730046dd...0d9b | VMRay Analyzer Report
Try VMRay Analyzer
VTI SCORE: 100/100
Dynamic Analysis Report
Classification: Ransomware, Spyware, Trojan

VMRay Threat Indicators (23 rules, 2175 matches)

Severity Category Operation Classification
5/5
Local AV Malicious content was detected by heuristic scan -
5/5
Device Writes to Master Boot Record (MBR) -
5/5
File System Known malicious file Trojan
  • File "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SpyHunter5.exe" is a known malicious file.
4/5
File System Renames user files Ransomware
  • Renames multiple user files. This is an indicator for an encryption attempt.
4/5
File System Modifies content of user files Ransomware
  • Modifies the content of multiple user files. This is an indicator for an encryption attempt.
4/5
Information Stealing Exhibits Spyware behavior Spyware
  • Tries to read sensitive data of multiple applications.
3/5
File System Possibly drops ransom note files Ransomware
  • Possibly drops ransom note files (creates 155 instances of the file "$HOWDECRYPT$.txt" in different locations).
2/5
Anti Analysis Resolves APIs dynamically to possibly evade static detection -
2/5
Information Stealing Reads sensitive browser data -
  • Trying to read sensitive data of web browser "Google Chrome" by file.
  • Trying to read sensitive data of web browser "Internet Explorer / Edge" by file.
  • Trying to read sensitive data of web browser "Mozilla Firefox" by file.
2/5
Information Stealing Reads sensitive mail data -
  • Trying to read sensitive data of mail application "Windows Mail" by file.
2/5
Injection Writes into the memory of a process running from a created or modified executable -
  • "c:\users\5p5nrgjn0js halpmcxz\desktop\spyhunter5.exe" modifies memory of "c:\users\5p5nrgjn0js halpmcxz\desktop\spyhunter5.exe".
2/5
Injection Modifies control flow of a process running from a created or modified executable -
  • "c:\users\5p5nrgjn0js halpmcxz\desktop\spyhunter5.exe" alters context of "c:\users\5p5nrgjn0js halpmcxz\desktop\spyhunter5.exe".
1/5
Process Creates system object -
1/5
Anti Analysis Tries to detect analyzer sandbox -
  • Possibly trying to detect analyzer sandbox by checking for patched sleep.
1/5
Process Creates process with hidden window -
  • The process "C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SpyHunter5.exe" starts with hidden window.
  • The process "RUNDLL32" starts with hidden window.
  • The process "C:\Windows\sysnative\vssadmin.exe" starts with hidden window.
1/5
Process Creates a page with write and execute permissions -
  • Allocates a page in a foreign process with "PAGE_EXECUTE_READWRITE" permissions, often used to dynamically unpack code.
1/5
File System Modifies application directory -
  • Modifies "c:\program files\dvd maker\shared\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft analysis services\as oledb\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\resources\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\msolui100.dll".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\msolap100.dll".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\msmdlocal.dll".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\msmgdsrv.dll".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sybase.xsl".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql90.xsl".
  • Modifies "c:\program files\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00157_.gif".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\an04267_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00438_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\ag00154_.gif".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\bs00224_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\dd01178_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\fd02115_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\hh00084_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\hh00685_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0099149.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\in00343_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0099183.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0099182.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0099180.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0106208.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0107446.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0107426.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0107480.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0099181.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0107488.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0107484.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0107490.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0145168.jpg".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0145212.jpg".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0144773.jpg".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0146142.jpg".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0145272.jpg".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0152716.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0158477.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0185670.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0171847.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0187895.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0171685.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0187893.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0183574.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0187881.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0188587.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0188667.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\pe03453_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\j0187883.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\wb01301_.gif".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\so00610_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\so00942_.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\wnter_01.mid".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\wing1.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\wing2.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\whirl2.wmf".
  • Modifies "c:\program files\microsoft office\clipart\pub60cor\whirl1.wmf".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02218_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02214_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02187_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02201_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02134_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02198_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02116_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02097_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02082_.gif".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02106_.gif".
  • Modifies "c:\program files\microsoft office\document themes 14\thatch.thmx".
  • Modifies "c:\program files\microsoft office\clipart\publisher\backgrounds\wb02077_.gif".
  • Modifies "c:\program files\microsoft office\document themes 14\technic.thmx".
  • Modifies "c:\program files\microsoft office\document themes 14\solstice.thmx".
  • Modifies "c:\program files\microsoft office\document themes 14\pushpin.thmx".
  • Modifies "c:\program files\microsoft office\document themes 14\slipstream.thmx".
  • Modifies "c:\program files\microsoft office\document themes 14\theme colors\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\document themes 14\perspective.thmx".
  • Modifies "c:\program files\microsoft office\document themes 14\theme colors\waveform.xml".
  • Modifies "c:\program files\microsoft office\document themes 14\theme colors\urban.xml".
  • Modifies "c:\program files\microsoft office\document themes 14\theme colors\technic.xml".
  • Modifies "c:\program files\microsoft office\document themes 14\theme colors\trek.xml".
  • Modifies "c:\program files\microsoft office\document themes 14\theme colors\verve.xml".
  • Modifies "c:\program files\microsoft office\document themes 14\theme colors\thatch.xml".
  • Modifies "c:\program files\microsoft office\document themes 14\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\document themes 14\trek.thmx".
  • Modifies "c:\program files\microsoft office\document themes 14\theme fonts\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\document themes 14\theme fonts\waveform.xml".
  • Modifies "c:\program files\microsoft office\media\cagcat10\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\document themes 14\verve.thmx".
  • Modifies "c:\program files\microsoft office\media\cagcat10\j0336075.wmf".
  • Modifies "c:\program files\microsoft office\media\cagcat10\j0335112.wmf".
  • Modifies "c:\program files\microsoft office\media\cagcat10\j0332364.wmf".
  • Modifies "c:\program files\microsoft office\media\office14\1033\office10.mml".
  • Modifies "c:\program files\microsoft office\media\office14\autoshap\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\document themes 14\waveform.thmx".
  • Modifies "c:\program files\microsoft office\media\office14\autoshap\bd18257_.wmf".
  • Modifies "c:\program files\microsoft office\media\office14\autoshap\bd18256_.wmf".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14582_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14581_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14579_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14578_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14565_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14533_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14532_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14531_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14982_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14981_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14980_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14871_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14870_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14869_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14868_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14867_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14866_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14833_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21295_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21294_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd15277_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21304_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd14580_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21421_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21400_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115867.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115866.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115864.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115863.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115844.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115843.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115842.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115841.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115840.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115839.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115836.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115835.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115834.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\j0115865.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bullets.dll".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21534_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21533_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21520_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21519_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21518_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21505_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21504_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21503_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21482_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21481_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21535_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21480_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21435_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21434_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21433_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21423_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21422_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21399_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21398_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21377_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21376_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21375_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21366_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21365_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21364_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21344_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21343_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21342_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21339_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21337_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21335_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\bullets\bd21333_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\lines\bd15156_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\lines\bd15155_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\lines\bd15184_.gif".
  • Modifies "c:\program files\microsoft office\media\office14\lines\lines.dll".
  • Modifies "c:\program files\microsoft office\media\office14\lines\bd15185_.gif".
  • Modifies "c:\program files\microsoft office\office14\1033\omsintl.dll".
  • Modifies "c:\program files\microsoft office\office14\1033\outlook_k_col.hxk".
  • Modifies "c:\program files\microsoft office\office14\1033\outlook_f_col.hxk".
  • Modifies "c:\program files\microsoft office\office14\1033\outlook_col.hxt".
  • Modifies "c:\program files\microsoft office\office14\1033\outlook_col.hxc".
  • Modifies "c:\program files\microsoft office\office14\1033\ois_f_col.hxk".
  • Modifies "c:\program files\microsoft office\office14\1033\ois_k_col.hxk".
  • Modifies "c:\program files\microsoft office\office14\1033\pub6intl.rest.idx_dll".
  • Modifies "c:\program files\microsoft office\office14\1033\pub6intl.dll.idx_dll".
