Technical Information
Modifies file system
Creates the following files
- C:\far2\addons\colors\custom_highlighting\black_from_fonarev.reg.protected
- C:\far2\addons\setup\descript.ion.protected
- %WINDIR%\assembly\gac\microsoft.ink\1.0.2201.0__31bf3856ad364e35\microsoft.ink.dll.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1046\dexplore.ctm.protected
- C:\totalcmd\totalcmd.chm.protected
- %ProgramFiles%\avgw\avgw.exe.protected
- %WINDIR%\assembly\gac\microsoft.directx.directsound\1.0.2902.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\locale\en_us\stopwords.enu.protected
- C:\far2\addons\macros\view_nextprevfile.reg.protected
- C:\totalcmd\tcusbrun.exe.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1042\dexplore.ctm.protected
- %ProgramFiles%\avgvv\avgvv.exe.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1041\dexplore.ctm.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1028\dexplore.ctm.protected
- %WINDIR%\assembly\gac\microsoft.directx.directsound\1.0.2902.0__31bf3856ad364e35\microsoft.directx.directsound.dll.protected
- C:\totalcmd\tcunzl64.dll.protected
- C:\far2\addons\readme.txt.protected
- %ProgramFiles%\avgupsvc\avgupsvc.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\logsession.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\logtransport2.exe.protected
- %ProgramFiles%\avnotify\avnotify.exe.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1049\dexplore.ctm.protected
- %ProgramFiles%\avkservice\avkservice.exe.protected
- %WINDIR%\assembly\gac\microsoft.jscript\7.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- C:\far2\addons\shell\descript.ion.protected
- %WINDIR%\assembly\gac\microsoft.jscript\7.0.5000.0__b03f5f7f11d50a3a\microsoft.jscript.dll.protected
- C:\totalcmd\wcmicons.inc.protected
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.protected
- C:\totalcmd\unrar64.dll.protected
- %WINDIR%\assembly\gac\microsoft.ink\1.7.2600.2180__31bf3856ad364e35\__assemblyinfo__.ini.protected
- %ProgramFiles%\avinitnt\avinitnt.exe.protected
- C:\totalcmd\totalcmd64.exe.protected
- %WINDIR%\assembly\gac\microsoft.ink\1.7.2600.2180__31bf3856ad364e35\microsoft.ink.dll.protected
- C:\totalcmd\totalcmd.inc.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\2052\dexplore.ctm.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\onix32.dll.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1050\dexplore.ctm.protected
- %WINDIR%\assembly\gac\microsoft.ink\1.0.2201.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi.protected
- %ProgramFiles%\avgwizfw\avgwizfw.exe.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1040\dexplore.ctm.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1031\dexplore.ctm.protected
- C:\totalcmd\tcuninst.wul.protected
- C:\far2\addons\macros\wheelscreenswitch.reg.protected
- C:\totalcmd\wcmzip64.dll.protected
- %ALLUSERSPROFILE%\microsoft\ilscache\ilrcache.xml.protected
- %WINDIR%\assembly\gac\microsoft.directx.directdraw\1.0.2902.0__31bf3856ad364e35\microsoft.directx.directdraw.dll.protected
- C:\far2\addons\macros\view_ctrlupdown.reg.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml.protected
- C:\totalcmd\size!.txt.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.protected
- C:\far2\addons\macros\shifttab.reg.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\icucnv40.dll.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2911.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll.protected
- C:\totalcmd\tclzma64.dll.protected
- C:\totalcmd\sfxhead.sfx.protected
- %ProgramFiles%\avgdiag\avgdiag.exe.protected
- C:\totalcmd\register.rtf.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\eula.exe.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2910.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe.protected
- C:\far2\addons\macros\panel_selectfromclipboard.reg.protected
- %ALLUSERSPROFILE%\microsoft\ilscache\imcrcache.xml.protected
- C:\totalcmd\language\wcmd_swe.lng.protected
- C:\totalcmd\tcmadm64.exe.protected
- %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\data1.cab.protected
- %WINDIR%\assembly\gac\microsoft.directx.directplay\1.0.2902.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- %ProgramFiles%\avginet\avginet.exe.protected
- %ProgramFiles%\avgupden\avgupden.exe.protected
- %WINDIR%\assembly\gac\microsoft.directx.directplay\1.0.2902.0__31bf3856ad364e35\microsoft.directx.directplay.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\legal\enu\eula.ini.protected
- C:\far2\addons\macros\view_space.reg.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1036\dexplore.ctm.protected
- C:\totalcmd\tcunin64.wul.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll.protected
- %ProgramFiles%\avgscan\avgscan.exe.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\1033\dexplore.ctm.protected
- %WINDIR%\assembly\gac\microsoft.directx.directinput\1.0.2902.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\jp2klib.dll.protected
- C:\totalcmd\tcunin64.exe.protected
- C:\far2\addons\macros\view_shiftinssearch.reg.protected
- %ProgramFiles%\avgrssvc\avgrssvc.exe.protected
- C:\totalcmd\tcmdx32.exe.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.protected
- %ALLUSERSPROFILE%\microsoft\msdn\7.0\3082\dexplore.ctm.protected
- %ProgramFiles%\backweb-4476822\backweb-4476822.exe.protected
- C:\far2\documentation\rus\arc_support.txt.protected
- %WINDIR%\assembly\gac\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\mscorcfg.dll.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\msointl.rest.trx_dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\escript.api.protected
- %ProgramFiles%\bdwizreg\bdwizreg.exe.protected
- C:\far2\documentation\eng\techinfo.txt.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\msointl.dll.trx_dll.protected
- %WINDIR%\assembly\gac\microsoft_vsavb\7.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\omsintl.dll.trx_dll.protected
- %ProgramFiles%\blackd\blackd.exe.protected
- %WINDIR%\assembly\gac\microsoft_vsavb\7.0.5000.0__b03f5f7f11d50a3a\microsoft_vsavb.dll.protected
- C:\far2\documentation\eng\plugins_review.txt.protected
- C:\far2\documentation\eng\plugins_install.txt.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\mor6int.rest.trx_dll.protected
- %ProgramFiles%\bdsurvey\bdsurvey.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\dva.api.protected
- %WINDIR%\assembly\gac\microsoft.vsa.vb.codedomprocessor\7.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- C:\far2\documentation\eng\far_faq.txt.protected
- %ProgramFiles%\bdswitch\bdswitch.exe.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\mapir.dll.trx_dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\ia32.api.protected
- C:\far2\documentation\rus\techinfo.txt.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\quicktime.mpp.protected
- %WINDIR%\assembly\gac\regcode\1.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- %WINDIR%\assembly\gac\regcode\1.0.5000.0__b03f5f7f11d50a3a\regcode.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\makeaccessible.api.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\mcimpp.mpp.protected
- %ProgramFiles%\btini\btini.exe.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\outllibr.dll.trx_dll.protected
- C:\far2\documentation\rus\plugins_review.txt.protected
- %ProgramFiles%\blindman\blindman.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\multimedia\mpp\flash.mpp.protected
- %WINDIR%\assembly\gac\msdatasrc\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- C:\far2\documentation\rus\plugins_install.txt.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\onintl.rest.trx_dll.protected
- C:\far2\documentation\rus\far_faq.txt.protected
- %WINDIR%\assembly\gac\msdatasrc\7.0.3300.0__b03f5f7f11d50a3a\msdatasrc.dll.protected
- %ProgramFiles%\blackice\blackice.exe.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\onintl.dll.trx_dll.protected
- C:\far2\documentation\rus\bug_report.txt.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\dropboxstorage.api.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\ebook.api.protected
- %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annots.api.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobexmp.dll.protected
- %ProgramFiles%\avpcc\avpcc.exe.protected
- %ALLUSERSPROFILE%\microsoft\office\documentrepository.ico.protected
- C:\far2\addons\xlat\russian\descript.ion.protected
- %WINDIR%\assembly\gac\microsoft.visualbasic\7.0.5000.0__b03f5f7f11d50a3a\microsoft.visualbasic.dll.protected
- %ProgramFiles%\b2\b2.exe.protected
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab.protected
- %ProgramFiles%\avsynmgr\avsynmgr.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\datamatrix.pmp.protected
- %WINDIR%\assembly\gac\microsoft.stdformat\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- %ProgramFiles%\avscan\avscan.exe.protected
- %WINDIR%\assembly\gac\microsoft.stdformat\7.0.3300.0__b03f5f7f11d50a3a\microsoft.stdformat.dll.protected
- %WINDIR%\assembly\gac\microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\microsoft.mshtml.dll.protected
- %ALLUSERSPROFILE%\microsoft\office\assetlibrary.ico.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\pmp\adobepdf417.pmp.protected
- %ProgramFiles%\avpm\avpm.exe.protected
- %WINDIR%\assembly\gac\microsoft.mshtml\7.0.3300.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- C:\far2\addons\xlat\descript.ion.protected
- C:\far2\addons\shell\farhere.inf.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\acroform\adobepdf.xdc.protected
- %ALLUSERSPROFILE%\microsoft\office\mysharepoints.ico.protected
- C:\totalcmd\wcuninst.wul.protected
- %ALLUSERSPROFILE%\microsoft\office\mysite.ico.protected
- %WINDIR%\assembly\gac\microsoft.visualbasic.vsa\7.0.5000.0__b03f5f7f11d50a3a\microsoft.visualbasic.vsa.dll.protected
- %ProgramFiles%\bdagent\bdagent.exe.protected
- %ProgramFiles%\bdsubmit\bdsubmit.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\digsig.api.protected
- C:\far2\documentation\eng\bug_report.txt.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\grintl32.rest.trx_dll.protected
- C:\far2\documentation\eng\arc_support.txt.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\grintl32.dll.trx_dll.protected
- %ProgramFiles%\bdss\bdss.exe.protected
- %ProgramFiles%\bdoesrv\bdoesrv.exe.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\envelopr.dll.trx_dll.protected
- %WINDIR%\assembly\gac\microsoft.visualc\7.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- C:\far2\clearpluginscache.cmd.protected
- %ProgramFiles%\bdnews\bdnews.exe.protected
- C:\far2\changelog_eng.protected
- %WINDIR%\assembly\gac\microsoft.visualc\7.0.5000.0__b03f5f7f11d50a3a\microsoft.visualc.dll.protected
- %ALLUSERSPROFILE%\microsoft\office\sharepointteamsite.ico.protected
- %ProgramFiles%\bdmcon\bdmcon.exe.protected
- C:\far2\changelog.protected
- %WINDIR%\assembly\gac\microsoft.visualbasic.vsa\7.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- %WINDIR%\assembly\gac\microsoft.vsa.vb.codedomprocessor\7.0.5000.0__b03f5f7f11d50a3a\microsoft.vsa.vb.codedomprocessor.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cryptocme.sig.protected
- C:\far2\addons\macros\panel_numpad.reg.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.protected
- %ProgramFiles%\armor2net\armor2net.exe.protected
- %ProgramFiles%\aoltbserver\aoltbserver.exe.protected
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab.protected
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww.cab.protected
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml.protected
- C:\totalcmd\language\wcmd_eng.mnu.protected
- C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\winre.wim.protected
- C:\totalcmd\language\wcmd_esp.lng.protected
- %ProgramFiles%\ash\ash.exe.protected
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi.protected
- %ProgramFiles%\amsn\amsn.exe.protected
- C:\far2\addons\colors\default_highlighting\greenmile.reg.protected
- C:\totalcmd\language\wcmd_dut.inc.protected
- %ProgramFiles%\amon\amon.exe.protected
- C:\far2\addons\colors\default_highlighting\farcolors242.reg.protected
- C:\far2\addons\colors\default_highlighting\dn_like.reg.protected
- %ProgramFiles%\alsvc\alsvc.exe.protected
- C:\far2\addons\colors\default_highlighting\import_colors.bat.protected
- C:\totalcmd\language\wcmd_dut.mnu.protected
- %WINDIR%\assembly\gac\microsoft.directx\1.0.2902.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\snapshot_blob.bin.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adelrcp.exe.protected
- C:\totalcmd\language\wcmd_hun.mnu.protected
- C:\totalcmd\language\wcmd_hun.lng.protected
- C:\far2\addons\macros\descript.ion.protected
- %WINDIR%\assembly\gac\isymwrapper\1.0.5000.0__b03f5f7f11d50a3a\isymwrapper.dll.protected
- %ProgramFiles%\ashenhcd\ashenhcd.exe.protected
- C:\totalcmd\language\wcmd_hun.inc.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrord32res.dll.protected
- %WINDIR%\assembly\gac\iiehost\1.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrotextextractor.exe.protected
- %ProgramFiles%\ashchest\ashchest.exe.protected
- %WINDIR%\assembly\gac\iiehost\1.0.5000.0__b03f5f7f11d50a3a\iiehost.dll.protected
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrosup64.dll.protected
- %ProgramFiles%\ashavsrv\ashavsrv.exe.protected
- C:\totalcmd\language\wcmd_esp.mnu.protected
- %WINDIR%\assembly\gac\ieexecremote\1.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab.protected
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml.protected
- %ProgramFiles%\almon\almon.exe.protected
- %ProgramFiles%\armorsurf\armorsurf.exe.protected
- C:\totalcmd\language\wcmd_deu.mnu.protected
- %ALLUSERSPROFILE%\microsoft\crypto\keys\68383f0e45dd9b02f69c4041b082ee57_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee.protected
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.xml.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ace.dll.protected
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.protected
- C:\far2\addons\colors\custom_highlighting\descript.ion.protected
- %ProgramFiles%\a2hijackfree\a2hijackfree.exe.protected
- C:\totalcmd\descript.ion.protected
- C:\far2\addons\colors\custom_highlighting\colors_from_gernichenko.reg.protected
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.protected
- %ALLUSERSPROFILE%\adobe\arm\s\armmanifest.msi.protected
- C:\far2\addons\colors\custom_highlighting\colors_from_admin_essp_ru.reg.protected
- C:\totalcmd\cglpt64.sys.protected
- C:\far2\addons\macros\dialog_altdown.reg.protected
- C:\far2\addons\colors\custom_highlighting\black_from_july.reg.protected
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.protected
- C:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\desktop.ini.protected
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml.protected
- %ALLUSERSPROFILE%\adobe\arm\reader_15.007.20033\readerdcmanifest.msi.protected
- %ProgramFiles%\360tray\360tray.exe.protected
- C:\totalcmd\history.txt.protected
- C:\far2\addons\colors\custom_highlighting\greenmile.reg.protected
- %WINDIR%\assembly\gac\microsoft.directx\1.0.2902.0__31bf3856ad364e35\microsoft.directx.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\cpdf_full.aapp.protected
- %ProgramFiles%\a2wizard\a2wizard.exe.protected
- %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\abcpy.ini.protected
- %ALLUSERSPROFILE%\adobe\arm\reader_15.007.20033\acrordrdcupd1500920077.msp.protected
- %ProgramFiles%\aimpro\aimpro.exe.protected
- C:\far2\addons\colors\default_highlighting\colors_from_gernichenko.reg.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\viewer.aapp.protected
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab.protected
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml.protected
- C:\far2\addons\colors\default_highlighting\black_from_myodov.reg.protected
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.protected
- C:\totalcmd\language\wcmd_dan.lng.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\measure.aapp.protected
- %ProgramFiles%\ageofconan\ageofconan.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\comments.aapp.protected
- C:\far2\addons\colors\custom_highlighting\vaxcolors.reg.protected
- %ProgramFiles%\ackwin32\ackwin32.exe.protected
- %ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\help_mkwd_assetid.h1w.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acroapp\enu\cpdf_rhp.aapp.protected
- C:\far2\addons\colors\custom_highlighting\import_colors.bat.protected
- %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\setup.exe.protected
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml.protected
- %ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\acroread.msi.protected
- C:\totalcmd\language\wcmd_ita.inc.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_base_non_fips.dll.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2904.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- C:\far2\addons\macros\panel_del.reg.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_base.dll.protected
- %ProgramFiles%\autostartexplorer\autostartexplorer.exe.protected
- C:\far2\addons\macros\panel_ctrlshiftpgupdn.reg.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2906.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2906.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- C:\totalcmd\language\wcmd_rus.mnu.protected
- C:\far2\addons\macros\panel_ctrlshiftbackslash.reg.protected
- %ProgramFiles%\autodown\autodown.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_asym.dll.protected
- C:\totalcmd\language\wcmd_rus.lng.protected
- C:\far2\addons\macros\panel_ctrlright.reg.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2905.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- %ProgramFiles%\aswupdsv\aswupdsv.exe.protected
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.protected
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml.protected
- %ProgramFiles%\aswregsvr\aswregsvr.exe.protected
- C:\totalcmd\language\wcmd_rus.inc.protected
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.xml.protected
- C:\totalcmd\language\wcmd_sk.lng.protected
- %ProgramFiles%\autotrace\autotrace.exe.protected
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.protected
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml.protected
- %ProgramFiles%\avconsol\avconsol.exe.protected
- C:\totalcmd\language\wcmd_swe.mnu.protected
- C:\far2\addons\macros\panel_mousewheeltilt.reg.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cryptocme.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\cooltype.dll.protected
- %ProgramFiles%\avconfig\avconfig.exe.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2908.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\ccme_ecdrbg.dll.protected
- C:\totalcmd\language\wcmd_svn.mnu.protected
- C:\totalcmd\language\wcmd_svn.lng.protected
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll.protected
- C:\far2\addons\macros\panel_jumptoselectedfile.reg.protected
- %ProgramFiles%\avciman\avciman.exe.protected
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2907.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2907.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- %ProgramFiles%\avcenter\avcenter.exe.protected
- C:\totalcmd\language\wcmd_svn.inc.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2909.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- %WINDIR%\assembly\gac\mscorcfg\1.0.5000.0__b03f5f7f11d50a3a\__assemblyinfo__.ini.protected
- %ProgramFiles%\btinint\btinint.exe.protected
- C:\far2\addons\macros\panel_ctrlins__.reg.protected
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml.protected
- C:\totalcmd\language\wcmd_kor.mnu.protected
- %ProgramFiles%\ashsimp2\ashsimp2.exe.protected
- %WINDIR%\assembly\gac\microsoft.directx.diagnostics\1.0.2902.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi.protected
- C:\far2\addons\macros\f9deactivatemenu.reg.protected
- %WINDIR%\assembly\gac\microsoft.directx.diagnostics\1.0.2902.0__31bf3856ad364e35\microsoft.directx.diagnostics.dll.protected
- %ProgramFiles%\ashserv\ashserv.exe.protected
- C:\far2\addons\macros\f3.reg.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adoberfp.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\agm.dll.protected
- C:\far2\addons\macros\edit_savefile.reg.protected
- C:\totalcmd\language\wcmd_ita.mnu.protected
- %WINDIR%\assembly\gac\microsoft.directx.audiovideoplayback\1.0.2902.0__31bf3856ad364e35\microsoft.directx.audiovideoplayback.dll.protected
- %ProgramFiles%\ashpopwz\ashpopwz.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\adobelinguistic.dll.protected
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi.protected
- %ProgramFiles%\ashmaisv\ashmaisv.exe.protected
- %ProgramFiles%\ashlogv\ashlogv.exe.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2904.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- C:\far2\addons\macros\panel_ctrlq.reg.protected
- C:\far2\addons\macros\openinglastfile.reg.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\air\nppdf32.dll.protected
- C:\totalcmd\language\wcmd_nor.lng.protected
- C:\totalcmd\language\wcmd_rom.mnu.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\bib.dll.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\axsle.dll.protected
- C:\totalcmd\language\wcmd_rom.lng.protected
- %ProgramFiles%\ashwebsv\ashwebsv.exe.protected
- %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\axe8sharedexpat.dll.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2903.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab.protected
- %ProgramFiles%\ashupd\ashupd.exe.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2903.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- C:\totalcmd\language\wcmd_pol.mnu.protected
- C:\far2\addons\macros\panel_bs.reg.protected
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml.protected
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2902.0__31bf3856ad364e35\__assemblyinfo__.ini.protected
- %WINDIR%\assembly\gac\microsoft.directx.direct3dx\1.0.2902.0__31bf3856ad364e35\microsoft.directx.direct3dx.dll.protected
- %ProgramFiles%\ashskpck\ashskpck.exe.protected
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml.protected
- %ProgramFiles%\ashskpcc\ashskpcc.exe.protected
- %ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\outllibr.rest.trx_dll.protected
Changes user data files extensions (Trojan.Encoder).
