Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Private Internet Access' = '"%PROGRAM_FILES%\pia_manager\pia_manager.exe" --startup'
Malicious functions:
Creates and executes the following:
- '%PROGRAM_FILES%\pia_manager\tapinstall.exe' install OemWin2k.inf tap0901
- '%PROGRAM_FILES%\pia_manager\tapinstall.exe' remove tap0901
- '%TEMP%\ocr1.tmp\bin\ruby.exe' "%TEMP%\ocr1.tmp\src\installer_win_with_data.rb"
Executes the following:
- '<SYSTEM32>\msiexec.exe' -Embedding 763857A4CFC0034E562481F8C23415A3
- '<SYSTEM32>\msiexec.exe' /V
- '<SYSTEM32>\cmd.exe' /c ""%PROGRAM_FILES%\pia_manager\reinstall_tap.bat""
- '<SYSTEM32>\findstr.exe' /i "6\."
- '<SYSTEM32>\msiexec.exe' /quiet /i "%PROGRAM_FILES%\pia_manager\pia.msi"
- '<SYSTEM32>\taskkill.exe' /F /T /FI "IMAGENAME eq pia_manager.exe"
- '<SYSTEM32>\reg.exe' query "HKU\S-1-5-19"
- '<SYSTEM32>\taskkill.exe' /F /T /FI "IMAGENAME eq openvpn.exe"
- '<SYSTEM32>\taskkill.exe' /F /T /FI "IMAGENAME eq pia_tray.exe"
Modifies file system :
Creates the following files:
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcePlainIconSmall.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcePlainIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcesSilhouette.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcesIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourceDocumentIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourceCSSIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourceJSIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourceDocumentIconSmall.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcesSizeGraphIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\searchSmallGray.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\searchSmallBrightBlue.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segment.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\searchSmallWhite.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\scriptsIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\resourcesTimeGraphIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\searchSmallBlue.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\scriptsSilhouette.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\popoverArrows.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\percentButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profileGroupIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\popoverBackground.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\paneGrowHandleLine.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\paneBottomGrowActive.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\pauseOnExceptionButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\paneSettingsButtons.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profileIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\recordButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\radioDot.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\reloadButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\recordToggledButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profileSmallIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profilesIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\programCounterBorder.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\profilesSilhouette.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbHoverVert.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbHoverHoriz.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarBlue.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbVert.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbActiveHoriz.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\successGreenDot.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbHoriz.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\thumbActiveVert.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarGray.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineCheckmarks.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarYellow.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillBlue.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineDots.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarOrange.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarGreen.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarRed.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineBarPurple.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\sessionStorage.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentSelectedEnd.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\splitviewDimple.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\spinner.gif
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentHover.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentEnd.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentSelected.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\segmentHoverEnd.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\splitviewDividerBackground.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarResizerHorizontal.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarMenuButtonSelected.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\storageIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarResizerVertical.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarBottomBackground.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarBackground.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarMenuButton.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\statusbarButtons.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\paneBottomGrow.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointsActivateButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointCounterBorder.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\checker.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointsDeactivateButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointBorder.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\back.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointConditionalCounterBorder.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\breakpointConditionalBorder.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\clearConsoleButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\databaseTable.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\database.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerPause.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerContinue.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\consoleButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\closeButtons.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\cookie.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\consoleIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DatabaseTableView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DatabaseQueryView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DOMAgent.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DataGrid.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ContextMenu.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ConsoleView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Database.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\CookieItemsView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DOMStorage.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\EventListenersSidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ElementsTreeOutline.