  • Modifies "c:\program files\microsoft office\office14\1033\psrchsrn.dat".
  • Modifies "c:\program files\microsoft office\office14\1033\pubcolor.scm".
  • Modifies "c:\program files\microsoft office\office14\1033\psrchphn.dat".
  • Modifies "c:\program files\microsoft office\office14\1033\pub6intl.dll".
  • Modifies "c:\program files\microsoft office\office14\1033\psrchlex.dat".
  • Modifies "c:\program files\microsoft office\office14\1033\visio_col.hxt".
  • Modifies "c:\program files\microsoft office\office14\1033\psrchkey.dat".
  • Modifies "c:\program files\microsoft office\office14\1033\visio_col.hxc".
  • Modifies "c:\program files\microsoft office\office14\1033\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\1033\psrchlts.dat".
  • Modifies "c:\program files\microsoft office\office14\1033\winword.dev_col.hxc".
  • Modifies "c:\program files\microsoft office\office14\1033\xmlsdk5.chm".
  • Modifies "c:\program files\microsoft office\office14\acedao.dll".
  • Modifies "c:\program files\microsoft office\office14\bdcmetadataresource.xsd".
  • Modifies "c:\program files\microsoft office\office14\bcssync.exe".
  • Modifies "c:\program files\microsoft office\office14\bdcmetadata.xsd".
  • Modifies "c:\program files\microsoft office\office14\contactpicker.dll".
  • Modifies "c:\program files\microsoft office\office14\cnfnot32.exe".
  • Modifies "c:\program files\microsoft office\office14\contab32.dll".
  • Modifies "c:\program files\microsoft office\office14\facility.dll".
  • Modifies "c:\program files\microsoft office\office14\form.dll".
  • Modifies "c:\program files\microsoft office\office14\graph.exe".
  • Modifies "c:\program files\microsoft office\office14\graph.exe.manifest".
  • Modifies "c:\program files\microsoft office\office14\gkword.dll".
  • Modifies "c:\program files\microsoft office\office14\gkpowerpoint.dll".
  • Modifies "c:\program files\microsoft office\office14\gkexcel.dll".
  • Modifies "c:\program files\microsoft office\office14\gantt.dll".
  • Modifies "c:\program files\microsoft office\office14\gfx.dll".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\verisign\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\verisign\components\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\verisign\components\vs_componentsigningintermediate.cer".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\groove.net\components\signedcomponents.cer".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\verisign\components\verisign_class_3_code_signing_2001-4_ca.cer".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\groove.net\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\groove.net\servers\management.cer".
  • Modifies "c:\program files\microsoft office\office14\groove\certificates\groove.net\servers\relay.cer".
  • Modifies "c:\program files\microsoft office\office14\groove\sounds\people\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\sounds\people\whistling.wav".
  • Modifies "c:\program files\microsoft office\office14\groove\sounds\places\vibe.wav".
  • Modifies "c:\program files\microsoft office\office14\groove\sounds\places\toot.wav".
  • Modifies "c:\program files\microsoft office\office14\groove\sounds\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\sounds\things\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\sounds\places\radar.wav".
  • Modifies "c:\program files\microsoft office\office14\groove\sounds\things\splash.wav".
  • Modifies "c:\program files\microsoft office\office14\groove\toolbmps\wssfilestooliconimagesmask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\toolbmps\wssfilestooliconimages.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimage.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\calendar\globebuttonimagemask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\calendar\calendarviewbuttonimages.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\computers\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\documentshare\wssfilestoolhomepagebackground.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\discussion\discussiontooliconimagesmask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\computers\computericonmask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimagesmask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\commondata\unreadiconimagesmask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\computers\computericon.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\markupiconimages.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimage.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\groovedocumentreview\inactivetabimagemask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_over.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right_disable.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagestyle.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsprinttemplate.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formshomepagescript.js".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsdonottrust.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formspreviewtemplate.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\form.ico".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsblankpage.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\button_right.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formsbrowserupgrade.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewselectionchanged.js".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\unformattednumeric.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewdblclick.js".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewby.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\view.js".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\textview.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\fieldtypepreview\textbox.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms\viewheaderpreview.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\viewheaderpreview.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\view.ico".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\submit.js".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\save.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form.ico".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsprinttemplate.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formspreviewtemplate.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\adobe.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsmacrotemplate.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\form.js".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsblankpage.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsimagetemplate.html".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formshomepagestyle.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lightspirit.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\graycheck.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slateblue.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\tab_on.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\tab_off.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\sts.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\tab_on.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\button.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen\tab_off.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\springgreen.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate\tab_on.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\slate\tab_off.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\background.gif".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\olivegreen.css".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskicon.jpg".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projectstatusiconsmask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\toolicons\$howdecrypt$.txt".
  • Modifies "c:\program files\microsoft office\office14\groove\tooldata\groove.net\grooveprojecttoolset\projecttaskiconmask.bmp".
  • Modifies "c:\program files\microsoft office\office14\groove\toolicons\toolicon.ico".
  • Modifies "c:\program files\microsoft office\office14\groove\toolicons\wss_doclib.ico".
  • Modifies "c:\program files\microsoft office\office14\imwiz.dll".
  • Modifies "c:\program files\microsoft office\office14\groove\toolicons\wss.ico".
  • Modifies "c:\program files\microsoft office\office14\infopath.exe".
  • Modifies "c:\program files\microsoft office\office14\groove\toolicons\statusonline.ico".
  • Modifies "c:\program files\microsoft office\office14\imutil.dll".
  • Modifies "c:\program files\microsoft office\office14\imwdd.dll".
  • Modifies "c:\program files\microsoft office\office14\impmail.dll".
  • Modifies "c:\program files\microsoft office\office14\imdimp.add".
  • Modifies "c:\program files\microsoft office\office14\imcommon.dll".
  • Modifies "c:\program files\microsoft office\office14\iecontentservice.exe".
  • Modifies "c:\program files\microsoft office\office14\logmodel.mdl".
  • Modifies "c:\program files\microsoft office\office14\ieawsdc.dll".
  • Modifies "c:\program files\microsoft office\office14\hvac.dll".
  • Modifies "c:\program files\microsoft office\office14\medcat.dll".
  • Modifies "c:\program files\microsoft office\office14\microsoft.businessdata.dll".
  • Modifies "c:\program files\microsoft office\office14\microsoft.sharepoint.businessdata.administration.client.dll".
  • Modifies "c:\program files\microsoft office\office14\onbttnwd.dll".
  • Modifies "c:\program files\microsoft office\office14\onbttnppt.dll".
  • Modifies "c:\program files\microsoft office\office14\outlook.exe.manifest".
  • Modifies "c:\program files\microsoft office\office14\outlvbs.dll".
  • Modifies "c:\program files\microsoft office\office14\outlookautodiscover\yahoo.se.xml".
  • Modifies "c:\program files\microsoft office\office14\outlph.dll".
  • Modifies "c:\program files\microsoft office\office14\outlookautodiscover\yahoo.pl.xml".
  • Modifies "c:\program files\microsoft office\office14\outlookautodiscover\yahoo.no.xml".
  • Modifies "c:\program files\microsoft office\office14\outlookautodiscover\yahoo.jp.xml".
  • Modifies "c:\program files\microsoft office\office14\outlookautodiscover\yahoo.ie.xml".
  • Modifies "c:\program files\microsoft office\office14\onbttnol.dll".
  • Modifies "c:\program files\microsoft office\office14\outlookautodiscover\yahoo.it.xml".
  • Modifies "c:\program files\microsoft office\office14\outlookautodiscover\yahoo.hk.xml".
  • Modifies "c:\program files\microsoft office\office14\pe.dll".
  • Modifies "c:\program files\microsoft office\office14\projmodl.dll".
  • Modifies "c:\program files\microsoft office\office14\projimpt.exe".
  • Modifies "c:\program files\microsoft office\office14\ptxt9.dll".
  • Modifies "c:\program files\microsoft office\office14\propmgr.dll".
  • Modifies "c:\program files\microsoft office\office14\prtf9.dll".
  • Modifies "c:\program files\microsoft office\office14\pstprx32.dll".
  • Modifies "c:\program files\microsoft office\office14\proof\msth7fr.lex".
  • Modifies "c:\program files\microsoft office\office14\proprpt.dll".
  • Modifies "c:\program files\microsoft office\office14\proof\msth7fr.dll".
  • Modifies "c:\program files\microsoft office\office14\pubtrap.dll".
  • Modifies "c:\program files\microsoft office\office14\pubwiz\dgcinfo.xml".
  • Modifies "c:\program files\microsoft office\office14\pubwiz\dgchkbrd.xml".
  • Modifies "c:\program files\microsoft office\office14\pubwiz\dgwebbtn.dpv".
  • Modifies "c:\program files\microsoft office\office14\pubwiz\dgwebbtn.xml".
  • Modifies "c:\program files\microsoft office\office14\pubwiz\formctl.poc".
  • Modifies "c:\program files\microsoft office\office14\pubwiz\form98.poc".
  • Modifies "c:\program files\microsoft office\office14\savwbras.dll".
  • Modifies "c:\program files\microsoft office\office14\savwbhf.dll".
  • Modifies "c:\program files\microsoft office\office14\visicon.exe".
  • Modifies "c:\program files\microsoft office\stationery\1033\techtool.htm".
  • Modifies "c:\program files\microsoft office\office14\ssgen.dll".
  • Modifies "c:\program files\microsoft office\stationery\1033\techtool.gif".
  • Modifies "c:\program files\microsoft office\stationery\1033\seamarbl.htm".
  • Modifies "c:\program files\microsoft office\stationery\1033\pinelumb.jpg".
  • Modifies "c:\program files\microsoft office\stationery\1033\pinelumb.htm".
  • Modifies "c:\program files\microsoft office\stationery\1033\pawprint.htm".
  • Modifies "c:\program files\microsoft office\stationery\1033\offisupp.htm".
  • Modifies "c:\program files\microsoft office\stationery\1033\offisupp.gif".
  • Modifies "c:\program files\microsoft office\stationery\1033\pawprint.gif".
  • Modifies "c:\program files\microsoft office\stationery\1033\notebook.htm".
  • Modifies "c:\program files\microsoft office\stationery\1033\jungle.htm".
  • Modifies "c:\program files\microsoft office\stationery\1033\seamarbl.jpg".
  • Modifies "c:\program files\microsoft office\stationery\1033\judgesch.htm".
  • Modifies "c:\program files\microsoft office\stationery\1033\judgesch.gif".
  • Modifies "c:\program files\microsoft office\stationery\1033\jungle.gif".
  • Modifies "c:\program files\microsoft office\stationery\1033\dadshirt.htm".
  • Modifies "c:\program files\microsoft office\stationery\1033\dadshirt.gif".
  • Modifies "c:\program files\microsoft office\stationery\1033\currency.htm".
  • Modifies "c:\program files\microsoft office\office14\xpage3c.dll".
  • Modifies "c:\program files\microsoft office\templates\1033\access\contacts.accdt".
  • Modifies "c:\program files\microsoft office\templates\1033\access\charitable contributions.accdt".
  • Modifies "c:\program files\microsoft office\stationery\1033\currency.gif".
  • Modifies "c:\program files\microsoft office\templates\1033\access\issues.accdt".
  • Modifies "c:\program files\microsoft office\templates\1033\access\northwind.accdt".
  • Modifies "c:\program files\microsoft sync framework\v1.0\runtime\x64\feedsync.dll".
  • Modifies "c:\program files\microsoft sync framework\v1.0\runtime\x64\microsoft.synchronization.dll".
  • Modifies "c:\program files\microsoft office\templates\1033\access\marketing projects.accdt".
  • Modifies "c:\program files\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets".
  • Modifies "c:\program files\microsoft synchronization services\ado.net\v1.0\microsoft.synchronization.data.server.dll".
  • Modifies "c:\program files\microsoft synchronization services\ado.net\v1.0\microsoft.synchronization.data.sqlserverce.dll".
  • Modifies "c:\program files\microsoft synchronization services\ado.net\v1.0\microsoft.synchronization.data.dll".
  • Modifies "c:\program files\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets".
  • Modifies "c:\program files\reference assemblies\microsoft\framework\v3.0\winfxlist.xml".
  • Modifies "c:\program files\reference assemblies\microsoft\framework\v3.0\redistlist\frameworklist.xml".
  • Modifies "c:\program files\microsoft sync framework\v1.0\runtime\x64\synchronization.dll".
  • Modifies "c:\program files\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf".
  • Modifies "c:\program files\microsoft sql server compact edition\v3.5\sqlceqp35.dll".
  • Modifies "c:\program files\microsoft sql server compact edition\v3.5\sqlcese35.dll".
  • Modifies "c:\program files\microsoft sync framework\v1.0\runtime\x64\resources\1033\synchronization.rll".
  • Modifies "c:\program files\windows sidebar\settings.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\ahclient.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\adobexmp.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\agmgpuoptin.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\bibutils.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\icuuc40.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\icudt40_full.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\idtemplates\cat\defaultid.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\icudt40.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\agm.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\jp2klib.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\idtemplates\ukr\defaultid.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\javascripts\jsbytecodewin.bin".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\ita\license.html".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\ita\eula.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\hun\eula.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\hun\license.html".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\jpn\eula.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\jpn\license.html".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\nor\license.html".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\nor\eula.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\ukr\eula.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\kor\license.html".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\ukr\license.html".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\tur\license.html".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\tur\eula.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\cs_cz\weblink.cze".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\sve\eula.ini".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\eu_es\weblink.euq".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\legal\sve\license.html".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\eu_es\spelling.euq".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\eu_es\updater.euq".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\eu_es\services\services.asfx".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\eu_es\search.euq".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\eu_es\sendmail.euq".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\eu_es\services\dexshare.asfx".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\fi_fi\weblink.suo".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\fi_fi\updater.suo".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\fi_fi\spelling.suo".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\fr_fr\weblink.fra".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\fr_fr\spelling.fra".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\fr_fr\updater.fra".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\ja_jp\updater.jpn".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\ja_jp\weblink.jpn".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\nl_nl\updater.nld".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\nl_nl\weblink.nld".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\nl_nl\services\services.asfx".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\nl_nl\spelling.nld".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\nl_nl\services\dexshare.asfx".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\ro_ro\weblink.rum".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\nl_nl\sendmail.nld".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\sk_sk\updater.sky".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\sk_sk\spelling.sky".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\sv_se\weblink.sve".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\sv_se\updater.sve".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\tr_tr\updater.tur".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\tr_tr\weblink.tur".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\uk_ua\weblink.ukr".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\zh_cn\weblink.chs".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\zh_cn\spelling.chs".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\zh_cn\services\services.asfx".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\zh_cn\sendmail.chs".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\zh_cn\services\dexshare.asfx".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\acrosign.prc".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\acroform.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\locale\zh_cn\search.chs".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\acroform\pmp\qrcode.pmp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\acroform\pmp\datamatrix.pmp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\acroform\pmp\adobepdf417.pmp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\fra\signhere.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\fra\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\nor\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\pol\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\cht\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\ptb\signhere.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\pol\standard.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\rum\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\ptb\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sky\pointers.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sky\faces.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sky\signhere.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sky\standard.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sky\dynamic.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sve\signhere.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sve\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sky\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\sve\dynamic.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\makeaccessible.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\ia32.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\escript.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\ebook.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\dva.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\digsig.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\words.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annots.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\ukr\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\checkers.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\ukr\pointers.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\ukr\signhere.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\ukr\faces.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\tur\standard.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\tur\signhere.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\tur\pointers.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\ukr\standard.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\tur\standardbusiness.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\multimedia\mpp\mcimpp.suo".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\multimedia\mpp\mcimpp.sve".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\weblink.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\spelling.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\updater.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\search.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\annotations\stamps\ukr\dynamic.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\saveasrtf.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\sendmail.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins\reflow.api".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins3d\drvsoft.x3d".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins3d\drvdx8.x3d".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins3d\3difr.x3d".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\plug_ins3d\drvdx9.x3d".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\spplugins\admplugin.apl".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\services\services.cfg".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\services\dexshare.spi".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\sqlite.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\sccore.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\rtc.der".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\reader_sl.exe".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\wow_helper.exe".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\reader\rt3d.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\readmeukr.htm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\readmesky.htm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\readmerus.htm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\readmerum.htm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\readmek.htm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\readmej.htm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\cidfont\kozminpr6n-regular.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\cidfont\adobemyungjostd-medium.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\cidfont\adobesongstd-light.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\cidfont\adobemingstd-light.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\enutxt.pdf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\cidfont\kozgopr6n-medium.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\cidfont\adobeheitistd-regular.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\zx______.pfb".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\sy______.pfb".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\pfm\zy______.pfm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\zy______.pfb".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\myriadpro-regular.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\pfm\zx______.pfm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\pfm\sy______.pfm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\minionpro-regular.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\myriadpro-it.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\myriadpro-bold.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\font\myriadpro-boldit.otf".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.es_gt.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.es_es_preeuro.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.zh_tw.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\icu\icudt26l.dat".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.zh_tw_stroke.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\saslprep\saslprepprofile_norm_bidi.spp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\languagenames2\displaylanguagenames.cs.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\icu\ctl_gb18030.cnv".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\symbol.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\zdingbat.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\jisx0213.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\turkish.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\ukraine.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp936.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp950.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp932.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1258.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp874.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp949.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1256.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1257.txt".
