Trojan.Encoder.25483

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

%ALLUSERSPROFILE%\Start Menu\Programs\Startup\pscskme.jpg
%HOMEPATH%\Start Menu\Programs\Startup\pscskme.jpg

Modifies file system:

Creates the following files:

%APPDATA%\Microsoft\Protect\CREDHIST
%ProgramFiles%\FireFox\chrome\en-US\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\branding\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\feeds\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\communicator\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\migration\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\safebrowsing\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\sidebar\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\downloads\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser-region\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\history\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabview\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\search\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\migration\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\places\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\autoconfig\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\dom\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\profile\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\update\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\xpinstall\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\necko\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\handling\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\passwordmgr\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pippki\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\services\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\feedback\pscskme.jpg
%ProgramFiles%\FireFox\chrome\pippki\pscskme.jpg
%ProgramFiles%\FireFox\chrome\pippki\content\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pipnss\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\places\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\layout\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\search\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\security\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\svg\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xml\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xpinstall\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xslt\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\win\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-region\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\alerts\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\cookie\pscskme.jpg
%CommonProgramFiles%\Services\pscskme.jpg
%ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\Speech\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\Speech\1033\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\Stationery\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\1042\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\TextConv\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\VC\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\MSInfo\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\VGX\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\Triedit\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\1041\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\Web Folders\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\3082\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\1040\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\1036\pscskme.jpg
C:\Far2\PluginSDK\Headers.c\pscskme.jpg
C:\Far2\PluginSDK\Headers.pas\pscskme.jpg
C:\Muldrop\pscskme.jpg
%ProgramFiles%\pscskme.jpg
%CommonProgramFiles%\pscskme.jpg
