539b0b5d...8505 | VTI
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Riskware, Ransomware

539b0b5d54757e8a2b754ecdc2939eb7cf9db0ed1728e0eca407500222668505 (SHA256)

fcr.exe

Windows Exe (x86-32)

Created at 2018-09-23 19:12:00

Notifications (2/3)

Some extracted files may be missing in the report since the maximum number of extracted files was reached during the analysis. You can increase the limit in the configuration settings.

The overall sleep time of all monitored processes was truncated from "1 minute" to "20 seconds" to reveal dormant functionality.

The operating system was rebooted during the analysis.

Severity Category Operation Classification
5/5
File System Encrypts content of user files Ransomware
  • Encrypts the content of multiple user files. This is an indicator for ransomware.
3/5
OS Modifies system security configuration -
1/5
Persistence Installs system startup script or application -
  • Adds ""c:\How To Restore Files.txt"" to Windows startup via registry.
1/5
File System Modifies operating system directory -
1/5
Hide Tracks Writes an unually large amount of data to the registry -
  • Hides 1280 byte in "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\DateTime\\rsa".
1/5
Process Creates process with hidden window -
  • The process "C:\Windows\system32\cmd.exe" starts with hidden window.
1/5
Masquerade Changes folder appearance Riskware
  • Folder "c:\$recycle.bin\s-1-5-21-3388679973-3930757225-3770151564-1000" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\music" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\videos" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\downloads" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\favorites" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\links" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\saved games" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\searches" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\desktop" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\favorites\links" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\pictures" has a changed appearance.
  • Folder "c:\program files (x86)\common files\microsoft shared\stationery" has a changed appearance.
  • Folder "c:\program files\common files\microsoft shared\stationery" has a changed appearance.
  • Folder "c:\users\public\recorded tv\sample media" has a changed appearance.
  • Folder "c:\users\public\videos\sample videos" has a changed appearance.
  • Folder "c:\users\public\music\sample music" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\documents" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch" has a changed appearance.
  • Folder "c:\users\default\documents" has a changed appearance.
  • Folder "c:\users\default\downloads" has a changed appearance.
  • Folder "c:\users\default\favorites" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\contacts" has a changed appearance.
  • Folder "c:\users\default\music" has a changed appearance.
  • Folder "c:\users\default\contacts" has a changed appearance.
1/5
File System Modifies application directory -
  • Modifies "c:\program files (x86)\common files\how to restore files.txt".
  • Modifies "c:\program files (x86)\desktop.ini id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\constitute_appropriate_sorry.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\regulationspublishers.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft sql server compact edition\how to restore files.txt".
  • Modifies "c:\program files\uninstall information\how to restore files.txt".
  • Modifies "c:\program files\windows media player\how to restore files.txt".
  • Modifies "c:\program files\windows media player\sentence-arrive-unnecessary.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\windows portable devices\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\settings.ini id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\internet explorer\how to restore files.txt".
  • Modifies "c:\program files (x86)\msbuild\how to restore files.txt".
  • Modifies "c:\program files\windows defender\how to restore files.txt".
  • Modifies "c:\program files\windows mail\en-us\how to restore files.txt".
  • Modifies "c:\program files\windows nt\accessories\how to restore files.txt".
  • Modifies "c:\program files\windows nt\tabletextservice\how to restore files.txt".
  • Modifies "c:\program files\windows photo viewer\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\en-us\how to restore files.txt".
  • Modifies "c:\program files\common files\palmer still equations.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\benioku.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft office\office14\how to restore files.txt".
  • Modifies "c:\program files\dvd maker\en-us\how to restore files.txt".
  • Modifies "c:\program files\uninstall information\vampire criterion.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft synchronization services\how to restore files.txt".
  • Modifies "c:\program files\microsoft synchronization services\hourunexpected.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft synchronization services\sword.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\designer\how to restore files.txt".
  • Modifies "c:\program files (x86)\java\jewel.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\internet explorer\en-us\how to restore files.txt".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\how to restore files.txt".
  • Modifies "c:\program files\windows journal\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft.net\how to restore files.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\how to restore files.txt".
  • Modifies "c:\program files (x86)\uninstall information\traditions.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\internet explorer\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows media player\how to restore files.txt".
  • Modifies "c:\program files\windows mail\sims.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows photo viewer\how to restore files.txt".
  • Modifies "c:\program files (x86)\java\jre7\how to restore files.txt".
  • Modifies "c:\program files\reference assemblies\microsoft\framework\v3.0\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows media player\media renderer\how to restore files.txt".
  • Modifies "c:\program files\windows journal\en-us\how to restore files.txt".
  • Modifies "c:\program files\windows nt\accessories\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows defender\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft.net\browser accredited mil.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\windows sidebar\gadgets\slideshow.gadget\how to restore files.txt".
  • Modifies "c:\program files (x86)\msbuild\microsoft.office.infopath.targets id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\msbuild\moore-encouraging-percent.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows portable devices\how to restore files.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\berime.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\windows sidebar\gadgets\cpu.gadget\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows defender\en-us\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\weather.gadget\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\equation\how to restore files.txt".
  • Modifies "c:\program files\common files\services\how to restore files.txt".
  • Modifies "c:\program files\microsoft synchronization services\ado.net\v1.0\how to restore files.txt".
  • Modifies "c:\program files\microsoft synchronization services\ado.net\v1.0\microsoft.synchronization.data.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows photo viewer\motorola spank thomas.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\windows sidebar\gadgets\slideshow.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\slideshow.gadget\images\how to restore files.txt".
  • Modifies "c:\program files\microsoft synchronization services\ado.net\v1.0\microsoft.synchronization.data.server.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft office\office14\authzax.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft office\office14\bcslaunch.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft synchronization services\ado.net\v1.0\microsoft.synchronization.data.sqlserverce.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\windows defender\picking separated lib.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows sidebar\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\java\java update\how to restore files.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\accessiblemarshal.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\reference assemblies\microsoft\framework\v3.0\winfxlist.xml id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\arm\1.0\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.cnt id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\windows sidebar\gadgets\calendar.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vc\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vgx\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\stationery\1033\how to restore files.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\irakhau.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.5\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\privateassemblies\how to restore files.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.0\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\privateassemblies\microsoft.visualstudio.tools.applications.project.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\msclientdatamgr\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\proof\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\help\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\en-us\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\office14\1033\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\visio shared\fonts\how to restore files.txt".
  • Modifies "c:\program files\windows media player\network sharing\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\stationery\how to restore files.txt".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.5\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\how to restore files.txt".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.0\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\hx.hxc id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\hx.hxt id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\windows sidebar\gadgets\slideshow.gadget\images\on_desktop\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\hxruntime.hxs id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\keywords.hxk id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\namedurls.hxk id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\office14\3082\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\office14\3082\mso.acl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\help\hxds.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\portal\1033\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\actionspane3.xsd id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vba\vba6\how to restore files.txt".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\how to restore files.txt".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\how to restore files.txt".
  • Modifies "c:\program files\microsoft sync framework\v1.0\documentation\1033\license agreements\how to restore files.txt".
  • Modifies "c:\program files (x86)\internet explorer\signup\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\equation\1033\how to restore files.txt".
  • Modifies "c:\program files\msbuild\microsoft\windows workflow foundation\v3.0\how to restore files.txt".
  • Modifies "c:\program files\windows media player\skins\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\office14\1033\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\euro\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\filters\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\vgx\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft.net\redistlist\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft.net\primary interop assemblies\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\grphflt\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\msinfo\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows media player\skins\how to restore files.txt".
  • Modifies "c:\program files\reference assemblies\microsoft\framework\v3.0\redistlist\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\rssfeeds.gadget\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\mediacenter.gadget\css\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\stationery\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\document themes 14\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\slideshow.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows mail\en-us\how to restore files.txt".
  • Modifies "c:\program files\common files\system\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\calendar.gadget\en-us\css\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\msenv\publicassemblies\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\calendar.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\esl\how to restore files.txt".
  • Modifies "c:\program files\microsoft sql server compact edition\v3.5\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\smart tag\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\web folders\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\weather.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\bin\how to restore files.txt".
  • Modifies "c:\program files (x86)\java\jre7\copyright id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.0\winfxlist.xml id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\portal\1033\portalconnect.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\58.0.3029.110.manifest id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\as80.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\internet explorer\signup\install.ins id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\system\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\media\cagcat10\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\mold.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows sidebar\settings.ini id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\euro\msoeuro.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\smart tag\fbiblio.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\templates\1033\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\mediacenter.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\stationery\desktop.ini id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\how to restore files.txt".
  • Modifies "c:\program files\internet explorer\signup\install.ins id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows nt\tabletextservice\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows nt\tabletextservice\en-us\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\translat\frar\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\translat\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\translat\esen\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\translat\enes\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\translat\fren\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\translat\arfr\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\calendar.gadget\how to restore files.txt".
  • Modifies "c:\program files\common files\designer\msaddndr.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\stationery\1033\currency.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft.net\redistlist\assemblylist_4_client.xml id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\reference assemblies\microsoft\framework\v3.0\redistlist\frameworklist.xml id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\office14\1033\accddsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\equation\1033\eeintl.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\grphflt\cgmimp32.cfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\msenv\publicassemblies\extensibility.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\templates\1033\adjacencyletter.dotx id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\windows sidebar\gadgets\calendar.gadget\images\how to restore files.txt".
  • Modifies "c:\program files\windows journal\templates\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\weather.gadget\en-us\css\how to restore files.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.5\subsetlist\how to restore files.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.0\redistlist\how to restore files.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.0\subsetlist\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\translat\enfr\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\1033\how to restore files.txt".
  • Modifies "c:\program files\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\system\ado\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\vba\vba7\vbe7.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\templates\1033\access\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\vba\vba7\1033\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\clock.gadget\images\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft office\office14\dgrmlnch.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vba\vba6\vbe6ext.olb id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1036\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1046\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\web server extensions\14\bin\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\mediacenter.gadget\js\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\stationery\desktop.ini id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\system\msmapi\1033\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.adapter.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\reference assemblies\microsoft\framework\v3.5\redistlist\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\stationery\1033\currency.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\stationery\1033\dadshirt.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\stationery\1033\dadshirt.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\web server extensions\14\bin\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows nt\accessories\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows nt\accessories\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1033\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1028\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\weather.gadget\images\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\3082\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1031\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1040\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1041\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1042\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1049\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\calendar.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\images\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\cpu.gadget\images\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\rssfeeds.gadget\images\how to restore files.txt".
  • Modifies "c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft.net\primary interop assemblies\adodb.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\smart tag\1033\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ko_kr\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ko_kr\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.exe.manifest id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\as90.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\office14\1033\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft.net\redistlist\assemblylist_4_extended.xml id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\java\jre7\license id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\java\jre7\readme.txt id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1028\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\mozilla firefox\application.ini id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vc\amd64\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\cpu.gadget\en-us\css\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\calendar.gadget\en-us\css\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\calendar.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\images\in_sidebar\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\images\on_desktop\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\appinfodocument\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\system\ado\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\web folders\1033\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\1033\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\media\office14\how to restore files.txt".
  • Modifies "c:\program files\common files\system\ole db\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\clock.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\picturepuzzle.gadget\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\rssfeeds.gadget\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\da-dk\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\sv-se\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\ink\1.0\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\media\cagcat10\1033\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\web server extensions\14\bin\1033\how to restore files.txt".
  • Modifies "c:\program files\common files\system\ado\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\3082\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\bin\1033\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ca_es\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\pl_pl\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\picturepuzzle.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\rssfeeds.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1033\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\2052\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1040\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1031\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\as80.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1036\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1042\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1049\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1041\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1046\hxdsui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\system\msmapi\1033\msmapi32.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\smart tag\1033\mcabout.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\appconfigurationinternal.zip id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\office14\1033\aceintl.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\informix.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\stationery\1033\judgesch.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\stationery\1033\judgesch.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\microsoft.visualstudio.tools.applications.blueprints.tlb id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\filters\msgfilt.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\java\jre7\release id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\vstoee100.tlb id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\sonora\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\ink\1.7\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ca_es\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\ink\en-us\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\sky\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\pixel\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\refined\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\journal\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\microsoft.visualstudio.tools.applications.contract.v10.0.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\quad\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\iris\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\profile\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\level\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\ice\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\papyrus\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\layers\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\indust\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\echo\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\edge\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\eclipse\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\compass\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\cascade\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\canyon\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\breeze\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\blends\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\axis\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\arctic\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\network\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\satin\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\radial\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\ripple\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\slate\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\dl_res.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\source engine\ose.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox.zip id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.0\redistlist\frameworklist.xml id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00004_.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\vstoinstaller.config id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\j0143743.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\pl_pl\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\nl_nl\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\nb_no\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ja_jp\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\leesmij.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\pipelinesegments.store id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.addinmanager.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\mozilla maintenance service\uninstall.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\appinfodocument\addins.store id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\mozilla firefox\breakpadinjector.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\officesoftwareprotectionplatform\osppc.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\esl\aiodlite.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\visio shared\fonts\bigfont.shx id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\equation\eqnedt32.hlp id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\document themes 14\angles.thmx id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\as90.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\system\ole db\how to restore files.txt".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\msjet.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\ink\th-th\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\tr-tr\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\uk-ua\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\zh-cn\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\zh-tw\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\picturepuzzle.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\spring\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\studio\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\cpu.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\j0143744.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\pt_br\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ro_ro\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ru_ru\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\da_dk\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\it_it\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\zh_tw\how to restore files.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\leggimi.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\office14\autoshap\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\media\office14\lines\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\picturepuzzle.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\rssfeeds.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files\microsoft office\media\office14\office10.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\cs_cz\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\de_de\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\en_us\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\es_es\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\hu_hu\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\hr_hr\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\fr_fr\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\fi_fi\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\eu_es\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinsideadapters\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\en-us\css\how to restore files.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\rmnsque\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\uk_ua\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\zh_cn\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\tr_tr\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sl_si\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sv_se\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sk_sk\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\cs-cz\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\ar-sa\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\ink\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\cpu.gadget\images\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\currency.gadget\images\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\rssfeeds.gadget\images\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\picturepuzzle.gadget\en-us\css\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\picturepuzzle.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\ricepapr\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\currency.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\evrgreen\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\expeditn\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\strtedge\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\bluecalm\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\aftrnoon\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\concrete\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\capsules\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\weather.gadget\images\144dpi\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\deepblue\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\sumipntg\how to restore files.txt".
  • Modifies "c:\program files\windows sidebar\gadgets\weather.gadget\images\120dpi\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\boldstri\how to restore files.txt".
  • Modifies "c:\program files\dvd maker\shared\dvdstyles\babygirl\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\images\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\bin\1033\vstaclientpkgui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\cagcat10\cagcat10.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\themes.inf id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00011_.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\1033\vstoinstallerui.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\equation\mtextra.ttf id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\zh_tw\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\it_it\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\da_dk\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ru_ru\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ro_ro\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\pt_br\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\cs_cz\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\de_de\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\en_us\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\es_es\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\hu_hu\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\hr_hr\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\fr_fr\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\fi_fi\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\eu_es\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\java\jre7\lib\accessibility.properties id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\uk_ua\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\zh_cn\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\tr_tr\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sl_si\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sv_se\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sk_sk\reader_10.0.helpcfg id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\assemblyinfointernal.zip id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\smart tag\1033\stintl.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\informix.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\office14\1033\aceodbci.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\ripple\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\quad\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\satin\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\spring\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\strtedge\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfig.zip id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\microsoft.visualstudio.tools.applications.contract.v9.0.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\leiame.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\microsoft.visualstudio.tools.applications.designtime.tlb id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd10253_.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\office14\autoshap\autoshap.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\office14\lines\bd10219_.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\web folders\msosv.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\msjet.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\stationery\1033\jungle.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\stationery\1033\jungle.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\sonora\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\aftrnoon\aftrnoon.elm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\mozilla maintenance service\updater.ini id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\j0143745.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\studio\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\echo\echo.elm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\echo\echo.inf id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\refined\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\radial\preview.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\class.zip id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd10254_.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd10255_.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\stationery\1033\notebook.htm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\j0143746.gif id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\ice\ice.elm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\ice\ice.inf id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\microsoft.visualstudio.tools.office.contract.v10.0.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfiginternal.zip id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\microsoft office\media\office14\autoshap\bd18180_.wmf id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\mozilla firefox\crashreporter.exe id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files\common files\microsoft shared\themes14\radial\radial.elm id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\appinfodocument\microsoft.visualstudio.tools.office.appinfodocument\microsoft.visualstudio.tools.office.appinfodocument.v9.0.dll id-bry0hiifvldg0s8v.bdkr".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\rssfeeds.gadget\en-us\how to restore files.txt".
  • Modifies "c:\program files (x86)\common files\system\ole db\en-us\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\vsto\10.0\how to restore files.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\cpu.gadget\en-us\js\how to restore files.txt".
  • Modifies "c:\program files\common files\microsoft shared\themes14\quad\quad.elm id-bry0hiifvldg0s8v.bdkr".
1/5
File System Creates an unusually large number of files -
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image