  • Modifies "c:\program files (x86)\common files\adobe\arm\1.0\adobeextractfiles.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\pipelinesegments.store".
  • Modifies "c:\program files (x86)\common files\adobe\arm\1.0\readerupdater.exe".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\hostsideadapters\microsoft.visualstudio.tools.office.word.hostadapter.v10.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\web server extensions\14\bin\fpwec.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\hostsideadapters\microsoft.visualstudio.tools.office.outlook.hostadapter.v10.0.dll".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\viktigt.htm".
  • Modifies "c:\program files (x86)\desktop.ini".
  • Modifies "c:\program files (x86)\common files\system\ole db\xmlrw.dll".
  • Modifies "c:\program files (x86)\common files\system\ole db\xmlrwbin.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\libegl.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\eventlog_provider.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\libglesv2.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\installer\setup.exe".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\installer\chrome.7z".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\snapshot_blob.bin".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\manifest.json".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\resources.pak".
  • Modifies "c:\program files (x86)\internet explorer\signup\install.ins".
  • Modifies "c:\program files (x86)\google\chrome\application\chrome.visualelementsmanifest.xml".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\smalllogocanary.png".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\smalllogo.png".
  • Modifies "c:\program files (x86)\google\chrome\application\chrome.exe".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\_platform_specific\win_x64\widevinecdmadapter.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\_platform_specific\win_x64\widevinecdmadapter.dll.sig".
  • Modifies "c:\program files (x86)\google\chrome\application\setupmetrics\20170605115313.pma".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\_platform_specific\win_x64\widevinecdm.dll.sig".
  • Modifies "c:\program files (x86)\java\jre7\bin\wsdetect.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\zip.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\windowsaccessbridge-32.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\w2k_lsa_auth.dll".
  • Modifies "c:\program files (x86)\java\jre7\copyright".
  • Modifies "c:\program files (x86)\java\jre7\bin\verify.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\unpack200.exe".
  • Modifies "c:\program files (x86)\java\jre7\lib\fontconfig.properties.src".
  • Modifies "c:\program files (x86)\java\jre7\lib\i386\jvm.cfg".
  • Modifies "c:\program files (x86)\java\jre7\lib\fontconfig.bfc".
  • Modifies "c:\program files (x86)\java\jre7\lib\fonts\lucidatypewriterregular.ttf".
  • Modifies "c:\program files (x86)\java\jre7\lib\fonts\lucidatypewriterbold.ttf".
  • Modifies "c:\program files (x86)\java\jre7\lib\jvm.hprof.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\javaws.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\logging.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\jfxrt.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\jsse.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\jfr.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\jfr\profile.jfc".
  • Modifies "c:\program files (x86)\java\jre7\lib\jfr\default.jfc".
  • Modifies "c:\program files (x86)\java\jre7\lib\javafx.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\images\cursors\win32_movenodrop32x32.gif".
  • Modifies "c:\program files (x86)\java\jre7\lib\images\cursors\win32_movedrop32x32.gif".
  • Modifies "c:\program files (x86)\java\jre7\lib\images\cursors\win32_linknodrop32x32.gif".
  • Modifies "c:\program files (x86)\java\jre7\lib\images\cursors\win32_linkdrop32x32.gif".
  • Modifies "c:\program files (x86)\java\jre7\lib\jce.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\images\cursors\win32_copynodrop32x32.gif".
  • Modifies "c:\program files (x86)\java\jre7\lib\images\cursors\win32_copydrop32x32.gif".
  • Modifies "c:\program files (x86)\java\jre7\lib\images\cursors\invalid32x32.gif".
  • Modifies "c:\program files (x86)\java\jre7\lib\images\cursors\cursors.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\fonts\lucidasansdemibold.ttf".
  • Modifies "c:\program files (x86)\java\jre7\lib\fonts\lucidasansregular.ttf".
  • Modifies "c:\program files (x86)\java\jre7\lib\fonts\lucidabrightregular.ttf".
  • Modifies "c:\program files (x86)\java\jre7\lib\psfontj2d.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\psfont.properties.ja".
  • Modifies "c:\program files (x86)\java\jre7\lib\rt.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\plugin.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\net.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\tzmappings".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\us_export_policy.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\trusted.libraries".
  • Modifies "c:\program files (x86)\java\jre7\lib\sound.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\javaws.policy".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\javafx.policy".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\tunis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\tripoli".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\sao_tome".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\porto-novo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\ouagadougou".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\nouakchott".
  • Modifies "c:\program files (x86)\java\jre7\lib\resources.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\niamey".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\ndjamena".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\nairobi".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\monrovia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\mogadishu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\mbabane".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\maseru".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\maputo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\malabo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\lusaka".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\lubumbashi".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\luanda".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\lome".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\libreville".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\lagos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\kinshasa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\kigali".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\khartoum".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\kampala".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\juba".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\johannesburg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\harare".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\gaborone".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\freetown".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\el_aaiun".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\douala".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\djibouti".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\dar_es_salaam".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\dakar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\conakry".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\ceuta".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\casablanca".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\cairo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\bujumbura".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\brazzaville".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\blantyre".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\bissau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\banjul".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\bangui".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\bamako".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\asmara".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\algiers".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\addis_ababa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\accra".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\africa\abidjan".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\java.security".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\java.policy".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\cacerts".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\local_policy.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\security\blacklist".
  • Modifies "c:\program files (x86)\java\jre7\lib\management-agent.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\meta-index".
  • Modifies "c:\program files (x86)\java\jre7\lib\management\jmxremote.password.template".
  • Modifies "c:\program files (x86)\java\jre7\lib\management\jmxremote.access".
  • Modifies "c:\program files (x86)\java\jre7\lib\management\management.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\management\snmp.acl.template".
  • Modifies "c:\program files (x86)\java\jre7\lib\fonts\lucidabrightdemiitalic.ttf".
  • Modifies "c:\program files (x86)\java\jre7\lib\fonts\lucidabrightitalic.ttf".
  • Modifies "c:\program files (x86)\java\jre7\lib\flavormap.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\fonts\lucidabrightdemibold.ttf".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\araguaina".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\detroit".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\mexico_city".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\noronha".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\metlakatla".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\nome".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\merida".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\yakutat".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\winnipeg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\tortola".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\whitehorse".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\vancouver".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\yellowknife".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\thule".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\thunder_bay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\yerevan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\tijuana".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\vladivostok".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\vientiane".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\ust-nera".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\yakutsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\est5edt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\utc".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\uct".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-9".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-7".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-6".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-5".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-4".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-3".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-2".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-14".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-13".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-12".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-11".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\yekaterinburg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\hst".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\gmt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\zaporozhye".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\zurich".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\volgograd".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-8".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\mst".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\warsaw".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\met".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\mst7mdt".
  • Modifies "c:\program files (x86)\microsoft office\office14\vviewer.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\privateassemblies\microsoft.visualstudio.tools.applications.project.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\xul.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\webapprt-stub.exe".
  • Modifies "c:\program files (x86)\microsoft office\office14\vviewdwg.dll".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.0\winfxlist.xml".
  • Modifies "c:\program files (x86)\windows sidebar\settings.ini".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\images\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\images\144dpi\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\images\120dpi\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\en-us\js\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\weather.gadget\en-us\css\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\images\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\images\in_sidebar\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\en-us\js\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\slideshow.gadget\en-us\css\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\rssfeeds.gadget\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\rssfeeds.gadget\images\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\rssfeeds.gadget\en-us\js\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\rssfeeds.gadget\en-us\css\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\picturepuzzle.gadget\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\picturepuzzle.gadget\images\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\picturepuzzle.gadget\en-us\js\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\picturepuzzle.gadget\en-us\css\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\currency.gadget\images\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\currency.gadget\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\cpu.gadget\images\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\cpu.gadget\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\cpu.gadget\en-us\js\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\clock.gadget\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\clock.gadget\images\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\clock.gadget\en-us\js\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\clock.gadget\en-us\css\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\calendar.gadget\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\calendar.gadget\images\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\gadgets\calendar.gadget\en-us\css\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows sidebar\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows portable devices\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows photo viewer\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows nt\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows nt\tabletextservice\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows nt\tabletextservice\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows nt\accessories\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows nt\accessories\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows media player\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows media player\visualizations\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows media player\skins\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows media player\network sharing\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows media player\media renderer\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows media player\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows mail\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows defender\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\windows defender\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\uninstall information\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\reference assemblies\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.5\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.5\subsetlist\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.5\redistlist\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.0\redistlist\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\reference assemblies\microsoft\framework\v3.0\subsetlist\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\msbuild\microsoft.office.infopath.targets".
  • Modifies "c:\program files (x86)\msbuild\microsoft\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.5\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\msbuild\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets".
  • Modifies "c:\program files (x86)\mozilla maintenance service\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla maintenance service\updater.ini".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets".
  • Modifies "c:\program files (x86)\mozilla firefox\webapprt\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\webapprt\webapprt.ini".
  • Modifies "c:\program files (x86)\mozilla maintenance service\uninstall.exe".
  • Modifies "c:\program files (x86)\mozilla maintenance service\maintenanceservice.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\webapp-uninstaller.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\webapprt\omni.ja".
  • Modifies "c:\program files (x86)\mozilla firefox\updater.ini".
  • Modifies "c:\program files (x86)\msbuild\microsoft\windows workflow foundation\v3.0\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\uninstall\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\uninstall\shortcuts_log.ini".
  • Modifies "c:\program files (x86)\mozilla firefox\uninstall\uninstall.log".
  • Modifies "c:\program files (x86)\mozilla firefox\softokn3.chk".
  • Modifies "c:\program files (x86)\mozilla firefox\updater.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\removed-files".
  • Modifies "c:\program files (x86)\mozilla firefox\precomplete".
  • Modifies "c:\program files (x86)\mozilla firefox\uninstall\helper.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\softokn3.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\plugin-hang-ui.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\plugin-container.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\platform.ini".
  • Modifies "c:\program files (x86)\mozilla firefox\nssdbm3.chk".
  • Modifies "c:\program files (x86)\mozilla firefox\nssdbm3.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\omni.ja".
  • Modifies "c:\program files (x86)\mozilla firefox\msvcp100.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\msvcr100.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\nssckbi.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\nss3.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\mozglue.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\mozjs.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\mozalloc.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\maintenanceservice_installer.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\maintenanceservice.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\libglesv2.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\libegl.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\install.log".
  • Modifies "c:\program files (x86)\mozilla firefox\gkmedias.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\freebl3.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\freebl3.chk".
  • Modifies "c:\program files (x86)\mozilla firefox\dictionaries\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\dictionaries\en-us.aff".
  • Modifies "c:\program files (x86)\mozilla firefox\dependentlibs.list".
  • Modifies "c:\program files (x86)\mozilla firefox\defaults\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\defaults\pref\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\defaults\pref\channel-prefs.js".
  • Modifies "c:\program files (x86)\mozilla firefox\d3dcompiler_43.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\crashreporter.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\searchplugins\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\crashreporter.ini".
  • Modifies "c:\program files (x86)\mozilla firefox\firefox.exe".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\searchplugins\twitter.xml".
  • Modifies "c:\program files (x86)\mozilla firefox\dictionaries\en-us.dic".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\searchplugins\yahoo.xml".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\searchplugins\wikipedia.xml".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\searchplugins\google.xml".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\searchplugins\amazondotcom.xml".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\omni.ja".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\searchplugins\bing.xml".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\extensions\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\install.rdf".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\icon.png".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\crashreporter-override.ini".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\components\components.manifest".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\chrome.manifest".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\components\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\application.ini".
  • Modifies "c:\program files (x86)\mozilla firefox\browser\components\browsercomps.dll".
  • Modifies "c:\program files (x86)\mozilla firefox\accessiblemarshal.dll".
  • Modifies "c:\program files (x86)\microsoft.net\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\mozilla firefox\breakpadinjector.dll".
  • Modifies "c:\program files (x86)\microsoft.net\redistlist\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft.net\primary interop assemblies\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft.net\primary interop assemblies\stdole.dll".
  • Modifies "c:\program files (x86)\microsoft.net\primary interop assemblies\msdatasrc.dll".
  • Modifies "c:\program files (x86)\microsoft.net\primary interop assemblies\microsoft.mshtml.dll".
  • Modifies "c:\program files (x86)\microsoft.net\redistlist\assemblylist_4_extended.xml".
  • Modifies "c:\program files (x86)\microsoft.net\primary interop assemblies\microsoft.stdformat.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft.net\redistlist\assemblylist_4_client.xml".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\bin\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\bin\1033\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft.net\primary interop assemblies\adodb.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\bin\vstaproject.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\bin\1033\vstaprojectui.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\vsta\bin\vstaclientpkg.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\sdk\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\packages\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\packages\debugger\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\text.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\splashscreen.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\module.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\resourceinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\usercontrol.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\settingsinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\form.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\mdiparent.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\emptydatabase.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\loginform.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\explorer.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dataset.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\dialog.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\assemblyinfointernal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\class.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\appconfigurationinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\xmlfile.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\textfile.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\visualizer.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settingsinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\settings.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resourceinternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\usercontrol.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\form.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\emptydatabase.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\dataset.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\codefile.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\class.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfointernal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\resource.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\interface.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\assemblyinfo.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\mdiparent.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfiginternal.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\publicassemblies\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\appconfig.zip".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\publicassemblies\system.addin.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.designtime.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.addinmanager.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.adapter.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\vsta\itemtemplates\csharp\1033\aboutbox.zip".
  • Modifies "c:\program files (x86)\microsoft office\office14\urlredir.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\umlvs.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\umlvc60.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\umlvb.dll".
  • Modifies "c:\program files (x86)\microsoft visual studio 8\common7\ide\publicassemblies\microsoft.visualstudio.tools.applications.comrpcchannel.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\stscopy.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\ppslax.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\stsupld.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\owssupp.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\onlntcomlib.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\onenotesyncpc.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\onbttnie.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\olkfstub.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\onbttnielinkednotes.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\oisctrl.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\nameext.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\npauthz.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\namecontrolproxy.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\msohev.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\name.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\npspwrap.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\msohtmed.exe".
  • Modifies "c:\program files (x86)\microsoft office\office14\inlaunch.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\dgrmlnch.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\ieawsdc.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\grooveex.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft office\office14\authzax.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\bcslaunch.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\vviewres.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\vbaows10.chm".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\umlvsui.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\umlvbres.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\stsupld.intl.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\owshlp10.chm".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\ocltint.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\umlvc60r.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\grooveintlresource.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\stsucres.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\mapishellr.dll".
  • Modifies "c:\program files (x86)\microsoft analysis services\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\resources\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\resources\1033\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\bhointl.dll".
  • Modifies "c:\program files (x86)\microsoft office\office14\1033\dl_res.dll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\msmgdsrv.dll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\msolap100.dll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\msolui100.dll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\msmdlocal.dll".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sql90.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sybase.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sql70.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\as90.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\informix.xsl".
  • Modifies "c:\program files (x86)\java\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\as80.xsl".
  • Modifies "c:\program files (x86)\microsoft analysis services\as oledb\10\cartridges\msjet.xsl".
  • Modifies "c:\program files (x86)\java\jre7\thirdpartylicensereadme-javafx.txt".
  • Modifies "c:\program files (x86)\java\jre7\release".
  • Modifies "c:\program files (x86)\java\jre7\readme.txt".
  • Modifies "c:\program files (x86)\java\jre7\license".
  • Modifies "c:\program files (x86)\java\jre7\lib\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\zoneinfomappings".
  • Modifies "c:\program files (x86)\java\jre7\welcome.html".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\yst9".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\wet".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\pst8".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\yst9ydt".
  • Modifies "c:\program files (x86)\java\jre7\thirdpartylicensereadme.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\mst7mdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\hst10".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\est5".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\pst8pdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\cst6".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\ast4adt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\ast4".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\wallis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\wake".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\tongatapu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\tarawa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\tahiti".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\saipan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\rarotonga".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\port_moresby".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\pohnpei".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\pitcairn".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\palau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\pago_pago".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\noumea".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pst8pdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\systemv\cst6cdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\norfolk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\nauru".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\midway".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\marquesas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\majuro".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\kwajalein".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\kosrae".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\kiritimati".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\johnston".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\honolulu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\guam".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\guadalcanal".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\gambier".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\galapagos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\funafuti".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\fiji".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\fakaofo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\enderbury".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\efate".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\chuuk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\niue".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\apia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\reunion".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\mayotte".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\mauritius".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\maldives".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\mahe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\kerguelen".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\comoro".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\cocos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\christmas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\chagos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\indian\antananarivo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\auckland".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\pacific\easter".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\vaduz".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\vilnius".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\vienna".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\uzhgorod".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\tirane".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\tallinn".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\sofia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\samara".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\simferopol".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\rome".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\prague".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\paris".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\stockholm".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\riga".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\moscow".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\monaco".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\minsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\malta".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\luxembourg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\london".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\madrid".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\oslo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\lisbon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\helsinki".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\istanbul".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\dublin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\gibraltar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\chisinau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\budapest".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\bucharest".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\kaliningrad".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\copenhagen".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\belgrade".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\athens".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\kiev".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\amsterdam".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-10".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt-1".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+8".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+7".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+6".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+5".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+4".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+3".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+2".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+12".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+11".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+10".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt+1".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\etc\gmt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\europe\brussels".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\est".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\cst6cdt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\perth".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\melbourne".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\sydney".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\lindeman".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\eucla".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\darwin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\lord_howe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\currie".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\brisbane".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\hobart".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\st_helena".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\stanley".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\south_georgia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\reykjavik".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\cape_verde".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\madeira".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\canary".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\faroe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\australia\adelaide".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\urumqi".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\tokyo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\thimphu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\tehran".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\tbilisi".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\tashkent".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\taipei".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\singapore".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\shanghai".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\atlantic\bermuda".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\samarkand".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\sakhalin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\riyadh87".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\rangoon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\qyzylorda".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\qatar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\pyongyang".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\pontianak".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\phnom_penh".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\oral".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\novosibirsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\novokuznetsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\nicosia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\muscat".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\manila".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\makassar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\magadan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\omsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\macau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kuwait".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kuching".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kuala_lumpur".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\krasnoyarsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kolkata".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\khandyga".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kathmandu".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kashgar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\karachi".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kamchatka".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\kabul".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\riyadh".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\jayapura".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\irkutsk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\ho_chi_minh".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\hovd".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\riyadh89".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\jakarta".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\harbin".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\hong_kong".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\hebron".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\gaza".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\jerusalem".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\dili".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\dhaka".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\damascus".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\colombo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\dushanbe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\choibalsan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\brunei".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\bishkek".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\chongqing".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\bangkok".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\bahrain".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\baghdad".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\ashgabat".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\aqtobe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\aqtau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\amman".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\almaty".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\aden".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\vostok".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\syowa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\anadyr".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\rothera".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\mawson".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\mcmurdo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\dumontdurville".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\asia\baku".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\davis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\tegucigalpa".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\swift_current".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_vincent".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_thomas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_lucia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_kitts".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\casey".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\st_johns".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\sitka".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\scoresbysund".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\santo_domingo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\santiago".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\santarem".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\rio_branco".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\sao_paulo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\regina".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\recife".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\santa_isabel".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\rainy_river".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\puerto_rico".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\port_of_spain".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\porto_velho".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\rankin_inlet".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\phoenix".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\paramaribo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\pangnirtung".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\panama".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\resolute".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\north_dakota\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\port-au-prince".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\north_dakota\center".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\north_dakota\new_salem".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\ojinaga".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\nipigon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\new_york".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\montserrat".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\north_dakota\beulah".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\nassau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\montevideo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\monterrey".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\moncton".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\montreal".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\miquelon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\menominee".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\mazatlan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\matamoros".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\antarctica\macquarie".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\martinique".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\manaus".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\managua".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\maceio".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\lima".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\la_paz".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\kentucky\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\los_angeles".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\juneau".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\jamaica".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\kentucky\monticello".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\kentucky\louisville".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\iqaluit".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\vevay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\winamac".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\vincennes".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\marengo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\knox".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\indianapolis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\hermosillo".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\halifax".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\guyana".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\guayaquil".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\guatemala".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\guadeloupe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\grenada".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\grand_turk".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\havana".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\goose_bay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\godthab".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\fortaleza".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\el_salvador".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\eirunepe".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\edmonton".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\glace_bay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\dominica".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\dawson_creek".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\denver".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\danmarkshavn".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\curacao".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\tell_city".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\dawson".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\indiana\petersburg".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\creston".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\costa_rica".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cayman".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cayenne".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\caracas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cuiaba".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\chihuahua".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cambridge_bay".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\campo_grande".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\bogota".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\boise".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\blanc-sablon".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\belize".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\belem".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\barbados".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\chicago".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\boa_vista".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\bahia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\cancun".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\aruba".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\ushuaia".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\atikokan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\san_luis".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\san_juan".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\bahia_banderas".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\asuncion".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\rio_gallegos".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\mendoza".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\la_rioja".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\jujuy".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\cordoba".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\catamarca".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\buenos_aires".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\antigua".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\anguilla".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\salta".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\argentina\tucuman".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\sunpkcs11.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\zipfs.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\sunmscapi.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\sunjce_provider.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\sunec.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\localedata.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\jaccess.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\adak".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\access-bridge-32.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\ext\dnsns.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\splash.gif".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_zh_tw.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_zh_hk.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_sv.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_pt_br.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\zi\america\anchorage".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_ko.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_zh_cn.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_fr.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_es.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\jqs\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_de.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\jqs\jqs.conf".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\jqs\jqsmessages.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\ffjcext.zip".
  • Modifies "c:\program files (x86)\java\jre7\lib\content-types.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_ja.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\cmm\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\deploy\messages_it.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\cmm\srgb.pf".
  • Modifies "c:\program files (x86)\java\jre7\lib\cmm\gray.pf".
  • Modifies "c:\program files (x86)\java\jre7\lib\cmm\pycc.pf".
  • Modifies "c:\program files (x86)\java\jre7\lib\cmm\linear_rgb.pf".
  • Modifies "c:\program files (x86)\java\jre7\lib\classlist".
  • Modifies "c:\program files (x86)\java\jre7\lib\cmm\ciexyz.pf".
  • Modifies "c:\program files (x86)\java\jre7\lib\charsets.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\calendars.properties".
  • Modifies "c:\program files (x86)\java\jre7\lib\applet\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\lib\alt-rt.jar".
  • Modifies "c:\program files (x86)\java\jre7\lib\accessibility.properties".
  • Modifies "c:\program files (x86)\java\jre7\bin\unpack.dll".
  • Modifies "c:\program files (x86)\java\jre7\lib\currency.data".
  • Modifies "c:\program files (x86)\java\jre7\bin\t2k.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\tnameserv.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\ssvagent.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\ssv.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\sunec.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\splashscreen.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\sunmscapi.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\rmiregistry.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\rmid.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\servertool.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\policytool.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\plugin2\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\bin\prism-d3d.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\plugin2\msvcr100.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\plugin2\npjp2.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\orbd.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\npoji610.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\npt.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\pack200.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\nio.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\msvcr100.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\npjpi170_45.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\management.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\mlib_image.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\libxslt.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\libxml2.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\net.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\klist.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\ktab.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\kinit.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\jsoundds.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jsound.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\kcms.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jsdt.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jqs.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\jpishare.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\keytool.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\jpioji.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jpiexp.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jpicom.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jp2ssv.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jpinscp.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jpeg.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jp2native.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jp2iexp.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jli.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jp2launcher.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\jfr.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jfxwebkit.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jfxmedia.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jdwp.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jawt.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jawtaccessbridge-32.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\java_crw_demo.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\javaw.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\javaws.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\javafx-font.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\javafx-iio.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jdbcodbc.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\javaaccessbridge-32.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\java.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\java.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\java-rmi.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\jabswitch.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\javacpl.exe".
  • Modifies "c:\program files (x86)\java\jre7\bin\instrument.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\installer.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\j2pcsc.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\j2pkcs11.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\jaas_nt.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\hprof.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\glib-lite.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\gstreamer-lite.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\glass.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\dt_socket.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\eula.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\dtplugin\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\bin\fxplugins.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\fontmanager.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\dtplugin\npdeployjava1.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\deploy.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\dt_shmem.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\client\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\java\jre7\bin\decora-sse.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\client\xusage.txt".
  • Modifies "c:\program files (x86)\java\jre7\bin\dtplugin\deployjava1.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\dcpr.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\client\jvm.dll".
  • Modifies "c:\program files (x86)\java\jre7\bin\axbridge.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\widevinecdm\_platform_specific\win_x64\widevinecdm.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\logocanary.png".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\visualelements\logo.png".
  • Modifies "c:\program files (x86)\java\jre7\bin\awt.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\nacl_irt_x86_64.nexe".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\zh-cn.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\zh-tw.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\natives_blob.bin".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\vi.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\uk.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\tr.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\te.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\th.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ta.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sw.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sr.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sv.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ro.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sl.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ru.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\sk.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\pl.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\pt-br.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\nb.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\nl.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ms.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\pt-pt.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ml.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\mr.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\lt.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ko.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\kn.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\lv.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ja.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\id.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\it.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\hu.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\hr.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\he.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\fr.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\hi.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\fil.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\gu.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\fi.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\fa.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\et.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\es.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\es-419.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\en-gb.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\el.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\de.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\da.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\cs.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ca.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\bn.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\am.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\bg.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\locales\ar.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\extensions\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\extensions\external_extensions.json".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\installer\chrmstp.exe".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\icudtl.dat".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\gmail.crx".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\external_extensions.json".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\youtube.crx".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\drive.crx".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome_watcher.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\d3dcompiler_47.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\default_apps\docs.crx".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome_child.dll.sig".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome_child.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome_elf.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome_200_percent.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome_100_percent.pak".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome.exe.sig".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\58.0.3029.110.manifest".
  • Modifies "c:\program files (x86)\common files\system\ado\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome.dll".
  • Modifies "c:\program files (x86)\google\chrome\application\58.0.3029.110\chrome.dll.sig".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\vstoee90.tlb".
  • Modifies "c:\program files (x86)\common files\microsoft shared\web server extensions\14\bin\fpsrvutl.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\vstoee100.tlb".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\actionspane3.xsd".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\vstomessageprovider.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\vstoee.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\vstoloader.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\1033\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\1033\vstoloaderui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\vstoinstaller.exe".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\vstoinstaller.config".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\hostsideadapters\microsoft.visualstudio.tools.office.hostadapter.v10.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsto\10.0\1033\vstoinstallerui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\hostsideadapters\microsoft.visualstudio.tools.applications.hostadapter.v10.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\microsoft.visualstudio.tools.office.contract.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\microsoft.visualstudio.tools.applications.contract.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\microsoft.visualstudio.tools.applications.contract.v10.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinviews\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\contracts\microsoft.visualstudio.tools.office.contract.v10.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\hostsideadapters\microsoft.visualstudio.tools.office.excel.hostadapter.v10.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinviews\microsoft.visualstudio.tools.applications.runtime.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinsideadapters\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinviews\microsoft.office.tools.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinviews\microsoft.visualstudio.tools.applications.runtime.v10.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinsideadapters\microsoft.visualstudio.tools.office.word.addinadapter.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinsideadapters\microsoft.visualstudio.tools.office.excel.addinadapter.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinsideadapters\microsoft.visualstudio.tools.applications.addinadapter.v10.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\appinfodocument\microsoft.visualstudio.tools.office.appinfodocument\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\appinfodocument\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\appinfodocument\microsoft.visualstudio.tools.office.appinfodocument\microsoft.visualstudio.tools.office.appinfodocument.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\x86\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\x86\vsta_ep32.exe.config".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\x86\vsta_ep32.exe".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinsideadapters\microsoft.visualstudio.tools.office.addinadapter.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\pipeline.v10.0\addinsideadapters\microsoft.visualstudio.tools.applications.addinadapter.v9.0.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\x86\vstaremotingserver.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\vstaremotingserver.tlb".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\8.0\microsoft.visualstudio.tools.applications.blueprints.tlb".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vc\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vc\msdia90.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vsta\appinfodocument\addins.store".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vc\msdia80.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vc\amd64\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vc\msdia100.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vba\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vba\vba6\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\triedit\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\triedit\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\textconv\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\textconv\wksconv\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vc\amd64\msdia80.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\textconv\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\stationery\desktop.ini".
  • Modifies "c:\program files (x86)\common files\microsoft shared\portal\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\textconv\wksconv\wkconv.exe".
  • Modifies "c:\program files (x86)\common files\microsoft shared\portal\1033\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\portal\1033\portalconnect.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\vba\vba6\vbe6ext.olb".
  • Modifies "c:\program files (x86)\common files\microsoft shared\portal\portalconnectcore.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\office setup controller\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\msoxmlmf.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\riched20.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\ophproxy.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\cultures\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\msores.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\msoshext.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\mso.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\cultures\office.odf".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\csi.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\1033\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\csisoap.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\1033\msointl.rest.idx_dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\msinfo\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\msinfo\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\msenv\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\msenv\publicassemblies\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\ink\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\ink\hwrcustomization\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\ink\en-us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\msenv\publicassemblies\extensibility.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\1033\msointl.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\office14\1033\msointl.dll.idx_dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\ink\1.7\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\ink\1.0\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\namedurls.hxk".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\keywords.hxk".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\hx.hxt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\3082\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\hx.hxc".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\2052\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1049\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\2052\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1049\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1046\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1042\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\hxruntime.hxs".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1046\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\3082\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1042\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1041\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1040\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1040\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1036\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1036\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1033\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1041\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1031\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1028\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\dao\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1033\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1028\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\java\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\java\java update\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\microsoft shared\help\1031\hxdsui.dll".
  • Modifies "c:\program files (x86)\common files\java\java update\task64.xml".
  • Modifies "c:\program files (x86)\common files\java\java update\task.xml".
  • Modifies "c:\program files (x86)\common files\java\java update\jusched.exe".