C:\Far2\Plugins\WinSCP\windows\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\1025\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\1028\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\1031\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\1033\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\scripts\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DAO\pscskme.jpg
C:\Far2\Plugins\WinSCP\resource\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\DW\2052\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\scripts\pscskme.jpg
%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\pscskme.jpg
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\pscskme.jpg
%CommonProgramFiles%\System\pscskme.jpg
%CommonProgramFiles%\System\ado\pscskme.jpg
%CommonProgramFiles%\System\msadc\pscskme.jpg
%CommonProgramFiles%\System\Ole DB\pscskme.jpg
%ProgramFiles%\ComPlus Applications\pscskme.jpg
%ProgramFiles%\FireFox\pscskme.jpg
%ProgramFiles%\FireFox\chrome\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\branding\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\pscskme.jpg
%CommonProgramFiles%\SpeechEngines\Microsoft\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\pscskme.jpg
%ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\pscskme.jpg
%CommonProgramFiles%\SpeechEngines\Microsoft\TTS\pscskme.jpg
C:\Far2\Plugins\WinSCP\release\pscskme.jpg
%CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\pscskme.jpg
%CommonProgramFiles%\SpeechEngines\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\vinavbar\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_adm\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_aut\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\servsupp\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut\pscskme.jpg
%CommonProgramFiles%\MSSoap\pscskme.jpg
%CommonProgramFiles%\MSSoap\Binaries\pscskme.jpg
%CommonProgramFiles%\MSSoap\Binaries\Resources\pscskme.jpg
%CommonProgramFiles%\MSSoap\Binaries\Resources\1033\pscskme.jpg
%CommonProgramFiles%\ODBC\pscskme.jpg
%CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm\pscskme.jpg
%CommonProgramFiles%\ODBC\Data Sources\pscskme.jpg
%ProgramFiles%\FireFox\chrome\pippki\content\pippki\pscskme.jpg
C:\Far2\PluginSDK\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\pscskme.jpg
%ProgramFiles%\Internet Explorer\Connection Wizard\pscskme.jpg
%ProgramFiles%\Internet Explorer\MUI\pscskme.jpg
%ProgramFiles%\Internet Explorer\MUI\0409\pscskme.jpg
%ProgramFiles%\Internet Explorer\PLUGINS\pscskme.jpg
%ProgramFiles%\FireFox\searchplugins\pscskme.jpg
%ProgramFiles%\Internet Explorer\SIGNUP\pscskme.jpg
%ProgramFiles%\Internet Explorer\pscskme.jpg
%ProgramFiles%\microsoft frontpage\pscskme.jpg
%ProgramFiles%\microsoft frontpage\version3.0\bin\pscskme.jpg
%ProgramFiles%\Microsoft.NET\pscskme.jpg
%ProgramFiles%\Microsoft.NET\RedistList\pscskme.jpg
%ProgramFiles%\Movie Maker\pscskme.jpg
%ProgramFiles%\Messenger\pscskme.jpg
%ProgramFiles%\Movie Maker\MUI\pscskme.jpg
%ProgramFiles%\microsoft frontpage\version3.0\pscskme.jpg
%ProgramFiles%\FireFox\uninstall\pscskme.jpg
%ProgramFiles%\FireFox\res\html\pscskme.jpg
%ProgramFiles%\FireFox\res\fonts\pscskme.jpg
%ProgramFiles%\FireFox\defaults\profile\chrome\pscskme.jpg
%ProgramFiles%\FireFox\dictionaries\pscskme.jpg
%ProgramFiles%\FireFox\extensions\pscskme.jpg
%ProgramFiles%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\pscskme.jpg
%ProgramFiles%\FireFox\modules\pscskme.jpg
%ProgramFiles%\FireFox\defaults\pref\pscskme.jpg
%ProgramFiles%\FireFox\modules\services-crypto\pscskme.jpg
%ProgramFiles%\FireFox\modules\services-sync\engines\pscskme.jpg
%ProgramFiles%\FireFox\modules\services-sync\ext\pscskme.jpg
%ProgramFiles%\FireFox\modules\tabview\pscskme.jpg
%ProgramFiles%\FireFox\plugins\pscskme.jpg
%ProgramFiles%\FireFox\res\pscskme.jpg
