exe' %PROGRAM_FILES%\microsoft frontpage\version3.0\bin\
- '%HOMEPATH%\Start Menu\Programs\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\
- 'C:\Far2\Plugins\7-Zip\backup.exe' %WINDIR%\assembly\GAC\Accessibility\
- '%HOMEPATH%\Start Menu\Programs\Startup\backup.exe' /pid=2720
- '%HOMEPATH%\backup.exe' %PROGRAM_FILES%\FireFox\extensions\
- '%HOMEPATH%\Start Menu\System Restore.exe' /pid=2496
- '%CommonProgramFiles%\Microsoft Shared\DW\1041\backup.exe' C:\Far2\Plugins\ExtSearch\sources\
- '%PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\
- '%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\backup.exe' %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\
- '%PROGRAM_FILES%\FireFox\chrome\pippki\content\backup.exe' %PROGRAM_FILES%\FireFox\chrome\pippki\content\
- 'C:\Far2\Plugins\FileCase\backup.exe' C:\Far2\Plugins\FileCase\
- '%CommonProgramFiles%\Microsoft Shared\DW\1036\System Restore.exe' %WINDIR%\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\
- '%CommonProgramFiles%\Microsoft Shared\DW\1033\backup.exe' /pid=1388
- '%CommonProgramFiles%\Microsoft Shared\DW\1031\backup.exe' %CommonProgramFiles%\Microsoft Shared\Web Folders\
- '%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\downloads\backup.exe' %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\downloads\
- 'C:\Far2\Plugins\Colorer\bin\backup.exe' %PROGRAM_FILES%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\
- '%CommonProgramFiles%\Microsoft Shared\DW\1040\backup.exe' %WINDIR%\assembly\GAC_32\
- '%CommonProgramFiles%\Microsoft Shared\DAO\backup.exe' %CommonProgramFiles%\System\
- '%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror\
- '%PROGRAM_FILES%\FireFox\chrome\en-US\locale\branding\backup.exe' %PROGRAM_FILES%\FireFox\chrome\en-US\locale\branding\
- '%HOMEPATH%\My Documents\My Music\backup.exe' /pid=1112
- 'C:\Far2\Addons\XLat\backup.exe' %PROGRAM_FILES%\Internet Explorer\SIGNUP\
- '%PROGRAM_FILES%\FireFox\dictionaries\backup.exe' %PROGRAM_FILES%\FireFox\dictionaries\
- '%WINDIR%\assembly\GAC\backup.exe' %WINDIR%\assembly\GAC\
- 'C:\Far2\Addons\Macros\backup.exe' /pid=2548
- 'C:\Far2\Addons\Colors\System Restore.exe' %CommonProgramFiles%\SpeechEngines\Microsoft\
- '%PROGRAM_FILES%\microsoft frontpage\backup.exe' %PROGRAM_FILES%\microsoft frontpage\
- '%HOMEPATH%\Favorites\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\
- 'C:\Far2\Plugins\ExtSearch\doc\backup.exe' C:\Far2\Plugins\ExtSearch\doc\
- 'C:\Far2\Plugins\ExtSearch\keys\backup.exe' C:\Far2\Plugins\ExtSearch\keys\
- 'C:\Far2\Documentation\rus\backup.exe' C:\Far2\Plugins\FarCmds\
- '%PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\backup.exe' %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\
- '%PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds\backup.exe' %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds\
- '%HOMEPATH%\Start Menu\Programs\Accessories\backup.exe' %PROGRAM_FILES%\microsoft frontpage\version3.0\
- '%WINDIR%\Config\backup.exe' %WINDIR%\Config\
- '%HOMEPATH%\My Documents\My Received Files\backup.exe' %PROGRAM_FILES%\FireFox\chrome\pippki\
- '%HOMEPATH%\My Documents\backup.exe' %CommonProgramFiles%\Microsoft Shared\VGX\
- '%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\backup.exe' %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\
- '<Auxiliary element>' %PROGRAM_FILES%\FireFox\defaults\profile\
- 'C:\Documents and Settings\backup.exe' <Auxiliary element>
- 'C:\Far2\Addons\Colors\Custom Highlighting\backup.exe' C:\Far2\Addons\Colors\Custom Highlighting\
- '%HOMEPATH%\Desktop\backup.exe' %HOMEPATH%\Desktop\
- '%HOMEPATH%\Favorites\backup.exe' %HOMEPATH%\Favorites\
- '%HOMEPATH%\Favorites\Links\backup.exe' %HOMEPATH%\Favorites\Links\
- 'C:\Far2\Addons\Colors\Default Highlighting\backup.exe' C:\Far2\Addons\Colors\Default Highlighting\
- '%HOMEPATH%\Cookies\backup.exe' %HOMEPATH%\Cookies\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Startup\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Startup\
- 'C:\Far2\backup.exe' C:\Far2\
- 'C:\Far2\Addons\backup.exe' C:\Far2\Addons\
- 'C:\Far2\Addons\Colors\System Restore.exe' C:\Far2\Addons\Colors\
- '%HOMEPATH%\backup.exe' %HOMEPATH%\
- '%HOMEPATH%\My Documents\My Pictures\backup.exe' %HOMEPATH%\My Documents\My Pictures\
- '%HOMEPATH%\My Documents\My Music\backup.exe' %HOMEPATH%\My Documents\My Music\
- 'C:\Far2\Addons\XLat\Russian\update.exe' C:\Far2\Addons\XLat\Russian\
- '%HOMEPATH%\My Documents\My Received Files\backup.exe' %HOMEPATH%\My Documents\My Received Files\
- 'C:\Far2\Documentation\backup.exe' C:\Far2\Documentation\
- 'C:\Far2\Addons\XLat\backup.exe' C:\Far2\Addons\XLat\
- '%HOMEPATH%\My Documents\backup.exe' %HOMEPATH%\My Documents\
- 'C:\Far2\Addons\Macros\backup.exe' C:\Far2\Addons\Macros\
- 'C:\Far2\Addons\SetUp\backup.exe' C:\Far2\Addons\SetUp\
- '%HOMEPATH%\My Documents\Downloads\backup.exe' %HOMEPATH%\My Documents\Downloads\
- 'C:\Far2\Addons\Shell\backup.exe' C:\Far2\Addons\Shell\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Games\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Games\
- '%ALLUSERSPROFILE%\Documents\My Music\Sample Music\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Music\
- '%ALLUSERSPROFILE%\Documents\My Music\My Playlists\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\My Playlists\
- '%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\
- '%ALLUSERSPROFILE%\Documents\My Pictures\backup.exe' %ALLUSERSPROFILE%\Documents\My Pictures\
- '%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\backup.exe' %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\
- '%ALLUSERSPROFILE%\Documents\My Music\update.exe' %ALLUSERSPROFILE%\Documents\My Music\
- 'C:\Documents and Settings\backup.exe' C:\Documents and Settings\
- 'C:\backup.exe' \
- '%ALLUSERSPROFILE%\backup.exe' %ALLUSERSPROFILE%\
- '%ALLUSERSPROFILE%\Documents\backup.exe' %ALLUSERSPROFILE%\Documents\
- '%ALLUSERSPROFILE%\Desktop\backup.exe' %ALLUSERSPROFILE%\Desktop\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\data.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\
- '%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\
- '%ALLUSERSPROFILE%\Documents\My Videos\backup.exe' %ALLUSERSPROFILE%\Documents\My Videos\
- '%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\backup.exe' %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\
- '%ALLUSERSPROFILE%\Favorites\backup.exe' %ALLUSERSPROFILE%\Favorites\
- '%ALLUSERSPROFILE%\Start Menu\Programs\backup.exe' %ALLUSERSPROFILE%\Start Menu\Programs\
- '%ALLUSERSPROFILE%\Start Menu\backup.exe' %ALLUSERSPROFILE%\Start Menu\
- '%HOMEPATH%\Start Menu\System Restore.exe' %HOMEPATH%\Start Menu\
- '%CommonProgramFiles%\Microsoft Shared\DW\1041\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\1041\
- 'C:\Far2\Plugins\Colorer\hrc\backup.exe' C:\Far2\Plugins\Colorer\hrc\
- '%PROGRAM_FILES%\ComPlus Applications\backup.exe' %PROGRAM_FILES%\ComPlus Applications\
- '%CommonProgramFiles%\Microsoft Shared\DW\1042\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\1042\
- 'C:\Far2\Plugins\Colorer\hrc\auto\backup.exe' C:\Far2\Plugins\Colorer\hrc\auto\
- '%CommonProgramFiles%\Microsoft Shared\DW\1040\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\1040\
- '%CommonProgramFiles%\Microsoft Shared\DW\1033\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\1033\
- 'C:\Far2\Plugins\Brackets\backup.exe' C:\Far2\Plugins\Brackets\
- 'C:\Far2\Plugins\Colorer\backup.exe' C:\Far2\Plugins\Colorer\
- 'C:\Far2\Plugins\Colorer\bin\backup.exe' C:\Far2\Plugins\Colorer\bin\
- '%CommonProgramFiles%\Microsoft Shared\DW\1036\System Restore.exe' %CommonProgramFiles%\Microsoft Shared\DW\1036\
- '%CommonProgramFiles%\MSSoap\Binaries\backup.exe' %CommonProgramFiles%\MSSoap\Binaries\