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\auditsIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\FontView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DOMSyntaxHighlighter.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\DOMStorageItemsView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ElementsPanel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Drawer.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\gearButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\forward.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\glossyHeaderPressed.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\glossyHeader.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\errorRedDot.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\errorMediumIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\focusButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\excludeButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\glossyHeaderSelected.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\largerResourcesButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\grayConnectorPoint.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\nodeSearchButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\localStorage.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\goArrow.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\glossyHeaderSelectedPressed.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\graphLabelCalloutRight.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\graphLabelCalloutLeft.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallDownWhite.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallDownBlack.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightBlack.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRight.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerStepOut.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerStepInto.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallDown.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\debuggerStepOver.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightDown.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\enableOutlineButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\elementsIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\errorIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\enableSolidButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightDownWhite.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightDownBlack.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\dockButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\disclosureTriangleSmallRightWhite.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextViewer.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\textViewer.css
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TimelineGrid.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TimelineAgent.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextEditorHighlighter.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextEditor.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextPrompt.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TextEditorModel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TimelineOverviewPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\WatchExpressionsSidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\View.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\WelcomeView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\WebKit.qrc
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TopDownProfileDataGridTree.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TimelinePanel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\utilities.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\treeoutline.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceHTMLTokenizer.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceFrame.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceJavaScriptTokenizer.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceHTMLTokenizer.re2js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SidebarTreeElement.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceCSSTokenizer.re2js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceCSSTokenizer.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceJavaScriptTokenizer.re2js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SummaryBar.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\StylesSidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\textEditor.css
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\TestController.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\SourceTokenizer.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\StoragePanel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\StatusBarButton.js
- %WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcr80.dll
- %WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcp80.dll
- %HOMEPATH%\Start Menu\Programs\Private Internet Access\Private Internet Access.lnk
- %PROGRAM_FILES%\pia_manager\data\settings.json
- %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989.cat
- C:\Config.Msi\44e6d.rbs
- %WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989\msvcm80.dll
- %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4053_x-ww_e6967989.manifest
- %HOMEPATH%\Start Menu\Programs\Private Internet Access\Uninstall Private Internet Access.lnk
- %TEMP%\Cab6.tmp
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
- %TEMP%\CabC.tmp
- %TEMP%\CabA.tmp
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
- %HOMEPATH%\Start Menu\Programs\Private Internet Access\Reinstall TAP Driver.lnk
- %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
- %APPDATA%\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
- %PROGRAM_FILES%\pia_manager\libeay32.dll
- %PROGRAM_FILES%\pia_manager\<Virus name>.exe
- %PROGRAM_FILES%\pia_manager\libpkcs11-helper-1.dll
- %PROGRAM_FILES%\pia_manager\liblzo2-2.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\zlib1.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\WorkersSidebarPane.js
- %PROGRAM_FILES%\pia_manager\reinstall_tap.bat
- %PROGRAM_FILES%\pia_manager\pia_tray\tiapp.xml
- %PROGRAM_FILES%\pia_manager\OemWin2k.inf
- %WINDIR%\Installer\44e6a.msi
- %PROGRAM_FILES%\pia_manager\tapinstall.exe
- %WINDIR%\Installer\MSI3.tmp
- %WINDIR%\Installer\MSI2.tmp
- %PROGRAM_FILES%\pia_manager\ssleay32.dll
- %PROGRAM_FILES%\pia_manager\pia_startup_task.xml
- %PROGRAM_FILES%\pia_manager\tap0901.sys
- %PROGRAM_FILES%\pia_manager\tap0901.cat