%ProgramFiles%\FireFox\res\dtd\pscskme.jpg
%ProgramFiles%\FireFox\modules\services-sync\pscskme.jpg
%ProgramFiles%\FireFox\res\entityTables\pscskme.jpg
%ProgramFiles%\FireFox\defaults\autoconfig\pscskme.jpg
%ProgramFiles%\FireFox\defaults\profile\pscskme.jpg
%ProgramFiles%\Movie Maker\MUI\0409\pscskme.jpg
%ProgramFiles%\MSBuild\Microsoft\pscskme.jpg
%ProgramFiles%\Reference Assemblies\Microsoft\Framework\v3.0\SubsetList\pscskme.jpg
%ProgramFiles%\Reference Assemblies\Microsoft\Framework\v3.5\pscskme.jpg
%ProgramFiles%\Reference Assemblies\Microsoft\Framework\v3.5\RedistList\pscskme.jpg
%ProgramFiles%\Reference Assemblies\Microsoft\Framework\v3.5\SubsetList\pscskme.jpg
%ProgramFiles%\Uninstall Information\pscskme.jpg
%ProgramFiles%\Reference Assemblies\Microsoft\Framework\v3.0\pscskme.jpg
%ProgramFiles%\Reference Assemblies\Microsoft\Framework\v3.0\RedistList\pscskme.jpg
%ProgramFiles%\Windows Media Player\pscskme.jpg
%ProgramFiles%\Windows Media Player\Skins\pscskme.jpg
%ProgramFiles%\Windows Media Player\Visualizations\pscskme.jpg
%ProgramFiles%\Windows NT\pscskme.jpg
%ProgramFiles%\Windows NT\Accessories\pscskme.jpg
%ProgramFiles%\Windows NT\Pinball\pscskme.jpg
%ProgramFiles%\Windows Media Player\Icons\pscskme.jpg
%ProgramFiles%\Windows Media Player\Sample Playlists\pscskme.jpg
%ProgramFiles%\Reference Assemblies\Microsoft\Framework\pscskme.jpg
%ProgramFiles%\Reference Assemblies\pscskme.jpg
%ProgramFiles%\FireFox\components\pscskme.jpg
%ProgramFiles%\MSBuild\Microsoft\Windows Workflow Foundation\pscskme.jpg
%ProgramFiles%\MSBuild\Microsoft\Windows Workflow Foundation\v3.0\pscskme.jpg
%ProgramFiles%\MSBuild\Microsoft\Windows Workflow Foundation\v3.5\pscskme.jpg
%ProgramFiles%\MSN\pscskme.jpg
%ProgramFiles%\MSN\MSNCoreFiles\pscskme.jpg
%ProgramFiles%\MSN\MSNCoreFiles\Install\pscskme.jpg
%ProgramFiles%\MSN\MSNCoreFiles\Install\MSN9Components\pscskme.jpg
%ProgramFiles%\MSN\MSNCoreFiles\OOBE\pscskme.jpg
%ProgramFiles%\MSN Gaming Zone\pscskme.jpg
%ProgramFiles%\MSN Gaming Zone\Windows\pscskme.jpg
%ProgramFiles%\NetMeeting\pscskme.jpg
%ProgramFiles%\Online Services\pscskme.jpg
%ProgramFiles%\Outlook Express\pscskme.jpg
%ProgramFiles%\Movie Maker\Shared\pscskme.jpg
%ProgramFiles%\MSBuild\pscskme.jpg
%ProgramFiles%\Movie Maker\Shared\Profiles\pscskme.jpg
%ProgramFiles%\FireFox\defaults\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\xpinstall\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\alerts\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\res\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dirListing\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\printpreview\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\xbl-marquee\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\media\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\satchel\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\global\svg\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\global\alerts\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\profile\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\global\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tree\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\handling\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\passwordmgr\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\places\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\plugins\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\profile\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\update\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\viewsource\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\printpreview\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\media\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\cookie\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\content\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\handling\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\places\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\viewsource\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\alerts\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\pscskme.jpg
%ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dirListing\pscskme.jpg
C:\Far2\Plugins\WinSCP\putty\windows\pscskme.jpg
C:\Far2\Plugins\WinSCP\putty\charset\pscskme.jpg
C:\Far2\Plugins\WinSCP\putty\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\Application Data\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\History\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\pscskme.jpg
C:\Documents and Settings\Default User\Recent\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\Temp\pscskme.jpg
C:\Documents and Settings\LocalService\Cookies\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\pscskme.jpg
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\pscskme.jpg
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\pscskme.jpg
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\pscskme.jpg
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\pscskme.jpg
C:\Documents and Settings\Default User\Templates\pscskme.jpg
C:\Documents and Settings\Default User\Start Menu\pscskme.jpg
C:\Documents and Settings\LocalService\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\pscskme.jpg
C:\Documents and Settings\Default User\SendTo\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\pscskme.jpg
C:\Documents and Settings\Default User\Start Menu\Programs\pscskme.jpg
C:\Documents and Settings\NetworkService\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\History\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\Temp\pscskme.jpg
%HOMEPATH%\pscskme.jpg
%APPDATA%\Identities\pscskme.jpg
%APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\pscskme.jpg
%APPDATA%\Microsoft\pscskme.jpg
%APPDATA%\Microsoft\Address Book\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\pscskme.jpg
%APPDATA%\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\pscskme.jpg
%APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\pscskme.jpg
C:\Documents and Settings\NetworkService\Cookies\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\Application Data\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\pscskme.jpg
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\pscskme.jpg
C:\Documents and Settings\Default User\PrintHood\pscskme.jpg
C:\Documents and Settings\NetworkService\Application Data\Microsoft\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\pscskme.jpg
C:\Documents and Settings\Default User\NetHood\pscskme.jpg
C:\Documents and Settings\Default User\My Documents\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\pscskme.jpg
%ALLUSERSPROFILE%\Documents\pscskme.jpg
%ALLUSERSPROFILE%\Documents\My Music\pscskme.jpg
%ALLUSERSPROFILE%\Documents\My Music\My Playlists\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\pscskme.jpg
%ALLUSERSPROFILE%\Documents\My Music\Sample Music\pscskme.jpg
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\pscskme.jpg
%ALLUSERSPROFILE%\Desktop\pscskme.jpg
%ALLUSERSPROFILE%\Documents\My Pictures\pscskme.jpg
%ALLUSERSPROFILE%\Documents\My Videos\pscskme.jpg
%ALLUSERSPROFILE%\DRM\pscskme.jpg
%ALLUSERSPROFILE%\Favorites\pscskme.jpg
%ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Cm\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\pscskme.jpg
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Network\pscskme.jpg
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\fb068cd31a3ec473100ac4e73f1145a9_23ef5514-3059-436f-a4a7-4cefaab20eb1
C:\Documents and Settings\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\DSS\MachineKeys\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\pscskme.jpg