- 'C:\Far2\PluginSDK\Headers.c\backup.exe' C:\Far2\PluginSDK\Headers.c\
- '%PROGRAM_FILES%\FireFox\chrome\backup.exe' %PROGRAM_FILES%\FireFox\chrome\
- '%CommonProgramFiles%\Microsoft Shared\DW\3082\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\3082\
- 'C:\Far2\PluginSDK\Headers.pas\backup.exe' C:\Far2\PluginSDK\Headers.pas\
- 'C:\Far2\Plugins\Colorer\hrc\auto\types\backup.exe' C:\Far2\Plugins\Colorer\hrc\auto\types\
- 'C:\Far2\PluginSDK\backup.exe' C:\Far2\PluginSDK\
- '%CommonProgramFiles%\MSSoap\backup.exe' %CommonProgramFiles%\MSSoap\
- '%PROGRAM_FILES%\FireFox\backup.exe' %PROGRAM_FILES%\FireFox\
- '%CommonProgramFiles%\Microsoft Shared\MSInfo\backup.exe' %CommonProgramFiles%\Microsoft Shared\MSInfo\
- '%CommonProgramFiles%\Microsoft Shared\DW\2052\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\2052\
- '%CommonProgramFiles%\Microsoft Shared\DW\1031\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\1031\
- '%CommonProgramFiles%\backup.exe' %CommonProgramFiles%\
- '%HOMEPATH%\Start Menu\Programs\Accessories\backup.exe' %HOMEPATH%\Start Menu\Programs\Accessories\
- 'C:\Far2\FExcept\backup.exe' C:\Far2\FExcept\
- '%CommonProgramFiles%\Microsoft Shared\backup.exe' %CommonProgramFiles%\Microsoft Shared\
- '%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\update.exe' %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\
- 'C:\Far2\Encyclopedia\backup.exe' C:\Far2\Encyclopedia\
- '<Auxiliary element>' <Auxiliary element>
- 'C:\Far2\Documentation\eng\backup.exe' C:\Far2\Documentation\eng\
- '%HOMEPATH%\Start Menu\Programs\backup.exe' %HOMEPATH%\Start Menu\Programs\
- '%PROGRAM_FILES%\backup.exe' %PROGRAM_FILES%\
- 'C:\Far2\Documentation\rus\backup.exe' C:\Far2\Documentation\rus\
- '%CommonProgramFiles%\Microsoft Shared\DW\1025\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\1025\
- 'C:\Far2\Plugins\Align\backup.exe' C:\Far2\Plugins\Align\
- 'C:\Far2\Plugins\arclite\backup.exe' C:\Far2\Plugins\arclite\
- 'C:\Far2\Plugins\AutoWrap\backup.exe' C:\Far2\Plugins\AutoWrap\
- '%CommonProgramFiles%\Microsoft Shared\DW\1028\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\1028\
- '%CommonProgramFiles%\Microsoft Shared\DW\backup.exe' %CommonProgramFiles%\Microsoft Shared\DW\
- '%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\backup.exe' %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\
- 'C:\Far2\Plugins\data.exe' C:\Far2\Plugins\
- '%CommonProgramFiles%\Microsoft Shared\DAO\backup.exe' %CommonProgramFiles%\Microsoft Shared\DAO\
- '%HOMEPATH%\Start Menu\Programs\Startup\backup.exe' %HOMEPATH%\Start Menu\Programs\Startup\
- 'C:\Far2\Plugins\7-Zip\backup.exe' C:\Far2\Plugins\7-Zip\
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer] 'NoFolderOptions' = '00000001'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoFolderOptions' = '00000001'
- %PROGRAM_FILES%\FireFox\chrome\en-US\backup.exe
- %WINDIR%\AppPatch\backup.exe
- %PROGRAM_FILES%\Internet Explorer\MUI\backup.exe
- %PROGRAM_FILES%\FireFox\defaults\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\backup.exe
- C:\Far2\Plugins\EMenu\backup.exe
- %CommonProgramFiles%\ODBC\Data Sources\backup.exe
- C:\Far2\Plugins\Colorer\hrd\console\contrib\backup.exe
- %PROGRAM_FILES%\FireFox\components\System Restore.exe
- %CommonProgramFiles%\Microsoft Shared\TextConv\backup.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\System Restore.exe
- %PROGRAM_FILES%\FireFox\defaults\autoconfig\backup.exe
- %CommonProgramFiles%\SpeechEngines\backup.exe
- %PROGRAM_FILES%\Messenger\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\backup.exe
- %CommonProgramFiles%\Microsoft Shared\Triedit\backup.exe
- %CommonProgramFiles%\Services\backup.exe
- %WINDIR%\assembly\backup.exe
- %PROGRAM_FILES%\Internet Explorer\MUI\0409\backup.exe
- C:\Far2\Plugins\ExtSearch\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\backup.exe
- C:\Far2\PluginSDK\Headers.pas\backup.exe
- C:\Far2\Plugins\Colorer\hrd\backup.exe
- %CommonProgramFiles%\Microsoft Shared\Speech\1033\backup.exe
- C:\Far2\Plugins\Compare\backup.exe
- %CommonProgramFiles%\MSSoap\Binaries\Resources\backup.exe
- %CommonProgramFiles%\MSSoap\Binaries\backup.exe
- C:\Far2\PluginSDK\Headers.c\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\backup.exe
- %CommonProgramFiles%\Microsoft Shared\Speech\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\3082\backup.exe
- %CommonProgramFiles%\Microsoft Shared\Stationery\backup.exe
- %WINDIR%\addins\backup.exe
- %PROGRAM_FILES%\Internet Explorer\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\content\branding\backup.exe
- C:\Far2\Plugins\EditCase\backup.exe
- %CommonProgramFiles%\ODBC\backup.exe
- %WINDIR%\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\content\backup.exe
- C:\Far2\Plugins\Colorer\hrd\console\backup.exe
- C:\Far2\Plugins\DrawLine\backup.exe
- %CommonProgramFiles%\MSSoap\Binaries\Resources\1033\backup.exe
- %CommonProgramFiles%\Microsoft Shared\VC\backup.exe
- %PROGRAM_FILES%\microsoft frontpage\version3.0\bin\backup.exe
- %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\pippki\content\backup.exe
- %PROGRAM_FILES%\FireFox\defaults\profile\chrome\backup.exe
- %CommonProgramFiles%\System\ado\System Restore.exe
- %WINDIR%\assembly\GAC_32\backup.exe
- %CommonProgramFiles%\System\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds\backup.exe
- %PROGRAM_FILES%\Microsoft.NET\backup.exe
- %CommonProgramFiles%\Microsoft Shared\Web Folders\backup.exe
- %PROGRAM_FILES%\FireFox\extensions\System Restore.exe
- %PROGRAM_FILES%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\backup.exe
- %WINDIR%\assembly\GAC\Accessibility\1.0.5000.0__b03f5f7f11d50a3a\backup.exe
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\backup.exe
- %CommonProgramFiles%\System\msadc\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\toolkit\backup.exe
- C:\Far2\Plugins\ExtSearch\sources\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\downloads\backup.exe
- %WINDIR%\Connection Wizard\backup.exe
- C:\Far2\Plugins\FileCase\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\history\backup.exe
- %PROGRAM_FILES%\microsoft frontpage\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\branding\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror\backup.exe
- %PROGRAM_FILES%\FireFox\dictionaries\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\pippki\backup.exe
- %PROGRAM_FILES%\FireFox\defaults\pref\backup.exe
- %PROGRAM_FILES%\Internet Explorer\PLUGINS\backup.exe
- C:\Far2\Plugins\ExtSearch\doc\backup.exe
- %WINDIR%\assembly\GAC\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\backup.exe
- %CommonProgramFiles%\SpeechEngines\Microsoft\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\backup.exe
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\backup.exe
- %WINDIR%\Config\backup.exe
- C:\Far2\Plugins\FarCmds\backup.exe
- %WINDIR%\assembly\GAC\Accessibility\backup.exe
- C:\Far2\Plugins\ExtSearch\keys\backup.exe
- %CommonProgramFiles%\Microsoft Shared\VGX\backup.exe
- %PROGRAM_FILES%\Internet Explorer\SIGNUP\backup.exe
- %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\backup.exe
- %PROGRAM_FILES%\FireFox\defaults\profile\backup.exe
- %PROGRAM_FILES%\microsoft frontpage\version3.0\backup.exe
- C:\Far2\Addons\backup.exe
- C:\Far2\backup.exe
- %HOMEPATH%\backup.exe
- %HOMEPATH%\Cookies\backup.exe
- C:\Far2\Addons\Colors\System Restore.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\backup.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\backup.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\backup.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\backup.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\backup.exe
- <Current directory>\<Virus name>.zip
- C:\Far2\Addons\SetUp\backup.exe
- %HOMEPATH%\My Documents\backup.exe
- C:\Far2\Addons\Shell\backup.exe
- C:\Far2\Addons\XLat\backup.exe
- %HOMEPATH%\My Documents\Downloads\backup.exe
- C:\Far2\Addons\Macros\backup.exe
- %HOMEPATH%\Desktop\backup.exe
- C:\Far2\Addons\Colors\Custom Highlighting\backup.exe
- %HOMEPATH%\Favorites\backup.exe
- %HOMEPATH%\Favorites\Links\backup.exe
- C:\Far2\Addons\Colors\Default Highlighting\backup.exe
- %ALLUSERSPROFILE%\Desktop\backup.exe
- %ALLUSERSPROFILE%\backup.exe
- %ALLUSERSPROFILE%\Documents\backup.exe
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\backup.exe
- %ALLUSERSPROFILE%\Documents\My Music\update.exe
- C:\Documents and Settings\backup.exe
- <Current directory>\temp.zip
- <Current directory>\backup.exe
- <Current directory>\W2a02844
- C:\backup.exe
- <Current directory>\<Virus name>.dat
- %ALLUSERSPROFILE%\Start Menu\backup.exe
- %ALLUSERSPROFILE%\Favorites\backup.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\backup.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\data.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\backup.exe
- %ALLUSERSPROFILE%\Documents\My Videos\backup.exe
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\backup.exe
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\backup.exe
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\backup.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\backup.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\backup.exe
- %HOMEPATH%\My Documents\My Music\backup.exe
- C:\Far2\Plugins\Colorer\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\1033\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\1036\System Restore.exe
- %CommonProgramFiles%\Microsoft Shared\DW\1040\backup.exe
- C:\Far2\Plugins\Colorer\bin\backup.exe
- C:\Far2\Plugins\Brackets\backup.exe
- C:\Far2\Plugins\arclite\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\1025\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\1028\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\1031\backup.exe
- C:\Far2\Plugins\AutoWrap\backup.exe
- %PROGRAM_FILES%\FireFox\backup.exe
- C:\Far2\PluginSDK\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\2052\backup.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\backup.exe
- C:\Far2\Plugins\Colorer\hrc\auto\types\backup.exe
- %CommonProgramFiles%\MSSoap\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\1041\backup.exe
- C:\Far2\Plugins\Colorer\hrc\backup.exe
- %PROGRAM_FILES%\ComPlus Applications\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\1042\backup.exe
- C:\Far2\Plugins\Colorer\hrc\auto\backup.exe
- %HOMEPATH%\Start Menu\Programs\backup.exe
- <Auxiliary element>
- C:\Far2\Documentation\rus\backup.exe
- %HOMEPATH%\Start Menu\Programs\Accessories\backup.exe
- %PROGRAM_FILES%\backup.exe
- %HOMEPATH%\Start Menu\System Restore.exe
- C:\Far2\Addons\XLat\Russian\update.exe
- %HOMEPATH%\My Documents\My Pictures\backup.exe
- %HOMEPATH%\My Documents\My Received Files\backup.exe
- C:\Far2\Documentation\eng\backup.exe
- C:\Far2\Documentation\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DAO\backup.exe
- %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\backup.exe
- C:\Far2\Plugins\7-Zip\backup.exe
- C:\Far2\Plugins\Align\backup.exe
- %CommonProgramFiles%\Microsoft Shared\DW\backup.exe
- C:\Far2\Plugins\data.exe
- %CommonProgramFiles%\backup.exe
- C:\Far2\Encyclopedia\backup.exe
- C:\Far2\FExcept\backup.exe
- %CommonProgramFiles%\Microsoft Shared\backup.exe
- %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\update.exe
- <Current directory>\<Virus name>.zip
- <Current directory>\temp.zip
- <Current directory>\<Virus name>.dat
- <Current directory>\temp.zip
- from <Current directory>\W2a02844 to <Current directory>\temp.zip
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'ExploreWClass' WindowName: '(null)'
- ClassName: 'CabinetWClass' WindowName: '(null)'