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Settings.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeUpTriangleWhite.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeUpTriangleBlack.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\userInputIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\undockButtonGlyph.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeDownTriangleWhite.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeDownTriangleBlack.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeRightTriangleWhite.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\treeRightTriangleBlack.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\userInputPreviousIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\whiteConnectorPoint.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\warningsErrors.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InjectedFakeWorker.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ImageView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\warningIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\userInputResultIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\warningOrangeDot.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\warningMediumIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillYellow.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillRed.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillBlue.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineIcon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillGreen.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillGray.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillPurple.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelineHollowPillOrange.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillGray.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\toolbarItemSelected.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillYellow.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\trackVert.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\trackHoriz.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillOrange.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillGreen.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillRed.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Images\timelinePillPurple.png
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ProfileView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ProfilesPanel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\PropertiesSidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\PropertiesSection.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Popover.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\popover.css
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ProfileDataGridTree.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Popup.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Resource.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ScriptsPanel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Script.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Section.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ScriptView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ResourcesPanel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ResourceCategory.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ScopeChainSidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ResourceView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InspectorBackendStub.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\inspector.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\inspectorSyntaxHighlight.css
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InspectorFrontendHostStub.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InjectedScriptAccess.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\InjectedScript.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\inspector.html
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\inspector.css
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\KeyboardShortcut.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Panel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ObjectProxy.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Placard.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\PanelEnablerView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\NativeTextViewer.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\MetricsSidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ObjectPropertiesSection.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Object.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ConsolePanel.js
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\ftp.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\generic.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\https.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\http.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\gem_path_searcher.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\dependency_list.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\common.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\user_interaction.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\ldap.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\text.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\errors.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\source_index.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\spec_fetcher.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\mailto.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri\ldaps.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\remote_fetcher.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\uri.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\thread.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\json.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\stack.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\callback.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\parser.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32le.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\json\ext.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\json\ext\generator.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\value.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\win32\registry.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\import.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\tsort.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-shortcut-0.2.4\lib\win32\shortcut.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\pack.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\func.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\cparser.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl\struct.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\handler.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\parser.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\tree_builder.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\json\ruby_events.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\yaml_tree.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\depth_first.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\json_tree.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\omap.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\date.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\date\format.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\stream.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\deprecated.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\coder.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\set.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\date_core.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\core_ext.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\document.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\stream.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\scalar.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\sequence.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\psych.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\syntax_error.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\node.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\stringio.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\mapping.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\scalar_scanner.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\strscan.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\emitter.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\to_ruby.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\nodes\alias.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\visitors\visitor.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\streaming.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_32be.so
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\deprecate.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\rbconfig.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\defaults\operating_system.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\exceptions.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\iso_8859_1.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\encdb.so
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\defaults.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\transdb.so
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\custom_require.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\specification.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\platform.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16le.so
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\path_support.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\version.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\dependency.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\requirement.rb
- %TEMP%\ocr1.tmp\bin\ruby.exe.manifest
- %TEMP%\ocr1.tmp\src\build\pia_manager\lib\pia_win32.rb
- %TEMP%\ocr1.tmp\bin\msvcrt-ruby191.dll
- %TEMP%\ocr1.tmp\bin\ruby.exe
- %TEMP%\ocr1.tmp\src\build\pia_manager\lib\rgloader\rgloader193.mswin.so
- %TEMP%\ocr1.tmp\src\installer_win_with_data.rb
- %TEMP%\ocr1.tmp\src\build\pia_manager\lib\pia_common.rb
- %TEMP%\ocr1.tmp\src\build\pia_manager\lib\rgloader\loader.rb
- %TEMP%\ocr1.tmp\bin\zlib1.dll
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\win32-shortcut-0.2.4.gemspec
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\win32-process-0.6.5.gemspec
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\windows-pr-1.2.2.gemspec
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\windows-api-0.4.2.gemspec
- %TEMP%\ocr1.tmp\bin\libyaml-0-2.dll
- %TEMP%\ocr1.tmp\bin\libffi-6.dll
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\win32-api-1.5.0-universal-mingw32.gemspec
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\specifications\ocra-1.3.1.gemspec
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\handle.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\synchronize.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\console.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\library.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\error.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-api-0.4.2\lib\windows\api.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\thread.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\process.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\window.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\json\version.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-process-0.6.5\lib\win32\process.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\utf_16be.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\json\common.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\unicode.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\msvcrt\string.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\security.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\lib\windows\tool_helper.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\win32ole.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\fileutils.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\dl.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\win32ole.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\single_byte.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\enc\trans\utf_16_32.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\etc.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\zlib.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\i386-mingw32\fiddle.so
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby19\win32\api.so
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\Win32API.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\forwardable.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\api.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\fiddle\closure.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\fiddle\function.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\dl.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\fiddle.rb
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.resources\Info.plist
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.resources\CFUnicodeData-L.mapping
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\icuin40.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\icudt40.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\cairo.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.resources\CFUniCharPropertyDatabase.data
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\CFLite.resources\CFCharacterSetBitmaps.bitmap
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\icuuc40.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libeay32.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libcurl.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libxml2.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libpng13.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\JavaScriptCore.resources\Info.plist
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\JavaScriptCore.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\khost.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\kboot.exe
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon.png
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon-mono.png
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon_c.png
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon_c-mono.png
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\css\paste.css
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\css\design.css
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\default_app_logo_d.png
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\default_app_logo.png
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon_d-mono.png
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\javascript\settings.js
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\javascript\main.js
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\_converted_icon.ico
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\settings.html
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\index.html
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\icon_d.png
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\javascript\jquery.min.js
- %PROGRAM_FILES%\pia_manager\pia_tray\Resources\javascript\common.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditResultView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditLauncherView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\audits.css
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditRules.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\Info.plist
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\en.lproj\localizedStrings.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditCategories.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AbstractTimelinePanel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\AuditsPanel.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\ChangesView.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\CallStackSidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Color.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Checkbox.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Breakpoint.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\BottomUpProfileDataGridTree.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\Callback.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\inspector\BreakpointsSidebarPane.js
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoNet.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoFoundation.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoSQLite.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoNetSSL.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\objc.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\libxslt.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoData.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoCrypto.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoUtil.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\ssleay32.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\SQLite3.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.resources\en.lproj\Localizable.strings
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\WebKit.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoZip.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\PocoXML.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\rootcert.pem
- %PROGRAM_FILES%\pia_manager\pia_tray\runtime\1.2.0.RC6d\pthreadVC2.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\pia_tray.exe
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\win32-api.gemspec
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby2_64\win32\api.so
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-shortcut-0.2.4\win32-shortcut.gemspec
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-process-0.6.5\win32-process.gemspec
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\config_file.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\builder.rb
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby2_32\win32\api.so
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\win32-api-1.5.0-universal-mingw32\lib\win32\ruby18\win32\api.so
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-api-0.4.2\windows-api.gemspec
- %PROGRAM_FILES%\pia_manager\32\openvpn.exe
- %PROGRAM_FILES%\pia_manager\32\OemWin2k.inf
- %PROGRAM_FILES%\pia_manager\32\ssleay32.dll
- %PROGRAM_FILES%\pia_manager\32\pia_startup_task.xml
- %PROGRAM_FILES%\pia_manager\32\libeay32.dll
- %TEMP%\ocr1.tmp\lib\ruby\gems\1.9.1\gems\windows-pr-1.2.2\windows-pr.gemspec
- %PROGRAM_FILES%\pia_manager\32\libpkcs11-helper-1.dll
- %PROGRAM_FILES%\pia_manager\32\liblzo2-2.dll
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\psych_additions.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\yaml.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\psych_tree.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\json\tree_builder.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\json\yaml_events.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\handlers\document_stream.rb
- %TEMP%\ocr1.tmp\lib\ruby\1.9.1\psych\json\stream.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\syck_hack.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_reader.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_reader\entry.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_writer.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_header.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\f_sync_dir.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_output.rb
- %TEMP%\ocr1.tmp\lib\ruby\site_ruby\1.9.1\rubygems\package\tar_input.rb
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tifilesystem\1.2.0.RC6d\tifilesystemmodule.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tiapp\1.2.0.RC6d\tiappmodule.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\tinetworkmodule.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tifilesystem\1.2.0.RC6d\tifilesystemmodule.js
- %PROGRAM_FILES%\pia_manager\pia_manager.exe
- %PROGRAM_FILES%\pia_manager\pia.msi
- %PROGRAM_FILES%\pia_manager\pia_tray\manifest
- %PROGRAM_FILES%\pia_manager\pia_tray\installer\installer.exe
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\tinetworkmodule.js
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\tinotification.html
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\jquery-1.3.2.js
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\ui.js
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\tiuimodule.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tiprocess\1.2.0.RC6d\tiprocessmodule.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\update.html
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tiui\1.2.0.RC6d\default.css
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tiprocess\1.2.0.RC6d\tiprocessmodule.js
- %PROGRAM_FILES%\pia_manager\64\libpkcs11-helper-1.dll
- %PROGRAM_FILES%\pia_manager\64\liblzo2-2.dll
- %PROGRAM_FILES%\pia_manager\64\openvpn.exe
- %PROGRAM_FILES%\pia_manager\64\OemWin2k.inf
- %PROGRAM_FILES%\pia_manager\32\tap0901.sys
- %PROGRAM_FILES%\pia_manager\32\tap0901.cat
- %PROGRAM_FILES%\pia_manager\64\libeay32.dll
- %PROGRAM_FILES%\pia_manager\32\tapinstall.exe
- %PROGRAM_FILES%\pia_manager\64\pia_startup_task.xml
- %PROGRAM_FILES%\pia_manager\Microsoft.VC90.CRT.manifest
- %PROGRAM_FILES%\pia_manager\data\region_data.txt
- %PROGRAM_FILES%\pia_manager\openvpn.exe
- %PROGRAM_FILES%\pia_manager\msvcr90.dll
- %PROGRAM_FILES%\pia_manager\64\tap0901.cat
- %PROGRAM_FILES%\pia_manager\64\ssleay32.dll
- %PROGRAM_FILES%\pia_manager\64\tapinstall.exe
- %PROGRAM_FILES%\pia_manager\64\tap0901.sys
Deletes the following files:
- %PROGRAM_FILES%\pia_manager\64\tap0901.cat
- %PROGRAM_FILES%\pia_manager\64\tap0901.sys
- %PROGRAM_FILES%\pia_manager\64\tapinstall.exe
- %PROGRAM_FILES%\pia_manager\64\ssleay32.dll
- %PROGRAM_FILES%\pia_manager\64\OemWin2k.inf
- %PROGRAM_FILES%\pia_manager\64\openvpn.exe
- %PROGRAM_FILES%\pia_manager\64\pia_startup_task.xml
- %TEMP%\Cab6.tmp
- %TEMP%\CabA.tmp
- %TEMP%\CabC.tmp
- %WINDIR%\Installer\44e6a.msi
- %WINDIR%\Installer\MSI2.tmp
- %WINDIR%\Installer\MSI3.tmp
- C:\Config.Msi\44e6d.rbs
- %PROGRAM_FILES%\pia_manager\32\OemWin2k.inf
- %PROGRAM_FILES%\pia_manager\32\openvpn.exe
- %PROGRAM_FILES%\pia_manager\32\pia_startup_task.xml
- %PROGRAM_FILES%\pia_manager\32\libpkcs11-helper-1.dll
- %PROGRAM_FILES%\pia_manager\pia_tray\modules\tinetwork\1.2.0.RC6d\tinetworkmodule.js
- %PROGRAM_FILES%\pia_manager\32\libeay32.dll
- %PROGRAM_FILES%\pia_manager\32\liblzo2-2.dll
- %PROGRAM_FILES%\pia_manager\64\libeay32.dll
- %PROGRAM_FILES%\pia_manager\64\liblzo2-2.dll
- %PROGRAM_FILES%\pia_manager\64\libpkcs11-helper-1.dll
- %PROGRAM_FILES%\pia_manager\32\tapinstall.exe
- %PROGRAM_FILES%\pia_manager\32\ssleay32.dll
- %PROGRAM_FILES%\pia_manager\32\tap0901.cat
- %PROGRAM_FILES%\pia_manager\32\tap0901.sys
Network activity:
Connects to:
- 'www.download.windowsupdate.com':80
- 'wp#d':80
TCP:
HTTP GET requests:
- www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
- www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
- wp#d/wpad.dat
UDP:
- DNS ASK www.download.windowsupdate.com
- DNS ASK wp#d
Miscellaneous:
Searches for the following windows:
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'Indicator' WindowName: '(null)'
- ClassName: '(null)' WindowName: '(null)'