%ALLUSERSPROFILE%\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\MachineKeys\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\HTML Help\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Index\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\Programs\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\pscskme.jpg
%ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\Application Data\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\History\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\Temp\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\pscskme.jpg
C:\Documents and Settings\Default User\Favorites\pscskme.jpg
%APPDATA%\Microsoft\Credentials\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\pscskme.jpg
C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\pscskme.jpg
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\pscskme.jpg
C:\Documents and Settings\Default User\Desktop\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\Programs\Games\pscskme.jpg
%ALLUSERSPROFILE%\Templates\pscskme.jpg
C:\Documents and Settings\Default User\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\pscskme.jpg
%ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\Microsoft\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\pscskme.jpg
C:\Documents and Settings\Default User\Cookies\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\pscskme.jpg
C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\pscskme.jpg
C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\pscskme.jpg
%APPDATA%\Microsoft\Crypto\pscskme.jpg
C:\Far2\Encyclopedia\pscskme.jpg
C:\Far2\Plugins\7-Zip\pscskme.jpg
C:\Far2\Plugins\Align\pscskme.jpg
C:\Far2\Plugins\arclite\pscskme.jpg
C:\Far2\Documentation\rus\pscskme.jpg
C:\Far2\Plugins\AutoWrap\pscskme.jpg
C:\Far2\Plugins\Colorer\pscskme.jpg
C:\Far2\Plugins\pscskme.jpg
C:\Far2\Plugins\Colorer\bin\pscskme.jpg
C:\Far2\Plugins\Colorer\hrc\auto\pscskme.jpg
C:\Far2\Plugins\Colorer\hrc\auto\types\pscskme.jpg
C:\Far2\Plugins\Colorer\hrd\pscskme.jpg
C:\Far2\Plugins\Brackets\pscskme.jpg
C:\Far2\Documentation\eng\pscskme.jpg
C:\Far2\Plugins\Colorer\hrd\console\contrib\pscskme.jpg
C:\Far2\Plugins\Colorer\hrc\pscskme.jpg
C:\Far2\FExcept\pscskme.jpg
C:\Far2\Documentation\pscskme.jpg
C:\Far2\Addons\XLat\Russian\pscskme.jpg
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\pscskme.jpg
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\pscskme.jpg
%HOMEPATH%\Templates\pscskme.jpg
C:\Far2\pscskme.jpg
C:\Far2\Addons\pscskme.jpg
%HOMEPATH%\Start Menu\Programs\pscskme.jpg
C:\Far2\Addons\Colors\pscskme.jpg
C:\Far2\Addons\Colors\Default Highlighting\pscskme.jpg
C:\Far2\Addons\Macros\pscskme.jpg
C:\Far2\Addons\SetUp\pscskme.jpg
C:\Far2\Addons\Shell\pscskme.jpg
C:\Far2\Addons\XLat\pscskme.jpg
C:\Far2\Plugins\Colorer\hrd\console\pscskme.jpg
C:\Far2\Addons\Colors\Custom Highlighting\pscskme.jpg
%HOMEPATH%\Start Menu\pscskme.jpg
C:\Far2\Plugins\Compare\pscskme.jpg
C:\Far2\Plugins\DrawLine\pscskme.jpg
C:\Far2\Plugins\WinSCP\core\pscskme.jpg
C:\Far2\Plugins\EMenu\pscskme.jpg
C:\Far2\Plugins\WinSCP\far\pscskme.jpg
C:\Far2\Plugins\WinSCP\fari\pscskme.jpg
C:\Far2\Plugins\WinSCP\filezilla\pscskme.jpg
C:\Far2\Plugins\WinSCP\filezilla\misc\pscskme.jpg
C:\Far2\Plugins\WinSCP\forms\pscskme.jpg
C:\Far2\Plugins\WinSCP\lib\pscskme.jpg
C:\Far2\Plugins\WinSCP\packages\pscskme.jpg
C:\Far2\Plugins\WinSCP\packages\dragndrop\pscskme.jpg
C:\Far2\Plugins\WinSCP\packages\filemng\pscskme.jpg
C:\Far2\Plugins\WinSCP\packages\my\pscskme.jpg
C:\Far2\Plugins\WinSCP\packages\tb2k\pscskme.jpg
C:\Far2\Plugins\WinSCP\packages\tbx\pscskme.jpg
C:\Far2\Plugins\WinSCP\packages\theme\pscskme.jpg
C:\Far2\Plugins\WinSCP\console\pscskme.jpg
C:\Far2\Plugins\WinSCP\components\pscskme.jpg
C:\Far2\Plugins\WinSCP\dragext\pscskme.jpg
