Trojan.Encoder.37437

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

<SYSTEM32>\tasks\i

Creates the following files on removable media

<Drive name for removable media>:\how to restore your zuioseft files.txt
<Drive name for removable media>:\10thingscondoms.pdf
<Drive name for removable media>:\13.jpg
<Drive name for removable media>:\168.jpg
<Drive name for removable media>:\1sm_price.xls
<Drive name for removable media>:\asaprojectcompetition.pptx
<Drive name for removable media>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Drive name for removable media>:\roozenedowebinar.pptx
<Drive name for removable media>:\waterresourcesag.pptx
<Drive name for removable media>:\gruenspecht_02172016.pptx
<Drive name for removable media>:\hypothyroidism_slides.pptx
<Drive name for removable media>:\indogerman2010.pptx
<Drive name for removable media>:\stoc13_ml_quoc_le.pptx

Malicious functions

To complicate detection of its presence in the operating system,

deletes volume shadow copies.

Modifies file system

Creates the following files

%WINDIR%\temp\qde.bat
%ProgramFiles%\fslaunch\how to restore your zuioseft files.txt
%ProgramFiles%\fsm32\how to restore your zuioseft files.txt
%ProgramFiles%\fsma32\how to restore your zuioseft files.txt
%ProgramFiles%\fsmb32\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\branding\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\certerror\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\feeds\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\history\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\migration\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\how to restore your zuioseft files.txt
%ProgramFiles%\fshdll32\how to restore your zuioseft files.txt
%ProgramFiles%\fshotfix\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\places\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\search\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabbrowser\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabview\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\aero\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\feeds\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\preferences\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\preferences\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\how to restore your zuioseft files.txt
%ProgramFiles%\fpwin\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\sports\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\stacking\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\travel\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\videowall\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\vignette\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\how to restore your zuioseft files.txt
%ProgramFiles%\fprottray\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\push\how to restore your zuioseft files.txt
%ProgramFiles%\fsdiag\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\en-us\how to restore your zuioseft files.txt
%ProgramFiles%\directftp\how to restore your zuioseft files.txt
%ProgramFiles%\drvirus\how to restore your zuioseft files.txt
%ProgramFiles%\drvmap\how to restore your zuioseft files.txt
%ProgramFiles%\drwebupw\how to restore your zuioseft files.txt
%ProgramFiles%\eudora\how to restore your zuioseft files.txt
%ProgramFiles%\ezantivirusregistrationcheck\how to restore your zuioseft files.txt
%ProgramFiles%\f-sched\how to restore your zuioseft files.txt
%ProgramFiles%\fameh32\how to restore your zuioseft files.txt
%ProgramFiles%\fch32\how to restore your zuioseft files.txt
%ProgramFiles%\fpavserver\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\how to restore your zuioseft files.txt
%ProgramFiles%\defwatch\how to restore your zuioseft files.txt
%ProgramFiles%\digsby\how to restore your zuioseft files.txt
C:\msocache\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\tabbrowser\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_region\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\extensions\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\handling\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\plugins\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\preferences\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\profile\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\update\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\xpinstall\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\necko\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\passwordmgr\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\pipnss\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\downloads\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\places\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\feedback\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\pippki\content\pippki\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\pippki\content\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\pippki\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\toolkit\content\cookie\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\alerts\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\bindings\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\pippki\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\win\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\services\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\unix\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\mac\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\branding\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\downloads\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\feeds\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\migration\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\places\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\preferences\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\safebrowsing\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\sidebar\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\communicator\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\browser_region\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\autoconfig\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\cookie\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\dom\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\layout\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\search\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\security\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\svg\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xml\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xpinstall\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\xslt\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\en_us\locale\en_us\alerts\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\how to restore your zuioseft files.txt
C:\far2\plugins\macroview\how to restore your zuioseft files.txt
C:\far2\plugins\network\how to restore your zuioseft files.txt
C:\far2\plugins\proclist\how to restore your zuioseft files.txt
C:\far2\plugins\tmppanel\how to restore your zuioseft files.txt
C:\far2\plugins\arclite\how to restore your zuioseft files.txt
C:\far2\plugins\how to restore your zuioseft files.txt
C:\far2\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\far2\plugins\farcmds\how to restore your zuioseft files.txt
C:\far2\plugins\ftp\lib\how to restore your zuioseft files.txt
C:\far2\plugins\hlfviewer\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\how to restore your zuioseft files.txt
C:\far2\plugins\ftp\how to restore your zuioseft files.txt
C:\far2\plugins\editcase\how to restore your zuioseft files.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\how to restore your zuioseft files.txt
D:\how to restore your zuioseft files.txt
C:\far2\addons\colors\custom_highlighting\how to restore your zuioseft files.txt
C:\far2\addons\colors\default_highlighting\how to restore your zuioseft files.txt
C:\far2\addons\colors\how to restore your zuioseft files.txt
C:\far2\addons\macros\how to restore your zuioseft files.txt
C:\far2\addons\setup\how to restore your zuioseft files.txt
C:\far2\addons\shell\how to restore your zuioseft files.txt
C:\far2\addons\xlat\russian\how to restore your zuioseft files.txt
C:\far2\addons\xlat\how to restore your zuioseft files.txt
C:\far2\addons\how to restore your zuioseft files.txt
C:\far2\documentation\eng\how to restore your zuioseft files.txt
C:\far2\documentation\rus\how to restore your zuioseft files.txt
%WINDIR%\temp\qjanxcln.dll
C:\far2\documentation\how to restore your zuioseft files.txt
C:\far2\encyclopedia\how to restore your zuioseft files.txt
C:\far2\fexcept\how to restore your zuioseft files.txt
C:\far2\pluginsdk\headers.c\how to restore your zuioseft files.txt
C:\far2\pluginsdk\headers.pas\how to restore your zuioseft files.txt
C:\far2\pluginsdk\how to restore your zuioseft files.txt
C:\far2\plugins\align\how to restore your zuioseft files.txt
C:\far2\plugins\autowrap\how to restore your zuioseft files.txt
nul
C:\far2\plugins\brackets\how to restore your zuioseft files.txt
C:\far2\plugins\compare\how to restore your zuioseft files.txt
C:\far2\plugins\drawline\how to restore your zuioseft files.txt
C:\far2\plugins\emenu\how to restore your zuioseft files.txt
C:\far2\encyclopedia\tap\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\cpow\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\browser\skin\classic\browser\tabview\how to restore your zuioseft files.txt
C:\msocache\all users\how to restore your zuioseft files.txt
%ProgramFiles%\alsvc\how to restore your zuioseft files.txt
%ProgramFiles%\cavemsrv\how to restore your zuioseft files.txt
%ProgramFiles%\cavmud\how to restore your zuioseft files.txt
%ProgramFiles%\cavq\how to restore your zuioseft files.txt
%ProgramFiles%\cavsn\how to restore your zuioseft files.txt
%ProgramFiles%\cavsub\how to restore your zuioseft files.txt
%ProgramFiles%\cavumas\how to restore your zuioseft files.txt
%ProgramFiles%\cavuserupd\how to restore your zuioseft files.txt
%ProgramFiles%\cavmr\how to restore your zuioseft files.txt
%ProgramFiles%\cavoar\how to restore your zuioseft files.txt
%ProgramFiles%\cavvl\how to restore your zuioseft files.txt
%ProgramFiles%\cavasm\how to restore your zuioseft files.txt
%ProgramFiles%\clamtray\how to restore your zuioseft files.txt
%ProgramFiles%\cavapp\how to restore your zuioseft files.txt
%ProgramFiles%\claw95\how to restore your zuioseft files.txt
%ProgramFiles%\clisvc\how to restore your zuioseft files.txt
%ProgramFiles%\courier\how to restore your zuioseft files.txt
%ProgramFiles%\dbconvert\how to restore your zuioseft files.txt
%ProgramFiles%\dbtool\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\full\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\how to restore your zuioseft files.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\how to restore your zuioseft files.txt
%ProgramFiles%\clamwin\how to restore your zuioseft files.txt
C:\far2\plugins\filecase\how to restore your zuioseft files.txt
%ProgramFiles%\claw95cf\how to restore your zuioseft files.txt
%ProgramFiles%\cavaud\how to restore your zuioseft files.txt
%ProgramFiles%\csendto\how to restore your zuioseft files.txt
%ProgramFiles%\cmain\how to restore your zuioseft files.txt
%ProgramFiles%\avkservice\how to restore your zuioseft files.txt
%ProgramFiles%\avkwctl\how to restore your zuioseft files.txt
%ProgramFiles%\about\how to restore your zuioseft files.txt
%ProgramFiles%\ackwin32\how to restore your zuioseft files.txt
%ProgramFiles%\admunch\how to restore your zuioseft files.txt
%ProgramFiles%\agb5\how to restore your zuioseft files.txt
%ProgramFiles%\ahnsd\how to restore your zuioseft files.txt
%ProgramFiles%\anti-trojan\how to restore your zuioseft files.txt
%ProgramFiles%\antivirus\how to restore your zuioseft files.txt
%ProgramFiles%\aoltbserver\how to restore your zuioseft files.txt
%ProgramFiles%\armor2net\how to restore your zuioseft files.txt
%ProgramFiles%\almon\how to restore your zuioseft files.txt
%ProgramFiles%\autodown\how to restore your zuioseft files.txt
%ProgramFiles%\autostartexplorer\how to restore your zuioseft files.txt
%ProgramFiles%\avconsol\how to restore your zuioseft files.txt
%ProgramFiles%\avkserv\how to restore your zuioseft files.txt
%ProgramFiles%\b2\how to restore your zuioseft files.txt
%ProgramFiles%\bdsurvey\how to restore your zuioseft files.txt
%ProgramFiles%\btini\how to restore your zuioseft files.txt
%ProgramFiles%\btinint\how to restore your zuioseft files.txt
%ProgramFiles%\backweb-4476822\how to restore your zuioseft files.txt
%ProgramFiles%\cavscons\how to restore your zuioseft files.txt
%ProgramFiles%\cavsubmit\how to restore your zuioseft files.txt
%ProgramFiles%\ccleaner\how to restore your zuioseft files.txt
%ProgramFiles%\cemrep\how to restore your zuioseft files.txt
%ProgramFiles%\autotrace\how to restore your zuioseft files.txt
%ProgramFiles%\cmgrdian\how to restore your zuioseft files.txt
%ProgramFiles%\360tray\how to restore your zuioseft files.txt
%ProgramFiles%\firefox\chrome\toolkit\content\global\svg\how to restore your zuioseft files.txt

Deletes the following files

<SYSTEM32>\tasks\i

Moves the following files

from %ProgramFiles%\firefox\readme.txt to %ProgramFiles%\firefox\readme.txt.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sync.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sync.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncutils.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncutils.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\sanitize.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\sanitize.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncadddevice.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\syncadddevice.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\tabbrowser.css to %ProgramFiles%\firefox\chrome\browser\content\browser\tabbrowser.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\sanitizedialog.css to %ProgramFiles%\firefox\chrome\browser\content\browser\sanitizedialog.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\utilityoverlay.js to %ProgramFiles%\firefox\chrome\browser\content\browser\utilityoverlay.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutsessionrestore.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutsessionrestore.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\web_panels.js to %ProgramFiles%\firefox\chrome\browser\content\browser\web_panels.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncgenericchange.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\syncgenericchange.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\win6browseroverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\win6browseroverlay.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncquota.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncquota.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncquota.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\syncquota.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutprivatebrowsing.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutprivatebrowsing.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\viewsourceoverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\viewsourceoverlay.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\tabview.css to %ProgramFiles%\firefox\chrome\browser\content\browser\tabview.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncsetup.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\syncsetup.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncsetup.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncsetup.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\web_panels.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\web_panels.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutcerterror.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutcerterror.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\blockedsite.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\blockedsite.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\safemode.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\safemode.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\privacy.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\privacy.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\report_phishing_overlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\report_phishing_overlay.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\content.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\content.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\sb_loader.js to %ProgramFiles%\firefox\chrome\browser\content\browser\safebrowsing\sb_loader.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\sanitize.js to %ProgramFiles%\firefox\chrome\browser\content\browser\sanitize.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\sanitizedialog.js to %ProgramFiles%\firefox\chrome\browser\content\browser\sanitizedialog.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\search\enginemanager.js to %ProgramFiles%\firefox\chrome\browser\content\browser\search\enginemanager.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\search\enginemanager.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\search\enginemanager.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\search\searchbarbindings.css to %ProgramFiles%\firefox\chrome\browser\content\browser\search\searchbarbindings.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sanitize.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sanitize.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\setdesktopbackground.js to %ProgramFiles%\firefox\chrome\browser\content\browser\setdesktopbackground.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\setdesktopbackground.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\setdesktopbackground.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncadddevice.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncadddevice.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\tabs.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\tabs.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\syncgenericchange.js to %ProgramFiles%\firefox\chrome\browser\content\browser\syncgenericchange.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\tabs.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\tabs.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\synckey.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\synckey.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\placesoverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\placesoverlay.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\browser.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\browser.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\aboutsynctabs.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\aboutsynctabs.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\feeds\subscribe.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\feeds\subscribe.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\feeds\subscribe_ui.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\feeds\subscribe_ui.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\aboutcerterror.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\aboutcerterror.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\inspector.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\inspector.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\keyhole_forward_mask.svg to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\keyhole_forward_mask.svg.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\browser.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\browser.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\pageinfo.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\pageinfo.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\enginemanager.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\enginemanager.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\fullscreen_video.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\fullscreen_video.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\organizer.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\organizer.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\places.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\places.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\preferences\applications.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\preferences\applications.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\sanitizedialog.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\sanitizedialog.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\searchbar.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\searchbar.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\setdesktopbackground.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\setdesktopbackground.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\aboutsessionrestore.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\aboutsessionrestore.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\aboutprivatebrowsing.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\aboutprivatebrowsing.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\enginemanager.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\enginemanager.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabview\tabview.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\tabview\tabview.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\synccommon.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\synccommon.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\fullscreen_video.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\fullscreen_video.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\tabview.js to %ProgramFiles%\firefox\chrome\browser\content\browser\tabview.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\pageinfo.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\pageinfo.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutsynctabs.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\aboutsynctabs.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\editbookmarkoverlay.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\editbookmarkoverlay.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\organizer.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\organizer.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sync.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\sync.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\places.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\places\places.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\safemode.js to %ProgramFiles%\firefox\chrome\browser\content\browser\safemode.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\keyhole_forward_mask.svg to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\keyhole_forward_mask.svg.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\searchbar.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\searchbar.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\sanitizedialog.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\sanitizedialog.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\setdesktopbackground.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\setdesktopbackground.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\syncquota.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\syncquota.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\syncsetup.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\syncsetup.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\preferences.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\preferences.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\inspector.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\inspector.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\subscribe_ui.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\feeds\subscribe_ui.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\applications.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\preferences\applications.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\selectbookmark.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\selectbookmark.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\selectbookmark.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\selectbookmark.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\security.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\security.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.js to %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\fullscreen_video.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\fullscreen_video.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\hiddenwindow.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\hiddenwindow.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\history\history_panel.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\history\history_panel.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\migration\migration.js to %ProgramFiles%\firefox\chrome\browser\content\browser\migration\migration.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\migration\migration.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\migration\migration.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\nscontextmenu.js to %ProgramFiles%\firefox\chrome\browser\content\browser\nscontextmenu.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\openlocation.js to %ProgramFiles%\firefox\chrome\browser\content\browser\openlocation.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\openlocation.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\openlocation.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\feeds.js to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\feeds.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.js to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.css to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\pageinfo.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\permissions.js to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\permissions.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\certerror\aboutcerterror.css to %ProgramFiles%\firefox\chrome\browser\content\browser\certerror\aboutcerterror.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\browser.js to %ProgramFiles%\firefox\chrome\browser\content\browser\browser.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.css to %ProgramFiles%\firefox\chrome\browser\content\browser\feeds\subscribe.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\browser.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\browser.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\browser.css to %ProgramFiles%\firefox\chrome\browser\content\browser\browser.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsessionrestore.js to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsessionrestore.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.css to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.js to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutdialog.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.css to %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.js to %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\abouthome.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutprivatebrowsing.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutprivatebrowsing.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\security.js to %ProgramFiles%\firefox\chrome\browser\content\browser\pageinfo\security.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\synccommon.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\synccommon.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutrobots.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutrobots.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.css to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.js to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsynctabs.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\basemenuoverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\basemenuoverlay.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\bookmarkspanel.js to %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\bookmarkspanel.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\bookmarkspanel.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\bookmarkspanel.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\sidebarutils.js to %ProgramFiles%\firefox\chrome\browser\content\browser\bookmarks\sidebarutils.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\networkpanel.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\networkpanel.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsessionrestore.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\aboutsessionrestore.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\editbookmarkoverlay.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\places\editbookmarkoverlay.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\controller.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\controller.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cookies.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cookies.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\fonts.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\fonts.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\fonts.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\fonts.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\handlers.css to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\handlers.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\languages.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\languages.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\languages.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\languages.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\certerror\aboutcerterror.xhtml to %ProgramFiles%\firefox\chrome\browser\content\browser\certerror\aboutcerterror.xhtml.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\main.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\main.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissions.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissions.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissions.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissions.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissionsutils.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\permissionsutils.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\preferences.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\preferences.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\content.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\content.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\privacy.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\privacy.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\security.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\security.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\connection.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\connection.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\main.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\main.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.css to %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cookies.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\cookies.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\connection.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\connection.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\colors.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\colors.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\editbookmarkoverlay.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\editbookmarkoverlay.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\editbookmarkoverlay.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\editbookmarkoverlay.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\history_panel.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\history_panel.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\movebookmarks.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\movebookmarks.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\movebookmarks.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\movebookmarks.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\organizer.css to %ProgramFiles%\firefox\chrome\browser\content\browser\places\organizer.css.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties2.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\bookmarkproperties2.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\places\places.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced_scripts.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\advanced_scripts.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applicationmanager.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applicationmanager.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applicationmanager.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applicationmanager.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applications.js to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applications.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\browserplacesviews.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\browserplacesviews.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applications.xul to %ProgramFiles%\firefox\chrome\browser\content\browser\preferences\applications.xul.zuioseft
from %ProgramFiles%\firefox\chrome\browser\content\browser\places\treeview.js to %ProgramFiles%\firefox\chrome\browser\content\browser\places\treeview.js.zuioseft
from %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\syncquota.css to %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\syncquota.css.zuioseft

Modifies the following files

D:\install.log.zuioseft
C:\far2\encyclopedia\tap\12_r0m.tap.zuioseft
C:\far2\farcze.lng.zuioseft
C:\far2\encyclopedia\farencyclopedia_ru.chm.zuioseft
C:\far2\documentation\rus\techinfo.txt.zuioseft
C:\far2\addons\colors\default_highlighting\descript.ion.zuioseft
C:\far2\documentation\eng\techinfo.txt.zuioseft
C:\far2\documentation\rus\plugins_install.txt.zuioseft
C:\far2\encyclopedia\tap\code.idb.zuioseft
C:\far2\fexcept\changelog.zuioseft
C:\far2\documentation\rus\far_faq.txt.zuioseft
C:\far2\documentation\rus\plugins_review.txt.zuioseft
C:\far2\documentation\eng\plugins_review.txt.zuioseft
C:\far2\documentation\eng\plugins_install.txt.zuioseft
C:\far2\documentation\eng\far_faq.txt.zuioseft
C:\far2\documentation\eng\bug_report.txt.zuioseft
C:\far2\documentation\eng\arc_support.txt.zuioseft
C:\far2\addons\shell\farhere.inf.zuioseft
C:\far2\clearpluginscache.cmd.zuioseft
C:\far2\addons\xlat\russian\descript.ion.zuioseft
C:\far2\addons\xlat\descript.ion.zuioseft
C:\far2\addons\shell\descript.ion.zuioseft
C:\far2\addons\readme.txt.zuioseft
C:\far2\addons\setup\descript.ion.zuioseft
C:\far2\addons\macros\descript.ion.zuioseft
C:\far2\addons\colors\custom_highlighting\descript.ion.zuioseft
C:\far2\addons\descript.ion.zuioseft
C:\far2\addons\colors\descript.ion.zuioseft
C:\far2\documentation\rus\arc_support.txt.zuioseft
C:\far2\fareng.hlf.zuioseft

Modifies multiple files.

Changes user data files extensions (Trojan.Encoder).

Miscellaneous

Creates and executes the following

'<SYSTEM32>\cmd.exe' /c "%WINDIR%\temp\qde.bat"' (with hidden window)

Executes the following

'<SYSTEM32>\taskeng.exe' {B046682A-0754-4708-9D46-D5D6F25626CA} S-1-5-21-1960123792-2022915161-3775307078-1001:ltcxuhuzlemf\user:Interactive:[1]
'<SYSTEM32>\cmd.exe' /c "%WINDIR%\temp\qde.bat"
'<SYSTEM32>\sc.exe' start vss
'<SYSTEM32>\timeout.exe' /T 5

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial