Trojan.DownLoader11.15508

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Private Internet Access' = '"%PROGRAM_FILES%\pia_manager\pia_manager.exe" --startup'

Malicious functions:

Creates and executes the following:

'%PROGRAM_FILES%\pia_manager\tapinstall.exe' install OemWin2k.inf tap0901
'%PROGRAM_FILES%\pia_manager\tapinstall.exe' remove tap0901
'%TEMP%\ocr1.tmp\bin\ruby.exe' "%TEMP%\ocr1.tmp\src\installer_win_with_data.rb"

Executes the following:

'<SYSTEM32>\msiexec.exe' -Embedding 763857A4CFC0034E562481F8C23415A3
'<SYSTEM32>\msiexec.exe' /V
'<SYSTEM32>\cmd.exe' /c ""%PROGRAM_FILES%\pia_manager\reinstall_tap.bat""
'<SYSTEM32>\findstr.exe' /i "6\."
'<SYSTEM32>\msiexec.exe' /quiet /i "%PROGRAM_FILES%\pia_manager\pia.msi"
'<SYSTEM32>\taskkill.exe' /F /T /FI "IMAGENAME eq pia_manager.exe"
'<SYSTEM32>\reg.exe' query "HKU\S-1-5-19"
'<SYSTEM32>\taskkill.exe' /F /T /FI "IMAGENAME eq openvpn.exe"
'<SYSTEM32>\taskkill.exe' /F /T /FI "IMAGENAME eq pia_tray.exe"

Modifies file system :

Creates the following files:

%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcePlainIconSmall.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcePlainIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcesSilhouette.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcesIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourceDocumentIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourceCSSIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourceJSIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourceDocumentIconSmall.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcesSizeGraphIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\searchSmallGray.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\searchSmallBrightBlue.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segment.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\searchSmallWhite.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\scriptsIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcesTimeGraphIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\searchSmallBlue.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\scriptsSilhouette.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\popoverArrows.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\percentButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profileGroupIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\popoverBackground.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\paneGrowHandleLine.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\paneBottomGrowActive.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\pauseOnExceptionButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\paneSettingsButtons.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profileIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\recordButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\radioDot.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\reloadButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\recordToggledButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profileSmallIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profilesIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\programCounterBorder.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profilesSilhouette.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbHoverVert.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbHoverHoriz.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarBlue.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbVert.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbActiveHoriz.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\successGreenDot.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbHoriz.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbActiveVert.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarGray.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineCheckmarks.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarYellow.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillBlue.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineDots.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarOrange.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarGreen.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarRed.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarPurple.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\sessionStorage.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentSelectedEnd.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\splitviewDimple.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\spinner.gif
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentHover.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentEnd.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentSelected.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentHoverEnd.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\splitviewDividerBackground.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarResizerHorizontal.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarMenuButtonSelected.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\storageIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarResizerVertical.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarBottomBackground.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarBackground.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarMenuButton.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarButtons.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\paneBottomGrow.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointsActivateButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointCounterBorder.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\checker.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointsDeactivateButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointBorder.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\back.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointConditionalCounterBorder.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointConditionalBorder.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\clearConsoleButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\databaseTable.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\database.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerPause.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerContinue.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\consoleButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\closeButtons.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\cookie.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\consoleIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DatabaseTableView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DatabaseQueryView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DOMAgent.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DataGrid.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ContextMenu.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ConsoleView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Database.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\CookieItemsView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DOMStorage.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\EventListenersSidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ElementsTreeOutline.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\auditsIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\FontView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DOMSyntaxHighlighter.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DOMStorageItemsView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ElementsPanel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Drawer.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\gearButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\forward.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\glossyHeaderPressed.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\glossyHeader.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\errorRedDot.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\errorMediumIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\focusButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\excludeButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\glossyHeaderSelected.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\largerResourcesButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\grayConnectorPoint.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\nodeSearchButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\localStorage.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\goArrow.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\glossyHeaderSelectedPressed.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\graphLabelCalloutRight.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\graphLabelCalloutLeft.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallDownWhite.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallDownBlack.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightBlack.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRight.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerStepOut.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerStepInto.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallDown.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerStepOver.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightDown.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\enableOutlineButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\elementsIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\errorIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\enableSolidButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightDownWhite.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightDownBlack.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\dockButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightWhite.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextViewer.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\textViewer.css
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TimelineGrid.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TimelineAgent.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextEditorHighlighter.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextEditor.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextPrompt.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextEditorModel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TimelineOverviewPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\WatchExpressionsSidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\View.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\WelcomeView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\WebKit.qrc
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TopDownProfileDataGridTree.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TimelinePanel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\utilities.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\treeoutline.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceHTMLTokenizer.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceFrame.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceJavaScriptTokenizer.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceHTMLTokenizer.re2js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SidebarTreeElement.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceCSSTokenizer.re2js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceCSSTokenizer.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceJavaScriptTokenizer.re2js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SummaryBar.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\StylesSidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\textEditor.css
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TestController.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceTokenizer.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\StoragePanel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\StatusBarButton.js
%WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
%WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
%HOMEPATH%\Start Menu\Programs\Private Internet Access\Private Internet Access.lnk
%PROGRAM_FILES%\pia_manager\data\settings.json
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989.cat
C:\Config.Msi\44e6d.rbs
%WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989.manifest
%HOMEPATH%\Start Menu\Programs\Private Internet Access\Uninstall Private Internet Access.lnk
%TEMP%\Cab6.tmp
%APPDATA%\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
%TEMP%\CabC.tmp
%TEMP%\CabA.tmp
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
%HOMEPATH%\Start Menu\Programs\Private Internet Access\Reinstall TAP Driver.lnk
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
%APPDATA%\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
%PROGRAM_FILES%\pia_manager\libeay32.dll
%PROGRAM_FILES%\pia_manager\<Virus name>.exe
%PROGRAM_FILES%\pia_manager\libpkcs11-helper-1.dll
%PROGRAM_FILES%\pia_manager\liblzo2-2.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\zlib1.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\WorkersSidebarPane.js
%PROGRAM_FILES%\pia_manager\reinstall_tap.bat
%PROGRAM_FILES%\pia_manager\pia_tray\tiapp.xml
%PROGRAM_FILES%\pia_manager\OemWin2k.inf
%WINDIR%\Installer\44e6a.msi
%PROGRAM_FILES%\pia_manager\tapinstall.exe
%WINDIR%\Installer\MSI3.tmp
%WINDIR%\Installer\MSI2.tmp
%PROGRAM_FILES%\pia_manager\ssleay32.dll
%PROGRAM_FILES%\pia_manager\pia_startup_task.xml
%PROGRAM_FILES%\pia_manager\tap0901.sys
%PROGRAM_FILES%\pia_manager\tap0901.cat
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Settings.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeUpTriangleWhite.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeUpTriangleBlack.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\userInputIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\undockButtonGlyph.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeDownTriangleWhite.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeDownTriangleBlack.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeRightTriangleWhite.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeRightTriangleBlack.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\userInputPreviousIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\whiteConnectorPoint.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\warningsErrors.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InjectedFakeWorker.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ImageView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\warningIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\userInputResultIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\warningOrangeDot.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\warningMediumIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillYellow.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillRed.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillBlue.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineIcon.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillGreen.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillGray.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillPurple.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillOrange.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillGray.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\toolbarItemSelected.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillYellow.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\trackVert.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\trackHoriz.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillOrange.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillGreen.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillRed.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillPurple.png
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ProfileView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ProfilesPanel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\PropertiesSidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\PropertiesSection.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Popover.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\popover.css
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ProfileDataGridTree.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Popup.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Resource.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ScriptsPanel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Script.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Section.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ScriptView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ResourcesPanel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ResourceCategory.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ScopeChainSidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ResourceView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InspectorBackendStub.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\inspector.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\inspectorSyntaxHighlight.css
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InspectorFrontendHostStub.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InjectedScriptAccess.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InjectedScript.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\inspector.html
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\inspector.css
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\KeyboardShortcut.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Panel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ObjectProxy.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Placard.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\PanelEnablerView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\NativeTextViewer.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\MetricsSidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ObjectPropertiesSection.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Object.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ConsolePanel.js
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\ftp.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\generic.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\https.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\http.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\gem_path_searcher.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\dependency_list.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\common.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\user_interaction.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\ldap.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\text.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\errors.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\source_index.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\spec_fetcher.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\mailto.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\ldaps.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\remote_fetcher.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\thread.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\json.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\stack.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\callback.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\parser.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32le.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\json\ext.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\generator.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\value.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\win32\registry.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\import.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\tsort.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-shortcut-0.2.4\lib\win32\shortcut.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\pack.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\func.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\cparser.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\struct.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\handler.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\parser.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\tree_builder.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\json\ruby_events.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\yaml_tree.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\depth_first.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\json_tree.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\omap.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\date.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\date\format.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\stream.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\deprecated.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\coder.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\set.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\date_core.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\core_ext.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\document.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\stream.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\scalar.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\sequence.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\psych.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\syntax_error.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\node.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\stringio.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\mapping.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\scalar_scanner.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\strscan.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\emitter.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\to_ruby.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\alias.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\visitor.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\streaming.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32be.so
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\deprecate.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\rbconfig.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\defaults\operating_system.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\exceptions.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\encdb.so
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\defaults.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\custom_require.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\specification.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\platform.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16le.so
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\path_support.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\version.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\dependency.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\requirement.rb
%TEMP%\ocr1.tmp\bin\ruby.exe.manifest
%TEMP%\ocr1.tmp\src\build\pia_manager\lib\pia_win32.rb
%TEMP%\ocr1.tmp\bin\msvcrt-ruby191.dll
%TEMP%\ocr1.tmp\bin\ruby.exe
%TEMP%\ocr1.tmp\src\build\pia_manager\lib\rgloader\rgloader193.mswin.so
%TEMP%\ocr1.tmp\src\installer_win_with_data.rb
%TEMP%\ocr1.tmp\src\build\pia_manager\lib\pia_common.rb
%TEMP%\ocr1.tmp\src\build\pia_manager\lib\rgloader\loader.rb
%TEMP%\ocr1.tmp\bin\zlib1.dll
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\win32-shortcut-0.2.4.gemspec
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\win32-process-0.6.5.gemspec
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\windows-pr-1.2.2.gemspec
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\windows-api-0.4.2.gemspec
%TEMP%\ocr1.tmp\bin\libyaml-0-2.dll
%TEMP%\ocr1.tmp\bin\libffi-6.dll
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\win32-api-1.5.0-universal-mingw32.gemspec
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\ocra-1.3.1.gemspec
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\handle.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\synchronize.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\console.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\library.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\error.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-api-0.4.2\lib\windows\api.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\thread.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\process.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\window.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\json\version.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-process-0.6.5\lib\win32\process.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16be.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\json\common.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\unicode.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\msvcrt\string.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\security.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\tool_helper.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\win32ole.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\fileutils.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\dl.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\win32ole.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\etc.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\zlib.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\fiddle.so
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby19\win32\api.so
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\Win32API.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\forwardable.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\api.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\fiddle\closure.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\fiddle\function.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\fiddle.rb
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.resources\Info.plist
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.resources\CFUnicodeData-L.mapping
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\icuin40.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\icudt40.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\cairo.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.resources\CFUniCharPropertyDatabase.data
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.resources\CFCharacterSetBitmaps.bitmap
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\icuuc40.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libeay32.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libcurl.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libxml2.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libpng13.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\JavaScriptCore.resources\Info.plist
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\JavaScriptCore.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\khost.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\kboot.exe
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon.png
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon-mono.png
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon_c.png
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon_c-mono.png
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\css\paste.css
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\css\design.css
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\default_app_logo_d.png
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\default_app_logo.png
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon_d-mono.png
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\javascript\settings.js
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\javascript\main.js
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\_converted_icon.ico
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\settings.html
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\index.html
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon_d.png
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\javascript\jquery.min.js
%PROGRAM_FILES%\pia_manager\pia_tray\Resources\javascript\common.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditResultView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditLauncherView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\audits.css
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditRules.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\Info.plist
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\en.lproj\localizedStrings.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditCategories.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AbstractTimelinePanel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditsPanel.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ChangesView.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\CallStackSidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Color.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Checkbox.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Breakpoint.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\BottomUpProfileDataGridTree.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Callback.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\BreakpointsSidebarPane.js
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoNet.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoFoundation.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoSQLite.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoNetSSL.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\objc.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libxslt.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoData.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoCrypto.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoUtil.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\ssleay32.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\SQLite3.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\en.lproj\Localizable.strings
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoZip.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoXML.dll
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\rootcert.pem
%PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\pthreadVC2.dll
%PROGRAM_FILES%\pia_manager\pia_tray\pia_tray.exe
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\win32-api.gemspec
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby2_64\win32\api.so
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-shortcut-0.2.4\win32-shortcut.gemspec
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-process-0.6.5\win32-process.gemspec
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\config_file.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\builder.rb
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby2_32\win32\api.so
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby18\win32\api.so
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-api-0.4.2\windows-api.gemspec
%PROGRAM_FILES%\pia_manager\32\openvpn.exe
%PROGRAM_FILES%\pia_manager\32\OemWin2k.inf
%PROGRAM_FILES%\pia_manager\32\ssleay32.dll
%PROGRAM_FILES%\pia_manager\32\pia_startup_task.xml
%PROGRAM_FILES%\pia_manager\32\libeay32.dll
%TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\windows-pr.gemspec
%PROGRAM_FILES%\pia_manager\32\libpkcs11-helper-1.dll
%PROGRAM_FILES%\pia_manager\32\liblzo2-2.dll
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\psych_additions.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\yaml.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\psych_tree.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\json\tree_builder.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\json\yaml_events.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\handlers\document_stream.rb
%TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\json\stream.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\syck_hack.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_reader.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_reader\entry.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_writer.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_header.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\f_sync_dir.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_output.rb
%TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_input.rb
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tifilesystem\1.2.0.RC6d\tifilesystemmodule.dll
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tiapp\1.2.0.RC6d\tiappmodule.dll
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\tinetworkmodule.dll
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tifilesystem\1.2.0.RC6d\tifilesystemmodule.js
%PROGRAM_FILES%\pia_manager\pia_manager.exe
%PROGRAM_FILES%\pia_manager\pia.msi
%PROGRAM_FILES%\pia_manager\pia_tray\manifest
%PROGRAM_FILES%\pia_manager\pia_tray\installer\installer.exe
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\tinetworkmodule.js
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\tinotification.html
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\jquery-1.3.2.js
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\ui.js
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\tiuimodule.dll
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tiprocess\1.2.0.RC6d\tiprocessmodule.dll
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\update.html
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\default.css
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tiprocess\1.2.0.RC6d\tiprocessmodule.js
%PROGRAM_FILES%\pia_manager\64\libpkcs11-helper-1.dll
%PROGRAM_FILES%\pia_manager\64\liblzo2-2.dll
%PROGRAM_FILES%\pia_manager\64\openvpn.exe
%PROGRAM_FILES%\pia_manager\64\OemWin2k.inf
%PROGRAM_FILES%\pia_manager\32\tap0901.sys
%PROGRAM_FILES%\pia_manager\32\tap0901.cat
%PROGRAM_FILES%\pia_manager\64\libeay32.dll
%PROGRAM_FILES%\pia_manager\32\tapinstall.exe
%PROGRAM_FILES%\pia_manager\64\pia_startup_task.xml
%PROGRAM_FILES%\pia_manager\Microsoft.VC90.CRT.manifest
%PROGRAM_FILES%\pia_manager\data\region_data.txt
%PROGRAM_FILES%\pia_manager\openvpn.exe
%PROGRAM_FILES%\pia_manager\msvcr90.dll
%PROGRAM_FILES%\pia_manager\64\tap0901.cat
%PROGRAM_FILES%\pia_manager\64\ssleay32.dll
%PROGRAM_FILES%\pia_manager\64\tapinstall.exe
%PROGRAM_FILES%\pia_manager\64\tap0901.sys

Deletes the following files:

%PROGRAM_FILES%\pia_manager\64\tap0901.cat
%PROGRAM_FILES%\pia_manager\64\tap0901.sys
%PROGRAM_FILES%\pia_manager\64\tapinstall.exe
%PROGRAM_FILES%\pia_manager\64\ssleay32.dll
%PROGRAM_FILES%\pia_manager\64\OemWin2k.inf
%PROGRAM_FILES%\pia_manager\64\openvpn.exe
%PROGRAM_FILES%\pia_manager\64\pia_startup_task.xml
%TEMP%\Cab6.tmp
%TEMP%\CabA.tmp
%TEMP%\CabC.tmp
%WINDIR%\Installer\44e6a.msi
%WINDIR%\Installer\MSI2.tmp
%WINDIR%\Installer\MSI3.tmp
C:\Config.Msi\44e6d.rbs
%PROGRAM_FILES%\pia_manager\32\OemWin2k.inf
%PROGRAM_FILES%\pia_manager\32\openvpn.exe
%PROGRAM_FILES%\pia_manager\32\pia_startup_task.xml
%PROGRAM_FILES%\pia_manager\32\libpkcs11-helper-1.dll
%PROGRAM_FILES%\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\tinetworkmodule.js
%PROGRAM_FILES%\pia_manager\32\libeay32.dll
%PROGRAM_FILES%\pia_manager\32\liblzo2-2.dll
%PROGRAM_FILES%\pia_manager\64\libeay32.dll
%PROGRAM_FILES%\pia_manager\64\liblzo2-2.dll
%PROGRAM_FILES%\pia_manager\64\libpkcs11-helper-1.dll
%PROGRAM_FILES%\pia_manager\32\tapinstall.exe
%PROGRAM_FILES%\pia_manager\32\ssleay32.dll
%PROGRAM_FILES%\pia_manager\32\tap0901.cat
%PROGRAM_FILES%\pia_manager\32\tap0901.sys

Network activity:

Connects to:

'www.download.windowsupdate.com':80
'wp#d':80

TCP:

HTTP GET requests:

www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
wp#d/wpad.dat

UDP:

DNS ASK www.download.windowsupdate.com
DNS ASK wp#d

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'Indicator' WindowName: '(null)'
ClassName: '(null)' WindowName: '(null)'

Technologies

Begriffe

Schulung und Training

Mythen

Technical Information

Curing recommendations

Free trial