%HOMEPATH%\Start Menu\Programs\Accessories\pscskme.jpg
%HOMEPATH%\SendTo\pscskme.jpg
%APPDATA%\Microsoft\Crypto\RSA\pscskme.jpg
C:\Far2\Plugins\ExtSearch\pscskme.jpg
C:\Far2\Plugins\ExtSearch\doc\pscskme.jpg
C:\Far2\Plugins\ExtSearch\keys\pscskme.jpg
C:\Far2\Plugins\ExtSearch\sources\pscskme.jpg
C:\Far2\Plugins\ExtSearch\sources\RegExp\pscskme.jpg
C:\Far2\Plugins\FarCmds\pscskme.jpg
C:\Far2\Plugins\FileCase\pscskme.jpg
C:\Far2\Plugins\FTP\pscskme.jpg
C:\Far2\Plugins\FTP\lib\pscskme.jpg
C:\Far2\Plugins\HlfViewer\pscskme.jpg
C:\Far2\Plugins\MacroView\pscskme.jpg
C:\Far2\Plugins\Network\pscskme.jpg
C:\Far2\Plugins\ProcList\pscskme.jpg
C:\Far2\Plugins\WinSCP\pscskme.jpg
C:\Far2\Plugins\EditCase\pscskme.jpg
C:\Far2\Plugins\TmpPanel\pscskme.jpg
%ProgramFiles%\Reference Assemblies\Microsoft\pscskme.jpg
%ProgramFiles%\WindowsUpdate\pscskme.jpg
%HOMEPATH%\NetHood\pscskme.jpg
%HOMEPATH%\Cookies\pscskme.jpg
%HOMEPATH%\Favorites\pscskme.jpg
%HOMEPATH%\Favorites\Links\pscskme.jpg
%HOMEPATH%\Local Settings\pscskme.jpg
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\pscskme.jpg
<LS_APPDATA>\pscskme.jpg
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\pscskme.jpg
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\pscskme.jpg
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\pscskme.jpg
<LS_APPDATA>\Microsoft\pscskme.jpg
<LS_APPDATA>\Microsoft\CD Burning\pscskme.jpg
<LS_APPDATA>\Microsoft\Credentials\pscskme.jpg
<LS_APPDATA>\Identities\pscskme.jpg
%APPDATA%\Mozilla\Firefox\Profiles\pscskme.jpg
<LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\pscskme.jpg
%APPDATA%\Mozilla\Firefox\pscskme.jpg
%APPDATA%\Mozilla\Extensions\pscskme.jpg
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\pscskme.jpg
%APPDATA%\Microsoft\Internet Explorer\Quick Launch\pscskme.jpg
%APPDATA%\Microsoft\Media Player\pscskme.jpg
%APPDATA%\Microsoft\MMC\pscskme.jpg
%APPDATA%\Microsoft\Protect\pscskme.jpg
%APPDATA%\Microsoft\Protect\S-1-5-21-2052111302-484763869-725345543-1003\pscskme.jpg
%APPDATA%\Microsoft\SystemCertificates\pscskme.jpg
%APPDATA%\Microsoft\Internet Explorer\pscskme.jpg
%APPDATA%\Microsoft\SystemCertificates\My\pscskme.jpg
%APPDATA%\Microsoft\SystemCertificates\My\CRLs\pscskme.jpg
%APPDATA%\Microsoft\SystemCertificates\My\CTLs\pscskme.jpg
%APPDATA%\Microsoft\Windows\pscskme.jpg
%APPDATA%\Microsoft\Windows\Themes\pscskme.jpg
%APPDATA%\Mozilla\pscskme.jpg
<LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\pscskme.jpg
%APPDATA%\Microsoft\SystemCertificates\My\Certificates\pscskme.jpg
<LS_APPDATA>\Microsoft\Media Player\pscskme.jpg
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\pscskme.jpg
<LS_APPDATA>\Microsoft\Windows\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\pscskme.jpg
<LS_APPDATA>\VMware\pscskme.jpg
%HOMEPATH%\Local Settings\History\pscskme.jpg
%HOMEPATH%\Local Settings\History\History.IE5\pscskme.jpg
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\pscskme.jpg
%TEMP%\pscskme.jpg
%HOMEPATH%\Local Settings\<INETFILES>\pscskme.jpg
%HOMEPATH%\My Documents\pscskme.jpg
%HOMEPATH%\My Documents\Downloads\pscskme.jpg
%HOMEPATH%\My Documents\My Music\pscskme.jpg
%HOMEPATH%\My Documents\My Pictures\pscskme.jpg
%HOMEPATH%\My Documents\My Received Files\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\pscskme.jpg
<LS_APPDATA>\Microsoft\Windows Media\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\pscskme.jpg
%HOMEPATH%\Recent\pscskme.jpg
%HOMEPATH%\PrintHood\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\pscskme.jpg
<LS_APPDATA>\Mozilla\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\pscskme.jpg
<LS_APPDATA>\Microsoft\Windows Media\9.0\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\pscskme.jpg
<LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\pscskme.jpg
%ProgramFiles%\xerox\pscskme.jpg

Deletes the following files:

%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\fb068cd31a3ec473100ac4e73f1145a9_23ef5514-3059-436f-a4a7-4cefaab20eb1

Moves the following files:

from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8 iwn33xjq.db
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\find.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\find iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\error-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\error-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\error-48.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\error-48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\close.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\close iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\blacklist_large.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\blacklist_large iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\autoscroll.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\autoscroll iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-toolbar.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-toolbar iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\Filepicker.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\Filepicker iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\downloadButtons.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\downloadButtons iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr\key-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr\key-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\themeGeneric.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\themeGeneric iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\stripes-warning.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\stripes-warning iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\stripes-info-negative.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\stripes-info-negative iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\sslWarning.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\sslWarning iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\stripes-error.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\stripes-error iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\heart.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\heart iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\discover-logo.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\discover-logo iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-themes.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-themes iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-searchengines.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-searchengines iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-search.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-search iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-recent.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-recent iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-languages.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-languages iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-available.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\category-available iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\alerticon-error.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\alerticon-error iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\downloadButtons.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\downloadButtons iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\media\throbber.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\media\throbber iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\windowControls.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\windowControls iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\warning-large.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\warning-large iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\localeGeneric.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\localeGeneric iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\warning-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\warning-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\information-48.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\information-48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\discover-logo.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\discover-logo iwn33xjq.png
from %ProgramFiles%\Movie Maker\Shared\Sample2.jpg to %ProgramFiles%\Movie Maker\Shared\Sample2 iwn33xjq.jpg
from %ProgramFiles%\Movie Maker\Shared\Sample1.jpg to %ProgramFiles%\Movie Maker\Shared\Sample1 iwn33xjq.jpg
from %ProgramFiles%\Movie Maker\Shared\paint.png to %ProgramFiles%\Movie Maker\Shared\paint iwn33xjq.png
from %ProgramFiles%\Movie Maker\Shared\news.png to %ProgramFiles%\Movie Maker\Shared\news iwn33xjq.png
from %ProgramFiles%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\preview.png to %ProgramFiles%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\preview iwn33xjq.png
from %ProgramFiles%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\icon.png to %ProgramFiles%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\icon iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\update\downloadButtons.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\update\downloadButtons iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\passwordmgr\key-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\passwordmgr\key-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\themeGeneric.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\themeGeneric iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\stripes-warning.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\stripes-warning iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\stripes-info-negative.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\stripes-info-negative iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\stripes-error.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\stripes-error iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\localeGeneric.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\localeGeneric iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\loading_16.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\loading_16 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\information-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\information-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\category-themes.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\category-themes iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\category-searchengines.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\category-searchengines iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\category-search.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\category-search iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\category-languages.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\category-languages iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\alerticon-error.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\alerticon-error iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\downloadButtons.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\downloadButtons iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\media\throbber.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\media\throbber iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\windowControls.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\windowControls iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\warning-large.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\warning-large iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\warning-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\warning-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\sslWarning.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\sslWarning iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\question-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\question-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\question-48.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\question-48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\heart.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\heart iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Question.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Question iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\question-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\question-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\question-48.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\question-48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\Options.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\Options iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\Options-sync.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\Options-sync iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\searching_16.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\searching_16 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\libraryNavigation.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\libraryNavigation iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\Toolbar.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\Toolbar iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sync-throbber.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sync-throbber iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sync-bg.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sync-bg iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sync-32.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sync-32 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\Privacy-48.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\Privacy-48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pageInfo.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pageInfo iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\monitor_16-10.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\monitor_16-10 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\monitor.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\monitor iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\loading.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\loading iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\identity.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\identity iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\appmenu-icons.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\appmenu-icons iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots-widget-left.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots-widget-left iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots-icon.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutRobots-icon iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome-restore-icon.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome-restore-icon iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome-restore-icon-small.png to %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome-restore-icon-small iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\branding\icon64.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\icon64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\branding\icon48.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\icon48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\branding\icon128.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\icon128 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\branding\about.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\about iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\branding\about-wordmark.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\about-wordmark iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\content\branding\about-logo.png to %ProgramFiles%\FireFox\chrome\browser\content\branding\about-logo iwn33xjq.png
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod iwn33xjq.db
from %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.db to %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3 iwn33xjq.db
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\Geolocation-64.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\Geolocation-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\tabDragIndicator.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\tabDragIndicator iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\connecting.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\connecting iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\appmenu-icons.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\appmenu-icons iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\loading_16.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\loading_16 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\connecting.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\connecting iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\information-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\information-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\information-48.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\information-48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\information-32.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\information-32 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Error.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Error iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\error-64.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\error-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\error-48.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\error-48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\close.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\close iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\blacklist_large.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\blacklist_large iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\autoscroll.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\autoscroll iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-toolbar.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-toolbar iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\Filepicker.png to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\Filepicker iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\tabDragIndicator.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\tabDragIndicator iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\loading.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\loading iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\Options.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\Options iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\Geolocation-64.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\Geolocation-64 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\Options-sync.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\Options-sync iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\searching_16.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\searching_16 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\libraryToolbar.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\libraryToolbar iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\libraryNavigation.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\libraryNavigation iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\Toolbar.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\Toolbar iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\sync-throbber.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\sync-throbber iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\sync-bg.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\sync-bg iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\sync-32.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\sync-32 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\Privacy-48.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\Privacy-48 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\pageInfo.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\pageInfo iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\monitor_16-10.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\monitor_16-10 iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\monitor.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\monitor iwn33xjq.png
from %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\identity.png to %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\identity iwn33xjq.png
from %ProgramFiles%\Windows Media Player\npds.zip to %ProgramFiles%\Windows Media Player\npds iwn33xjq.zip
from %ProgramFiles%\Windows NT\Pinball\table.bmp to %ProgramFiles%\Windows NT\Pinball\table iwn33xjq.bmp

Modifies user data files (Trojan.Encoder).

Miscellaneous:

Executes the following:

'<SYSTEM32>\cmd.exe' /C net view
'<SYSTEM32>\net.exe' view

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial