Trojan.Encoder.40850

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

<SYSTEM32>\tasks\readme.txt

Malicious functions

Reads files which store third party applications passwords

%HOMEPATH%\desktop\000814251_video_01.avi
%HOMEPATH%\desktop\tree_view.html
%HOMEPATH%\desktop\toolbar.bmp
%HOMEPATH%\desktop\tileimage.bmp
%HOMEPATH%\desktop\testcertificate.cer
%HOMEPATH%\desktop\sdkfailsafeemulator.cer
%HOMEPATH%\desktop\split.avi
%HOMEPATH%\desktop\sdksampleprivdeveloper.cer
%HOMEPATH%\desktop\pushkin.jpeg
%HOMEPATH%\desktop\pmd.cer
%HOMEPATH%\desktop\nwfieldnotes1966.docx
%HOMEPATH%\desktop\howto-index.html
%HOMEPATH%\desktop\holycrosschurchinstructions.docx
%HOMEPATH%\desktop\hanni_umami_chapter.doc
%HOMEPATH%\desktop\trivial-merge.html
%HOMEPATH%\desktop\default.bmp
%HOMEPATH%\desktop\dashborder_120.bmp
%HOMEPATH%\desktop\contoso.cer
%HOMEPATH%\desktop\browse.html
%HOMEPATH%\desktop\archer.avi
%HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
%HOMEPATH%\desktop\alert.html
%HOMEPATH%\desktop\alert.htm
%HOMEPATH%\desktop\advice_process.htm
%HOMEPATH%\desktop\64bit_notes.htm
%HOMEPATH%\desktop\3.jpeg
%HOMEPATH%\desktop\4f0bf7ff71f28.jpeg
%HOMEPATH%\desktop\1189.jpeg
%HOMEPATH%\desktop\2.jpeg
%HOMEPATH%\desktop\contosoroot.cer
%HOMEPATH%\desktop\weeklysheet1215.doc

Modifies file system

Creates the following files

%ALLUSERSPROFILE%\mozilla\updates\308046b0af4a39cb\active-update.xml.tmp
%WINDIR%\inf\smsvchost 3.0.0.0\_smsvchostperfcounters.ini.enc
%WINDIR%\inf\tape.inf.enc
%WINDIR%\inf\stexstor.inf.enc
%WINDIR%\inf\smartcrd.pnf.enc
%WINDIR%\inf\sisraid4.inf.enc
%WINDIR%\inf\sffdisk.pnf.enc
%WINDIR%\inf\sffdisk.inf.enc
%WINDIR%\inf\synth3dvsc.inf.enc
%WINDIR%\inf\stexstor.pnf.enc
%WINDIR%\servicing\editions\readme.txt
%WINDIR%\inf\smartcrd.inf.enc
%WINDIR%\serviceprofiles\networkservice\readme.txt
%WINDIR%\inf\sti.pnf.enc
%WINDIR%\serviceprofiles\localservice\readme.txt
%WINDIR%\inf\tape.pnf.enc
%WINDIR%\security\logs\readme.txt
%WINDIR%\schemas\wcn\readme.txt
%WINDIR%\inf\sti.inf.enc
%WINDIR%\schemas\availablenetwork\readme.txt
%WINDIR%\resources\themes\readme.txt
%WINDIR%\resources\ease of access themes\readme.txt
%WINDIR%\registration\readme.txt
%WINDIR%\prefetch\readyboot\readme.txt
%WINDIR%\inf\setupapi.app.log.enc
%WINDIR%\inf\setupapi.ev1.enc
%WINDIR%\prefetch\readme.txt
%WINDIR%\inf\setupapi.ev2.enc
%WINDIR%\inf\setupapi.ev3.enc
%WINDIR%\inf\setupapi.offline.log.enc
%WINDIR%\inf\sisraid2.inf.enc
%WINDIR%\security\database\readme.txt
%WINDIR%\inf\sisraid2.pnf.enc
%WINDIR%\inf\tapisrv\perfctr.h.enc
%WINDIR%\inf\tdibth.pnf.enc
%WINDIR%\inf\umpass.pnf.enc
%WINDIR%\inf\ts_wpdmtp.inf.enc
%WINDIR%\inf\ts_wpdmtp.pnf.enc
%WINDIR%\inf\ugatherer\gsrvctr.h.enc
%WINDIR%\inf\ugthrsvc\gthrctr.h.enc
%WINDIR%\inf\umbus.inf.enc
%WINDIR%\inf\umbus.pnf.enc
%WINDIR%\inf\umpass.inf.enc
%WINDIR%\inf\sdbus.pnf.enc
%WINDIR%\inf\unknown.pnf.enc
%WINDIR%\inf\unknown.inf.enc
%WINDIR%\inf\usb.pnf.enc
%WINDIR%\inf\usb.inf.enc
%WINDIR%\inf\usbcir.pnf.enc
%WINDIR%\inf\ts_generic.inf.enc
%WINDIR%\inf\usbcir.inf.enc
%WINDIR%\inf\ts_generic.pnf.enc
%WINDIR%\inf\tsusbhubfilter.inf.enc
%WINDIR%\inf\tsusbhubfilter.pnf.enc
%WINDIR%\inf\tsprint.pnf.enc
%WINDIR%\inf\tsusbhub.inf.enc
%WINDIR%\inf\tsgenericusbdriver.inf.enc
%WINDIR%\inf\tsprint.inf.enc
%WINDIR%\inf\transfercable.pnf.enc
%WINDIR%\inf\transfercable.inf.enc
%WINDIR%\inf\tpm.pnf.enc
%WINDIR%\inf\termservice\tslabels.h.enc
%WINDIR%\inf\tpm.inf.enc
%WINDIR%\inf\termmou.inf.enc
%WINDIR%\inf\termkbd.inf.enc
%WINDIR%\inf\tdibth.inf.enc
%WINDIR%\inf\sisraid4.pnf.enc
%WINDIR%\inf\servicemodelendpoint 3.0.0.0\_servicemodelendpointperfcounters.ini.enc
%WINDIR%\policydefinitions\en-us\readme.txt
%WINDIR%\l2schemas\readme.txt
%WINDIR%\media\delta\readme.txt
%WINDIR%\media\cityscape\readme.txt
%WINDIR%\inf\sbp2.pnf.enc
%WINDIR%\media\readme.txt
%WINDIR%\inf\sbp2.inf.enc
%WINDIR%\media\characters\readme.txt
%WINDIR%\media\calligraphy\readme.txt
%WINDIR%\media\afternoon\readme.txt
%WINDIR%\inf\rspndr.pnf.enc
%WINDIR%\inf\rndiscmp.pnf.enc
%WINDIR%\logs\dpx\readme.txt
%WINDIR%\logs\cbs\readme.txt
%WINDIR%\inf\rspndr.inf.enc
%WINDIR%\inf\sceregvl.inf.enc
%WINDIR%\media\festival\readme.txt
%WINDIR%\media\garden\readme.txt
%WINDIR%\installer\{90140000-0043-0000-1000-0000000ff1ce}\readme.txt
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\readme.txt
%WINDIR%\installer\readme.txt
%WINDIR%\inf\wsearchidxpi\readme.txt
%WINDIR%\inf\rndiscmp.inf.enc
%WINDIR%\inf\ricoh.pnf.enc
%WINDIR%\inf\ricoh.inf.enc
%WINDIR%\inf\wmiaprpl\readme.txt
%WINDIR%\inf\windows workflow foundation 4.0.0.0\readme.txt
%WINDIR%\inf\remoteaccess\rasctrnm.h.enc
%WINDIR%\inf\windows workflow foundation 3.0.0.0\readme.txt
%WINDIR%\inf\netefe3e.pnf.enc
%WINDIR%\inf\netevbda.pnf.enc
%WINDIR%\installer\{90140000-006e-0409-1000-0000000ff1ce}\readme.txt
%WINDIR%\media\heritage\readme.txt
%WINDIR%\inf\setupapi.dev.log.enc
%WINDIR%\inf\servicemodelservice 3.0.0.0\_servicemodelserviceperfcounters.h.enc
%WINDIR%\inf\servicemodeloperation 3.0.0.0\_servicemodeloperationperfcounters.ini.enc
%WINDIR%\microsoft.net\framework\readme.txt
%WINDIR%\inf\smsvchost 4.0.0.0\_smsvchostperfcounters.h.enc
%WINDIR%\inf\servicemodelservice 3.0.0.0\_servicemodelserviceperfcounters.ini.enc
%WINDIR%\policydefinitions\readme.txt
%WINDIR%\pla\system\readme.txt
%WINDIR%\pla\rules\readme.txt
%WINDIR%\inf\smsvchost 3.0.0.0\_smsvchostperfcounters.h.enc
%WINDIR%\pla\reports\readme.txt
%WINDIR%\performance\winsat\readme.txt
%WINDIR%\panther\unattendgc\readme.txt
%WINDIR%\panther\readme.txt
%WINDIR%\panther\actionqueue\readme.txt
%WINDIR%\offline web pages\readme.txt
%WINDIR%\microsoft.net\readme.txt
%WINDIR%\microsoft.net\framework64\readme.txt
%WINDIR%\inf\servicemodeloperation 3.0.0.0\_servicemodeloperationperfcounters.h.enc
%WINDIR%\inf\servicemodelendpoint 3.0.0.0\_servicemodelendpointperfcounters.h.enc
%WINDIR%\media\sonata\readme.txt
%WINDIR%\inf\secrecs.inf.enc
%WINDIR%\inf\sensorsalsdriver.inf.enc
%WINDIR%\media\savanna\readme.txt
%WINDIR%\media\raga\readme.txt
%WINDIR%\inf\netg664.pnf.enc
%WINDIR%\inf\wd.pnf.enc
%WINDIR%\inf\scsidev.pnf.enc
%WINDIR%\inf\scsidev.inf.enc
%WINDIR%\media\quirky\readme.txt
%WINDIR%\media\landscape\readme.txt
%WINDIR%\inf\scrawpdo.inf.enc
%WINDIR%\inf\scrawpdo.pnf.enc
%WINDIR%\inf\sdbus.inf.enc
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\readme.txt
%WINDIR%\inf\usbhub\usbperfsym.h.enc
%WINDIR%\inf\volsnap.pnf.enc
%WINDIR%\installer\1d2d0.msi.enc
%WINDIR%\installer\1d2ad.msi.enc
%WINDIR%\installer\1d210.msi.enc
%WINDIR%\inf\wiasa002.inf.enc
%WINDIR%\inf\wialx006.inf.enc
%WINDIR%\inf\wialx002.pnf.enc
%WINDIR%\inf\wialx005.pnf.enc
%WINDIR%\inf\wialx003.inf.enc
%WINDIR%\inf\wialx004.inf.enc
%WINDIR%\inf\wiahp001.pnf.enc
%WINDIR%\inf\wudfusbcciddriver.pnf.enc
%WINDIR%\installer\1d285.msi.enc
%WINDIR%\inf\wvmic.inf.enc
%WINDIR%\installer\1d2c4.msi.enc
%WINDIR%\installer\1d1ec.msi.enc
%WINDIR%\inf\wialx004.pnf.enc
%WINDIR%\installer\1d29c.msi.enc
%WINDIR%\inf\windows workflow foundation 3.0.0.0\perfcounters.ini.enc
%WINDIR%\inf\windows workflow foundation 3.0.0.0\perfcounters.h.enc
%WINDIR%\inf\xcbdav.inf.enc
%WINDIR%\inf\wialx005.inf.enc
%WINDIR%\inf\xcbdav.pnf.enc
%WINDIR%\installer\1d2ca.msi.enc
%WINDIR%\inf\wialx002.inf.enc
%WINDIR%\inf\wpdmtp.pnf.enc
%WINDIR%\inf\xnacc.pnf.enc
%WINDIR%\inf\xnacc.inf.enc
%WINDIR%\inf\wsearchidxpi\idxcntrs.h.enc
%WINDIR%\installer\1d20a.msi.enc
%WINDIR%\installer\11a29.msi.enc
%WINDIR%\inf\wialx003.pnf.enc
%WINDIR%\installer\1d204.msi.enc
%WINDIR%\inf\wialx006.pnf.enc
%WINDIR%\inf\wsdprint.inf.enc
%WINDIR%\inf\wsdscdrv.inf.enc
%WINDIR%\inf\wsdprint.pnf.enc
%WINDIR%\inf\winusb.pnf.enc
%WINDIR%\inf\wpdcomp.inf.enc
%WINDIR%\inf\wiaep003.pnf.enc
%WINDIR%\inf\wiaky002.inf.enc
%WINDIR%\inf\wiaep003.inf.enc
%WINDIR%\inf\wmiaprpl\wmiaprpl.h.enc
%WINDIR%\inf\winusb.inf.enc
%WINDIR%\inf\wiahp001.inf.enc
%WINDIR%\inf\wiaep002.pnf.enc
%WINDIR%\installer\ef5f9.msi.enc
%WINDIR%\inf\wpdfs.inf.enc
%WINDIR%\inf\wpdfs.pnf.enc
%WINDIR%\inf\wiaxx002.inf.enc
%WINDIR%\inf\wiasa002.pnf.enc
%WINDIR%\inf\wpdmtp.inf.enc
%WINDIR%\inf\wpdcomp.pnf.enc
%WINDIR%\inf\wnetvsc.inf.enc
%WINDIR%\inf\windowssideshowenhanceddriver.inf.enc
%WINDIR%\inf\windowssideshowenhanceddriver.pnf.enc
%WINDIR%\inf\wvmbusvideo.inf.enc
%WINDIR%\inf\wvmbushid.inf.enc
%WINDIR%\inf\wvmbus.inf.enc
%WINDIR%\inf\wstorvsc.inf.enc
%WINDIR%\inf\wudfusbcciddriver.inf.enc
%WINDIR%\inf\wstorflt.inf.enc
%WINDIR%\inf\wsdscdrv.pnf.enc
%WINDIR%\inf\wiaxx002.pnf.enc
%WINDIR%\inf\wpdmtphw.pnf.enc
%WINDIR%\inf\ws3cap.inf.enc
%WINDIR%\inf\windows workflow foundation 4.0.0.0\perfcounters.h.enc
%WINDIR%\inf\wiaep002.inf.enc
%WINDIR%\installer\ef5ff.msi.enc
%WINDIR%\inf\volume.inf.enc
%WINDIR%\inf\wiabr002.inf.enc
%WINDIR%\inf\wfplwf.pnf.enc
%WINDIR%\inf\wfplwf.inf.enc
%WINDIR%\inf\wd.inf.enc
%WINDIR%\inf\wceisvista.pnf.enc
%WINDIR%\inf\wceisvista.inf.enc
%WINDIR%\inf\wave.pnf.enc
%WINDIR%\inf\wave.inf.enc
%WINDIR%\inf\v_mscdsc.pnf.enc
%WINDIR%\inf\v_mscdsc.inf.enc
%WINDIR%\inf\vsmraid.pnf.enc
%WINDIR%\inf\vsmraid.inf.enc
%WINDIR%\inf\volume.pnf.enc
%WINDIR%\inf\wiabr006.inf.enc
%WINDIR%\inf\wiabr002.pnf.enc
%WINDIR%\inf\wiabr004.pnf.enc
%WINDIR%\inf\vhdmp.pnf.enc
%WINDIR%\inf\usbvideo.pnf.enc
%WINDIR%\inf\usbvideo.inf.enc
%WINDIR%\inf\wdma_usb.pnf.enc
%WINDIR%\inf\usbstor.inf.enc
%WINDIR%\inf\usbprint.pnf.enc
%WINDIR%\inf\usbprint.inf.enc
%WINDIR%\inf\usbport.inf.enc
%WINDIR%\inf\wdma_usb.inf.enc
%WINDIR%\inf\wdmaudio.pnf.enc
%WINDIR%\inf\wdmaudio.inf.enc
%WINDIR%\inf\usbstor.pnf.enc
%WINDIR%\inf\vhdmp.inf.enc
%WINDIR%\inf\volsnap.inf.enc
%WINDIR%\inf\wiabr005.inf.enc
%WINDIR%\inf\wiaca00i.inf.enc
%WINDIR%\inf\wiabr009.pnf.enc
%WINDIR%\inf\wiaca00f.pnf.enc
%WINDIR%\inf\wiaca00e.pnf.enc
%WINDIR%\inf\wiaca00f.inf.enc
%WINDIR%\inf\wiacn001.pnf.enc
%WINDIR%\inf\wiaca00c.inf.enc
%WINDIR%\inf\wiaca00d.inf.enc
%WINDIR%\inf\wiaca00e.inf.enc
%WINDIR%\installer\1d1e6.msi.enc
%WINDIR%\inf\wiabr004.inf.enc
%WINDIR%\inf\wiaca00i.pnf.enc
%WINDIR%\installer\11a1f.msi.enc
%WINDIR%\installer\1d1f2.msi.enc
%WINDIR%\installer\1d1fe.msi.enc
%WINDIR%\inf\wiacn001.inf.enc
%WINDIR%\installer\1d1f8.msi.enc
%WINDIR%\inf\wiaca00c.pnf.enc
%WINDIR%\inf\wiaca00d.pnf.enc
%WINDIR%\inf\wiaca00b.pnf.enc
%WINDIR%\inf\wiaca00b.inf.enc
%WINDIR%\inf\wiaca00a.pnf.enc
%WINDIR%\inf\wiaca00a.inf.enc
%WINDIR%\inf\wiabr00a.pnf.enc
%WINDIR%\inf\wiabr009.inf.enc
%WINDIR%\inf\wdmvsc.inf.enc
%WINDIR%\inf\wiabr00a.inf.enc
%WINDIR%\inf\wiabr008.pnf.enc
%WINDIR%\inf\wiabr007.pnf.enc
%WINDIR%\inf\wiabr008.inf.enc
%WINDIR%\inf\wiabr006.pnf.enc
%WINDIR%\inf\wiabr005.pnf.enc
%WINDIR%\inf\wiabr007.inf.enc
%WINDIR%\inf\usbport.pnf.enc
%WINDIR%\inf\wiaky002.pnf.enc
%WINDIR%\inf\wpdmtphw.inf.enc
%WINDIR%\inf\netl1c64.pnf.enc
%WINDIR%\inf\input.pnf.enc
%WINDIR%\inf\lsi_fc.inf.enc
%WINDIR%\inf\mdmbsb.inf.enc
%WINDIR%\inf\iastorv.pnf.enc
%WINDIR%\inf\mdmbug3.pnf.enc
%WINDIR%\inf\mdmcodex.pnf.enc
%WINDIR%\inf\keyboard.inf.enc
%WINDIR%\inf\mdmcxpv6.pnf.enc
%WINDIR%\inf\mdmc26a.inf.enc
%WINDIR%\inf\ks.inf.enc
%WINDIR%\inf\ksfilter.pnf.enc
%WINDIR%\inf\mdmcm28.inf.enc
%WINDIR%\inf\kscaptur.pnf.enc
%WINDIR%\inf\mdmcommu.pnf.enc
%WINDIR%\inf\mdmdgitn.inf.enc
%WINDIR%\inf\lltdio.pnf.enc
%WINDIR%\inf\lsi_sas2.inf.enc
%WINDIR%\inf\mcx2.inf.enc
%WINDIR%\inf\lsi_scsi.inf.enc
%WINDIR%\inf\mdmcxpv6.inf.enc
%WINDIR%\inf\mdmdsi.inf.enc
%WINDIR%\inf\mdmeiger.inf.enc
%WINDIR%\inf\mdmeric.pnf.enc
%WINDIR%\inf\mdmeric2.inf.enc
%WINDIR%\inf\mdmgl002.inf.enc
%WINDIR%\inf\machine.pnf.enc
%WINDIR%\inf\lsi_fc.pnf.enc
%WINDIR%\inf\mdmgl005.pnf.enc
%WINDIR%\inf\ksfilter.inf.enc
%WINDIR%\inf\mdmar1.pnf.enc
%WINDIR%\inf\mdmbr005.pnf.enc
%WINDIR%\inf\mdmgl007.inf.enc
%WINDIR%\inf\mdmsupr3.inf.enc
%WINDIR%\inf\mdmags64.inf.enc
%WINDIR%\inf\mdmgl009.inf.enc
%WINDIR%\inf\mdmdyna.inf.enc
%WINDIR%\inf\mdmairte.pnf.enc
%WINDIR%\inf\mdmmetri.inf.enc
%WINDIR%\inf\mdmgl010.inf.enc
%WINDIR%\inf\mdmnttd6.inf.enc
%WINDIR%\inf\mdmpn1.inf.enc
%WINDIR%\inf\mdmtdkj3.inf.enc
%WINDIR%\inf\netk57a.pnf.enc
%WINDIR%\inf\mdmpsion.inf.enc
%WINDIR%\inf\mdmgl006.pnf.enc
%WINDIR%\inf\mdmrock3.pnf.enc
%WINDIR%\inf\mdmgl004.inf.enc
%WINDIR%\inf\mdmrock3.inf.enc
%WINDIR%\inf\mcx2.pnf.enc
%WINDIR%\inf\mdmsuprv.pnf.enc
%WINDIR%\inf\mdmhay2.inf.enc
%WINDIR%\inf\mdmarn.inf.enc
%WINDIR%\inf\mdmagm64.pnf.enc
%WINDIR%\inf\iirsp.pnf.enc
%WINDIR%\inf\mdmati.inf.enc
%WINDIR%\inf\image.inf.enc
%WINDIR%\inf\hpoa1so.pnf.enc
%WINDIR%\inf\mdmarn.pnf.enc
%WINDIR%\inf\hpoa1ss.inf.enc
%WINDIR%\inf\mdmaiwa.pnf.enc
%WINDIR%\inf\hpsamd.pnf.enc
%WINDIR%\inf\mdmdgitn.pnf.enc
%WINDIR%\inf\iirsp.inf.enc
%WINDIR%\inf\image.pnf.enc
%WINDIR%\inf\mdmhandy.pnf.enc
%WINDIR%\inf\mdmcpq.inf.enc
%WINDIR%\inf\mdmgl008.pnf.enc
%WINDIR%\inf\mdm3com.inf.enc
%WINDIR%\inf\hpoa1nd.inf.enc
%WINDIR%\inf\megasr.inf.enc
%WINDIR%\inf\mdmbr005.inf.enc
%WINDIR%\inf\mdmhaeu.pnf.enc
%WINDIR%\inf\mdmbr007.pnf.enc
%WINDIR%\inf\mdmrock5.pnf.enc
%WINDIR%\inf\hpoa1sd.inf.enc
%WINDIR%\inf\mdmcm28.pnf.enc
%WINDIR%\inf\remoteaccess\readme.txt
%WINDIR%\inf\mdmtdkj2.inf.enc
%WINDIR%\inf\hpoa1sd.pnf.enc
%WINDIR%\inf\mdmgen.inf.enc
%WINDIR%\inf\mdmpp.inf.enc
%WINDIR%\inf\msdv.pnf.enc
%WINDIR%\inf\mdmracal.pnf.enc
%WINDIR%\inf\mdmgl009.pnf.enc
%WINDIR%\inf\mdmusrsp.pnf.enc
%WINDIR%\inf\msmouse.inf.enc
%WINDIR%\inf\net1qx64.inf.enc
%WINDIR%\inf\net1yx64.inf.enc
%WINDIR%\inf\mdmosi.inf.enc
%WINDIR%\inf\nete1g3e.inf.enc
%WINDIR%\inf\ndiscap.pnf.enc
%WINDIR%\inf\net1kx64.pnf.enc
%WINDIR%\inf\netl160a.inf.enc
%WINDIR%\inf\netnwifi.inf.enc
%WINDIR%\inf\net1yx64.pnf.enc
%WINDIR%\inf\netpacer.inf.enc
%WINDIR%\inf\netbrdgs.inf.enc
%WINDIR%\inf\mdmntt1.pnf.enc
%WINDIR%\inf\netnvma.pnf.enc
%WINDIR%\inf\mdmusrk1.pnf.enc
%WINDIR%\inf\mdmmct.pnf.enc
%WINDIR%\inf\mdmpace.pnf.enc
%WINDIR%\inf\megasas2.inf.enc
%WINDIR%\inf\mdmomrn3.inf.enc
%WINDIR%\inf\hidserv.pnf.enc
%WINDIR%\inf\mdmhandy.inf.enc
%WINDIR%\inf\mdmiodat.inf.enc
%WINDIR%\inf\mdmisdn.inf.enc
%WINDIR%\inf\mdmirmdm.inf.enc
%WINDIR%\inf\mdmke.pnf.enc
%WINDIR%\inf\mdmnttd6.pnf.enc
%WINDIR%\inf\mdmnttp.inf.enc
%WINDIR%\inf\mdmnttp.pnf.enc
%WINDIR%\inf\mdmke.inf.enc
%WINDIR%\inf\mdmnttte.inf.enc
%WINDIR%\inf\mdmolic.inf.enc
%WINDIR%\inf\mdmlasat.inf.enc
%WINDIR%\inf\mdmkortx.pnf.enc
%WINDIR%\inf\mdmtron.pnf.enc
%WINDIR%\inf\mdmkortx.inf.enc
%WINDIR%\inf\mdmlasat.pnf.enc
%WINDIR%\inf\mdmpace.inf.enc
%WINDIR%\inf\mdminfot.pnf.enc
%WINDIR%\inf\mdmtdkj4.inf.enc
%WINDIR%\inf\mdminfot.inf.enc
%WINDIR%\inf\mdmbr008.pnf.enc
%WINDIR%\inf\mdmmcd.inf.enc
%WINDIR%\inf\mdmmcom.pnf.enc
%WINDIR%\inf\mdmtdkj6.pnf.enc
%WINDIR%\inf\mdmtexas.pnf.enc
%WINDIR%\inf\mdmmcom.inf.enc
%WINDIR%\inf\mdmtron.inf.enc
%WINDIR%\inf\mdmhaeu.inf.enc
%WINDIR%\inf\mdmsier.inf.enc
%WINDIR%\inf\netirda.pnf.enc
%WINDIR%\inf\mdmgatew.pnf.enc
%WINDIR%\inf\nete1e3e.inf.enc
%WINDIR%\inf\mdmaus.inf.enc
%WINDIR%\inf\netbxnda.inf.enc
%WINDIR%\inf\memory.pnf.enc
%WINDIR%\inf\mf.pnf.enc
%WINDIR%\inf\netnb.pnf.enc
%WINDIR%\inf\net8187bv64.pnf.enc
%WINDIR%\inf\mpio.pnf.enc
%WINDIR%\inf\net8187se64.pnf.enc
%WINDIR%\inf\ndisuio.inf.enc
%WINDIR%\inf\ndiscap.inf.enc
%WINDIR%\inf\mtconfig.inf.enc
%WINDIR%\inf\mdmpsion.pnf.enc
%WINDIR%\inf\netbc664.inf.enc
%WINDIR%\inf\netbrdgm.inf.enc
%WINDIR%\inf\mdmzyxel.pnf.enc
%WINDIR%\inf\netbvbda.inf.enc
%WINDIR%\inf\netevbda.inf.enc
%WINDIR%\inf\mdmoptn.inf.enc
%WINDIR%\inf\netg664.inf.enc
%WINDIR%\inf\netimm.inf.enc
%WINDIR%\inf\netip6.inf.enc
%WINDIR%\inf\netnvma.inf.enc
%WINDIR%\inf\multiprt.inf.enc
%WINDIR%\inf\netavpnt.inf.enc
%WINDIR%\inf\hpoa1nd.pnf.enc
%WINDIR%\inf\mdmcom1.inf.enc
%WINDIR%\inf\rdyboost\readyboostperfcounters.h.enc
%WINDIR%\inf\mdmnova.pnf.enc
%WINDIR%\inf\mdmpenr.pnf.enc
%WINDIR%\inf\mdmnttp2.pnf.enc
%WINDIR%\inf\megasas2.pnf.enc
%WINDIR%\inf\mdmpn1.pnf.enc
%WINDIR%\inf\mdmhayes.pnf.enc
%WINDIR%\inf\mdmdcm6.inf.enc
%WINDIR%\inf\netnwifi.pnf.enc
%WINDIR%\inf\megasas.pnf.enc
%WINDIR%\inf\mdmcrtix.inf.enc
%WINDIR%\inf\netip6.pnf.enc
%WINDIR%\inf\mdmaus.pnf.enc
%WINDIR%\inf\mdmcpv.pnf.enc
%WINDIR%\inf\mdmcpv.inf.enc
%WINDIR%\inf\netl260a.pnf.enc
%WINDIR%\inf\mdmelsa.inf.enc
%WINDIR%\inf\netloop.pnf.enc
%WINDIR%\inf\netb57va.pnf.enc
%WINDIR%\inf\mdmzyxlg.inf.enc
%WINDIR%\inf\usbhub\readme.txt
%WINDIR%\inf\mdmzyp.inf.enc
%WINDIR%\inf\mdmrock4.pnf.enc
%WINDIR%\inf\mdmirmdm.pnf.enc
%WINDIR%\inf\ugthrsvc\readme.txt
%WINDIR%\inf\ugatherer\readme.txt
%WINDIR%\inf\termservice\readme.txt
%WINDIR%\inf\tapisrv\readme.txt
%WINDIR%\inf\smsvchost 4.0.0.0\readme.txt
%WINDIR%\inf\smsvchost 3.0.0.0\readme.txt
%WINDIR%\inf\servicemodelservice 3.0.0.0\readme.txt
%WINDIR%\inf\servicemodeloperation 3.0.0.0\readme.txt
%WINDIR%\inf\servicemodelendpoint 3.0.0.0\readme.txt
%WINDIR%\inf\readme.txt.enc
%WINDIR%\inf\mdmmhzel.inf.enc
%WINDIR%\inf\mdmmod.inf.enc
%WINDIR%\inf\mdmminij.inf.enc
%WINDIR%\inf\mdmnis5t.pnf.enc
%WINDIR%\inf\netmyk00.pnf.enc
%WINDIR%\inf\netefe3e.inf.enc
%WINDIR%\inf\mdmsmart.inf.enc
%WINDIR%\inf\mdmsonyu.pnf.enc
%WINDIR%\inf\mdm5674a.inf.enc
%WINDIR%\inf\mdmbr007.inf.enc
%WINDIR%\inf\mdmmts.pnf.enc
%WINDIR%\inf\mdmbr00a.inf.enc
%WINDIR%\inf\mdmbr002.pnf.enc
%WINDIR%\inf\mdmneuhs.pnf.enc
%WINDIR%\inf\mdmc26a.pnf.enc
%WINDIR%\inf\mdmnis2u.pnf.enc
%WINDIR%\inf\mdmnis5t.inf.enc
%WINDIR%\inf\mdmnokia.pnf.enc
%WINDIR%\inf\mdmatm2k.pnf.enc
%WINDIR%\inf\msports.inf.enc
%WINDIR%\inf\mdmntt1.inf.enc
%WINDIR%\inf\mdmnis3t.inf.enc
%WINDIR%\inf\mdmmega.inf.enc
%WINDIR%\inf\net44amd.inf.enc
%WINDIR%\inf\net1kx64.inf.enc
%WINDIR%\inf\mdmtdkj5.pnf.enc
%WINDIR%\inf\mdmtdkj7.pnf.enc
%WINDIR%\inf\igdlh.inf.enc
%WINDIR%\inf\mdmsupra.inf.enc
%WINDIR%\inf\mdmusrg.inf.enc
%WINDIR%\inf\mdmar1.inf.enc
%WINDIR%\inf\mdmaiwa5.pnf.enc
%WINDIR%\inf\mdmdf56f.inf.enc
%WINDIR%\inf\mdmusrg.pnf.enc
%WINDIR%\inf\mdmvdot.pnf.enc
%WINDIR%\inf\mdmtdkj4.pnf.enc
%WINDIR%\inf\mdmgl001.inf.enc
%WINDIR%\inf\net8187bv64.inf.enc
%WINDIR%\inf\mdm3com.pnf.enc
%WINDIR%\inf\netb57va.inf.enc
%WINDIR%\inf\mdmsonyu.inf.enc
%WINDIR%\inf\mdmmhrtz.inf.enc
%WINDIR%\inf\mdmmts.inf.enc
%WINDIR%\inf\mdmcpq.pnf.enc
%WINDIR%\inf\mdmsun1.pnf.enc
%WINDIR%\inf\mdmtdk.inf.enc
%WINDIR%\inf\mdmsuprv.inf.enc
%WINDIR%\inf\msdri.inf.enc
%WINDIR%\inf\monitor.inf.enc
%WINDIR%\inf\mf.inf.enc
%WINDIR%\inf\msclmd.inf.enc
%WINDIR%\inf\netavpna.pnf.enc
%WINDIR%\inf\mtconfig.pnf.enc
%WINDIR%\inf\mshdc.pnf.enc
%WINDIR%\inf\netbxnda.pnf.enc
%WINDIR%\inf\msports.pnf.enc
%WINDIR%\inf\hpoa1so.inf.enc
%WINDIR%\inf\mdmboca.pnf.enc
%WINDIR%\inf\mdmmotou.pnf.enc
%WINDIR%\inf\mdmisdn.pnf.enc
%WINDIR%\inf\mdmlucnt.inf.enc
%WINDIR%\inf\mdmmc288.inf.enc
%WINDIR%\inf\mdmcpq2.inf.enc
%WINDIR%\inf\mdmwhql0.inf.enc
%WINDIR%\inf\mdmmoto1.inf.enc
%WINDIR%\inf\mdmcrtix.pnf.enc
%WINDIR%\inf\mdmadc.pnf.enc
%WINDIR%\inf\mdmti.inf.enc
%WINDIR%\inf\netirda.inf.enc
%WINDIR%\inf\mdmx5560.pnf.enc
%WINDIR%\inf\mdmbr008.inf.enc
%WINDIR%\inf\netavpna.inf.enc
%WINDIR%\inf\mdmsii64.pnf.enc
%WINDIR%\inf\mdmgcs.inf.enc
%WINDIR%\fonts\courfe.fon.enc
%WINDIR%\installer\ef64a.msi.enc
%WINDIR%\media\savanna\desktop.ini.enc
%WINDIR%\media\savanna\windows balloon.wav.enc
%WINDIR%\media\sonata\windows battery low.wav.enc
%WINDIR%\media\sonata\windows critical stop.wav.enc
%WINDIR%\media\windows menu command.wav.enc
%WINDIR%\media\quirky\windows pop-up blocked.wav.enc
%WINDIR%\media\quirky\windows notify.wav.enc
%WINDIR%\media\windows recycle.wav.enc
%WINDIR%\media\quirky\windows navigation start.wav.enc
%WINDIR%\media\quirky\windows hardware insert.wav.enc
%WINDIR%\media\quirky\windows hardware remove.wav.enc
%WINDIR%\media\windows restore.wav.enc
%WINDIR%\media\quirky\windows hardware fail.wav.enc
%WINDIR%\media\sonata\windows notify.wav.enc
%WINDIR%\media\windows shutdown.wav.enc
%WINDIR%\media\savanna\windows ding.wav.enc
%WINDIR%\media\windows exclamation.wav.enc
%WINDIR%\media\windows startup.wav.enc
%WINDIR%\media\windows battery low.wav.enc
%WINDIR%\media\calligraphy\windows ding.wav.enc
%WINDIR%\media\calligraphy\windows battery critical.wav.enc
%WINDIR%\media\calligraphy\windows pop-up blocked.wav.enc
%WINDIR%\media\windows feed discovered.wav.enc
%WINDIR%\media\calligraphy\windows balloon.wav.enc
%WINDIR%\media\calligraphy\windows logon sound.wav.enc
%WINDIR%\media\calligraphy\windows notify.wav.enc
%WINDIR%\media\calligraphy\windows logoff sound.wav.enc
%WINDIR%\media\windows hardware remove.wav.enc
%WINDIR%\media\chord.wav.enc
%WINDIR%\media\quirky\windows information bar.wav.enc
%WINDIR%\media\speech off.wav.enc
%WINDIR%\media\savanna\windows information bar.wav.enc
%WINDIR%\media\town.mid.enc
%WINDIR%\media\speech on.wav.enc
%WINDIR%\media\windows navigation start.wav.enc
%WINDIR%\media\garden\windows notify.wav.enc
%WINDIR%\media\savanna\windows battery critical.wav.enc
%WINDIR%\media\windows logoff sound.wav.enc
%WINDIR%\media\savanna\windows exclamation.wav.enc
%WINDIR%\media\savanna\windows hardware remove.wav.enc
%WINDIR%\media\heritage\windows battery low.wav.enc
%WINDIR%\media\garden\windows logoff sound.wav.enc
%WINDIR%\media\garden\windows user account control.wav.enc
%WINDIR%\media\characters\windows user account control.wav.enc
%WINDIR%\media\garden\windows default.wav.enc
%WINDIR%\media\heritage\windows pop-up blocked.wav.enc
%WINDIR%\media\windows hardware insert.wav.enc
%WINDIR%\media\quirky\windows battery critical.wav.enc
%WINDIR%\media\quirky\windows error.wav.enc
%WINDIR%\media\quirky\windows battery low.wav.enc
%WINDIR%\media\characters\windows logon sound.wav.enc
%WINDIR%\media\windows pop-up blocked.wav.enc
%WINDIR%\media\windows ding.wav.enc
%WINDIR%\media\ir_begin.wav.enc
%WINDIR%\media\windows logon sound.wav.enc
%WINDIR%\microsoft.net\framework\netfxsbs12.hkf.enc
%WINDIR%\media\afternoon\desktop.ini.enc
%WINDIR%\media\ir_end.wav.enc
%WINDIR%\media\speech misrecognition.wav.enc
%WINDIR%\media\ir_inter.wav.enc
%WINDIR%\media\notify.wav.enc
%WINDIR%\media\flourish.mid.enc
%WINDIR%\media\ding.wav.enc
%WINDIR%\media\windows default.wav.enc
%WINDIR%\media\windows critical stop.wav.enc
%WINDIR%\media\windows notify.wav.enc
%WINDIR%\microsoft.net\framework\netfxsbs10.exe.enc
%WINDIR%\media\quirky\windows balloon.wav.enc
%WINDIR%\media\quirky\windows print complete.wav.enc
%WINDIR%\media\savanna\windows print complete.wav.enc
%WINDIR%\panther\ddaclsys.log.enc
%WINDIR%\panther\contents1.dir.enc
%WINDIR%\media\sonata\desktop.ini.enc
%WINDIR%\media\afternoon\windows balloon.wav.enc
%WINDIR%\media\afternoon\windows logon sound.wav.enc
%WINDIR%\media\afternoon\windows pop-up blocked.wav.enc
%WINDIR%\media\savanna\windows hardware fail.wav.enc
%WINDIR%\media\characters\windows critical stop.wav.enc
%WINDIR%\media\savanna\windows notify.wav.enc
%WINDIR%\media\savanna\windows pop-up blocked.wav.enc
%WINDIR%\media\savanna\windows error.wav.enc
%WINDIR%\media\savanna\windows hardware insert.wav.enc
%WINDIR%\media\landscape\windows default.wav.enc
%WINDIR%\panther\setup.etl.enc
%WINDIR%\media\savanna\windows logon sound.wav.enc
%WINDIR%\media\calligraphy\windows default.wav.enc
%WINDIR%\media\savanna\windows critical stop.wav.enc
%WINDIR%\media\savanna\windows default.wav.enc
%WINDIR%\media\quirky\windows critical stop.wav.enc
%WINDIR%\media\quirky\windows logoff sound.wav.enc
%WINDIR%\media\raga\windows notify.wav.enc
%WINDIR%\media\raga\windows logoff sound.wav.enc
%WINDIR%\panther\setupact.log.enc
%WINDIR%\media\raga\windows information bar.wav.enc
%WINDIR%\media\raga\windows hardware insert.wav.enc
%WINDIR%\media\raga\windows hardware fail.wav.enc
%WINDIR%\media\raga\windows critical stop.wav.enc
%WINDIR%\panther\contents0.dir.enc
%WINDIR%\media\savanna\windows navigation start.wav.enc
%WINDIR%\panther\setupinfo.enc
%WINDIR%\media\sonata\windows ding.wav.enc
%WINDIR%\media\sonata\windows hardware insert.wav.enc
%WINDIR%\media\sonata\windows exclamation.wav.enc
%WINDIR%\media\quirky\windows exclamation.wav.enc
%WINDIR%\media\garden\windows ding.wav.enc
%WINDIR%\media\windows user account control.wav.enc
%WINDIR%\media\garden\windows logon sound.wav.enc
%WINDIR%\media\windows ringin.wav.enc
%WINDIR%\media\garden\windows information bar.wav.enc
%WINDIR%\media\garden\windows hardware remove.wav.enc
%WINDIR%\media\garden\windows hardware fail.wav.enc
%WINDIR%\media\windows print complete.wav.enc
%WINDIR%\media\garden\windows hardware insert.wav.enc
%WINDIR%\media\windows ringout.wav.enc
%WINDIR%\media\garden\windows feed discovered.wav.enc
%WINDIR%\media\windows error.wav.enc
%WINDIR%\media\garden\windows exclamation.wav.enc
%WINDIR%\media\garden\windows error.wav.enc
%WINDIR%\media\speech sleep.wav.enc
%WINDIR%\media\sonata\windows error.wav.enc
%WINDIR%\media\quirky\windows feed discovered.wav.enc
%WINDIR%\media\sonata\windows print complete.wav.enc
%WINDIR%\media\sonata\windows feed discovered.wav.enc
%WINDIR%\media\garden\windows print complete.wav.enc
%WINDIR%\media\sonata\windows hardware fail.wav.enc
%WINDIR%\media\garden\windows pop-up blocked.wav.enc
%WINDIR%\media\quirky\windows ding.wav.enc
%WINDIR%\media\sonata\windows hardware remove.wav.enc
%WINDIR%\media\heritage\windows balloon.wav.enc
%WINDIR%\media\sonata\windows information bar.wav.enc
%WINDIR%\media\sonata\windows logoff sound.wav.enc
%WINDIR%\media\sonata\windows logon sound.wav.enc
%WINDIR%\media\sonata\windows navigation start.wav.enc
%WINDIR%\media\desktop.ini.enc
%WINDIR%\media\afternoon\windows notify.wav.enc
%WINDIR%\media\sonata\windows battery critical.wav.enc
%WINDIR%\media\afternoon\windows exclamation.wav.enc
%WINDIR%\media\afternoon\windows hardware insert.wav.enc
%WINDIR%\microsoft.net\netfxrepair.1033.dll.enc
%WINDIR%\media\chimes.wav.enc
%WINDIR%\syswow64\lt-lt\readme.txt
%WINDIR%\media\onestop.mid.enc
%WINDIR%\microsoft.net\netfxrepair.1035.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1046.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1042.dll.enc
%WINDIR%\syswow64\ko-kr\readme.txt
%WINDIR%\microsoft.net\netfxrepair.1040.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1043.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1041.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1036.dll.enc
%WINDIR%\microsoft.net\netfxrepair.3082.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1028.dll.enc
%WINDIR%\syswow64\manifeststore\readme.txt
%WINDIR%\media\characters\windows feed discovered.wav.enc
%WINDIR%\media\landscape\windows hardware remove.wav.enc
%WINDIR%\microsoft.net\netfxrepair.1031.dll.enc
%WINDIR%\microsoft.net\netfxrepair.2070.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1053.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1025.dll.enc
%WINDIR%\microsoft.net\netfxrepair.1030.dll.enc
%WINDIR%\syswow64\ja-jp\readme.txt
%WINDIR%\syswow64\it-it\readme.txt
%WINDIR%\syswow64\installshield\readme.txt
%WINDIR%\media\landscape\windows user account control.wav.enc
%WINDIR%\media\landscape\windows logon sound.wav.enc
%WINDIR%\media\characters\windows error.wav.enc
%WINDIR%\media\landscape\desktop.ini.enc
%WINDIR%\media\landscape\windows feed discovered.wav.enc
%WINDIR%\microsoft.net\netfxrepair.1029.dll.enc
%WINDIR%\microsoft.net\netfxrepair.exe.enc
%WINDIR%\syswow64\migration\readme.txt
%WINDIR%\media\landscape\windows ding.wav.enc
%WINDIR%\pfro.log.enc
%WINDIR%\media\recycle.wav.enc
%WINDIR%\syswow64\pt-br\readme.txt
%WINDIR%\policydefinitions\dcom.admx.enc
%WINDIR%\policydefinitions\activexinstallservice.admx.enc
%WINDIR%\syswow64\pt-pt\readme.txt
%WINDIR%\policydefinitions\credssp.admx.enc
%WINDIR%\media\heritage\windows hardware insert.wav.enc
%WINDIR%\policydefinitions\credui.admx.enc
%WINDIR%\policydefinitions\ctrlaltdel.admx.enc
%WINDIR%\policydefinitions\credentialproviders.admx.enc
%WINDIR%\policydefinitions\appcompat.admx.enc
%WINDIR%\policydefinitions\cpls.admx.enc
%WINDIR%\policydefinitions\controlpaneldisplay.admx.enc
%WINDIR%\media\characters\windows ding.wav.enc
%WINDIR%\syswow64\pl-pl\readme.txt
%WINDIR%\media\characters\windows battery critical.wav.enc
%WINDIR%\media\windows battery critical.wav.enc
%WINDIR%\media\windows balloon.wav.enc
%WINDIR%\syswow64\oobe\readme.txt
%WINDIR%\performance\winsat\clip_480p_5sec_6mbps_new.mpg.enc
%WINDIR%\syswow64\nl-nl\readme.txt
%WINDIR%\performance\winsat\clip_480i_5sec_6mbps_new.mpg.enc
%WINDIR%\syswow64\nb-no\readme.txt
%WINDIR%\performance\winsat\clip_1080_5sec_mpeg2_hd_15mbps.mpg.enc
%WINDIR%\media\speech disambiguation.wav.enc
%WINDIR%\media\windows minimize.wav.enc
%WINDIR%\syswow64\migwiz\readme.txt
%WINDIR%\media\tada.wav.enc
%WINDIR%\microsoft.net\framework\sbs_system.enterpriseservices.dll.enc
%WINDIR%\microsoft.net\framework\sbscmp20_perfcounter.dll.enc
%WINDIR%\syswow64\hu-hu\readme.txt
%WINDIR%\media\afternoon\windows ding.wav.enc
%WINDIR%\installer\ef64b.msp.enc
%WINDIR%\media\afternoon\windows battery low.wav.enc
%WINDIR%\media\afternoon\windows error.wav.enc
%WINDIR%\media\characters\windows logoff sound.wav.enc
%WINDIR%\syswow64\fi-fi\readme.txt
%WINDIR%\media\afternoon\windows logoff sound.wav.enc
%WINDIR%\syswow64\et-ee\readme.txt
%WINDIR%\syswow64\es-es\readme.txt
%WINDIR%\media\landscape\windows pop-up blocked.wav.enc
%WINDIR%\media\landscape\windows battery critical.wav.enc
%WINDIR%\media\afternoon\windows information bar.wav.enc
%WINDIR%\media\afternoon\windows default.wav.enc
%WINDIR%\microsoft.net\framework\sbs_microsoft.jscript.dll.enc
%WINDIR%\media\afternoon\windows critical stop.wav.enc
%WINDIR%\media\afternoon\windows user account control.wav.enc
%WINDIR%\syswow64\fr-fr\readme.txt
%WINDIR%\media\landscape\windows critical stop.wav.enc
%WINDIR%\media\heritage\windows hardware remove.wav.enc
%WINDIR%\media\landscape\windows hardware fail.wav.enc
%WINDIR%\media\landscape\windows navigation start.wav.enc
%WINDIR%\media\landscape\windows logoff sound.wav.enc
%WINDIR%\media\characters\windows navigation start.wav.enc
%WINDIR%\media\landscape\windows print complete.wav.enc
%WINDIR%\media\characters\desktop.ini.enc
%WINDIR%\microsoft.net\netfxrepair.1037.dll.enc
%WINDIR%\media\afternoon\windows print complete.wav.enc
%WINDIR%\media\landscape\windows error.wav.enc
%WINDIR%\media\afternoon\windows navigation start.wav.enc
%WINDIR%\media\afternoon\windows feed discovered.wav.enc
%WINDIR%\media\quirky\windows logon sound.wav.enc
%WINDIR%\media\landscape\windows battery low.wav.enc
%WINDIR%\media\landscape\windows balloon.wav.enc
%WINDIR%\media\ringout.wav.enc
%WINDIR%\media\landscape\windows exclamation.wav.enc
%WINDIR%\media\quirky\windows user account control.wav.enc
%WINDIR%\microsoft.net\framework\sharedreg12.dll.enc
%WINDIR%\syswow64\hr-hr\readme.txt
%WINDIR%\microsoft.net\netfxrepair.1038.dll.enc
%WINDIR%\media\characters\windows hardware fail.wav.enc
%WINDIR%\media\characters\windows pop-up blocked.wav.enc
%WINDIR%\media\characters\windows hardware insert.wav.enc
%WINDIR%\microsoft.net\netfxrepair.1032.dll.enc
%WINDIR%\microsoft.net\framework\sbs_vsavb7rt.dll.enc
%WINDIR%\media\afternoon\windows hardware fail.wav.enc
%WINDIR%\microsoft.net\framework\sbs_mscordbi.dll.enc
%WINDIR%\microsoft.net\framework\sbs_microsoft.vsa.vb.codedomprocessor.dll.enc
%WINDIR%\microsoft.net\framework\sbs_mscorsec.dll.enc
%WINDIR%\microsoft.net\framework\sbs_system.data.dll.enc
%WINDIR%\media\heritage\windows hardware fail.wav.enc
%WINDIR%\media\heritage\windows feed discovered.wav.enc
%WINDIR%\media\landscape\windows notify.wav.enc
%WINDIR%\media\heritage\windows logon sound.wav.enc
%WINDIR%\media\heritage\windows critical stop.wav.enc
%WINDIR%\syswow64\he-il\readme.txt
%WINDIR%\media\heritage\windows exclamation.wav.enc
%WINDIR%\media\heritage\windows error.wav.enc
%WINDIR%\media\heritage\windows ding.wav.enc
%WINDIR%\media\heritage\windows information bar.wav.enc
%WINDIR%\syswow64\lv-lv\readme.txt
%WINDIR%\media\heritage\windows default.wav.enc
%WINDIR%\media\afternoon\windows battery critical.wav.enc
%WINDIR%\media\heritage\windows user account control.wav.enc
%WINDIR%\media\heritage\windows print complete.wav.enc
%WINDIR%\media\heritage\windows logoff sound.wav.enc
%WINDIR%\media\heritage\windows navigation start.wav.enc
%WINDIR%\media\heritage\windows notify.wav.enc
%WINDIR%\media\heritage\desktop.ini.enc
%WINDIR%\media\quirky\windows default.wav.enc
%WINDIR%\media\windows information bar.wav.enc
%WINDIR%\syswow64\readme.txt
<SYSTEM32>\sk-sk\readme.txt
<SYSTEM32>\zh-hk\readme.txt
<SYSTEM32>\zh-cn\readme.txt
<SYSTEM32>\winbioplugins\readme.txt
<SYSTEM32>\wfp\readme.txt
<SYSTEM32>\wdi\readme.txt
<SYSTEM32>\wbem\readme.txt
<SYSTEM32>\uk-ua\readme.txt
<SYSTEM32>\tr-tr\readme.txt
<SYSTEM32>\th-th\readme.txt
<SYSTEM32>\sysprep\readme.txt
<SYSTEM32>\sv-se\readme.txt
<SYSTEM32>\sr-latn-cs\readme.txt
%WINDIR%\syswow64\ar-sa\readme.txt
%WINDIR%\syswow64\cs-cz\readme.txt
<SYSTEM32>\sppui\readme.txt
%WINDIR%\syswow64\bg-bg\readme.txt
<SYSTEM32>\ru-ru\readme.txt
<SYSTEM32>\ro-ro\readme.txt
<SYSTEM32>\restore\readme.txt
<SYSTEM32>\recovery\readme.txt
<SYSTEM32>\ras\readme.txt
<SYSTEM32>\pt-pt\readme.txt
<SYSTEM32>\pt-br\readme.txt
<SYSTEM32>\pl-pl\readme.txt
<SYSTEM32>\oobe\readme.txt
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\cagicon.exe.enc
<SYSTEM32>\nl-nl\readme.txt
<SYSTEM32>\nb-no\readme.txt
<SYSTEM32>\sl-si\readme.txt
<SYSTEM32>\setup\readme.txt
<SYSTEM32>\msdtc\readme.txt
%WINDIR%\microsoft.net\netfxrepair.1055.dll.enc
<SYSTEM32>\migration\readme.txt
%WINDIR%\media\cityscape\windows print complete.wav.enc
%WINDIR%\syswow64\com\readme.txt
%WINDIR%\media\cityscape\windows user account control.wav.enc
%WINDIR%\l2schemas\lan_policy_v1.xsd.enc
%WINDIR%\l2schemas\onex_v1.xsd.enc
%WINDIR%\l2schemas\wlanap_profile_v1.xsd.enc
%WINDIR%\l2schemas\wlan_policy_v1.xsd.enc
%WINDIR%\l2schemas\lan_profile_v1.xsd.enc
%WINDIR%\l2schemas\wlan_profile_v1.xsd.enc
%WINDIR%\l2schemas\wwan_profile_v1.xsd.enc
%WINDIR%\ocsetup_cbs_uninstall_searchengine-client-package.txt.enc
%WINDIR%\notepad.exe.enc
%WINDIR%\syswow64\dism\readme.txt
%WINDIR%\media\delta\desktop.ini.enc
%WINDIR%\panther\actionqueue\specialize.uaq.enc
%WINDIR%\offline web pages\desktop.ini.enc
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\secstorefile.ico.enc
%WINDIR%\logs\cbs\cbs.log.enc
%WINDIR%\msdfmap.ini.enc
%WINDIR%\mib.bin.enc
%WINDIR%\syswow64\de-de\readme.txt
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\sc_reader.ico.enc
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\apifile_8.ico.enc
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\pdffile_8.ico.enc
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\fdffile_8.ico.enc
%WINDIR%\syswow64\da-dk\readme.txt
%WINDIR%\installer\{90140000-0043-0000-1000-0000000ff1ce}\shellui.mst.enc
%WINDIR%\logs\dpx\setupact.log.enc
%WINDIR%\installer\{90140000-006e-0409-1000-0000000ff1ce}\misc.exe.enc
<SYSTEM32>\migwiz\readme.txt
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\xfdffile_8.ico.enc
<SYSTEM32>\manifeststore\readme.txt
<SYSTEM32>\cs-cz\readme.txt
<SYSTEM32>\config\readme.txt
<SYSTEM32>\codeintegrity\readme.txt
<SYSTEM32>\catroot2\readme.txt
<SYSTEM32>\bg-bg\readme.txt
<SYSTEM32>\ar-sa\readme.txt
<SYSTEM32>\readme.txt
%WINDIR%\softwaredistribution\readme.txt
%WINDIR%\softwaredistribution\postrebooteventcache\readme.txt
%WINDIR%\softwaredistribution\datastore\readme.txt
%WINDIR%\shellnew\readme.txt
%WINDIR%\installer\ef8d9.msp.enc
%WINDIR%\installer\ef6c4.msp.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\accicons.exe.enc
%WINDIR%\installer\ef846.msp.enc
%WINDIR%\installer\ef8f7.msp.enc
%WINDIR%\installer\ef6b2.msi.enc
%WINDIR%\installer\ef8bf.msp.enc
%WINDIR%\installer\ef66f.msi.enc
%WINDIR%\installer\ef663.msi.enc
%WINDIR%\installer\ef65d.msi.enc
%WINDIR%\installer\ef657.msi.enc
%WINDIR%\installer\ef675.msi.enc
%WINDIR%\installer\ef693.msi.enc
%WINDIR%\installer\ef681.msi.enc
%WINDIR%\installer\ef669.msi.enc
%WINDIR%\installer\ef6b9.msi.enc
%WINDIR%\installer\readme.txt.enc
%WINDIR%\installer\ef651.msi.enc
%WINDIR%\setup\state\readme.txt
<SYSTEM32>\da-dk\readme.txt
<SYSTEM32>\de-de\readme.txt
<SYSTEM32>\dism\readme.txt
<SYSTEM32>\com\readme.txt
<SYSTEM32>\lv-lv\readme.txt
<SYSTEM32>\ko-kr\readme.txt
<DRIVERS>\readme.txt
<SYSTEM32>\ja-jp\readme.txt
<SYSTEM32>\it-it\readme.txt
<SYSTEM32>\ias\readme.txt
<SYSTEM32>\hu-hu\readme.txt
<SYSTEM32>\hr-hr\readme.txt
<SYSTEM32>\he-il\readme.txt
<SYSTEM32>\fr-fr\readme.txt
<SYSTEM32>\fi-fi\readme.txt
<SYSTEM32>\et-ee\readme.txt
<SYSTEM32>\es-es\readme.txt
%WINDIR%\installer\ef68d.msi.enc
%WINDIR%\installer\ef6a0.msi.enc
%WINDIR%\installer\ef890.msp.enc
%WINDIR%\installer\f811.msi.enc
%WINDIR%\installer\ef8e2.msp.enc
<SYSTEM32>\lt-lt\readme.txt
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\xdpfile_8.ico.enc
%WINDIR%\installer\ef852.msp.enc
%WINDIR%\installer\ef8b8.msp.enc
%WINDIR%\installer\ef69a.msi.enc
%WINDIR%\installer\ef67b.msi.enc
%WINDIR%\installer\ef6c3.msi.enc
%WINDIR%\media\delta\windows notify.wav.enc
%WINDIR%\installer\ef6ac.msi.enc
%WINDIR%\installer\ef8a5.msp.enc
%WINDIR%\media\festival\windows print complete.wav.enc
<SYSTEM32>\en-us\readme.txt
<SYSTEM32>\en\readme.txt
<SYSTEM32>\el-gr\readme.txt
%WINDIR%\installer\ef687.msi.enc
%WINDIR%\installer\ef6a6.msi.enc
<SYSTEM32>\zh-tw\readme.txt
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\pdxfile_8.ico.enc
%WINDIR%\media\savanna\windows user account control.wav.enc
%WINDIR%\panther\mainqueueonline1.que.enc
%WINDIR%\microsoft.net\framework\sbscmp10.dll.enc
%WINDIR%\microsoft.net\framework\sbscmp20_mscorwks.dll.enc
%WINDIR%\media\savanna\windows feed discovered.wav.enc
%WINDIR%\microsoft.net\framework\sbs_diasymreader.dll.enc
%WINDIR%\microsoft.net\framework\sbs_iehost.dll.enc
%WINDIR%\microsoft.net\framework\sbs_mscorrc.dll.enc
%WINDIR%\panther\cbs.log.enc
%WINDIR%\media\delta\windows pop-up blocked.wav.enc
%WINDIR%\microsoft.net\netfxrepair.1049.dll.enc
%WINDIR%\microsoft.net\framework\sbs_wminet_utils.dll.enc
%WINDIR%\media\heritage\windows battery critical.wav.enc
%WINDIR%\panther\cbs_unattend.log.enc
%WINDIR%\media\raga\windows default.wav.enc
%WINDIR%\media\raga\windows ding.wav.enc
%WINDIR%\media\raga\desktop.ini.enc
%WINDIR%\media\delta\windows print complete.wav.enc
%WINDIR%\media\festival\desktop.ini.enc
%WINDIR%\media\festival\windows notify.wav.enc
%WINDIR%\media\festival\windows logon sound.wav.enc
%WINDIR%\panther\unattendgc\setupact.log.enc
%WINDIR%\media\festival\windows hardware remove.wav.enc
%WINDIR%\media\festival\windows hardware fail.wav.enc
%WINDIR%\media\festival\windows hardware insert.wav.enc
%WINDIR%\media\festival\windows feed discovered.wav.enc
%WINDIR%\media\festival\windows exclamation.wav.enc
%WINDIR%\media\festival\windows error.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\pptico.exe.enc
%WINDIR%\media\festival\windows ding.wav.enc
%WINDIR%\media\sonata\windows balloon.wav.enc
%WINDIR%\panther\mainqueueonline0.que.enc
%WINDIR%\media\sonata\windows default.wav.enc
%WINDIR%\media\delta\windows default.wav.enc
%WINDIR%\inf\netpgm.inf.enc
%WINDIR%\media\delta\windows logoff sound.wav.enc
%WINDIR%\media\delta\windows error.wav.enc
%WINDIR%\media\delta\windows feed discovered.wav.enc
%WINDIR%\media\delta\windows hardware fail.wav.enc
%WINDIR%\media\delta\windows hardware insert.wav.enc
%WINDIR%\media\delta\windows hardware remove.wav.enc
%WINDIR%\media\delta\windows information bar.wav.enc
%WINDIR%\media\delta\windows logon sound.wav.enc
%WINDIR%\media\raga\windows pop-up blocked.wav.enc
%WINDIR%\media\calligraphy\windows navigation start.wav.enc
%WINDIR%\media\calligraphy\windows hardware remove.wav.enc
%WINDIR%\media\calligraphy\windows print complete.wav.enc
%WINDIR%\media\calligraphy\windows exclamation.wav.enc
%WINDIR%\media\windows hardware fail.wav.enc
%WINDIR%\media\afternoon\windows hardware remove.wav.enc
%WINDIR%\media\delta\windows balloon.wav.enc
%WINDIR%\media\raga\windows battery low.wav.enc
%WINDIR%\media\raga\windows logon sound.wav.enc
%WINDIR%\media\garden\windows navigation start.wav.enc
%WINDIR%\media\delta\windows ding.wav.enc
%WINDIR%\media\delta\windows critical stop.wav.enc
%WINDIR%\media\delta\windows battery low.wav.enc
%WINDIR%\media\delta\windows battery critical.wav.enc
%WINDIR%\media\delta\windows exclamation.wav.enc
%WINDIR%\media\raga\windows navigation start.wav.enc
%WINDIR%\media\festival\windows default.wav.enc
%WINDIR%\media\raga\windows hardware remove.wav.enc
%WINDIR%\media\raga\windows feed discovered.wav.enc
%WINDIR%\media\raga\windows exclamation.wav.enc
%WINDIR%\media\raga\windows battery critical.wav.enc
%WINDIR%\media\raga\windows balloon.wav.enc
%WINDIR%\media\raga\windows user account control.wav.enc
%WINDIR%\inf\mdmmot64.pnf.enc
%WINDIR%\media\festival\windows critical stop.wav.enc
%WINDIR%\media\cityscape\windows battery critical.wav.enc
%WINDIR%\media\cityscape\windows critical stop.wav.enc
%WINDIR%\media\cityscape\windows battery low.wav.enc
%WINDIR%\media\cityscape\windows error.wav.enc
%WINDIR%\media\cityscape\windows default.wav.enc
%WINDIR%\media\cityscape\windows notify.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\wordicon.exe.enc
%WINDIR%\microsoft.net\framework64\sbscmp20_mscorwks.dll.enc
%WINDIR%\media\cityscape\windows ding.wav.enc
%WINDIR%\media\calligraphy\windows hardware insert.wav.enc
%WINDIR%\syswow64\en-us\readme.txt
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\inficon.exe.enc
%WINDIR%\syswow64\en\readme.txt
%WINDIR%\media\cityscape\windows exclamation.wav.enc
%WINDIR%\syswow64\el-gr\readme.txt
%WINDIR%\media\delta\windows navigation start.wav.enc
%WINDIR%\media\cityscape\desktop.ini.enc
%WINDIR%\syswow64\drivers\readme.txt
%WINDIR%\media\savanna\windows logoff sound.wav.enc
%WINDIR%\media\calligraphy\desktop.ini.enc
%WINDIR%\media\calligraphy\windows error.wav.enc
%WINDIR%\media\calligraphy\windows critical stop.wav.enc
%WINDIR%\media\cityscape\windows pop-up blocked.wav.enc
%WINDIR%\media\festival\windows user account control.wav.enc
%WINDIR%\media\calligraphy\windows battery low.wav.enc
%WINDIR%\panther\actionqueue\oobesystem.uaq.enc
%WINDIR%\media\calligraphy\windows information bar.wav.enc
%WINDIR%\media\calligraphy\windows feed discovered.wav.enc
%WINDIR%\media\calligraphy\windows user account control.wav.enc
%WINDIR%\media\delta\windows user account control.wav.enc
%WINDIR%\media\quirky\desktop.ini.enc
%WINDIR%\microsoft.net\framework64\sbscmp10.dll.enc
%WINDIR%\media\cityscape\windows balloon.wav.enc
%WINDIR%\media\cityscape\windows logon sound.wav.enc
%WINDIR%\microsoft.net\netfxrepair.3076.dll.enc
%WINDIR%\media\festival\windows balloon.wav.enc
%WINDIR%\microsoft.net\netfxrepair.1045.dll.enc
%WINDIR%\microsoft.net\netfxrepair.2052.dll.enc
%WINDIR%\media\garden\windows balloon.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\msouc.exe.enc
%WINDIR%\media\garden\desktop.ini.enc
%WINDIR%\media\garden\windows battery critical.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\joticon.exe.enc
%WINDIR%\media\garden\windows battery low.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\outicon.exe.enc
%WINDIR%\media\raga\windows error.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\xlicons.exe.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\graph.ico.enc
%WINDIR%\media\festival\windows information bar.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\misc.exe.enc
%WINDIR%\media\landscape\windows information bar.wav.enc
%WINDIR%\media\sonata\windows pop-up blocked.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\shellui.mst.enc
%WINDIR%\media\garden\windows critical stop.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\oisicon.exe.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\pubs.exe.enc
%WINDIR%\media\cityscape\windows hardware fail.wav.enc
%WINDIR%\media\cityscape\windows hardware insert.wav.enc
%WINDIR%\media\festival\windows battery critical.wav.enc
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\grvicons.exe.enc
%WINDIR%\media\festival\windows battery low.wav.enc
%WINDIR%\media\cityscape\windows feed discovered.wav.enc
%WINDIR%\media\raga\windows print complete.wav.enc
%WINDIR%\media\sonata\windows user account control.wav.enc
%WINDIR%\ocsetup_uninstall_searchengine-client-package.etl.enc
%WINDIR%\media\landscape\windows hardware insert.wav.enc
%WINDIR%\microsoft.net\netfxrepair.1044.dll.enc
%WINDIR%\inf\netk57a.inf.enc
%WINDIR%\inf\netl1e64.inf.enc
%WINDIR%\inf\netl260a.inf.enc
%ProgramFiles%\microsoft office\document themes 14\black tie.thmx.enc
%ProgramFiles%\dvd maker\wmm2clip.dll.enc
%ProgramFiles%\microsoft office\document themes 14\adjacency.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\paper.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\thatch.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\waveform.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\origin.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\urban.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\module.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\median.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\pushpin.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\composite.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\newsprint.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\foundry.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\concourse.thmx.enc
%ProgramFiles%\internet explorer\pdm.dll.enc
%ProgramFiles%\dvd maker\directshowtap.ax.enc
%ProgramFiles%\dvd maker\shared\common.fxh.enc
%ProgramFiles%\dvd maker\bod_r.ttf.enc
%ProgramFiles%\dvd maker\pipeline.dll.enc
%ProgramFiles%\dvd maker\fieldswitch.ax.enc
%ProgramFiles%\dvd maker\rtstreamsource.ax.enc
%ProgramFiles%\dvd maker\audiodepthconverter.ax.enc
%ProgramFiles%\dvd maker\sonicsptransform.ax.enc
%ProgramFiles%\dvd maker\omdproject.dll.enc
%ProgramFiles%\dvd maker\eurosti.ttf.enc
%WINDIR%\debug\wia\readme.txt
%WINDIR%\debug\readme.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\pss10r.chm.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\microsoft.vc90.crt.manifest.enc
%ProgramFiles%\microsoft office\document themes 14\aspect.thmx.enc
%ProgramFiles%\microsoft office\office14\bdcmetadata.xsd.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.businessdata.dll.enc
%ProgramFiles%\microsoft office\office14\ieawsdc.dll.enc
%ProgramFiles%\microsoft office\office14\installed_resources14.xss.enc
%ProgramFiles%\microsoft office\document themes 14\clarity.thmx.enc
%ProgramFiles%\microsoft office\office14\graph.exe.manifest.enc
%ProgramFiles%\microsoft office\office14\mapiph.dll.enc
%ProgramFiles%\microsoft office\office14\grooveex.dll.enc
%ProgramFiles%\microsoft office\office14\ipeditor.dll.enc
%ProgramFiles%\microsoft office\office14\gkpowerpoint.dll.enc
%ProgramFiles%\microsoft office\office14\gkword.dll.enc
%ProgramFiles%\internet explorer\en-us\jsprofilerui.dll.mui.enc
%ProgramFiles%\microsoft office\office14\emsmdb32.dll.enc
%ProgramFiles%\microsoft office\office14\envelope.dll.enc
%ProgramFiles%\microsoft office\office14\inlaunch.dll.enc
%ProgramFiles%\microsoft office\office14\latin1.shp.enc
%ProgramFiles%\microsoft office\office14\microsoft.businessdata.dll.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dw20.exe.enc
%ProgramFiles%\microsoft office\office14\ipolk.dll.enc
%ProgramFiles%\microsoft office\office14\installed_schemas14.xss.enc
%ProgramFiles%\microsoft office\office14\impmail.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtime.dll.enc
%ProgramFiles%\microsoft office\office14\excel.exe.enc
%ProgramFiles%\microsoft office\office14\groove.exe.enc
%ProgramFiles%\microsoft office\office14\infopath.exe.enc
%ProgramFiles%\microsoft office\office14\mapishell.dll.enc
%ProgramFiles%\microsoft office\office14\entitydatahandler.dll.enc
%ProgramFiles%\microsoft office\office14\excel.exe.manifest.enc
%ProgramFiles%\microsoft office\office14\entitypicker.dll.enc
%WINDIR%\downloaded program files\readme.txt
%ProgramFiles%\microsoft office\office14\custom.propdesc.enc
%ProgramFiles%\microsoft office\document themes 14\metro.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\elemental.thmx.enc
%ProgramFiles%\microsoft office\office14\graph.ico.enc
%ProgramFiles%\dvd maker\omdbase.dll.enc
%ProgramFiles%\internet explorer\sqmapi.dll.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officelr.cab.enc
%ProgramFiles%\microsoft office\document themes 14\technic.thmx.enc
%ProgramFiles%\internet explorer\ieinstal.exe.enc
%ProgramFiles%\microsoft office\office14\bcsruntimeui.dll.enc
%ProgramFiles%\microsoft office\office14\audiosearchmain.dll.enc
%ProgramFiles%\microsoft office\office14\css7data0009.dll.enc
%ProgramFiles%\microsoft office\office14\bcsclient.msg.dll.enc
%ProgramFiles%\microsoft office\office14\accwiz.dll.enc
%ProgramFiles%\microsoft office\office14\bcsevents.man.enc
%ProgramFiles%\microsoft office\office14\cdlmso.dll.enc
%ProgramFiles%\microsoft office\office14\accdds.dll.enc
%ProgramFiles%\microsoft office\office14\bcsproxy.dll.enc
%ProgramFiles%\microsoft office\office14\asciieng.lng.enc
%ProgramFiles%\microsoft office\office14\accddslm.dll.enc
%ProgramFiles%\microsoft office\office14\authzax.dll.enc
%ProgramFiles%\microsoft office\office14\acedao.dll.enc
%ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd.enc
%ProgramFiles%\dvd maker\shared\parity.fx.enc
%ProgramFiles%\microsoft office\document themes 14\flow.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\opulent.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\essential.thmx.enc
%ProgramFiles%\dvd maker\en-us\dvdmaker.exe.mui.enc
%ProgramFiles%\internet explorer\hmmapi.dll.enc
%ProgramFiles%\internet explorer\ieproxy.dll.enc
%ProgramFiles%\internet explorer\ieshims.dll.enc
%ProgramFiles%\internet explorer\iedvtool.dll.enc
%ProgramFiles%\internet explorer\jsdebuggeride.dll.enc
%ProgramFiles%\internet explorer\jsprofilerui.dll.enc
%ProgramFiles%\microsoft office\document themes 14\civic.thmx.enc
%ProgramFiles%\internet explorer\en-us\iedvtool.dll.mui.enc
%ProgramFiles%\microsoft office\document themes 14\horizon.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\grid.thmx.enc
%ProgramFiles%\microsoft office\office14\css7data000a.dll.enc
%ProgramFiles%\microsoft office\office14\bcsruntime.dll.enc
%ProgramFiles%\dvd maker\soniccolorconverter.ax.enc
%ProgramFiles%\microsoft office\office14\advtel.dic.enc
%WINDIR%\cursors\readme.txt
%ProgramFiles%\microsoft office\office14\bcsstr32.dll.enc
%ProgramFiles%\microsoft office\office14\advzip.dic.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.msi.enc
%ProgramFiles%\microsoft office\office14\accvdt.dll.enc
%ProgramFiles%\microsoft office\office14\advcmp.dic.enc
%ProgramFiles%\microsoft office\office14\accddsf.dll.enc
%ProgramFiles%\microsoft office\office14\accicons.exe.enc
%ProgramFiles%\microsoft office\office14\contab32.dll.enc
%ProgramFiles%\microsoft office\office14\bcsautogen.dll.enc
%ProgramFiles%\microsoft office\office14\audiosearchsapife.dll.enc
%ProgramFiles%\microsoft office\office14\bcsclientmanifest.man.enc
%ProgramFiles%\microsoft office\office14\bcslaunch.dll.enc
%ProgramFiles%\internet explorer\msdbg2.dll.enc
%ProgramFiles%\microsoft office\office14\audiosearchlts.dll.enc
%ProgramFiles%\microsoft office\office14\bcssync.exe.enc
%WINDIR%\branding\shellbrd\readme.txt
%ProgramFiles%\internet explorer\iexplore.exe.enc
%ProgramFiles%\internet explorer\jsdbgui.dll.enc
%ProgramFiles%\dvd maker\pipetran.dll.enc
%ProgramFiles%\dvd maker\rtstreamsink.ax.enc
%ProgramFiles%\dvd maker\dvdmaker.exe.enc
%ProgramFiles%\internet explorer\en-us\jsdebuggeride.dll.mui.enc
%ProgramFiles%\dvd maker\secretst.ttf.enc
%ProgramFiles%\dvd maker\offset.ax.enc
%WINDIR%\branding\basebrd\readme.txt
%ProgramFiles%\microsoft office\office14\charsettable.chr.enc
%ProgramFiles%\microsoft office\office14\cgmimp32.hlp.enc
%ProgramFiles%\microsoft office\office14\contactpicker.dll.enc
%ProgramFiles%\microsoft office\office14\cnfnot32.exe.enc
%ProgramFiles%\microsoft office\office14\intldate.dll.enc
%ProgramFiles%\microsoft office\office14\clview.exe.enc
%ProgramFiles%\microsoft office\office14\english.lng.enc
%ProgramFiles%\microsoft office\office14\iecontentservice.exe.enc
%ProgramFiles%\mozilla firefox\readme.txt.enc
%ProgramFiles%\mozilla firefox\removed-files.enc
%ProgramFiles%\mozilla firefox\plugin-container.exe.sig.enc
%ProgramFiles%\mozilla firefox\platform.ini.enc
%ProgramFiles(x86)%\microsoft office\office14\inlaunch.dll.enc
%ProgramFiles%\microsoft office\office14\winword.exe.enc
%ProgramFiles%\microsoft office\office14\mspub.exe.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.sharepointworkspace.addin.intl.dll.enc
%ProgramFiles%\mozilla firefox\pingsender.exe.enc
%ProgramFiles%\mozilla firefox\plugin-container.exe.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-crt-convert-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\nssckbi.dll.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-timezone-l1-1-0.dll.enc
%WINDIR%\en-us\readme.txt
%WINDIR%\fonts\readme.txt
%ProgramFiles%\mozilla firefox\update-settings.ini.enc
%ProgramFiles%\mozilla firefox\install.log.enc
%ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll.enc
%ProgramFiles%\mozilla firefox\lgpllibs.dll.enc
%ProgramFiles%\mozilla firefox\ia2marshal.dll.enc
%ProgramFiles%\mozilla firefox\libegl.dll.enc
%ProgramFiles%\mozilla firefox\firefox.exe.sig.enc
%ProgramFiles%\mozilla firefox\firefox.exe.enc
%ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.enc
%WINDIR%\ehome\wow\readme.txt
%ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.sharepointworkspace.addin.interface.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\nss3.dll.enc
%ProgramFiles%\microsoft office\office14\mscss7cm_en.dub.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-file-l1-2-0.dll.enc
%ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini.enc
%ProgramFiles%\mozilla firefox\mozavutil.dll.enc
%ProgramFiles%\mozilla firefox\mozglue.dll.enc
%ProgramFiles%\mozilla firefox\msvcp140.dll.enc
%ProgramFiles%\mozilla firefox\minidump-analyzer.exe.enc
%ProgramFiles%\mozilla firefox\maintenanceservice_installer.exe.enc
%ProgramFiles%\mozilla firefox\mozavcodec.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.xml.dll.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-localization-l1-2-0.dll.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-synch-l1-2-0.dll.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-crt-conio-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-crt-environment-l1-1-0.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.sharepoint.businessdata.administration.client.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.sharepointworkspace.addin.tool.dll.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-processthreads-l1-1-1.dll.enc
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-file-l2-1-0.dll.enc
%ProgramFiles%\mozilla firefox\updated\accessiblemarshal.dll.enc
%ProgramFiles%\mozilla firefox\uninstall\uninstall.log.enc
%ProgramFiles%\mozilla firefox\softokn3.dll.enc
%ProgramFiles%\mozilla firefox\plugin-hang-ui.exe.enc
%ProgramFiles%\mozilla firefox\uninstall\helper.exe.enc
%ProgramFiles%\mozilla firefox\ucrtbase.dll.enc
%ProgramFiles%\mozilla firefox\qipcap64.dll.enc
%ProgramFiles%\mozilla firefox\osclientcerts.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.sharepointworkspace.addin.datasetwrapper.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.sharepointworkspace.addin.data.dll.enc
%ProgramFiles%\mozilla firefox\omni.ja.enc
%ProgramFiles%\mozilla firefox\precomplete.enc
%ProgramFiles%\mozilla firefox\maintenanceservice.exe.enc
%ProgramFiles%\mozilla firefox\freebl3.dll.enc
%ProgramFiles%\microsoft office\office14\msohevi.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\distibution\policies.json.enc
%ProgramFiles%\microsoft office\office14\ois.exe.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.infopath.formcontrol.dll.enc
%ProgramFiles%\microsoft office\office14\interop.groovemanagedaddintool.dll.enc
%ProgramFiles%\microsoft office\office14\interop.managedapi.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.infopath.client.internal.clrhost.dll.enc
%ProgramFiles%\microsoft office\office14\medcat.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtimeui.dll.enc
%ProgramFiles%\microsoft office\office14\css7data000c.dll.enc
%ProgramFiles%\microsoft office\office14\excelcnvpxy.dll.enc
%ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.semitrust.dll.enc
%ProgramFiles%\microsoft office\office14\gkexcel.dll.enc
%ProgramFiles%\microsoft office\office14\form.dll.enc
%ProgramFiles%\microsoft office\office14\excelcnv.exe.enc
%ProgramFiles%\microsoft office\office14\mstore.exe.enc
%ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll.enc
%ProgramFiles%\microsoft office\office14\exsec32.dll.enc
%ProgramFiles%\mozilla firefox\browser\override.ini.enc
%ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini.enc
%ProgramFiles%\mozilla firefox\accessible.tlb.enc
%WINDIR%\ehome\en-us\readme.txt
%ProgramFiles%\microsoft office\office14\gfx.dll.enc
%WINDIR%\ehome\createdisc\readme.txt
%WINDIR%\ehome\readme.txt
%ProgramFiles%\microsoft sql server compact edition\v3.5\sqlceca35.dll.enc
%ProgramFiles%\microsoft office\office14\dlgsetp.dll.enc
%ProgramFiles%\microsoft office\office14\french.lng.enc
%ProgramFiles%\microsoft office\office14\emablt32.dll.enc
%ProgramFiles%\microsoft office\office14\graph.exe.enc
%ProgramFiles%\microsoft office\office14\groovemn.exe.enc
%ProgramFiles%\mozilla firefox\browser\omni.ja.enc
%ProgramFiles%\microsoft office\office14\mcps.dll.enc
%ProgramFiles%\microsoft office\office14\powerpnt.exe.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll.enc
%ProgramFiles%\microsoft office\office14\ipdesign.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll.enc
%ProgramFiles%\microsoft office\office14\outlook.exe.enc
%ProgramFiles%\microsoft office\office14\msaccess.exe.enc
%ProgramFiles%\microsoft sql server compact edition\v3.5\sqlceoledb35.dll.enc
%ProgramFiles%\microsoft sql server compact edition\v3.5\sqlceer35en.dll.enc
%ProgramFiles%\microsoft sql server compact edition\v3.5\sqlcese35.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll.enc
%ProgramFiles%\mozilla firefox\accessiblemarshal.dll.enc
%ProgramFiles%\mozilla firefox\crashreporter.ini.enc
%ProgramFiles%\mozilla firefox\accessiblehandler.dll.enc
%ProgramFiles%\mozilla firefox\d3dcompiler_47.dll.enc
%WINDIR%\ehome\mediarenderer\readme.txt
%ProgramFiles%\mozilla firefox\default-browser-agent.exe.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll.enc
%ProgramFiles%\microsoft sql server compact edition\v3.5\sqlceqp35.dll.enc
%ProgramFiles%\microsoft sql server compact edition\v3.5\sqlcecompact35.dll.enc
%ProgramFiles%\microsoft sql server compact edition\v3.5\sqlceme35.dll.enc
%ProgramFiles%\microsoft office\office14\readme.txt.enc
%ProgramFiles%\mozilla firefox\dependentlibs.list.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\libglesv2.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll.enc
%ProgramFiles%\mozilla firefox\application.ini.enc
%ProgramFiles%\mozilla firefox\crashreporter.exe.enc
%ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll.enc
%ProgramFiles%\microsoft office\office14\onenote.exe.enc
%ProgramFiles%\microsoft office\office14\dbghelp.dll.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\osetupui.dll.enc
%ProgramFiles%\internet explorer\en-us\ielowutil.exe.mui.enc
%ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\readme.txt
%ProgramFiles%\internet explorer\signup\readme.txt
%ProgramFiles%\microsoft sql server compact edition\v3.5\readme.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\osetup.dll.enc
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi.enc
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\ose.exe.enc
<Full path to file>.enc
C:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\desktop.ini.enc
%HOMEPATH%\links\downloads.lnk.enc
%HOMEPATH%\links\recentplaces.lnk.enc
%HOMEPATH%\links\desktop.lnk.enc
%HOMEPATH%\saved games\desktop.ini.enc
%ProgramFiles%\microsoft office\office14\readme.txt
%HOMEPATH%\favorites\msn websites\msnbc news.url.enc
%ProgramFiles%\microsoft office\document themes 14\readme.txt
%ProgramFiles%\mozilla firefox\distibution\readme.txt
%ProgramFiles%\mozilla firefox\browser\readme.txt
%CommonProgramFiles%\system\readme.txt
%ProgramFiles%\internet explorer\en-us\readme.txt
%ProgramFiles%\dvd maker\shared\readme.txt
%HOMEPATH%\favorites\windows live\windows live spaces.url.enc
%HOMEPATH%\favorites\windows live\windows live mail.url.enc
%HOMEPATH%\favorites\windows live\windows live gallery.url.enc
%HOMEPATH%\favorites\msn websites\msn money.url.enc
%HOMEPATH%\favorites\msn websites\msn sports.url.enc
%ProgramFiles%\dvd maker\en-us\readme.txt
%HOMEPATH%\favorites\windows live\get windows live.url.enc
%HOMEPATH%\favorites\msn websites\msn.url.enc
%HOMEPATH%\favorites\msn websites\msn entertainment.url.enc
%ProgramFiles%\dvd maker\readme.txt
%ProgramFiles%\readme.txt
%HOMEPATH%\links\desktop.ini.enc
%ProgramFiles%\internet explorer\readme.txt
%ProgramFiles%\mozilla firefox\uninstall\readme.txt
%CommonProgramFiles%\services\readme.txt
%ProgramFiles%\mozilla firefox\fonts\readme.txt
%ProgramFiles%\windows media player\media renderer\readme.txt
%ProgramFiles%\windows media player\readme.txt
%ProgramFiles%\windows media player\network sharing\readme.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.msi.enc
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pidgenx.dll.enc
%ProgramFiles%\windows media player\skins\readme.txt
%CommonProgramFiles(x86)%\services\readme.txt
%ProgramFiles%\windows nt\accessories\readme.txt
%ProgramFiles%\windows nt\tabletextservice\readme.txt
%ProgramFiles%\windows photo viewer\en-us\readme.txt
%ProgramFiles%\windows photo viewer\readme.txt
%ProgramFiles%\windows portable devices\readme.txt
%ProgramFiles%\windows sidebar\en-us\readme.txt
%ProgramFiles%\windows sidebar\readme.txt
%ProgramFiles%\windows media player\en-us\readme.txt
%ProgramFiles%\windows journal\templates\readme.txt
%ProgramFiles%\windows journal\readme.txt
%ProgramFiles%\windows journal\en-us\readme.txt
%ProgramFiles%\windows defender\readme.txt
%ProgramFiles%\windows defender\en-us\readme.txt
%ProgramFiles%\mozilla thunderbird\visualelements\readme.txt
%ProgramFiles%\mozilla thunderbird\uninstall\readme.txt
%ProgramFiles%\mozilla thunderbird\isp\readme.txt
%ProgramFiles%\mozilla thunderbird\fonts\readme.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab.enc
%ProgramFiles%\mozilla thunderbird\features\readme.txt
%ProgramFiles%\mozilla thunderbird\readme.txt
%ProgramFiles%\mozilla firefox\updated\readme.txt
%ProgramFiles%\windows mail\readme.txt
%ProgramFiles%\windows mail\en-us\readme.txt
%CommonProgramFiles%\designer\readme.txt
C:\readme.txt
%HOMEPATH%\desktop\telegram.lnk.enc
C:\$recycle.bin\s-1-5-21-3150914307-1777937420-491476919-1000\readme.txt
%HOMEPATH%\saved games\readme.txt
%HOMEPATH%\desktop\desktop.ini.enc
%HOMEPATH%\links\readme.txt
%HOMEPATH%\favorites\windows live\readme.txt
%HOMEPATH%\desktop\google chrome.lnk.enc
%HOMEPATH%\desktop\calc.exe.enc
%HOMEPATH%\favorites\msn websites\readme.txt
%HOMEPATH%\favorites\microsoft websites\readme.txt
%HOMEPATH%\favorites\links for united states\readme.txt
%HOMEPATH%\favorites\links\readme.txt
%HOMEPATH%\desktop\alert.htm.enc
%HOMEPATH%\desktop\skypesetup.exe.enc
%HOMEPATH%\desktop\advice_process.htm.enc
%HOMEPATH%\desktop\64bit_notes.htm.enc
%HOMEPATH%\desktop\3.jpeg.enc
%HOMEPATH%\contacts\readme.txt
%HOMEPATH%\desktop\4f0bf7ff71f28.jpeg.enc
%HOMEPATH%\videos\readme.txt
%HOMEPATH%\music\readme.txt
%HOMEPATH%\desktop\1189.jpeg.enc
%HOMEPATH%\downloads\readme.txt
%HOMEPATH%\desktop\2.jpeg.enc
%HOMEPATH%\pictures\readme.txt
%HOMEPATH%\desktop\000814251_video_01.avi.enc
%HOMEPATH%\desktop\readme.txt
%HOMEPATH%\documents\desktop.ini.enc
%HOMEPATH%\documents\readme.txt
%HOMEPATH%\favorites\readme.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\desktop\tcm851ax32.exe.enc
<Current directory>\readme.txt
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\favorites\msn websites\msn autos.url.enc
%HOMEPATH%\favorites\links for united states\desktop.ini.enc
%HOMEPATH%\favorites\microsoft websites\microsoft store.url.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\favorites\microsoft websites\microsoft at work.url.enc
%HOMEPATH%\favorites\microsoft websites\microsoft at home.url.enc
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\favorites\microsoft websites\ie site on microsoft.com.url.enc
%HOMEPATH%\favorites\links for united states\gobiernousa.gov.url.enc
%HOMEPATH%\favorites\links for united states\usa.gov.url.enc
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\favorites\microsoft websites\ie add-on site.url.enc
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\readme.txt
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\readme.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\favorites\links\web slice gallery.url.enc
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\readme.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\videos\desktop.ini.enc
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\contacts\user.contact.enc
%HOMEPATH%\favorites\links\desktop.ini.enc
%HOMEPATH%\favorites\desktop.ini.enc
%HOMEPATH%\pictures\desktop.ini.enc
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms.enc
%HOMEPATH%\contacts\desktop.ini.enc
%ProgramFiles(x86)%\adobe\acrobat reader dc\readme.txt
%HOMEPATH%\downloads\desktop.ini.enc
%HOMEPATH%\desktop\winmine.exe.enc
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\readme.txt
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\readme.txt
%HOMEPATH%\desktop\utorrent.exe.enc
%HOMEPATH%\music\desktop.ini.enc
%ProgramFiles%\mozilla firefox\readme.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww.cab.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\msvcr90.dll.enc
%ProgramFiles%\desktop.ini.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.msi.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwdcw20.dll.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\dwtrig20.exe.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.chm.enc
%CommonProgramFiles%\system\wab32.dll.enc
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.enc
%WINDIR%\assembly\nativeimages_v4.0.30319_64\readme.txt
%CommonProgramFiles%\designer\msaddndr.dll.enc
%ProgramFiles%\internet explorer\en-us\hmmapi.dll.mui.enc
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.msi.enc
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovelr.cab.enc
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onotelr.cab.enc
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.msi.enc
%WINDIR%\readme.txt
%ProgramFiles%\internet explorer\signup\install.ins.enc
%ProgramFiles%\internet explorer\en-us\jsprofilercore.dll.mui.enc
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\inflr.cab.enc
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.msi.enc
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.msi.enc
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.msi.enc
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab.enc
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.msi.enc
%WINDIR%\assembly\nativeimages_v2.0.50727_32\readme.txt
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\owow32lr.cab.enc
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab.enc
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.msi.enc
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab.enc
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.msi.enc
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.msi.enc
%WINDIR%\assembly\nativeimages_v2.0.50727_64\readme.txt
%ProgramFiles%\dvd maker\en-us\wmm2clip.dll.mui.enc
%ProgramFiles%\internet explorer\en-us\iexplore.exe.mui.enc
%ProgramFiles%\microsoft office\document themes 14\perspective.thmx.enc
%ProgramFiles%\internet explorer\en-us\jsdbgui.dll.mui.enc
%ProgramFiles%\microsoft office\document themes 14\apothecary.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\austin.thmx.enc
%ProgramFiles%\dvd maker\en-us\omdproject.dll.mui.enc
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\shellui.mst.enc
%WINDIR%\bitlockerdiscoveryvolumecontents\readme.txt
%ProgramFiles%\internet explorer\iecompat.dll.enc
%ProgramFiles%\internet explorer\jsprofilercore.dll.enc
%CommonProgramFiles(x86)%\steam\readme.txt
%CommonProgramFiles%\system\directdb.dll.enc
%ProgramFiles%\internet explorer\ie8props.propdesc.enc
%ProgramFiles%\internet explorer\ielowutil.exe.enc
%ProgramFiles%\microsoft office\document themes 14\solstice.thmx.enc
%CommonProgramFiles%\system\wab32res.dll.enc
%ProgramFiles%\internet explorer\en-us\ieinstal.exe.mui.enc
%ProgramFiles%\microsoft office\document themes 14\oriel.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\angles.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\hardcover.thmx.enc
%ProgramFiles%\java\jre1.8.0_45\release.enc
%ProgramFiles%\java\jre1.8.0_45\license.enc
%ProgramFiles%\microsoft office\document themes 14\slipstream.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\executive.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\equity.thmx.enc
%WINDIR%\assembly\nativeimages_v4.0.30319_32\readme.txt
%ProgramFiles%\microsoft office\document themes 14\couture.thmx.enc
%ProgramFiles%\microsoft office\document themes 14\trek.thmx.enc
%ProgramFiles%\java\jre1.8.0_45\readme.txt.enc
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.msi.enc
%ProgramFiles%\microsoft office\document themes 14\verve.thmx.enc
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.enc
%ProgramFiles%\java\jre1.8.0_45\copyright.enc
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab.enc
%WINDIR%\media\characters\windows print complete.wav.enc
%WINDIR%\en-us\bfsvc.exe.mui.enc
%WINDIR%\apppatch\en-us\readme.txt
%ProgramFiles(x86)%\windows photo viewer\en-us\readme.txt
%ProgramFiles(x86)%\windows nt\tabletextservice\readme.txt
%ProgramFiles(x86)%\windows nt\accessories\readme.txt
%ProgramFiles(x86)%\windows media player\skins\readme.txt
%ProgramFiles(x86)%\windows media player\readme.txt
%ProgramFiles(x86)%\windows media player\media renderer\readme.txt
%ProgramFiles(x86)%\windows media player\en-us\readme.txt
%ProgramFiles(x86)%\windows mail\readme.txt
%ProgramFiles(x86)%\windows mail\en-us\readme.txt
%ProgramFiles(x86)%\windows defender\readme.txt
%ProgramFiles(x86)%\windows defender\en-us\readme.txt
%ProgramFiles(x86)%\steam\public\readme.txt
%ProgramFiles(x86)%\steam\logs\readme.txt
%ProgramFiles(x86)%\windows portable devices\readme.txt
%ProgramFiles(x86)%\steam\bin\readme.txt
%ProgramFiles(x86)%\opera\readme.txt
%ProgramFiles(x86)%\opera\assets\readme.txt
%ProgramFiles(x86)%\opera\29.0.1795.47\readme.txt
%ProgramFiles(x86)%\msbuild\readme.txt
%ProgramFiles(x86)%\microsoft.net\redistlist\readme.txt
%ProgramFiles(x86)%\microsoft.net\primary interop assemblies\readme.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\setup.exe.enc
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww2.cab.enc
%ProgramFiles(x86)%\microsoft office\office14\readme.txt
%ProgramFiles(x86)%\internet explorer\signup\readme.txt
%ProgramFiles(x86)%\internet explorer\readme.txt
%ProgramFiles(x86)%\internet explorer\en-us\readme.txt
%ProgramFiles(x86)%\readme.txt
%CommonProgramFiles(x86)%\system\readme.txt
%ProgramFiles(x86)%\steam\readme.txt
%ProgramFiles(x86)%\windows sidebar\en-us\readme.txt
%ProgramFiles(x86)%\windows photo viewer\readme.txt
%ProgramFiles(x86)%\windows sidebar\readme.txt
%WINDIR%\apppatch\apppatch64\readme.txt
C:\users\readme.txt
%WINDIR%\apppatch\readme.txt
%WINDIR%\appcompat\programs\readme.txt
%WINDIR%\addins\readme.txt
%HOMEPATH%\searches\readme.txt
%HOMEPATH%\readme.txt
C:\users\public\videos\readme.txt
C:\users\public\recorded tv\readme.txt
C:\users\public\pictures\readme.txt
C:\users\public\music\readme.txt
C:\users\public\libraries\readme.txt
C:\users\public\downloads\readme.txt
C:\users\public\documents\readme.txt
C:\users\public\readme.txt
C:\users\public\desktop\readme.txt
C:\users\default\readme.txt
%ALLUSERSPROFILE%\microsoft\identitycrl\readme.txt
C:\recovery\4cc8e8a4-51d2-11ee-b826-9a90d4dcffb5\readme.txt
%ALLUSERSPROFILE%\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\readme.txt
%ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\readme.txt
%ALLUSERSPROFILE%\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\readme.txt
%ALLUSERSPROFILE%\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\readme.txt
%ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\readme.txt
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.msi.enc
%ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\readme.txt
%ALLUSERSPROFILE%\microsoft help\readme.txt
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab.enc
%ALLUSERSPROFILE%\microsoft\user account pictures\readme.txt
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\readme.txt
%ALLUSERSPROFILE%\microsoft\office\readme.txt
%ALLUSERSPROFILE%\microsoft\mf\readme.txt
%WINDIR%\assembly\readme.txt
%WINDIR%\media\characters\windows default.wav.enc
%ProgramFiles%\microsoft office\office14\omml2mml.xsl.enc
%WINDIR%\en-us\fveupdate.exe.mui.enc
%WINDIR%\inf\asp.net_4.0.30319\aspnet_perf.h.enc
%WINDIR%\inf\.net data provider for oracle\_dataoracleclientperfcounters_shared12_neutral.h.enc
%WINDIR%\inf\aspnet_state\aspnet_state_perf.h.enc
%WINDIR%\inf\bits\bitsctr.h.enc
%WINDIR%\inf\esent\esentprf.hxx.enc
%WINDIR%\inf\msdtc bridge 4.0.0.0\readme.txt
%WINDIR%\inf\msdtc bridge 3.0.0.0\readme.txt
%WINDIR%\inf\msdtc\readme.txt
%WINDIR%\inf\adp94xx.inf.enc
%WINDIR%\inf\acpipmi.inf.enc
%WINDIR%\inf\acpi.pnf.enc
%WINDIR%\inf\1394.inf.enc
%WINDIR%\inf\1394.pnf.enc
%WINDIR%\inf\61883.inf.enc
%WINDIR%\inf\en-us\netavpna.inf_loc.enc
%WINDIR%\inf\acpipmi.pnf.enc
%WINDIR%\inf\61883.pnf.enc
%WINDIR%\inf\esent\readme.txt
%WINDIR%\inf\en-us\readme.txt
%WINDIR%\inf\bits\readme.txt
%WINDIR%\inf\.netframework\corperfmonsymbols.ini.enc
%WINDIR%\inf\aspnet_state\readme.txt
%WINDIR%\inf\.netframework\corperfmonsymbols.h.enc
%WINDIR%\inf\asp.net_4.0.30319\readme.txt
%WINDIR%\inf\asp.net\readme.txt
%WINDIR%\inf\.net memory cache 4.0\netmemorycache.h.enc
%WINDIR%\inf\readme.txt
%WINDIR%\inf\.netframework\readme.txt
%WINDIR%\inf\.net data provider for oracle\_dataoracleclientperfcounters_shared12_neutral.ini.enc
%WINDIR%\inf\.net memory cache 4.0\readme.txt
%WINDIR%\inf\acpi.inf.enc
%WINDIR%\inf\.net data provider for sqlserver\_dataperfcounters_shared12_neutral.ini.enc
%WINDIR%\inf\crcdisk.pnf.enc
%WINDIR%\inf\arc.pnf.enc
%WINDIR%\fonts\castelar.ttf.enc
%WINDIR%\inf\amdsata.inf.enc
%WINDIR%\inf\ehstorpwddrv.pnf.enc
%WINDIR%\inf\compositebus.inf.enc
%WINDIR%\inf\faxcn001.pnf.enc
%WINDIR%\inf\hidirkbd.pnf.enc
%WINDIR%\inf\hdaudss.inf.enc
%WINDIR%\inf\atiriol6.inf.enc
%WINDIR%\inf\angel64.inf.enc
%WINDIR%\fonts\bod_blai.ttf.enc
%WINDIR%\inf\amdsbs.pnf.enc
%WINDIR%\inf\angel64.pnf.enc
%WINDIR%\inf\amdsbs.inf.enc
%WINDIR%\inf\agp.pnf.enc
%WINDIR%\inf\en-us\netavpnt.inf_loc.enc
%WINDIR%\inf\adpahci.inf.enc
%WINDIR%\inf\asp.net\aspnet_perf.h.enc
%WINDIR%\inf\brmfport.inf.enc
%WINDIR%\inf\faxcn001.inf.enc
%WINDIR%\inf\bthprint.pnf.enc
%WINDIR%\inf\dshowext.inf.enc
%WINDIR%\inf\brmfcsto.inf.enc
%WINDIR%\inf\averfx2swtv_noavin_x64.inf.enc
%WINDIR%\inf\averfx2hbtv_x64.pnf.enc
%WINDIR%\inf\averfx2hbtv_x64.inf.enc
%WINDIR%\inf\brmfport.pnf.enc
%WINDIR%\inf\averfx2hbh826d_noaverir_x64.inf.enc
%WINDIR%\inf\averfx2hbh826d_noaverir_x64.pnf.enc
%WINDIR%\inf\avc.pnf.enc
%WINDIR%\inf\agp.inf.enc
%WINDIR%\inf\hidbth.inf.enc
%WINDIR%\inf\.net data provider for sqlserver\_dataperfcounters_shared12_neutral.h.enc
%WINDIR%\inf\.net data provider for sqlserver\readme.txt
%WINDIR%\fonts\browau.ttf.enc
%WINDIR%\fonts\bod_bi.ttf.enc
%WINDIR%\fonts\coue1257.fon.enc
%WINDIR%\fonts\browa.ttf.enc
%WINDIR%\fonts\broadw.ttf.enc
%WINDIR%\fonts\cordia.ttf.enc
%WINDIR%\fonts\corbel.ttf.enc
%WINDIR%\fonts\alger.ttf.enc
%WINDIR%\fonts\antquai.ttf.enc
%WINDIR%\fonts\consolab.ttf.enc
%WINDIR%\fonts\comicbd.ttf.enc
%WINDIR%\fonts\colonna.ttf.enc
%WINDIR%\fonts\century.ttf.enc
%WINDIR%\fonts\calibriz.ttf.enc
%WINDIR%\fonts\calibrib.ttf.enc
%WINDIR%\fonts\bod_i.ttf.enc
%WINDIR%\inf\.net clr data\_dataperfcounters.ini.enc
%WINDIR%\fonts\courfg.fon.enc
%WINDIR%\fonts\aparajb.ttf.enc
%WINDIR%\fonts\cvgasys.fon.enc
%WINDIR%\fonts\8514oemt.fon.enc
%WINDIR%\fonts\coue1256.fon.enc
%WINDIR%\fonts\c8514oem.fon.enc
%WINDIR%\fonts\cga40852.fon.enc
%WINDIR%\fonts\cga40737.fon.enc
%WINDIR%\fonts\couf1257.fon.enc
%WINDIR%\fonts\85f1255.fon.enc
%WINDIR%\fonts\8514syse.fon.enc
%WINDIR%\fonts\ahronbd.ttf.enc
%WINDIR%\fonts\couf1255.fon.enc
%WINDIR%\fonts\cga80857.fon.enc
%WINDIR%\fonts\bod_r.ttf.enc
%WINDIR%\fonts\arabtype.ttf.enc
%WINDIR%\fonts\corbelb.ttf.enc
%WINDIR%\fonts\coprgtl.ttf.enc
%WINDIR%\fonts\arialni.ttf.enc
%WINDIR%\fonts\arialbd.ttf.enc
%WINDIR%\fonts\cordiaui.ttf.enc
%WINDIR%\fonts\cambriai.ttf.enc
%WINDIR%\fonts\browauz.ttf.enc
%WINDIR%\fonts\arialnb.ttf.enc
%WINDIR%\fonts\andlso.ttf.enc
%WINDIR%\fonts\angsauz.ttf.enc
%WINDIR%\fonts\antquab.ttf.enc
%WINDIR%\fonts\browab.ttf.enc
%WINDIR%\fonts\angsaz.ttf.enc
%WINDIR%\fonts\browai.ttf.enc
%WINDIR%\fonts\bod_cbi.ttf.enc
%WINDIR%\fonts\candara.ttf.enc
%WINDIR%\fonts\candarai.ttf.enc
%WINDIR%\fonts\cambria.ttc.enc
%WINDIR%\fonts\calistbi.ttf.enc
%WINDIR%\fonts\comic.ttf.enc
%WINDIR%\fonts\constani.ttf.enc
%WINDIR%\fonts\browaz.ttf.enc
%WINDIR%\fonts\app932.fon.enc
%WINDIR%\fonts\angsai.ttf.enc
%WINDIR%\inf\hdaudss.pnf.enc
%WINDIR%\inf\dot4prt.pnf.enc
%WINDIR%\fonts\arialn.ttf.enc
%WINDIR%\fonts\bod_cr.ttf.enc
%WINDIR%\fonts\ariali.ttf.enc
%WINDIR%\fonts\bod_ci.ttf.enc
%WINDIR%\fonts\bod_pstc.ttf.enc
%WINDIR%\fonts\brlnsb.ttf.enc
%WINDIR%\fonts\cordiab.ttf.enc
%WINDIR%\fonts\app950.fon.enc
%WINDIR%\fonts\cga80850.fon.enc
%WINDIR%\inf\battery.pnf.enc
%WINDIR%\inf\apps.inf.enc
%WINDIR%\inf\bthprint.inf.enc
%WINDIR%\inf\battery.inf.enc
%WINDIR%\inf\avc.inf.enc
%WINDIR%\inf\divacx64.inf.enc
%WINDIR%\inf\dwup.inf.enc
%WINDIR%\inf\gameport.pnf.enc
%WINDIR%\inf\bthpan.inf.enc
%WINDIR%\inf\digitalmediadevice.inf.enc
%WINDIR%\inf\arcsas.pnf.enc
%WINDIR%\inf\bthpan.pnf.enc
%WINDIR%\inf\display.pnf.enc
%WINDIR%\inf\arc.inf.enc
%WINDIR%\inf\faxca003.pnf.enc
%WINDIR%\inf\angelu64.inf.enc
%WINDIR%\inf\bda.inf.enc
%WINDIR%\inf\adp94xx.pnf.enc
%WINDIR%\inf\af9035bda.pnf.enc
%WINDIR%\inf\af9035bda.inf.enc
%WINDIR%\inf\atiriol6.pnf.enc
%WINDIR%\inf\adpu320.pnf.enc
%WINDIR%\inf\adpu320.inf.enc
%WINDIR%\inf\avmx64c.inf.enc
%WINDIR%\inf\adpahci.pnf.enc
%WINDIR%\inf\angelu64.pnf.enc
%WINDIR%\inf\digitalmediadevice.pnf.enc
%WINDIR%\inf\angel264.pnf.enc
%WINDIR%\inf\disk.pnf.enc
%WINDIR%\inf\angel264.inf.enc
%WINDIR%\inf\amdsata.pnf.enc
%WINDIR%\inf\disk.inf.enc
%WINDIR%\inf\atiilhag.pnf.enc
%WINDIR%\inf\averfx2swtv_noavin_x64.pnf.enc
%WINDIR%\inf\brmfcwia.pnf.enc
%WINDIR%\inf\hdaudio.pnf.enc
%WINDIR%\inf\mdmgl001.pnf.enc
%WINDIR%\inf\bth.inf.enc
%WINDIR%\inf\brmfcmdm.inf.enc
%WINDIR%\inf\mdmdcm5.pnf.enc
%WINDIR%\inf\circlass.pnf.enc
%WINDIR%\inf\rdyboost\readme.txt
%WINDIR%\inf\mdmnis3t.pnf.enc
%WINDIR%\inf\mdmfj2.pnf.enc
%WINDIR%\inf\hiddigi.inf.enc
%WINDIR%\inf\mdmeric2.pnf.enc
%WINDIR%\inf\mdmetech.inf.enc
%WINDIR%\inf\mdmetech.pnf.enc
%WINDIR%\inf\netmyk00.inf.enc
%WINDIR%\inf\mdmbtmdm.pnf.enc
%WINDIR%\inf\bthspp.inf.enc
%WINDIR%\inf\netloop.inf.enc
%WINDIR%\inf\cdrom.inf.enc
%WINDIR%\inf\atiilhag.inf.enc
%WINDIR%\inf\divacx64.pnf.enc
%WINDIR%\inf\msdtc bridge 4.0.0.0\_transactionbridgeperfcounters.h.enc
%WINDIR%\inf\circlass.inf.enc
%WINDIR%\inf\msdtc bridge 3.0.0.0\_transactionbridgeperfcounters.h.enc
%WINDIR%\inf\cdrom.pnf.enc
%WINDIR%\inf\hidserv.inf.enc
%WINDIR%\inf\brmfcmdm.pnf.enc
%WINDIR%\inf\avmx64c.pnf.enc
%WINDIR%\inf\defltbase.inf.enc
%WINDIR%\inf\brmfcwia.inf.enc
%WINDIR%\inf\brmfcmf.pnf.enc
%WINDIR%\inf\brmfcmf.inf.enc
%WINDIR%\inf\hdaudio.inf.enc
%WINDIR%\inf\faxcn002.inf.enc
%WINDIR%\inf\hidbth.pnf.enc
%WINDIR%\inf\bthspp.pnf.enc
%WINDIR%\inf\cxraptor_philipstuv1236d_ibv64.inf.enc
%WINDIR%\inf\hidir.inf.enc
%WINDIR%\inf\defltwk.inf.enc
%WINDIR%\inf\hdaudbus.inf.enc
%WINDIR%\inf\arcsas.inf.enc
%WINDIR%\inf\averhbh826_noaverir_x64.inf.enc
%WINDIR%\inf\brmfcsto.pnf.enc
%WINDIR%\inf\brmfcumd.inf.enc
%WINDIR%\inf\ehstorpwddrv.inf.enc
%WINDIR%\inf\ehstorcertdrv.pnf.enc
%WINDIR%\inf\cxfalcon_ibv64.inf.enc
%WINDIR%\inf\blbdrive.pnf.enc
%WINDIR%\inf\display.inf.enc
%WINDIR%\inf\cxfalcon_ibv64.pnf.enc
%WINDIR%\inf\cxraptor_fm1236mk5_ibv64.pnf.enc
%WINDIR%\inf\cxraptor_fm1236mk5_ibv64.inf.enc
%WINDIR%\inf\elxstor.pnf.enc
%WINDIR%\inf\cxraptor_philipstuv1236d_ibv64.pnf.enc
%WINDIR%\inf\elxstor.inf.enc
%WINDIR%\inf\cxraptor_fm1216mk5_ibv64.pnf.enc
%WINDIR%\inf\cxraptor_fm1216mk5_ibv64.inf.enc
%WINDIR%\inf\errata.inf.enc
%WINDIR%\inf\fdc.inf.enc
%WINDIR%\inf\faxcn002.pnf.enc
%WINDIR%\inf\cxfalpal_ibv64.inf.enc
%WINDIR%\inf\fdc.pnf.enc
%WINDIR%\inf\fontsetup.inf.enc
%WINDIR%\inf\gameport.inf.enc
%WINDIR%\inf\hidir.pnf.enc
%WINDIR%\inf\hidirkbd.inf.enc
%WINDIR%\inf\dc21x4vm.inf.enc
%WINDIR%\inf\hiddigi.pnf.enc
%WINDIR%\inf\crcdisk.inf.enc
%WINDIR%\inf\faxca003.inf.enc
%ProgramFiles%\microsoft office\document themes 14\apex.thmx.enc
%WINDIR%\inf\dot4.inf.enc
%WINDIR%\inf\cpu.inf.enc
%WINDIR%\inf\dot4prt.inf.enc
%WINDIR%\inf\bthmtpenum.inf.enc
%WINDIR%\inf\dot4.pnf.enc
%WINDIR%\inf\bth.pnf.enc
%WINDIR%\inf\brmfcumd.pnf.enc
%WINDIR%\inf\blbdrive.inf.enc
%WINDIR%\inf\dc21x4vm.pnf.enc
%WINDIR%\inf\bda.pnf.enc
%WINDIR%\inf\eaphost.pnf.enc
%WINDIR%\inf\averhbh826_noaverir_x64.pnf.enc
%WINDIR%\inf\averfx2swtv_x64.pnf.enc
%WINDIR%\inf\averfx2swtv_x64.inf.enc
%WINDIR%\inf\eaphost.inf.enc
%WINDIR%\inf\compositebus.pnf.enc
%WINDIR%\inf\flpydisk.inf.enc
%WINDIR%\inf\flpydisk.pnf.enc
%WINDIR%\inf\hal.inf.enc
%WINDIR%\inf\hal.pnf.enc
%WINDIR%\inf\hcw72b64.pnf.enc
%WINDIR%\inf\hcw72b64.inf.enc
%WINDIR%\inf\cxfalpal_ibv64.pnf.enc
%WINDIR%\inf\ehstorcertdrv.inf.enc
%WINDIR%\inf\hcw85b64.pnf.enc
%WINDIR%\inf\hcw85c64.inf.enc
%WINDIR%\inf\bthmtpenum.pnf.enc
%WINDIR%\inf\hcw85c64.pnf.enc
%WINDIR%\inf\hdaudbus.pnf.enc
%WINDIR%\inf\cpu.pnf.enc
%WINDIR%\inf\hcw85b64.inf.enc
%WINDIR%\fonts\couf1256.fon.enc
%WINDIR%\fonts\8514sysr.fon.enc
%WINDIR%\fonts\85855.fon.enc
%ProgramFiles%\microsoft office\office14\name.dll.enc
%ProgramFiles%\microsoft office\office14\thocrapi.dll.enc
%ProgramFiles%\microsoft office\office14\msaexp30.dll.enc
%ProgramFiles%\microsoft office\office14\mset7es.kic.enc
%ProgramFiles%\microsoft office\office14\outlfltr.dll.enc
%ProgramFiles%\microsoft office\office14\wwlib.dll.enc
%ProgramFiles%\microsoft office\office14\omsxp32.dll.enc
%ProgramFiles%\microsoft office\office14\oisapp.dll.enc
%ProgramFiles%\microsoft office\office14\mset7en.kic.enc
%ProgramFiles%\microsoft office\office14\pstprx32.dll.enc
%ProgramFiles%\microsoft office\office14\mset7jp.kic.enc
%ProgramFiles%\microsoft office\office14\pubconv.dll.enc
%ProgramFiles%\microsoft office\office14\saext.dll.enc
%ProgramFiles%\microsoft office\office14\mimedir.dll.enc
%ProgramFiles%\microsoft office\office14\outlmime.dll.enc
%ProgramFiles%\microsoft office\office14\setlang.exe.enc
%ProgramFiles%\microsoft office\office14\mscss7en.dll.enc
%ProgramFiles%\microsoft office\office14\outlctl.dll.enc
%ProgramFiles%\microsoft office\office14\onbttnwd.dll.enc
%ProgramFiles%\microsoft office\office14\stslist.dll.enc
%ProgramFiles%\microsoft office\office14\msacc.olb.enc
%ProgramFiles%\microsoft office\office14\mstordb.exe.enc
%ProgramFiles%\microsoft office\office14\mml2omml.xsl.enc
%ProgramFiles%\microsoft office\office14\wordcnvr.dll.enc
%ProgramFiles%\microsoft office\office14\mlshext.dll.enc
%ProgramFiles%\microsoft office\office14\ospp.vbs.enc
%ProgramFiles%\microsoft office\office14\onmain.dll.enc
%ProgramFiles%\microsoft office\office14\onbttnie.dll.enc
%ProgramFiles%\microsoft office\office14\onfilter.dll.enc
%ProgramFiles%\microsoft office\office14\outlvbs.dll.enc
%ProgramFiles%\microsoft office\office14\mlcfg32.cpl.enc
%ProgramFiles%\microsoft office\office14\msrtedit.dll.enc
%ProgramFiles%\microsoft office\office14\visshe.dll.enc
%ProgramFiles%\microsoft office\office14\mscss7cm_fr.dub.enc
%ProgramFiles%\microsoft office\office14\twrecc.dll.enc
%ProgramFiles%\microsoft office\office14\msocfu.dll.enc
%ProgramFiles%\microsoft office\office14\oartconv.dll.enc
%ProgramFiles%\microsoft office\office14\pptico.exe.enc
%ProgramFiles%\microsoft office\office14\ssgen.dll.enc
%ProgramFiles%\microsoft office\office14\olkfstub.dll.enc
%ProgramFiles%\microsoft office\office14\olmapi32.dll.enc
%ProgramFiles%\microsoft office\office14\spanish.lng.enc
%ProgramFiles%\microsoft office\office14\onlntcomlib.dll.enc
%ProgramFiles%\microsoft office\office14\twlay32.dll.enc
%ProgramFiles%\microsoft office\office14\ximage3b.dll.enc
%ProgramFiles%\microsoft office\office14\nl7models000c.dll.enc
%ProgramFiles%\microsoft office\office14\xlicons.exe.enc
%ProgramFiles%\microsoft office\office14\onenotemanaged.dll.enc
%ProgramFiles%\microsoft office\office14\oart.dll.enc
%ProgramFiles%\microsoft office\office14\powerpnt.exe.manifest.enc
%ProgramFiles%\microsoft office\office14\mscss7wre_es.dub.enc
%ProgramFiles%\microsoft office\office14\mset7tk.dll.enc
%ProgramFiles%\microsoft office\office14\morph9.dll.enc
%ProgramFiles%\microsoft office\office14\seqchk10.dll.enc
%ProgramFiles%\microsoft office\office14\scnpst64.dll.enc
%ProgramFiles%\microsoft office\office14\scanpst.exe.enc
%ProgramFiles%\microsoft office\office14\outlph.dll.enc
%ProgramFiles%\microsoft office\office14\reverse.dll.enc
%ProgramFiles%\microsoft office\office14\msoutl.olb.enc
%ProgramFiles%\microsoft office\office14\onenotem.exe.enc
%ProgramFiles%\microsoft office\office14\msyubin7.dll.enc
%ProgramFiles%\microsoft office\office14\msword.olb.enc
%ProgramFiles%\microsoft office\office14\msocf.dll.enc
%ProgramFiles%\microsoft office\office14\msosync.exe.enc
%ProgramFiles%\microsoft office\office14\npauthz.dll.enc
%ProgramFiles%\microsoft office\office14\twrece.dll.enc
%ProgramFiles%\microsoft office\office14\misc.exe.enc
%ProgramFiles%\microsoft office\office14\oisgraph.dll.enc
%ProgramFiles%\microsoft office\office14\rtfhtml.dll.enc
%ProgramFiles%\microsoft office\office14\twstruct.dll.enc
%ProgramFiles%\microsoft office\office14\xocr3.psp.enc
%ProgramFiles%\microsoft office\office14\nl7models000a.dll.enc
%ProgramFiles%\microsoft office\office14\sharepointprovider.dll.enc
%ProgramFiles%\microsoft office\office14\tworient.dll.enc
%ProgramFiles%\microsoft office\office14\msocfuiutilitiesdll.dll.enc
%ProgramFiles%\microsoft office\office14\msaccess.exe.manifest.enc
%ProgramFiles%\microsoft office\office14\onwordaddin.dll.enc
%ProgramFiles%\microsoft office\office14\nl7lexicons0011.dll.enc
%ProgramFiles%\microsoft office\office14\mset7.dll.enc
%ProgramFiles%\microsoft office\office14\mscss7es.dll.enc
%ProgramFiles%\microsoft office\office14\mspub.exe.manifest.enc
%ProgramFiles%\microsoft office\office14\subscription.xsd.enc
%ProgramFiles%\microsoft office\office14\xlcall32.dll.enc
%ProgramFiles%\microsoft office\office14\mscss7fr.dll.enc
%ProgramFiles%\microsoft office\office14\onbttnppt.dll.enc
%ProgramFiles%\microsoft office\office14\msn.ico.enc
%ProgramFiles%\microsoft office\office14\mspub.tlb.enc
%ProgramFiles%\microsoft office\office14\msppt.olb.enc
%ProgramFiles%\microsoft office\office14\outlrpc.dll.enc
%ProgramFiles%\microsoft office\office14\nl7models0011.dll.enc
%ProgramFiles%\microsoft office\office14\outlook.exe.manifest.enc
%ProgramFiles%\microsoft office\office14\msohev.dll.enc
%ProgramFiles%\microsoft office\office14\mscss7wre_fr.dub.enc
%ProgramFiles%\microsoft office\office14\mscss7wre_en.dub.enc
%ProgramFiles%\microsoft office\office14\mso0127.acl.enc
%ProgramFiles%\microsoft office\office14\omsmain.dll.enc
%ProgramFiles%\microsoft office\office14\msodcw.dll.enc
%ProgramFiles%\microsoft office\office14\refedit.dll.enc
%ProgramFiles%\microsoft office\office14\selfcert.exe.enc
%ProgramFiles%\microsoft office\office14\socialconnector.dll.enc
%ProgramFiles%\microsoft office\office14\mscol11.ppd.enc
%ProgramFiles%\microsoft office\office14\vviewer.dll.enc
%ProgramFiles%\microsoft office\office14\vviewdwg.dll.enc
%ProgramFiles%\microsoft office\office14\mstores.dll.enc
%ProgramFiles%\microsoft office\office14\oisctrl.dll.enc
%ProgramFiles%\microsoft office\office14\outlacct.dll.enc
%ProgramFiles%\microsoft office\office14\twcutchr.dll.enc
%ProgramFiles%\microsoft office\office14\twrecs.dll.enc
%ProgramFiles%\microsoft office\office14\offxml.dll.enc
%ProgramFiles%\microsoft office\office14\vpreview.exe.enc
%ProgramFiles%\microsoft office\office14\urlredir.dll.enc
%ProgramFiles%\microsoft office\office14\oimg.dll.enc
%ProgramFiles%\microsoft office\office14\ogalegit.dll.enc
%ProgramFiles%\microsoft office\office14\soa.dll.enc
%ProgramFiles%\microsoft office\office14\thocr.psp.enc
%ProgramFiles%\microsoft office\office14\onbttnol.dll.enc
%ProgramFiles%\microsoft office\office14\twcutlin.dll.enc
%ProgramFiles%\microsoft office\office14\wordconv.exe.enc
%ProgramFiles%\microsoft office\office14\nl7models0009.dll.enc
%ProgramFiles%\microsoft office\office14\ppcore.dll.enc
%ProgramFiles%\microsoft office\office14\mset7ge.kic.enc
%ProgramFiles%\microsoft office\office14\mset7db.kic.enc
%ProgramFiles%\microsoft office\office14\wordicon.exe.enc
%ProgramFiles%\microsoft office\office14\wordcnv.dll.enc
%ProgramFiles%\microsoft office\office14\mscol11.inf.enc
%ProgramFiles%\microsoft office\office14\msohtmed.exe.enc
%ProgramFiles%\microsoft office\office14\mset7fr.kic.enc
%ProgramFiles%\microsoft office\office14\xml2word.xsl.enc
%ProgramFiles%\microsoft office\office14\oemprint.cat.enc
%ProgramFiles%\microsoft office\office14\xpage3c.dll.enc
%ProgramFiles%\microsoft office\office14\msouc.exe.enc
%ProgramFiles%\microsoft office\office14\mspst32.dll.enc
%ProgramFiles%\microsoft office\office14\offrhd.dll.enc
%ProgramFiles%\microsoft office\office14\prtf9.dll.enc
%ProgramFiles%\microsoft office\office14\onpptaddin.dll.enc
%WINDIR%\fonts\cga40857.fon.enc
%ProgramFiles%\microsoft office\office14\pubtrap.dll.enc
%WINDIR%\fonts\courf.fon.enc
%WINDIR%\fonts\consola.ttf.enc
%WINDIR%\inf\.net clr networking\readme.txt
%WINDIR%\fonts\arialuni.ttf.enc
%WINDIR%\fonts\app852.fon.enc
%WINDIR%\fonts\cordiauz.ttf.enc
%WINDIR%\fonts\bookosi.ttf.enc
%WINDIR%\fonts\bookosbi.ttf.enc
%WINDIR%\fonts\ariblk.ttf.enc
%WINDIR%\fonts\daunpenh.ttf.enc
%WINDIR%\fonts\bookos.ttf.enc
%WINDIR%\fonts\bookosb.ttf.enc
%WINDIR%\fonts\couri.ttf.enc
%WINDIR%\fonts\8514oem.fon.enc
%WINDIR%\inf\.net clr networking 4.0.0.0\readme.txt
%WINDIR%\fonts\baskvill.ttf.enc
%WINDIR%\fonts\angsaub.ttf.enc
%WINDIR%\fonts\cga80852.fon.enc
%WINDIR%\fonts\califr.ttf.enc
%WINDIR%\fonts\bell.ttf.enc
%WINDIR%\fonts\courft.fon.enc
%WINDIR%\fonts\bernhc.ttf.enc
%WINDIR%\fonts\cambriab.ttf.enc
%WINDIR%\fonts\candarab.ttf.enc
%WINDIR%\fonts\censcbk.ttf.enc
%WINDIR%\fonts\bod_blar.ttf.enc
%WINDIR%\fonts\bod_b.ttf.enc
%WINDIR%\fonts\califi.ttf.enc
%WINDIR%\ime\sptip.dll.enc
%WINDIR%\fonts\brushsci.ttf.enc
%WINDIR%\inf\.net clr data\_dataperfcounters.h.enc
%WINDIR%\fonts\app855.fon.enc
%WINDIR%\fonts\courbd.ttf.enc
%WINDIR%\inf\.net clr networking\_networkingperfcounters.h.enc
%WINDIR%\fonts\app775.fon.enc
%WINDIR%\fonts\8514oemr.fon.enc
%WINDIR%\fonts\85f1256.fon.enc
%WINDIR%\fonts\cga80869.fon.enc
%WINDIR%\inf\.net data provider for oracle\readme.txt
%WINDIR%\fonts\cga40866.fon.enc
%WINDIR%\fonts\app857.fon.enc
%WINDIR%\fonts\8514sys.fon.enc
%WINDIR%\fonts\app866.fon.enc
%ProgramFiles%\microsoft office\office14\peopledatahandler.dll.enc
%WINDIR%\inf\.net clr networking\_networkingperfcounters.ini.enc
%WINDIR%\fonts\britanic.ttf.enc
%WINDIR%\fonts\85s874.fon.enc
%WINDIR%\fonts\8514oeme.fon.enc
%WINDIR%\fonts\8514syst.fon.enc
%WINDIR%\fonts\cga40869.fon.enc
%WINDIR%\inf\.net clr networking 4.0.0.0\_networkingperfcounters.h.enc
%WINDIR%\globalization\sorting\sortserver2003compat.nls.enc
%WINDIR%\fonts\coprgtb.ttf.enc
%WINDIR%\fonts\85s1257.fon.enc
%WINDIR%\fonts\coue1255.fon.enc
%WINDIR%\fonts\cga80866.fon.enc
%WINDIR%\fonts\arialbi.ttf.enc
%WINDIR%\fonts\browaui.ttf.enc
%WINDIR%\inf\.net clr data\readme.txt
%WINDIR%\fonts\aparajbi.ttf.enc
%WINDIR%\fonts\couree.fon.enc
%WINDIR%\fonts\browaub.ttf.enc
%WINDIR%\fonts\courer.fon.enc
%WINDIR%\fonts\cga40850.fon.enc
%WINDIR%\fonts\cga80737.fon.enc
%WINDIR%\fonts\aparaji.ttf.enc
%WINDIR%\en-us\explorer.exe.mui.enc
%WINDIR%\fonts\arlrdbd.ttf.enc
%WINDIR%\fonts\angsa.ttf.enc
%ProgramFiles%\microsoft office\office14\ppslax.dll.enc
%WINDIR%\en-us\notepad.exe.mui.enc
%WINDIR%\en-us\hh.exe.mui.enc
%WINDIR%\en-us\helppane.exe.mui.enc
%WINDIR%\ime\en-us\readme.txt
%WINDIR%\globalization\sorting\readme.txt
%WINDIR%\en-us\twain_32.dll.mui.enc
%ProgramFiles%\microsoft office\office14\msostyle.dll.enc
%ProgramFiles%\microsoft office\office14\msproof7.dll.enc
%ProgramFiles%\microsoft office\office14\msqry32.exe.enc
%ProgramFiles%\microsoft office\office14\sendto.dll.enc
%ProgramFiles%\microsoft office\office14\ptxt9.dll.enc
%ProgramFiles%\microsoft office\office14\scnpst32.dll.enc
%ProgramFiles%\microsoft office\office14\rswop.icm.enc
%WINDIR%\explorer.exe.enc
%WINDIR%\fonts\app850.fon.enc
%WINDIR%\fonts\consolai.ttf.enc
%ProgramFiles%\microsoft office\office14\mysl.ico.enc
%ProgramFiles%\microsoft office\office14\reminder.wav.enc
%ProgramFiles%\microsoft office\office14\recall.dll.enc
%ProgramFiles%\microsoft office\office14\mscss7cm_es.dub.enc
%ProgramFiles%\microsoft office\office14\wordcnvpxy.cnv.enc
%ProgramFiles%\microsoft office\office14\mset7tkjp.dll.enc
%ProgramFiles%\microsoft office\office14\segoechess.ttf.enc
%ProgramFiles%\microsoft office\office14\socialprovider.dll.enc
%ProgramFiles%\microsoft office\office14\taxonomycontrol.dll.enc
%ProgramFiles%\microsoft office\office14\nl7data0011.dll.enc
%ProgramFiles%\microsoft office\office14\namecontrolproxy.dll.enc
%ProgramFiles%\microsoft office\office14\namecontrolserver.exe.enc
%ProgramFiles%\microsoft office\office14\onbttnielinkednotes.dll.enc
%ProgramFiles%\microsoft office\office14\offowc.dll.enc
%WINDIR%\fonts\coureg.fon.enc
%WINDIR%\fonts\calibri.ttf.enc
%WINDIR%\fonts\agencyb.ttf.enc
%WINDIR%\fonts\califb.ttf.enc
%WINDIR%\fonts\bssym7.ttf.enc
%WINDIR%\fonts\c8514sys.fon.enc
%WINDIR%\fonts\constanb.ttf.enc
%WINDIR%\fonts\consolaz.ttf.enc
%WINDIR%\fonts\c8514fix.fon.enc
%WINDIR%\fonts\constanz.ttf.enc
%WINDIR%\fonts\app949.fon.enc
%WINDIR%\fonts\bauhs93.ttf.enc
%WINDIR%\fonts\brlnsdb.ttf.enc
%WINDIR%\fonts\brlnsr.ttf.enc
%WINDIR%\fonts\courbi.ttf.enc
%WINDIR%\fonts\calibrii.ttf.enc
%WINDIR%\fonts\corbeli.ttf.enc
%WINDIR%\fonts\bellb.ttf.enc
%WINDIR%\fonts\angsaui.ttf.enc
%WINDIR%\fonts\app936.fon.enc
%WINDIR%\fonts\arial.ttf.enc
%WINDIR%\fonts\constan.ttf.enc
%WINDIR%\fonts\calist.ttf.enc
%WINDIR%\fonts\aparaj.ttf.enc
%WINDIR%\fonts\courfr.fon.enc
%WINDIR%\fonts\8514fixt.fon.enc
%WINDIR%\en-us\bootfix.bin.enc
%WINDIR%\fonts\calistb.ttf.enc
%WINDIR%\fonts\cvgafix.fon.enc
%WINDIR%\fonts\couret.fon.enc
%WINDIR%\fonts\85s1255.fon.enc
%WINDIR%\fonts\cga80woa.fon.enc
%WINDIR%\ime\readme.txt
%WINDIR%\fonts\agencyr.ttf.enc
%WINDIR%\fonts\cga40woa.fon.enc
%WINDIR%\syswow64\ras\readme.txt

Deletes the following files

%ProgramFiles%\microsoft office\office14\readme.txt
%WINDIR%\inf\sffdisk.pnf
%WINDIR%\inf\sisraid4.inf
%WINDIR%\inf\smartcrd.pnf
%WINDIR%\inf\stexstor.inf
%WINDIR%\inf\tape.inf
%WINDIR%\inf\tape.pnf
%WINDIR%\inf\tdibth.inf
%WINDIR%\inf\tdibth.pnf
%WINDIR%\inf\termkbd.inf
%WINDIR%\inf\ts_wpdmtp.inf
%WINDIR%\inf\termmou.inf
%WINDIR%\inf\tpm.pnf
%WINDIR%\inf\transfercable.inf
%WINDIR%\inf\transfercable.pnf
%WINDIR%\inf\tsprint.inf
%WINDIR%\inf\tsgenericusbdriver.inf
%WINDIR%\inf\tsusbhub.inf
%WINDIR%\inf\tsprint.pnf
%WINDIR%\inf\tsusbhubfilter.pnf
%WINDIR%\inf\tsusbhubfilter.inf
%WINDIR%\inf\ts_generic.inf
%WINDIR%\inf\stexstor.pnf
%WINDIR%\inf\tpm.inf
%WINDIR%\inf\sffdisk.inf
%WINDIR%\inf\netbvbda.inf
%WINDIR%\inf\synth3dvsc.inf
%WINDIR%\inf\sti.inf
%WINDIR%\inf\sensorsalsdriver.inf
%WINDIR%\inf\sdbus.pnf
%WINDIR%\inf\servicemodelservice 3.0.0.0\_servicemodelserviceperfcounters.h
%WINDIR%\inf\servicemodelendpoint 3.0.0.0\_servicemodelendpointperfcounters.h
%WINDIR%\inf\servicemodeloperation 3.0.0.0\_servicemodeloperationperfcounters.h
%WINDIR%\inf\smsvchost 3.0.0.0\_smsvchostperfcounters.h
%WINDIR%\inf\servicemodelservice 3.0.0.0\_servicemodelserviceperfcounters.ini
%WINDIR%\inf\smsvchost 4.0.0.0\_smsvchostperfcounters.h
%WINDIR%\inf\servicemodeloperation 3.0.0.0\_servicemodeloperationperfcounters.ini
%WINDIR%\inf\servicemodelendpoint 3.0.0.0\_servicemodelendpointperfcounters.ini
%WINDIR%\inf\smsvchost 3.0.0.0\_smsvchostperfcounters.ini
%WINDIR%\inf\sisraid4.pnf
%WINDIR%\inf\sisraid2.pnf
%WINDIR%\inf\sisraid2.inf
%WINDIR%\inf\setupapi.offline.log
%WINDIR%\inf\setupapi.ev3
%WINDIR%\inf\setupapi.ev2
%WINDIR%\inf\setupapi.ev1
%WINDIR%\inf\setupapi.app.log
%WINDIR%\inf\setupapi.dev.log
%WINDIR%\inf\smartcrd.inf
%WINDIR%\inf\scsidev.inf
%WINDIR%\inf\sti.pnf
%WINDIR%\inf\ts_generic.pnf
%WINDIR%\inf\ts_wpdmtp.pnf
%WINDIR%\inf\volume.pnf
%WINDIR%\inf\umpass.inf
%WINDIR%\inf\v_mscdsc.inf
%WINDIR%\inf\v_mscdsc.pnf
%WINDIR%\inf\wave.inf
%WINDIR%\inf\wave.pnf
%WINDIR%\inf\wceisvista.inf
%WINDIR%\inf\wceisvista.pnf
%WINDIR%\inf\wd.inf
%WINDIR%\inf\wfplwf.pnf
%WINDIR%\inf\wiabr002.inf
%WINDIR%\inf\umbus.inf
%WINDIR%\inf\wiabr004.inf
%WINDIR%\inf\wiabr004.pnf
%WINDIR%\inf\wiabr006.inf
%WINDIR%\inf\wiabr005.inf
%WINDIR%\inf\wiabr007.inf
%WINDIR%\inf\wiabr005.pnf
%WINDIR%\inf\wiabr006.pnf
%WINDIR%\inf\wiabr008.inf
%WINDIR%\inf\wiabr007.pnf
%WINDIR%\inf\wiabr008.pnf
%WINDIR%\inf\volume.inf
%WINDIR%\inf\volsnap.pnf
%WINDIR%\inf\wiabr002.pnf
%WINDIR%\inf\vsmraid.pnf
%WINDIR%\inf\vsmraid.inf
%WINDIR%\inf\volsnap.inf
%WINDIR%\inf\vhdmp.pnf
%WINDIR%\inf\unknown.pnf
%WINDIR%\inf\unknown.inf
%WINDIR%\inf\usb.pnf
%WINDIR%\inf\usb.inf
%WINDIR%\inf\usbcir.pnf
%WINDIR%\inf\usbcir.inf
%WINDIR%\inf\wd.pnf
%WINDIR%\inf\usbport.pnf
%WINDIR%\inf\scrawpdo.inf
%WINDIR%\inf\wdmvsc.inf
%WINDIR%\inf\usbstor.pnf
%WINDIR%\inf\sdbus.inf
%WINDIR%\inf\wdmaudio.inf
%WINDIR%\inf\wdma_usb.inf
%WINDIR%\inf\usbport.inf
%WINDIR%\inf\usbprint.inf
%WINDIR%\inf\usbprint.pnf
%WINDIR%\inf\usbstor.inf
%WINDIR%\inf\wdma_usb.pnf
%WINDIR%\inf\usbvideo.inf
%WINDIR%\inf\usbvideo.pnf
%WINDIR%\inf\vhdmp.inf
%WINDIR%\inf\umpass.pnf
%WINDIR%\inf\umbus.pnf
%WINDIR%\inf\wdmaudio.pnf
%WINDIR%\inf\scsidev.pnf
%WINDIR%\inf\scrawpdo.pnf
%WINDIR%\inf\sbp2.pnf
%WINDIR%\inf\monitor.inf
%WINDIR%\inf\netavpna.pnf
%WINDIR%\inf\msclmd.inf
%WINDIR%\inf\mf.inf
%WINDIR%\inf\mshdc.pnf
%WINDIR%\inf\mtconfig.pnf
%WINDIR%\inf\netbxnda.pnf
%WINDIR%\inf\msports.pnf
%WINDIR%\inf\mdmcpq2.inf
%WINDIR%\inf\mdmmoto1.inf
%WINDIR%\inf\mdmmhrtz.inf
%WINDIR%\inf\mdmadc.pnf
%WINDIR%\inf\mdmwhql0.inf
%WINDIR%\inf\hpoa1so.inf
%WINDIR%\inf\mdmboca.pnf
%WINDIR%\inf\mdmcpq.pnf
%WINDIR%\inf\mdmisdn.pnf
%WINDIR%\inf\mdmlucnt.inf
%WINDIR%\inf\mdmmc288.inf
%WINDIR%\inf\mdmnova.pnf
%WINDIR%\inf\mdmsun1.pnf
%WINDIR%\inf\mdmsii64.pnf
%WINDIR%\inf\wiabr00a.inf
%WINDIR%\inf\msdri.inf
%WINDIR%\inf\mdmsuprv.inf
%WINDIR%\inf\mdmsonyu.inf
%WINDIR%\inf\mdmsonyu.pnf
%WINDIR%\inf\mdmneuhs.pnf
%WINDIR%\inf\mdmnis2u.pnf
%WINDIR%\inf\mdmnis5t.inf
%WINDIR%\inf\mdmnokia.pnf
%WINDIR%\inf\mdmntt1.inf
%WINDIR%\inf\mdm5674a.inf
%WINDIR%\inf\mdm3com.pnf
%WINDIR%\inf\igdlh.inf
%WINDIR%\inf\iirsp.inf
%WINDIR%\inf\mdmcom1.inf
%WINDIR%\inf\mdmar1.inf
%WINDIR%\inf\hpoa1nd.pnf
%WINDIR%\inf\mdmdf56f.inf
%WINDIR%\inf\machine.pnf
%WINDIR%\inf\mdmpenr.pnf
%WINDIR%\inf\netirda.inf
%WINDIR%\inf\mdmnttp2.pnf
%WINDIR%\inf\mdmpn1.pnf
%WINDIR%\inf\mdmoptn.inf
%WINDIR%\inf\mdmrock4.pnf
%WINDIR%\inf\mdmsmart.inf
%WINDIR%\inf\mdmti.inf
%WINDIR%\inf\mdmgl004.inf
%WINDIR%\inf\mdmaiwa5.pnf
%WINDIR%\inf\mdmar1.pnf
%WINDIR%\inf\mdmmts.inf
%WINDIR%\inf\mdmmod.inf
%WINDIR%\inf\mdmminij.inf
%WINDIR%\inf\mdmcpv.inf
%WINDIR%\inf\netnwifi.pnf
%WINDIR%\inf\netl260a.pnf
%WINDIR%\inf\netloop.pnf
%WINDIR%\inf\mdmzyxlg.inf
%WINDIR%\inf\mdmzyp.inf
%WINDIR%\inf\mdmirmdm.pnf
%WINDIR%\inf\mdmhayes.pnf
%WINDIR%\inf\mdmtdk.inf
%WINDIR%\inf\netl1c64.pnf
%WINDIR%\inf\netirda.pnf
%WINDIR%\inf\netg664.pnf
%WINDIR%\inf\netevbda.pnf
%WINDIR%\inf\netefe3e.pnf
%WINDIR%\inf\netb57va.pnf
%WINDIR%\inf\ricoh.inf
%WINDIR%\inf\ricoh.pnf
%WINDIR%\inf\rndiscmp.inf
%WINDIR%\inf\rspndr.pnf
%WINDIR%\inf\rndiscmp.pnf
%WINDIR%\inf\mdmcrtix.inf
%WINDIR%\inf\netk57a.pnf
%WINDIR%\inf\sbp2.inf
%WINDIR%\inf\mdmcpv.pnf
%WINDIR%\inf\mdmaus.pnf
%WINDIR%\inf\netip6.pnf
%WINDIR%\inf\netmyk00.pnf
%WINDIR%\inf\mdmzyxel.pnf
%WINDIR%\inf\megasas.pnf
%WINDIR%\inf\megasas2.pnf
%WINDIR%\inf\memory.pnf
%WINDIR%\inf\mf.pnf
%WINDIR%\inf\mpio.pnf
%WINDIR%\inf\mtconfig.inf
%WINDIR%\inf\mdmpsion.pnf
%WINDIR%\inf\mdmmhzel.inf
%WINDIR%\inf\netbc664.inf
%WINDIR%\inf\netbxnda.inf
%WINDIR%\inf\multiprt.inf
%WINDIR%\inf\netefe3e.inf
%WINDIR%\inf\netg664.inf
%WINDIR%\inf\netimm.inf
%WINDIR%\inf\netnvma.inf
%WINDIR%\inf\mdmaus.inf
%WINDIR%\inf\mdmcrtix.pnf
%WINDIR%\inf\netnb.pnf
%WINDIR%\inf\net8187bv64.pnf
%WINDIR%\inf\net8187se64.pnf
%WINDIR%\inf\mdmnis5t.pnf
%WINDIR%\inf\readme.txt
%WINDIR%\inf\mdmdcm6.inf
%WINDIR%\inf\netevbda.inf
%WINDIR%\inf\mdmmts.pnf
%WINDIR%\inf\wiabr009.inf
%WINDIR%\inf\wiaca00b.inf
%WINDIR%\panther\actionqueue\oobesystem.uaq
%WINDIR%\media\cityscape\desktop.ini
%WINDIR%\media\delta\desktop.ini
%WINDIR%\media\calligraphy\desktop.ini
%WINDIR%\microsoft.net\netfxrepair.1055.dll
%WINDIR%\ocsetup_uninstall_searchengine-client-package.etl
%WINDIR%\panther\unattendgc\diagerr.xml
%WINDIR%\panther\unattendgc\diagwrn.xml
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\shellui.mst
%WINDIR%\microsoft.net\netfxrepair.1044.dll
%WINDIR%\media\quirky\desktop.ini
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\grvicons.exe
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\inficon.exe
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\graph.ico
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\outicon.exe
%WINDIR%\media\garden\desktop.ini
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\joticon.exe
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\msouc.exe
%WINDIR%\microsoft.net\netfxrepair.2052.dll
%WINDIR%\microsoft.net\netfxrepair.1045.dll
%WINDIR%\panther\unattendgc\setupact.log
%WINDIR%\media\festival\desktop.ini
%WINDIR%\logs\cbs\cbs.log
%WINDIR%\installer\ef852.msp
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\oisicon.exe
%WINDIR%\panther\mainqueueonline0.que
%WINDIR%\installer\{90140000-006e-0409-1000-0000000ff1ce}\misc.exe
%WINDIR%\installer\ef8e2.msp
%WINDIR%\installer\ef68d.msi
%WINDIR%\installer\ef69a.msi
%WINDIR%\installer\ef8a5.msp
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\cagicon.exe
%WINDIR%\installer\ef5f9.msi
%WINDIR%\installer\ef8b8.msp
%WINDIR%\installer\ef890.msp
%WINDIR%\logs\dpx\setuperr.log
%WINDIR%\logs\dpx\setupact.log
%WINDIR%\installer\{90140000-0043-0000-1000-0000000ff1ce}\shellui.mst
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\apifile_8.ico
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\fdffile_8.ico
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\secstorefile.ico
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\xfdffile_8.ico
%WINDIR%\msdfmap.ini
%WINDIR%\offline web pages\desktop.ini
%WINDIR%\ocsetup_cbs_uninstall_searchengine-client-package.txt
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\sc_reader.ico
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\pdffile_8.ico
%WINDIR%\panther\actionqueue\specialize.uaq
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\xdpfile_8.ico
%WINDIR%\installer\ef6ac.msi
%WINDIR%\installer\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\pdxfile_8.ico
%WINDIR%\installer\f811.msi
%WINDIR%\media\raga\desktop.ini
%WINDIR%\microsoft.net\netfxrepair.1038.dll
%WINDIR%\installer\ef8d9.msp
%WINDIR%\media\landscape\desktop.ini
%WINDIR%\microsoft.net\netfxrepair.1030.dll
%WINDIR%\microsoft.net\netfxrepair.1025.dll
%WINDIR%\microsoft.net\netfxrepair.1053.dll
%WINDIR%\microsoft.net\netfxrepair.2070.dll
%WINDIR%\microsoft.net\netfxrepair.1031.dll
%WINDIR%\microsoft.net\netfxrepair.1029.dll
%WINDIR%\microsoft.net\netfxrepair.exe
%WINDIR%\microsoft.net\netfxrepair.1033.dll
%WINDIR%\microsoft.net\netfxrepair.3076.dll
%WINDIR%\microsoft.net\netfxrepair.1028.dll
%WINDIR%\microsoft.net\netfxrepair.1036.dll
%WINDIR%\microsoft.net\netfxrepair.1041.dll
%WINDIR%\microsoft.net\netfxrepair.1043.dll
%WINDIR%\microsoft.net\netfxrepair.1040.dll
%WINDIR%\microsoft.net\netfxrepair.1042.dll
%WINDIR%\microsoft.net\netfxrepair.1046.dll
%WINDIR%\microsoft.net\netfxrepair.1035.dll
%WINDIR%\installer\ef6c3.msi
%WINDIR%\pfro.log
%WINDIR%\microsoft.net\netfxrepair.1037.dll
%WINDIR%\media\heritage\desktop.ini
%WINDIR%\microsoft.net\netfxrepair.1032.dll
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\pptico.exe
%WINDIR%\media\characters\desktop.ini
%WINDIR%\panther\mainqueueonline1.que
%WINDIR%\microsoft.net\netfxrepair.1049.dll
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\misc.exe
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\wordicon.exe
%WINDIR%\panther\cbs_unattend.log
%WINDIR%\panther\cbs.log
%WINDIR%\panther\contents0.dir
%WINDIR%\panther\diagwrn.xml
%WINDIR%\panther\setuperr.log
%WINDIR%\panther\unattend.xml
%WINDIR%\installer\ef67b.msi
%WINDIR%\panther\setupinfo
%WINDIR%\installer\ef6a0.msi
%WINDIR%\panther\setupact.log
%WINDIR%\panther\ddaclsys.log
%WINDIR%\panther\diagerr.xml
%WINDIR%\media\sonata\desktop.ini
%WINDIR%\panther\setup.etl
%WINDIR%\media\desktop.ini
%WINDIR%\media\savanna\desktop.ini
%WINDIR%\media\afternoon\desktop.ini
%WINDIR%\microsoft.net\framework\netfxsbs12.hkf
%WINDIR%\installer\ef64b.msp
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\xlicons.exe
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\pubs.exe
%WINDIR%\panther\contents1.dir
%WINDIR%\installer\ef6a6.msi
%WINDIR%\installer\ef687.msi
%WINDIR%\inf\net1kx64.pnf
%WINDIR%\inf\wpdmtp.pnf
%WINDIR%\inf\wialx005.inf
%WINDIR%\inf\xcbdav.inf
%WINDIR%\inf\windows workflow foundation 3.0.0.0\perfcounters.h
%WINDIR%\inf\xcbdav.pnf
%WINDIR%\inf\wialx003.pnf
%WINDIR%\inf\wialx004.pnf
%WINDIR%\inf\wvmic.inf
%WINDIR%\installer\1d2c4.msi
%WINDIR%\inf\wiabr009.pnf
%WINDIR%\inf\wudfusbcciddriver.pnf
%WINDIR%\inf\wialx004.inf
%WINDIR%\inf\wialx003.inf
%WINDIR%\inf\wialx005.pnf
%WINDIR%\inf\wialx002.pnf
%WINDIR%\inf\wialx006.inf
%WINDIR%\inf\wiasa002.inf
%WINDIR%\inf\windows workflow foundation 3.0.0.0\perfcounters.ini
%WINDIR%\installer\1d29c.msi
%WINDIR%\installer\1d285.msi
%WINDIR%\inf\wiacn001.inf
%WINDIR%\inf\wiaca00i.inf
%WINDIR%\inf\wiahp001.pnf
%WINDIR%\inf\wialx002.inf
%WINDIR%\inf\xnacc.pnf
%WINDIR%\inf\wiaep002.inf
%WINDIR%\installer\1d20a.msi
%WINDIR%\inf\wiaca00b.pnf
%WINDIR%\inf\wiaca00d.pnf
%WINDIR%\inf\wiaca00c.pnf
%WINDIR%\inf\wiaca00e.pnf
%WINDIR%\inf\wiaca00f.inf
%WINDIR%\inf\wiacn001.pnf
%WINDIR%\inf\wiaca00c.inf
%WINDIR%\inf\wiaca00d.inf
%WINDIR%\installer\1d210.msi
%WINDIR%\inf\wiaca00e.inf
%WINDIR%\inf\wiaca00i.pnf
%WINDIR%\inf\xnacc.inf
%WINDIR%\inf\wmiaprpl\wmiaprpl.h
%WINDIR%\installer\1d1f8.msi
%WINDIR%\installer\1d204.msi
%WINDIR%\installer\11a29.msi
%WINDIR%\installer\11a1f.msi
%WINDIR%\installer\1d1fe.msi
%WINDIR%\installer\1d1f2.msi
%WINDIR%\installer\1d1ec.msi
%WINDIR%\installer\1d1e6.msi
%WINDIR%\inf\wiaca00f.pnf
%WINDIR%\inf\wiaca00a.pnf
%WINDIR%\inf\wiaca00a.inf
%WINDIR%\inf\windows workflow foundation 4.0.0.0\perfcounters.h
%WINDIR%\inf\wiabr00a.pnf
%WINDIR%\installer\1d2ad.msi
%WINDIR%\inf\wiaxx002.pnf
%WINDIR%\inf\wpdfs.pnf
%WINDIR%\inf\wpdmtphw.inf
%WINDIR%\installer\ef5ff.msi
%WINDIR%\installer\ef64a.msi
%WINDIR%\installer\readme.txt
%WINDIR%\installer\ef657.msi
%WINDIR%\installer\ef681.msi
%WINDIR%\installer\ef8bf.msp
%WINDIR%\installer\ef675.msi
%WINDIR%\inf\wiasa002.pnf
%WINDIR%\installer\ef6b9.msi
%WINDIR%\installer\ef663.msi
%WINDIR%\installer\ef65d.msi
%WINDIR%\installer\ef669.msi
%WINDIR%\installer\ef6b2.msi
%WINDIR%\installer\ef66f.msi
%WINDIR%\installer\ef693.msi
%WINDIR%\installer\{90140000-0011-0000-1000-0000000ff1ce}\accicons.exe
%WINDIR%\installer\ef8f7.msp
%WINDIR%\installer\ef6c4.msp
%WINDIR%\inf\wiaky002.inf
%WINDIR%\inf\wiaky002.pnf
%WINDIR%\installer\ef651.msi
%WINDIR%\inf\wpdfs.inf
%WINDIR%\installer\1d2ca.msi
%WINDIR%\inf\winusb.inf
%WINDIR%\inf\wiahp001.inf
%WINDIR%\inf\wsdscdrv.pnf
%WINDIR%\inf\wstorflt.inf
%WINDIR%\inf\wudfusbcciddriver.inf
%WINDIR%\inf\wstorvsc.inf
%WINDIR%\inf\wvmbus.inf
%WINDIR%\inf\wvmbushid.inf
%WINDIR%\inf\wvmbusvideo.inf
%WINDIR%\inf\windowssideshowenhanceddriver.pnf
%WINDIR%\inf\wialx006.pnf
%WINDIR%\inf\windowssideshowenhanceddriver.inf
%WINDIR%\inf\wpdcomp.pnf
%WINDIR%\inf\wiaep003.inf
%WINDIR%\inf\wpdmtp.inf
%WINDIR%\inf\ws3cap.inf
%WINDIR%\inf\wsdscdrv.inf
%WINDIR%\inf\wsdprint.pnf
%WINDIR%\inf\winusb.pnf
%WINDIR%\inf\wpdcomp.inf
%WINDIR%\inf\wiaep003.pnf
%WINDIR%\installer\1d2d0.msi
%WINDIR%\inf\wiaep002.pnf
%WINDIR%\inf\wnetvsc.inf
%WINDIR%\inf\wpdmtphw.pnf
%WINDIR%\inf\wiaxx002.inf
%WINDIR%\inf\wsdprint.inf
%WINDIR%\inf\mdmeiger.inf
%WINDIR%\inf\mdmtdkj4.pnf
%WINDIR%\inf\mdmvdot.pnf
%WINDIR%\inf\faxcn001.pnf
%WINDIR%\inf\hdaudss.inf
%WINDIR%\inf\atiriol6.inf
%WINDIR%\inf\amdsata.inf
%WINDIR%\inf\angel64.inf
%WINDIR%\inf\hidirkbd.pnf
%WINDIR%\inf\hidirkbd.inf
%WINDIR%\inf\agp.pnf
%WINDIR%\inf\adpahci.inf
%WINDIR%\inf\hidbth.inf
%WINDIR%\inf\cxraptor_fm1236mk5_ibv64.inf
%WINDIR%\inf\hdaudss.pnf
%WINDIR%\inf\ehstorcertdrv.inf
%WINDIR%\inf\battery.pnf
%WINDIR%\inf\amdsbs.inf
%WINDIR%\inf\angel64.pnf
%WINDIR%\inf\amdsbs.pnf
%WINDIR%\fonts\arialuni.ttf
%WINDIR%\inf\hal.inf
%WINDIR%\inf\blbdrive.inf
%WINDIR%\inf\hdaudio.inf
%WINDIR%\inf\brmfport.inf
%WINDIR%\inf\crcdisk.inf
%WINDIR%\inf\compositebus.inf
%WINDIR%\inf\dot4prt.pnf
%WINDIR%\inf\crcdisk.pnf
%WINDIR%\fonts\calibrib.ttf
%WINDIR%\inf\acpipmi.pnf
%WINDIR%\inf\61883.inf
%WINDIR%\inf\1394.pnf
%WINDIR%\inf\1394.inf
%WINDIR%\inf\acpi.pnf
%WINDIR%\inf\acpipmi.inf
%WINDIR%\inf\adp94xx.inf
%WINDIR%\inf\aspnet_state\aspnet_state_perf.h
%WINDIR%\inf\asp.net_4.0.30319\aspnet_perf.h
%WINDIR%\inf\asp.net\aspnet_perf.h
%WINDIR%\inf\arc.pnf
%WINDIR%\inf\agp.inf
%WINDIR%\inf\averfx2hbh826d_noaverir_x64.pnf
%WINDIR%\inf\averfx2hbh826d_noaverir_x64.inf
%WINDIR%\inf\brmfport.pnf
%WINDIR%\inf\averfx2hbtv_x64.inf
%WINDIR%\inf\averfx2hbtv_x64.pnf
%WINDIR%\inf\averfx2swtv_noavin_x64.inf
%WINDIR%\inf\brmfcsto.inf
%WINDIR%\inf\avc.pnf
%WINDIR%\inf\faxcn001.inf
%WINDIR%\inf\hidir.inf
%WINDIR%\inf\61883.pnf
%WINDIR%\inf\bthprint.pnf
%WINDIR%\inf\hdaudbus.inf
%WINDIR%\inf\dot4.inf
%WINDIR%\inf\brmfcmf.pnf
%WINDIR%\inf\compositebus.pnf
%WINDIR%\inf\cpu.pnf
%WINDIR%\inf\brmfcwia.pnf
%WINDIR%\inf\brmfcmf.inf
%WINDIR%\inf\ehstorpwddrv.inf
%WINDIR%\inf\hdaudio.pnf
%WINDIR%\inf\dot4prt.inf
%WINDIR%\inf\flpydisk.inf
%WINDIR%\inf\faxca003.inf
%WINDIR%\inf\flpydisk.pnf
%WINDIR%\inf\bthmtpenum.inf
%WINDIR%\inf\hcw85b64.pnf
%WINDIR%\inf\bthmtpenum.pnf
%WINDIR%\inf\hcw85c64.pnf
%WINDIR%\inf\hdaudbus.pnf
%WINDIR%\inf\fdc.inf
%WINDIR%\inf\cxraptor_fm1236mk5_ibv64.pnf
%WINDIR%\inf\cxraptor_philipstuv1236d_ibv64.inf
%WINDIR%\inf\cxraptor_philipstuv1236d_ibv64.pnf
%WINDIR%\inf\dc21x4vm.inf
%WINDIR%\inf\brmfcwia.inf
%WINDIR%\inf\bth.pnf
%WINDIR%\inf\hcw72b64.pnf
%WINDIR%\inf\cpu.inf
%WINDIR%\inf\bda.pnf
%WINDIR%\inf\eaphost.inf
%WINDIR%\inf\bthprint.inf
%WINDIR%\inf\brmfcsto.pnf
%WINDIR%\inf\arc.inf
%WINDIR%\inf\atiilhag.pnf
%WINDIR%\inf\angelu64.inf
%WINDIR%\inf\adp94xx.pnf
%WINDIR%\inf\af9035bda.inf
%WINDIR%\inf\atiriol6.pnf
%WINDIR%\inf\adpu320.pnf
%WINDIR%\inf\.net memory cache 4.0\netmemorycache.h
%WINDIR%\inf\adpu320.inf
%WINDIR%\inf\adpahci.pnf
%WINDIR%\inf\acpi.inf
%WINDIR%\inf\angelu64.pnf
%WINDIR%\inf\angel264.inf
%WINDIR%\inf\amdsata.pnf
%WINDIR%\inf\averfx2swtv_noavin_x64.pnf
%WINDIR%\inf\averfx2swtv_x64.inf
%WINDIR%\inf\averfx2swtv_x64.pnf
%WINDIR%\inf\averhbh826_noaverir_x64.pnf
%WINDIR%\inf\hcw85b64.inf
%WINDIR%\inf\hal.pnf
%WINDIR%\inf\avmx64c.inf
%WINDIR%\fonts\andlso.ttf
%WINDIR%\inf\faxcn002.inf
%WINDIR%\inf\angel264.pnf
%WINDIR%\fonts\corbelb.ttf
%WINDIR%\fonts\constani.ttf
%WINDIR%\fonts\calist.ttf
%WINDIR%\fonts\calibri.ttf
%WINDIR%\fonts\angsaub.ttf
%WINDIR%\fonts\bookosb.ttf
%WINDIR%\fonts\bookos.ttf
%WINDIR%\fonts\bell.ttf
%WINDIR%\fonts\califr.ttf
%WINDIR%\fonts\bod_b.ttf
%WINDIR%\fonts\bernhc.ttf
%WINDIR%\fonts\censcbk.ttf
%WINDIR%\fonts\baskvill.ttf
%WINDIR%\fonts\arlrdbd.ttf
%WINDIR%\fonts\bod_blar.ttf
%WINDIR%\fonts\cordiauz.ttf
%WINDIR%\fonts\bookosi.ttf
%WINDIR%\fonts\cambriab.ttf
%WINDIR%\fonts\bookosbi.ttf
%WINDIR%\fonts\candarab.ttf
%WINDIR%\fonts\ariblk.ttf
%WINDIR%\fonts\consola.ttf
%WINDIR%\fonts\daunpenh.ttf
%WINDIR%\fonts\califb.ttf
%WINDIR%\fonts\consolaz.ttf
%WINDIR%\fonts\constanb.ttf
%WINDIR%\fonts\brushsci.ttf
%WINDIR%\fonts\constanz.ttf
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-timezone-l1-1-0.dll
%WINDIR%\inf\dc21x4vm.pnf
%ProgramFiles%\mozilla firefox\readme.txt
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-file-l1-2-0.dll
%ProgramFiles%\mozilla firefox\updated\accessiblemarshal.dll
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-file-l2-1-0.dll
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-processthreads-l1-1-1.dll
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-localization-l1-2-0.dll
%ProgramFiles%\mozilla firefox\updated\api-ms-win-core-synch-l1-2-0.dll
%ProgramFiles%\mozilla firefox\updated\api-ms-win-crt-conio-l1-1-0.dll
%ProgramFiles%\mozilla firefox\updated\api-ms-win-crt-environment-l1-1-0.dll
%WINDIR%\fonts\califi.ttf
%WINDIR%\enterprise.xml
%WINDIR%\fonts\browaub.ttf
%WINDIR%\fonts\agencyr.ttf
%WINDIR%\fonts\bssym7.ttf
%WINDIR%\fonts\consolai.ttf
%WINDIR%\fonts\corbeli.ttf
%WINDIR%\fonts\brlnsdb.ttf
%WINDIR%\fonts\aparaj.ttf
%WINDIR%\fonts\angsaui.ttf
%WINDIR%\fonts\brlnsr.ttf
%WINDIR%\fonts\bellb.ttf
%WINDIR%\fonts\constan.ttf
%WINDIR%\fonts\bauhs93.ttf
%ProgramFiles%\mozilla firefox\updated\api-ms-win-crt-convert-l1-1-0.dll
%WINDIR%\fonts\agencyb.ttf
%WINDIR%\inf\hcw85c64.inf
%WINDIR%\fonts\browaui.ttf
%WINDIR%\fonts\coprgtb.ttf
%WINDIR%\fonts\comic.ttf
%WINDIR%\fonts\browaz.ttf
%WINDIR%\fonts\candarai.ttf
%WINDIR%\fonts\colonna.ttf
%WINDIR%\fonts\broadw.ttf
%WINDIR%\fonts\calibriz.ttf
%WINDIR%\fonts\coprgtl.ttf
%WINDIR%\fonts\castelar.ttf
%WINDIR%\fonts\ahronbd.ttf
%WINDIR%\fonts\calistb.ttf
%WINDIR%\fonts\browauz.ttf
%WINDIR%\fonts\cambriai.ttf
%WINDIR%\fonts\arialnb.ttf
%WINDIR%\fonts\angsauz.ttf
%WINDIR%\fonts\angsaz.ttf
%WINDIR%\fonts\aparajb.ttf
%WINDIR%\fonts\cambria.ttc
%WINDIR%\fonts\cordiab.ttf
%WINDIR%\fonts\cordiaui.ttf
%WINDIR%\fonts\arialni.ttf
%WINDIR%\fonts\cordia.ttf
%WINDIR%\fonts\corbel.ttf
%WINDIR%\fonts\angsai.ttf
%WINDIR%\fonts\candara.ttf
%WINDIR%\fonts\browai.ttf
%WINDIR%\fonts\browau.ttf
%WINDIR%\fonts\century.ttf
%WINDIR%\inf\.net clr networking 4.0.0.0\_networkingperfcounters.h
%WINDIR%\fonts\britanic.ttf
%WINDIR%\fonts\calibrii.ttf
%WINDIR%\fonts\bod_bi.ttf
%WINDIR%\fonts\bod_cr.ttf
%WINDIR%\fonts\alger.ttf
%WINDIR%\fonts\bod_r.ttf
%WINDIR%\fonts\browab.ttf
%WINDIR%\fonts\angsa.ttf
%WINDIR%\fonts\antquai.ttf
%WINDIR%\fonts\bod_ci.ttf
%WINDIR%\fonts\arabtype.ttf
%WINDIR%\fonts\bod_i.ttf
%WINDIR%\fonts\arialn.ttf
%WINDIR%\fonts\bod_cbi.ttf
%WINDIR%\fonts\brlnsb.ttf
%WINDIR%\fonts\calistbi.ttf
%WINDIR%\fonts\browa.ttf
%WINDIR%\fonts\comicbd.ttf
%WINDIR%\fonts\consolab.ttf
%WINDIR%\fonts\bod_blai.ttf
%WINDIR%\fonts\bod_pstc.ttf
%WINDIR%\fonts\aparaji.ttf
%WINDIR%\fonts\aparajbi.ttf
%WINDIR%\fonts\antquab.ttf
%WINDIR%\inf\ehstorpwddrv.pnf
%WINDIR%\inf\arcsas.inf
%WINDIR%\inf\mdmdgitn.pnf
%WINDIR%\inf\ksfilter.inf
%WINDIR%\inf\mcx2.inf
%WINDIR%\inf\mcx2.pnf
%WINDIR%\inf\mdm3com.inf
%WINDIR%\inf\mdmsupr3.inf
%WINDIR%\inf\mdmrock3.inf
%WINDIR%\inf\mdmrock3.pnf
%WINDIR%\inf\mdmpsion.inf
%WINDIR%\inf\mdmtdkj3.inf
%WINDIR%\inf\mdmkortx.pnf
%WINDIR%\inf\hidserv.pnf
%WINDIR%\inf\lsi_fc.pnf
%WINDIR%\inf\mdmgl009.inf
%WINDIR%\inf\mdmnttd6.inf
%WINDIR%\inf\mdmpn1.inf
%WINDIR%\inf\mdmairte.pnf
%WINDIR%\inf\mdmags64.inf
%WINDIR%\inf\mdmati.inf
%WINDIR%\inf\mdmarn.inf
%WINDIR%\inf\hpoa1ss.inf
%WINDIR%\inf\lsi_fc.inf
%WINDIR%\inf\lltdio.pnf
%WINDIR%\inf\mdmnttd6.pnf
%WINDIR%\inf\lsi_scsi.inf
%WINDIR%\inf\lsi_sas2.inf
%WINDIR%\inf\kscaptur.pnf
%WINDIR%\inf\ksfilter.pnf
%WINDIR%\inf\mdmke.inf
%WINDIR%\inf\mdmnttp.pnf
%WINDIR%\inf\mdmx5560.pnf
%WINDIR%\inf\mdmgl001.inf
%WINDIR%\inf\mdmelsa.inf
%WINDIR%\inf\mdmgcs.inf
%WINDIR%\inf\mdmgatew.pnf
%WINDIR%\inf\mdmgl006.pnf
%WINDIR%\inf\mdmaiwa.pnf
%WINDIR%\inf\mdmgl010.inf
%WINDIR%\inf\mdmhandy.pnf
%WINDIR%\inf\averhbh826_noaverir_x64.inf
%WINDIR%\inf\mdmhay2.inf
%WINDIR%\inf\image.inf
%WINDIR%\inf\hpoa1so.pnf
%WINDIR%\inf\hpsamd.pnf
%WINDIR%\inf\image.pnf
%WINDIR%\inf\input.pnf
%WINDIR%\inf\iastorv.pnf
%WINDIR%\inf\ks.inf
%WINDIR%\inf\keyboard.inf
%WINDIR%\inf\mdmnttp.inf
%WINDIR%\inf\mdmolic.inf
%WINDIR%\inf\mdmlasat.inf
%WINDIR%\inf\iirsp.pnf
%WINDIR%\inf\mdmnttte.inf
%WINDIR%\inf\mdmdgitn.inf
%WINDIR%\inf\mdmcodex.pnf
%WINDIR%\inf\mdmnis3t.inf
%WINDIR%\inf\mdmmega.inf
%WINDIR%\inf\mdmbr00a.inf
%WINDIR%\inf\mdmbr002.pnf
%WINDIR%\inf\mdmc26a.pnf
%WINDIR%\inf\mdmmot64.pnf
%WINDIR%\inf\mdmatm2k.pnf
%WINDIR%\inf\msports.inf
%WINDIR%\inf\net44amd.inf
%WINDIR%\inf\mdmbr005.pnf
%WINDIR%\inf\net8187bv64.inf
%WINDIR%\inf\mdmtdkj5.pnf
%WINDIR%\inf\mdmtdkj7.pnf
%WINDIR%\inf\mdmarn.pnf
%WINDIR%\inf\mdmsupra.inf
%WINDIR%\inf\mdmusrg.inf
%WINDIR%\inf\mdmbug3.pnf
%WINDIR%\inf\mdmpace.pnf
%WINDIR%\inf\mdmmotou.pnf
%WINDIR%\inf\mdmusrg.pnf
%WINDIR%\inf\mdmbr008.inf
%WINDIR%\inf\mdmsuprv.pnf
%WINDIR%\inf\mdmagm64.pnf
%WINDIR%\inf\nete1e3e.inf
%WINDIR%\inf\net1kx64.inf
%WINDIR%\inf\mdmsier.inf
%WINDIR%\inf\mdmmetri.inf
%WINDIR%\inf\mdmcxpv6.pnf
%WINDIR%\inf\mdmcm28.inf
%WINDIR%\inf\mdmc26a.inf
%WINDIR%\inf\mdmcpq.inf
%WINDIR%\inf\mdmcommu.pnf
%WINDIR%\inf\mdmcxpv6.inf
%WINDIR%\inf\mdmdsi.inf
%WINDIR%\inf\mdmeric.pnf
%WINDIR%\inf\mdmdyna.inf
%WINDIR%\inf\mdmeric2.inf
%WINDIR%\inf\mdmgl005.pnf
%WINDIR%\inf\netb57va.inf
%WINDIR%\inf\mdmbr007.inf
%WINDIR%\inf\mdmgl008.pnf
%WINDIR%\inf\mdmhaeu.inf
%WINDIR%\inf\mdmmct.pnf
%WINDIR%\inf\mdmhandy.inf
%WINDIR%\inf\mdmiodat.inf
%WINDIR%\inf\mdmisdn.inf
%WINDIR%\inf\mdmirmdm.inf
%WINDIR%\inf\mdmke.pnf
%WINDIR%\inf\mdmgl002.inf
%WINDIR%\inf\mdmbsb.inf
%WINDIR%\inf\mdmbr008.pnf
%WINDIR%\inf\mdmgl007.inf
%WINDIR%\microsoft.net\netfxrepair.3082.dll
%WINDIR%\pla\system\system performance.xml
%WINDIR%\inf\mdmlasat.pnf
%WINDIR%\inf\hiddigi.pnf
%WINDIR%\inf\bthspp.pnf
%WINDIR%\inf\hiddigi.inf
%WINDIR%\inf\hidbth.pnf
%WINDIR%\inf\disk.inf
%WINDIR%\inf\disk.pnf
%WINDIR%\inf\digitalmediadevice.pnf
%WINDIR%\inf\bthpan.pnf
%WINDIR%\inf\dot4.pnf
%WINDIR%\inf\brmfcmdm.pnf
%WINDIR%\inf\avmx64c.pnf
%WINDIR%\inf\hidserv.inf
%WINDIR%\inf\cdrom.pnf
%WINDIR%\inf\msdtc bridge 3.0.0.0\_transactionbridgeperfcounters.h
%WINDIR%\inf\circlass.inf
%WINDIR%\inf\msdtc bridge 4.0.0.0\_transactionbridgeperfcounters.h
%WINDIR%\inf\divacx64.pnf
%WINDIR%\inf\atiilhag.inf
%WINDIR%\inf\bthspp.inf
%WINDIR%\inf\cdrom.inf
%WINDIR%\inf\bth.inf
%WINDIR%\inf\brmfcumd.inf
%WINDIR%\inf\avc.inf
%WINDIR%\inf\eaphost.pnf
%WINDIR%\inf\cxfalcon_ibv64.inf
%WINDIR%\inf\divacx64.inf
%WINDIR%\inf\blbdrive.pnf
%WINDIR%\inf\digitalmediadevice.inf
%WINDIR%\inf\fdc.pnf
%WINDIR%\inf\cxfalpal_ibv64.inf
%WINDIR%\inf\faxcn002.pnf
%WINDIR%\inf\cxraptor_fm1216mk5_ibv64.inf
%WINDIR%\inf\cxraptor_fm1216mk5_ibv64.pnf
%WINDIR%\inf\elxstor.inf
%WINDIR%\inf\elxstor.pnf
%WINDIR%\inf\cxfalpal_ibv64.pnf
%WINDIR%\inf\cxfalcon_ibv64.pnf
%WINDIR%\inf\brmfcmdm.inf
%WINDIR%\inf\mdmkortx.inf
%WINDIR%\inf\display.inf
%WINDIR%\inf\brmfcumd.pnf
%WINDIR%\inf\af9035bda.pnf
%WINDIR%\inf\faxca003.pnf
%WINDIR%\inf\display.pnf
%WINDIR%\inf\arcsas.pnf
%WINDIR%\inf\gameport.inf
%WINDIR%\inf\battery.inf
%WINDIR%\inf\bda.inf
%WINDIR%\inf\bthpan.inf
%WINDIR%\inf\gameport.pnf
%WINDIR%\inf\hidir.pnf
%WINDIR%\inf\ehstorcertdrv.pnf
%WINDIR%\inf\mdmomrn3.inf
%WINDIR%\inf\mdmdcm5.pnf
%WINDIR%\inf\mdmfj2.pnf
%WINDIR%\inf\mdmrock5.pnf
%WINDIR%\inf\mdmbr007.pnf
%WINDIR%\inf\mdmhaeu.pnf
%WINDIR%\inf\mdmbr005.inf
%WINDIR%\inf\megasr.inf
%WINDIR%\inf\megasas2.inf
%WINDIR%\inf\mdmracal.pnf
%WINDIR%\inf\msdv.pnf
%WINDIR%\inf\mdmusrsp.pnf
%WINDIR%\inf\hcw72b64.inf
%WINDIR%\inf\mdmusrk1.pnf
%WINDIR%\inf\mdmtron.inf
%WINDIR%\inf\mdmmcom.inf
%WINDIR%\inf\mdmtexas.pnf
%WINDIR%\inf\mdmtdkj6.pnf
%WINDIR%\inf\mdmmcom.pnf
%WINDIR%\inf\mdmmcd.inf
%WINDIR%\inf\mdminfot.inf
%WINDIR%\inf\mdmtdkj4.inf
%WINDIR%\inf\mdminfot.pnf
%WINDIR%\inf\mdmpace.inf
%WINDIR%\inf\mdmgl009.pnf
%WINDIR%\inf\mdmtron.pnf
%WINDIR%\inf\hpoa1sd.inf
%WINDIR%\inf\mdmcm28.pnf
%WINDIR%\inf\mdmpp.inf
%WINDIR%\inf\mdmgen.inf
%WINDIR%\inf\mdmeric2.pnf
%WINDIR%\inf\mdmetech.inf
%WINDIR%\inf\mdmetech.pnf
%WINDIR%\inf\mdmbtmdm.pnf
%WINDIR%\inf\netloop.inf
%WINDIR%\inf\netl260a.inf
%WINDIR%\inf\netl1e64.inf
%WINDIR%\inf\netk57a.inf
%WINDIR%\inf\net1yx64.pnf
%WINDIR%\inf\circlass.pnf
%WINDIR%\inf\netl160a.inf
%WINDIR%\inf\mdmnis3t.pnf
%WINDIR%\inf\ndiscap.pnf
%WINDIR%\inf\mdmosi.inf
%WINDIR%\inf\net1yx64.inf
%WINDIR%\inf\net1qx64.inf
%WINDIR%\inf\msmouse.inf
%WINDIR%\inf\netnvma.pnf
%WINDIR%\inf\hpoa1nd.inf
%WINDIR%\inf\netmyk00.inf
%WINDIR%\inf\mdmntt1.pnf
%WINDIR%\inf\mdmtdkj2.inf
%WINDIR%\inf\mdmgl001.pnf
%WINDIR%\inf\hpoa1sd.pnf
%WINDIR%\inf\nete1g3e.inf
%WINDIR%\pla\system\system diagnostics.xml

Modifies the following files

%ALLUSERSPROFILE%\mozilla\updates\308046b0af4a39cb\updates\0\update.log
%ALLUSERSPROFILE%\mozilla\updates\308046b0af4a39cb\updates\0\update.status
%TEMP%\jusched.log
%LOCALAPPDATA%\microsoft\windows\explorer\thumbcache_idx.db

Substitutes the following files

%ALLUSERSPROFILE%\Mozilla\updates\308046B0AF4A39CB\active-update.xml
%WINDIR%\inf\readme.txt

Deletes itself.

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'xm#.###honanywhere.com':443

TCP

Other

'xm#.###honanywhere.com':443

UDP

DNS ASK xm#.###honanywhere.com

Miscellaneous

Restarts the analyzed sample

Executes the following

'<Full path to file>' --foodisum' (with hidden window)

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial