Technical Information
Malicious functions
Reads files which store third party applications passwords
- %HOMEPATH%\desktop\508softwareandos.doc
- %HOMEPATH%\desktop\tree_view.htm
- %HOMEPATH%\desktop\tileimage.bmp
- %HOMEPATH%\desktop\split.avi
- %HOMEPATH%\desktop\sdksampleunprivdeveloper.cer
- %HOMEPATH%\desktop\lisp_success.doc
- %HOMEPATH%\desktop\iisstart.html
- %HOMEPATH%\desktop\iisstart.htm
- %HOMEPATH%\desktop\howto-index.html
- %HOMEPATH%\desktop\holycrosschurchinstructions.docx
- %HOMEPATH%\desktop\hanni_umami_chapter.doc
- %HOMEPATH%\desktop\fi51.doc
- %HOMEPATH%\desktop\dashborder_144.bmp
- %HOMEPATH%\desktop\delete.avi
- %HOMEPATH%\desktop\default.bmp
- %HOMEPATH%\desktop\cveuropeo.doc
- %HOMEPATH%\desktop\correct.avi
- %HOMEPATH%\desktop\browse.htm
- %HOMEPATH%\desktop\applicantform_en.doc
- %HOMEPATH%\desktop\adadsi.html
- %HOMEPATH%\desktop\trivial-merge.htm
- %HOMEPATH%\desktop\weeklysheet1215.doc
Modifies file system
Creates the following files
- %HOMEPATH%\documents\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\canyon\canyon.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\iris\iris.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\blends\preview.gif.sola
- %ProgramFiles%\dvd maker\shared\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\concrete\concrete.elm.sola
- %CommonProgramFiles%\microsoft shared\ink\mshwgst.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\tipresx.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\concrete\concrete.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\boldstri.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\capsules\capsules.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\cascade\cascade.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\echo\echo.inf.sola
- %CommonProgramFiles%\microsoft shared\ink\micaut.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\mip.exe.sola
- %CommonProgramFiles%\microsoft shared\themes14\compass\compass.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\indust\indust.inf.sola
- %CommonProgramFiles%\microsoft shared\ink\journal.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\ice\ice.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\capsules\preview.gif.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ipsmigrationplugin.dll.sola
- %CommonProgramFiles%\system\ado\msado25.tlb.sola
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\eclipse.inf.sola
- %CommonProgramFiles%\system\ado\msado27.tlb.sola
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\expeditn.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\ice\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\bluecalm.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\aftrnoon.elm.sola
- %CommonProgramFiles%\microsoft shared\ink\inkobj.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\evrgreen.elm.sola
- %CommonProgramFiles%\microsoft shared\ink\ipsplugin.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\eclipse.elm.sola
- %CommonProgramFiles%\microsoft shared\ink\inputpersonalization.exe.sola
- %CommonProgramFiles%\microsoft shared\themes14\breeze\breeze.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\ink\tabskb.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\canyon\canyon.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\journal\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\boldstri.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\indust\indust.elm.sola
- %CommonProgramFiles%\microsoft shared\ink\mshwlatin.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\tabipsps.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\rtscom.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\microsoft.ink.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\mraut.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\ipseventlogmsg.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\canyon\preview.gif.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\shatter\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\concrete\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\compass\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\cascade\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\edge\edge.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\indust\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\iris\preview.gif.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\convertinkstore.exe.sola
- %CommonProgramFiles%\microsoft shared\ink\inkwatson.exe.sola
- %CommonProgramFiles%\microsoft shared\themes14\cascade\cascade.elm.sola
- %CommonProgramFiles%\microsoft shared\ink\flicklearningwizard.exe.sola
- %CommonProgramFiles%\microsoft shared\themes14\breeze\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\deepblue.inf.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\flippage\readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\full\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\deepblue.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\ink\tipband.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\ink\shapecollector.exe.sola
- %CommonProgramFiles%\microsoft shared\ink\tipres.dll.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\performance\readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\pets\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\tipskins.dll.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\push\readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\tpcps.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\journal\journal.elm.sola
- %CommonProgramFiles%\microsoft shared\ink\tabtip.exe.sola
- %ProgramFiles%\dvd maker\en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\inkdiv.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\echo\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\sonora\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\spring\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\strtedge\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\oct.chm.sola
- %CommonProgramFiles%\microsoft shared\themes14\arctic\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\studio\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\axis\preview.gif.sola
- %CommonProgramFiles%\microsoft shared\themes14\arctic\arctic.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\sumipntg\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\water\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\watermar\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\blueprnt.inf.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\osetupui.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\axis\axis.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\slate\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\sky\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\rmnsque\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\axis\axis.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\papyrus\readme.txt
- %CommonProgramFiles%\microsoft shared\proof\mslid.dll.sola
- %CommonProgramFiles%\microsoft shared\proof\mswds_fr.lex.sola
- %CommonProgramFiles%\microsoft shared\themes14\pixel\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\profile\readme.txt
- %CommonProgramFiles%\microsoft shared\translat\arfr\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\quad\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\odeploy.exe.sola
- %CommonProgramFiles%\microsoft shared\themes14\satin\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\radial\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\arctic\arctic.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\ricepapr\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\ripple\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\1033\msointl.dll.idx_dll.sola
- %CommonProgramFiles%\microsoft shared\proof\mswds_en.lex.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\pkeyconfig-office.xrm-ms.sola
- %CommonProgramFiles%\microsoft shared\themes14\level\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\layers\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\refined\readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\readme.txt
- %CommonProgramFiles%\microsoft shared\translat\enes\readme.txt
- %CommonProgramFiles%\microsoft shared\translat\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\aftrnoon.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\blends\blends.elm.sola
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\expeditn.inf.sola
- %CommonProgramFiles%\system\readme.txt
- %CommonProgramFiles%\system\en-us\readme.txt
- %CommonProgramFiles%\system\msadc\readme.txt
- %CommonProgramFiles%\microsoft shared\translat\esen\readme.txt
- %CommonProgramFiles%\system\msadc\en-us\readme.txt
- %CommonProgramFiles%\system\msmapi\1033\readme.txt
- %CommonProgramFiles%\system\ole db\en-us\readme.txt
- %CommonProgramFiles%\system\ole db\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\ice\ice.inf.sola
- %ProgramFiles%\readme.txt
- %ProgramFiles%\dvd maker\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\blends\blends.inf.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\ipsmigrationplugin.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\evrgreen.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\bluecalm.inf.sola
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\blueprnt.elm.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\inputpersonalization.exe.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\inkobj.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\vba\vba7\1033\readme.txt
- %CommonProgramFiles%\microsoft shared\vba\vba7\readme.txt
- %CommonProgramFiles%\microsoft shared\vc\readme.txt
- %CommonProgramFiles%\microsoft shared\vgx\readme.txt
- %CommonProgramFiles%\microsoft shared\vsto\10.0\1033\readme.txt
- %CommonProgramFiles%\microsoft shared\translat\enfr\readme.txt
- %CommonProgramFiles%\microsoft shared\vsto\10.0\readme.txt
- %CommonProgramFiles%\microsoft shared\web folders\1033\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\tiptsf.dll.sola
- %CommonProgramFiles%\microsoft shared\web folders\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\en-us\tiptsf.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\tabskb.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\micaut.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\mshwlatin.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\shapecollector.exe.mui.sola
- %CommonProgramFiles%\microsoft shared\vsto\readme.txt
- %CommonProgramFiles%\microsoft shared\translat\fren\readme.txt
- %CommonProgramFiles%\microsoft shared\translat\frar\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\en-us\tipres.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\smart tag\lists\basmla.xsl.sola
- %CommonProgramFiles%\microsoft shared\themes14\capsules\capsules.elm.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.sola
- %ProgramFiles%\java\jre1.8.0_45\bin\unpack.dll.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties.sola
- %ProgramFiles%\java\jre1.8.0_45\bin\tnameserv.exe.sola
- %ProgramFiles%\java\jre1.8.0_45\copyright.sola
- %ProgramFiles%\dvd maker\shared\parity.fx.sola
- %ProgramFiles%\java\jre1.8.0_45\bin\sunmscapi.dll.sola
- %ProgramFiles%\java\jre1.8.0_45\bin\t2k.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\expsrv.dll.sola
- %ProgramFiles%\internet explorer\iedvtool.dll.sola
- %ProgramFiles%\internet explorer\en-us\iedvtool.dll.mui.sola
- %ProgramFiles%\internet explorer\en-us\jsdebuggeride.dll.mui.sola
- %ProgramFiles%\internet explorer\en-us\jsprofilercore.dll.mui.sola
- %ProgramFiles%\internet explorer\en-us\ielowutil.exe.mui.sola
- %ProgramFiles%\internet explorer\en-us\jsdbgui.dll.mui.sola
- %ProgramFiles%\internet explorer\en-us\jsprofilerui.dll.mui.sola
- %ProgramFiles%\dvd maker\wmm2clip.dll.sola
- %ProgramFiles%\internet explorer\en-us\iexplore.exe.mui.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg.sola
- %ProgramFiles%\internet explorer\iecompat.dll.sola
- %ProgramFiles%\internet explorer\hmmapi.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\csisoap.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\aceodbc.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acetxt.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\csi.dll.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\videowall\readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\vignette\readme.txt
- %ProgramFiles%\internet explorer\en-us\readme.txt
- %ProgramFiles%\dvd maker\sonicsptransform.ax.sola
- %ProgramFiles%\internet explorer\readme.txt
- %ProgramFiles%\internet explorer\ieinstal.exe.sola
- %ProgramFiles%\java\jre1.8.0_45\bin\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\bin\plugin2\readme.txt
- %ProgramFiles%\internet explorer\en-us\hmmapi.dll.mui.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\amd64\readme.txt
- %ProgramFiles%\internet explorer\ie8props.propdesc.sola
- %ProgramFiles%\dvd maker\soniccolorconverter.ax.sola
- %ProgramFiles%\internet explorer\signup\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\aceexch.dll.sola
- %ProgramFiles%\java\jre1.8.0_45\bin\dtplugin\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\journal\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\aceexcl.dll.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\currency.data.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\deploy\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties.sola
- %ProgramFiles%\microsoft office\media\cagcat10\j0211949.wmf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\ext\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\jfr\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\management\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\security\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\classlist.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\readme.txt
- %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\readme.txt
- %ProgramFiles%\internet explorer\en-us\ieinstal.exe.mui.sola
- %ProgramFiles%\microsoft analysis services\as oledb\10\readme.txt
- %ProgramFiles%\microsoft office\clipart\pub60cor\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\fonts\readme.txt
- %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\network\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\exp_xps.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\exp_pdf.dll.sola
- %CommonProgramFiles%\system\msadc\msadcer.dll.sola
- %CommonProgramFiles%\system\msadc\msadcs.dll.sola
- %CommonProgramFiles%\system\msadc\msaddsr.dll.sola
- %CommonProgramFiles%\system\msadc\msdaprsr.dll.sola
- %CommonProgramFiles%\system\msadc\msdaremr.dll.sola
- %CommonProgramFiles%\system\ole db\msdatl3.dll.sola
- %CommonProgramFiles%\system\ole db\oledb32.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acer3x.dll.sola
- %CommonProgramFiles%\system\msadc\msadds.dll.sola
- %CommonProgramFiles%\system\ole db\en-us\sqlxmlx.rll.mui.sola
- %CommonProgramFiles%\system\ole db\sqlxmlx.dll.sola
- %CommonProgramFiles%\system\ole db\en-us\oledb32r.dll.mui.sola
- %CommonProgramFiles%\system\msadc\msdfmap.dll.sola
- %CommonProgramFiles%\system\ole db\msdaps.dll.sola
- %CommonProgramFiles%\system\ole db\sqloledb.rll.sola
- %CommonProgramFiles%\system\msadc\adcvbs.inc.sola
- %CommonProgramFiles%\system\msadc\msadcor.dll.sola
- %CommonProgramFiles%\system\msadc\msadco.dll.sola
- %CommonProgramFiles%\system\msadc\msadcf.dll.sola
- %CommonProgramFiles%\system\msadc\msdaprst.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\iris\iris.elm.sola
- %CommonProgramFiles%\system\msadc\adcjavas.inc.sola
- %CommonProgramFiles%\system\directdb.dll.sola
- %CommonProgramFiles%\system\wab32res.dll.sola
- %CommonProgramFiles%\system\en-us\wab32res.dll.mui.sola
- %CommonProgramFiles%\system\msadc\en-us\msadcor.dll.mui.sola
- %CommonProgramFiles%\system\msadc\en-us\msadcer.dll.mui.sola
- %CommonProgramFiles%\system\ole db\en-us\msdasqlr.dll.mui.sola
- %CommonProgramFiles%\system\msadc\en-us\msadcfr.dll.mui.sola
- %CommonProgramFiles%\system\ole db\oledbvbs.inc.sola
- %CommonProgramFiles%\system\msadc\en-us\msdaprsr.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\themes14\edge\edge.elm.sola
- %CommonProgramFiles%\system\ole db\oledb32r.dll.sola
- %CommonProgramFiles%\system\ole db\sqloledb.dll.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\sports\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\edge\preview.gif.sola
- %CommonProgramFiles%\system\msadc\msdarem.dll.sola
- %CommonProgramFiles%\system\msadc\en-us\msaddsr.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\themes14\compass\compass.elm.sola
- %CommonProgramFiles%\system\msadc\en-us\msdaremr.dll.mui.sola
- %CommonProgramFiles%\system\msmapi\1033\msmapi32.dll.sola
- %CommonProgramFiles%\system\msadc\msadce.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\muoptin.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\muauth.cab.sola
- %CommonProgramFiles%\microsoft shared\office14\wisc30.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\aceoledb.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acewss.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acexbe.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acerclr.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acerep.dll.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\stacking\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\acecore.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\vbajet32.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acewdat.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\riched20.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\mso.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acees.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\acedao.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\optinps.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\aceodexl.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\aceodtxt.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\offrel.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\msptls.dll.sola
- %ProgramFiles%\dvd maker\shared\dvdstyles\travel\readme.txt
- %ProgramFiles%\desktop.ini.sola
- %CommonProgramFiles%\microsoft shared\office14\aceoddbs.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\aceerr.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\fltldr.exe.sola
- %CommonProgramFiles%\microsoft shared\office14\msoicons.exe.sola
- %CommonProgramFiles%\microsoft shared\office14\oarpmany.exe.sola
- %CommonProgramFiles%\system\ole db\en-us\sqloledb.rll.mui.sola
- %CommonProgramFiles%\microsoft shared\office14\usp10.dll.sola
- %CommonProgramFiles%\system\ole db\msdaosp.dll.sola
- %ProgramFiles%\dvd maker\audiodepthconverter.ax.sola
- %CommonProgramFiles%\microsoft shared\office14\ophproxy.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\liclua.exe.sola
- %CommonProgramFiles%\microsoft shared\office14\iacom2.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\msoxev.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\msores.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\mssoap30.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\msoxmled.exe.sola
- %CommonProgramFiles%\system\ole db\xmlrw.dll.sola
- %ProgramFiles%\dvd maker\bod_r.ttf.sola
- %CommonProgramFiles%\microsoft shared\themes14\iris\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\indust\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\setup.chm.sola
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.sola
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi.sola
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\readme.txt
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\readme.txt
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\readme.txt
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\readme.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\readme.txt
- C:\readme.txt
- %CommonProgramFiles%\microsoft shared\dw\readme.txt
- %CommonProgramFiles%\microsoft shared\equation\1033\readme.txt
- %CommonProgramFiles%\microsoft shared\equation\readme.txt
- %CommonProgramFiles%\microsoft shared\euro\readme.txt
- %CommonProgramFiles%\microsoft shared\filters\readme.txt
- %CommonProgramFiles%\microsoft shared\grphflt\readme.txt
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\readme.txt
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.sola
- %CommonProgramFiles%\designer\readme.txt
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\readme.txt
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab.sola
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab.sola
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.msi.sola
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\readme.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi.sola
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab.sola
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab.sola
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.msi.sola
- %CommonProgramFiles%\microsoft shared\help\readme.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.msi.sola
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\readme.txt
- <Full path to file>.sola
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab.sola
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.msi.sola
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi.sola
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi.sola
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab.sola
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\readme.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.cab.sola
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.msi.sola
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab.sola
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\owow32lr.cab.sola
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\da-dk\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ko-kr\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\lt-lt\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\lv-lv\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\nb-no\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\nl-nl\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\pl-pl\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\bg-bg\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\pt-br\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ro-ro\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ru-ru\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\sk-sk\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\sl-si\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\sv-se\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\hr-hr\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\he-il\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\pt-pt\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ja-jp\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\it-it\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\de-de\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\el-gr\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\es-es\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\et-ee\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ar-sa\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fi-fi\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\hu-hu\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fr-fr\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\cs-cz\readme.txt
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\dwintl20.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\readme.txt
- %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar.sola
- %CommonProgramFiles%\microsoft shared\ink\th-th\readme.txt
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\setup.exe.sola
- C:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\readme.txt
- C:\kms\readme.txt
- <Current directory>\readme.txt
- %HOMEPATH%\desktop\telegram.lnk.sola
- %HOMEPATH%\pictures\desktop.ini.sola
- %HOMEPATH%\downloads\desktop.ini.sola
- %HOMEPATH%\music\desktop.ini.sola
- %HOMEPATH%\videos\desktop.ini.sola
- %HOMEPATH%\contacts\desktop.ini.sola
- %HOMEPATH%\favorites\desktop.ini.sola
- %HOMEPATH%\favorites\links\desktop.ini.sola
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\readme.txt
- %HOMEPATH%\favorites\links for united states\gobiernousa.gov.url.sola
- %HOMEPATH%\favorites\links for united states\desktop.ini.sola
- %HOMEPATH%\favorites\links for united states\usa.gov.url.sola
- %HOMEPATH%\favorites\windows live\readme.txt
- %HOMEPATH%\desktop\google chrome.lnk.sola
- %HOMEPATH%\saved games\readme.txt
- %HOMEPATH%\favorites\msn websites\readme.txt
- %HOMEPATH%\desktop\desktop.ini.sola
- %HOMEPATH%\videos\readme.txt
- %HOMEPATH%\documents\desktop.ini.sola
- %HOMEPATH%\desktop\508softwareandos.doc.sola
- %HOMEPATH%\desktop\adadsi.html.sola
- %HOMEPATH%\desktop\applicantform_en.doc.sola
- %HOMEPATH%\desktop\browse.htm.sola
- %HOMEPATH%\pictures\readme.txt
- %HOMEPATH%\downloads\readme.txt
- %HOMEPATH%\favorites\msn websites\msn autos.url.sola
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab.sola
- %HOMEPATH%\music\readme.txt
- %HOMEPATH%\desktop\cveuropeo.doc.sola
- %HOMEPATH%\contacts\readme.txt
- %HOMEPATH%\favorites\readme.txt
- %HOMEPATH%\desktop\correct.avi.sola
- %HOMEPATH%\favorites\links\readme.txt
- %HOMEPATH%\favorites\links for united states\readme.txt
- %HOMEPATH%\favorites\microsoft websites\readme.txt
- %HOMEPATH%\desktop\readme.txt
- %HOMEPATH%\desktop\calc.exe.sola
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.msi.sola
- %HOMEPATH%\favorites\msn websites\msn entertainment.url.sola
- %HOMEPATH%\favorites\msn websites\msnbc news.url.sola
- %HOMEPATH%\links\recentplaces.lnk.sola
- %HOMEPATH%\favorites\windows live\get windows live.url.sola
- %HOMEPATH%\favorites\windows live\windows live mail.url.sola
- %HOMEPATH%\links\downloads.lnk.sola
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.sola
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.sola
- %HOMEPATH%\links\readme.txt
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.msi.sola
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\readme.txt
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww.cab.sola
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\readme.txt
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.msi.sola
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\readme.txt
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab.sola
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww2.cab.sola
- %HOMEPATH%\favorites\windows live\windows live spaces.url.sola
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.sola
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\readme.txt
- %HOMEPATH%\favorites\windows live\windows live gallery.url.sola
- %HOMEPATH%\links\desktop.lnk.sola
- %HOMEPATH%\favorites\microsoft websites\microsoft at work.url.sola
- %HOMEPATH%\links\desktop.ini.sola
- %HOMEPATH%\saved games\desktop.ini.sola
- C:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\desktop.ini.sola
- C:\kms\kms_vl_all_aio.cmd.sola
- C:\kms\kms_vl_all_aio_debug.log.sola
- %HOMEPATH%\favorites\links\web slice gallery.url.sola
- %HOMEPATH%\favorites\msn websites\msn money.url.sola
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\readme.txt
- %HOMEPATH%\favorites\msn websites\msn sports.url.sola
- %HOMEPATH%\contacts\user.contact.sola
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi.sola
- %HOMEPATH%\favorites\microsoft websites\ie add-on site.url.sola
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll.sola
- %HOMEPATH%\favorites\microsoft websites\microsoft at home.url.sola
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\readme.txt
- %HOMEPATH%\favorites\microsoft websites\ie site on microsoft.com.url.sola
- %HOMEPATH%\favorites\msn websites\msn.url.sola
- %HOMEPATH%\favorites\microsoft websites\microsoft store.url.sola
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif.sola
- %CommonProgramFiles%\microsoft shared\ink\tr-tr\readme.txt
- %CommonProgramFiles%\microsoft shared\msclientdatamgr\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\et-ee\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\stationery\shorthand.emf.sola
- %CommonProgramFiles%\microsoft shared\ink\zh-tw\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\smart tag\1033\stintl.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\inkwatson.exe.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\mip.exe.mui.sola
- %CommonProgramFiles%\microsoft shared\filters\odffilt.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\tipband.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\help\msitss55.dll.sola
- %CommonProgramFiles%\microsoft shared\filters\msgfilt.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm.sola
- %CommonProgramFiles%\microsoft shared\themes14\axis\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\blends\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\readme.txt
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.sola
- %CommonProgramFiles%\microsoft shared\ink\nl-nl\tipresx.dll.mui.sola
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.sola
- %CommonProgramFiles%\microsoft shared\ink\fr-fr\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\hr-hr\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\themes14\arctic\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\th-th\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\smart tag\fstock.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\msointl.rest.idx_dll.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\oarpmanr.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\xlsrvintl.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\msointl.dll.sola
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm.sola
- %CommonProgramFiles%\microsoft shared\help\itircl55.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\uk-ua\readme.txt
- %CommonProgramFiles%\microsoft shared\textconv\msconv97.dll.sola
- %CommonProgramFiles%\microsoft shared\equation\eqnedt32.cnt.sola
- %CommonProgramFiles%\microsoft shared\ink\ru-ru\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\it-it\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\hu-hu\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\smart tag\1033\stintl.dll.idx_dll.sola
- %CommonProgramFiles%\microsoft shared\stationery\to_do_list.emf.sola
- %CommonProgramFiles%\microsoft shared\smart tag\ietag.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\tr-tr\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\pl-pl\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\sk-sk\tipresx.dll.mui.sola
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\pt-pt\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\themes14\cascade\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\readme.txt.sola
- %CommonProgramFiles%\microsoft shared\themes14\compass\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\pkeyconfig.companion.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\concrete\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\readme.txt
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.sola
- %CommonProgramFiles%\microsoft shared\themes14\echo\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\edge\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\osetup.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\msoshext.dll.sola
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\ice\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm.sola
- %CommonProgramFiles%\microsoft shared\themes14\breeze\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\capsules\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\canyon\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\lt-lt\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\stationery\music.emf.sola
- %CommonProgramFiles%\microsoft shared\stationery\wrinkled_paper.gif.sola
- %CommonProgramFiles%\microsoft shared\filters\offfiltx.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\pidgenx.dll.sola
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.sola
- %CommonProgramFiles%\microsoft shared\ink\en-us\flicklearningwizard.exe.mui.sola
- %CommonProgramFiles%\microsoft shared\stationery\stucco.gif.sola
- %CommonProgramFiles%\microsoft shared\stationery\grid_(cm).wmf.sola
- %CommonProgramFiles%\microsoft shared\stationery\genko_1.emf.sola
- %CommonProgramFiles%\microsoft shared\stationery\desktop.ini.sola
- %CommonProgramFiles%\microsoft shared\stationery\memo.emf.sola
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.sola
- %CommonProgramFiles%\microsoft shared\office14\msoxmlmf.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\readme.txt.sola
- %CommonProgramFiles%\microsoft shared\stationery\tiki.gif.sola
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.sola
- %CommonProgramFiles%\microsoft shared\stationery\graph.emf.sola
- %CommonProgramFiles%\microsoft shared\ink\zh-cn\readme.txt
- %CommonProgramFiles%\microsoft shared\proof\mswds_es.lex.sola
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\readme.txt
- %CommonProgramFiles%\microsoft shared\proof\readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\1033\readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\lists\1033\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\lists\readme.txt
- %CommonProgramFiles%\microsoft shared\stationery\readme.txt
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppobjs-spp-plugin-manifest-signed.xrm-ms.sola
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppobjs.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\alrtintl.dll.sola
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.sola
- %CommonProgramFiles%\microsoft shared\source engine\ose.exe.sola
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\accessmui.msi.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\source engine\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\readme.txt
- %CommonProgramFiles%\microsoft shared\msinfo\en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\msinfo\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\1033\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\cultures\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\1033\acerecr.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\mofl.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\readme.txt
- %CommonProgramFiles%\microsoft shared\ink\zh-tw\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\readme.txt
- %CommonProgramFiles%\microsoft shared\grphflt\epsimp32.flt.sola
- %CommonProgramFiles%\microsoft shared\smart tag\fdate.dll.sola
- %CommonProgramFiles%\microsoft shared\euro\msoeuro.dll.sola
- %CommonProgramFiles%\microsoft shared\grphflt\cgmimp32.fnt.sola
- %CommonProgramFiles%\microsoft shared\grphflt\wpgimp32.flt.sola
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\metconv.txt.sola
- %CommonProgramFiles%\microsoft shared\grphflt\ms.wpg.sola
- %CommonProgramFiles%\microsoft shared\grphflt\png32.flt.sola
- %CommonProgramFiles%\microsoft shared\grphflt\cgmimp32.cfg.sola
- %CommonProgramFiles%\microsoft shared\grphflt\jpegim32.flt.sola
- %CommonProgramFiles%\microsoft shared\ink\he-il\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\nb-no\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\ro-ro\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\cs-cz\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\de-de\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\es-es\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\dw\dwtrig20.exe.sola
- %CommonProgramFiles%\microsoft shared\smart tag\fbiblio.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\fi-fi\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\grphflt\ms.cgm.sola
- %CommonProgramFiles%\microsoft shared\equation\eqnedt32.exe.sola
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\branding.dll.sola
- %CommonProgramFiles%\microsoft shared\textconv\readme.txt
- %CommonProgramFiles%\microsoft shared\equation\1033\eeintl.dll.sola
- %CommonProgramFiles%\microsoft shared\ink\bg-bg\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\ink\ar-sa\tipresx.dll.mui.sola
- %CommonProgramFiles%\microsoft shared\office14\cultures\office.odf.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\ado210.chm.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\aceodbci.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\acewstr.dll.sola
- %CommonProgramFiles%\designer\msaddndr.dll.sola
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\acclr.cab.sola
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppsvc.exe.sola
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppwmi.mof.sola
- %CommonProgramFiles%\microsoft shared\help\hxds.dll.sola
- %CommonProgramFiles%\microsoft shared\msclientdatamgr\mscdm.dll.sola
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\ospprearm.exe.sola
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppcext.dll.sola
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppwmi.dll.sola
- %CommonProgramFiles%\microsoft shared\office14\1033\aceintl.dll.sola
- %CommonProgramFiles%\microsoft shared\equation\mtextra.ttf.sola
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppc.dll.sola
- %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access.sola
Deletes the following files
- %CommonProgramFiles%\microsoft shared\ink\readme.txt
- %CommonProgramFiles%\microsoft shared\office14\readme.txt
Deletes itself.
Changes user data files extensions (Trojan.Encoder).
Miscellaneous
Restarts the analyzed sample
Executes the following
- '<Full path to file>' --food' (with hidden window)