  • Modifies "c:\program files (x86)\common files\java\java update\jucheck.exe".
  • Modifies "c:\program files (x86)\common files\adobe\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\zh_tw\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\zh_tw\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\zh_cn\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\zh_cn\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\uk_ua\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\uk_ua\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\tr_tr\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\tr_tr\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sv_se\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sv_se\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sl_si\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sl_si\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sk_sk\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ru_ru\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ru_ru\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ro_ro\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ro_ro\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\pt_br\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\pt_br\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\pl_pl\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\pl_pl\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\nl_nl\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\nl_nl\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\sk_sk\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\nb_no\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\nb_no\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ko_kr\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ko_kr\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ja_jp\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ja_jp\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\it_it\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\it_it\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\hu_hu\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\hu_hu\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\hr_hr\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\hr_hr\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\fr_fr\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\fr_fr\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\fi_fi\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\fi_fi\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\eu_es\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\java\java update\jaucheck.exe".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\eu_es\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\es_es\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\es_es\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\en_us\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\en_us\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\de_de\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\java\java update\jaureg.exe".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\de_de\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\da_dk\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\da_dk\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\cs_cz\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\cs_cz\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ca_es\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\helpcfg\ca_es\reader_10.0.helpcfg".
  • Modifies "c:\program files (x86)\common files\adobe\acrobat\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\common files\adobe\arm\1.0\adobearm.exe".
  • Modifies "c:\program files (x86)\common files\adobe\arm\1.0\acrobatupdater.exe".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\vigtigt.htm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\setup files\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\setup files\{ac76ba86-7ad7-ffff-7b44-aa0000000001}\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\viktig.htm".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1254.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1255.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1253.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1250.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\symbol.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\thai.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\romanian.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\roman.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\korean.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1252.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\win\cp1251.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\iceland.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\hebrew.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\greek.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\farsi.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\cyrillic.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\croatian.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\corpchar.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\japanese.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\centeuro.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\chintrad.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\jisx0208.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\arabic.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\hkscs.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\mac\chinsimp.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\$howdecrypt$.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\typesupport\unicode\mappings\adobe\japanese83pv.txt".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\usa03.ths".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\usa37.hyp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\usa03.hsp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\tur.hyp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\tur.fca".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\tur111.hsp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\usa.fca".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\tur32.clx".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\swd58.ths".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\swd43.hsp".
  • Modifies "c:\program files (x86)\adobe\reader 10.0\resource\linguistics\providers\proximity\11.00\swd32.clx".
1/5
OS Uses encryption API -
1/5
Masquerade Changes folder appearance -
  • Folder "c:\program files" has a changed appearance.
  • Folder "c:\program files (x86)" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5\xt1rpyg9" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5\vb18b0kb" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5\ketajp6d" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\temporary internet files\content.ie5\03j4uqw0" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\temp\history\history.ie5" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\roaming\microsoft\internet explorer\quick launch" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\favorites\links" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\favorites" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\downloads" has a changed appearance.
  • Folder "c:\users\default\appdata\local\microsoft\feeds cache\kqmhsvkd" has a changed appearance.
  • Folder "c:\users\default\appdata\local\microsoft\feeds cache" has a changed appearance.
  • Folder "c:\users\default\appdata\local\microsoft\feeds cache\d68g7bij" has a changed appearance.
  • Folder "c:\users\default\documents" has a changed appearance.
  • Folder "c:\users\default\desktop" has a changed appearance.
  • Folder "c:\users\default\contacts" has a changed appearance.
  • Folder "c:\users\default\downloads" has a changed appearance.
  • Folder "c:\users\default\favorites\links" has a changed appearance.
  • Folder "c:\users\public\music" has a changed appearance.
  • Folder "c:\users\public\downloads" has a changed appearance.
  • Folder "c:\users\public\documents" has a changed appearance.
  • Folder "c:\users\public" has a changed appearance.
  • Folder "c:\users\public\desktop" has a changed appearance.
  • Folder "c:\users" has a changed appearance.
  • Folder "c:\users\default\videos" has a changed appearance.
  • Folder "c:\users\default\searches" has a changed appearance.
  • Folder "c:\users\public\pictures" has a changed appearance.
  • Folder "c:\users\default\pictures" has a changed appearance.
  • Folder "c:\users\public\music\sample music" has a changed appearance.
  • Folder "c:\users\public\videos\sample videos" has a changed appearance.
  • Folder "c:\users\public\videos" has a changed appearance.
  • Folder "c:\users\public\recorded tv\sample media" has a changed appearance.
  • Folder "c:\users\public\recorded tv" has a changed appearance.
  • Folder "c:\users\public\pictures\sample pictures" has a changed appearance.
  • Folder "c:\users\default\music" has a changed appearance.
  • Folder "c:\users\default\links" has a changed appearance.
  • Folder "c:\users\default\favorites" has a changed appearance.
  • Folder "c:\users\default\appdata\roaming\microsoft\internet explorer\quick launch\user pinned\taskbar" has a changed appearance.
  • Folder "c:\users\default\appdata\roaming\microsoft\internet explorer\quick launch" has a changed appearance.
  • Folder "c:\users\default\appdata\local\microsoft\windows mail\stationery" has a changed appearance.
  • Folder "c:\users\default\appdata\local\microsoft\feeds cache\6asvn7j7" has a changed appearance.
  • Folder "c:\users\default\appdata\local\microsoft\feeds cache\1nbur4hr" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\videos" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\searches" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\saved games" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\pictures" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\music" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\links" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\documents\my shapes" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\documents" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\desktop" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\contacts" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\microsoft\windows mail\stationery" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\microsoft\feeds cache" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\microsoft\feeds cache\d68g7bij" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\microsoft\feeds cache\kqmhsvkd" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\microsoft\feeds cache\6asvn7j7" has a changed appearance.
  • Folder "c:\users\5p5nrgjn0js halpmcxz\appdata\local\microsoft\feeds cache\1nbur4hr" has a changed appearance.
  • Folder "c:\program files (x86)\common files\microsoft shared\stationery" has a changed appearance.
1/5
Information Stealing Possibly does reconnaissance -
  • Possibly trying to gather information about application "Mozilla Firefox" by file.
1/5
File System Creates an unusually large number of files -
1/5
Static Unparsable sections in file -
  • Static analyzer was unable to completely parse the analyzed file: C:\Users\5p5NrGJn0jS HALPmcxz\Desktop\SpyHunter5.exe.
0/5
Process Enumerates running processes -

Screenshots

Monitored Processes

Sample Information

ID #608029
MD5 f8c589dec8eb0e8fa5e36b0b49372cfc Copy to Clipboard
SHA1 48b68afaabd44cfdd0017b006ab3d989225ecfe7 Copy to Clipboard
SHA256 730046dd331ffe44a007477287deaa4f600026acca1cb4fcbdbbcfc607aa0d9b Copy to Clipboard
SSDeep 1536:2uD3IcYeG/cWksJJ0U6hgamKTILldrEJK6c2YPk+Mpbq8gRRT87Ww1DDRkqL4aLH:22Ic6KqawALk9f4a2em100KrM Copy to Clipboard
ImpHash 13e447d071fa0e675b3f4af327b4c25f Copy to Clipboard
Filename SpyHunter5.exe
File Size 128.00 KB
Sample Type Windows Exe (x86-32)

Analysis Information

Creation Time 2019-04-17 11:51 (UTC+2)
Analysis Duration 00:05:08
Number of Monitored Processes 6
Execution Successful True
Reputation Enabled True
WHOIS Enabled True
Local AV Enabled True
YARA Enabled True
Number of AV Matches 3
Number of YARA Matches 0
Termination Reason Timeout
Tags
Function Logfile
Exit-Icon

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Before

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
After

This feature requires an online-connection to the VMRay backend.

An offline version with limited functionality is also provided.
The offline version is supported only in Mozilla Firefoxwith deactivated setting "security.fileuri.strict_origin_policy".


    
Screenshot
Expand-Icon
Exit-Icon
icon_left
icon_left
image