Technical Information
To ensure autorun and distribution:
Modifies the following registry keys:
- [<HKLM>\SOFTWARE\Classes\GPAYBDAJYJQYCSM\shell\open\command] '' = '%TEMP%\k57Dn1HK0sDc76t.exe'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'CryptoTorLocker' = '%TEMP%\k57Dn1HK0sDc76t.exe'
Creates or modifies the following files:
- %HOMEPATH%\Start Menu\Programs\Startup\Shortcut to startup_local.lnk
- %HOMEPATH%\Start Menu\Programs\Startup\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\How to decrypt files Windows!.txt
Modifies file system:
Creates the following files:
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabview\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\places\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\history\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\search\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\autoconfig\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\cookie\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\alerts\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser\sidebar\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser-region\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\search\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\security\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\layout\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\dom\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser\downloads\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\branding\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\communicator\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser\safebrowsing\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser\feeds\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\browser\migration\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\MSInfo\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\3082\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1042\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\2052\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\TextConv\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\Triedit\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\Stationery\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\Speech\1033\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\Speech\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1025\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1028\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DAO\How to decrypt files Windows!.txt
- C:\Far2\PluginSDK\Headers.pas\How to decrypt files Windows!.txt
- <Auxiliary element>
- %CommonProgramFiles%\Microsoft Shared\DW\1040\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1041\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1036\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1031\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\DW\1033\How to decrypt files Windows!.txt
- %CommonProgramFiles%\System\msadc\How to decrypt files Windows!.txt
- %CommonProgramFiles%\System\Ole DB\How to decrypt files Windows!.txt
- %CommonProgramFiles%\System\How to decrypt files Windows!.txt
- %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\How to decrypt files Windows!.txt
- %CommonProgramFiles%\System\ado\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\browser\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\browser\content\branding\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\Web Folders\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\VC\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Microsoft Shared\VGX\How to decrypt files Windows!.txt
- %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\How to decrypt files Windows!.txt
- %CommonProgramFiles%\SpeechEngines\Microsoft\How to decrypt files Windows!.txt
- %CommonProgramFiles%\Services\How to decrypt files Windows!.txt
- %CommonProgramFiles%\MSSoap\Binaries\How to decrypt files Windows!.txt
- %CommonProgramFiles%\MSSoap\Binaries\Resources\1033\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\svg\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\printpreview\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\handling\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\alerts\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\xbl-marquee\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\res\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\media\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dirListing\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\media\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\printpreview\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dirListing\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tree\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\viewsource\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\places\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\alerts\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\update\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\xpinstall\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\profile\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pippki\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\places\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\pipnss\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\necko\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\passwordmgr\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xslt\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xml\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xpinstall\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\handling\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\win\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-region\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\plugins\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\preferences\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\handling\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\downloads\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\extensions\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\passwordmgr\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\satchel\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\xpinstall\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\profile\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\mozapps\update\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\cookie\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\pippki\content\pippki\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\services\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\en-US\locale\feedback\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\svg\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\xml\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\cpow\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\alerts\How to decrypt files Windows!.txt
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\bindings\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\History\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Cookies\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\LBMMC3H3\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\BGGTYMH1\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Start Menu\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\SendTo\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Templates\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\How to decrypt files Windows!.txt
- %APPDATA%\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\How to decrypt files Windows!.txt
- %APPDATA%\Microsoft\Media Player\How to decrypt files Windows!.txt
- %APPDATA%\Microsoft\Windows\Themes\How to decrypt files Windows!.txt
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\How to decrypt files Windows!.txt
- %APPDATA%\Microsoft\Address Book\How to decrypt files Windows!.txt
- %APPDATA%\Microsoft\Internet Explorer\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\MOE00UY1\How to decrypt files Windows!.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\History\How to decrypt files Windows!.txt
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Documents\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Documents\My Music\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\DRM\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Documents\My Videos\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Application Data\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Crypto\RSA\S-1-5-18\How to decrypt files Windows!.txt
- <Current directory>\How to decrypt files Windows!.txt
- %TEMP%\k57Dn1HK0sDc76t.exe
- C:\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\Default Pictures\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\User Account Pictures\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Network\Connections\Pbk\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Dr Watson\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Application Data\Microsoft\Media Player\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\History\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Cookies\How to decrypt files Windows!.txt
- C:\Documents and Settings\Default User\Application Data\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\How to decrypt files Windows!.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\How to decrypt files Windows!.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Colorer\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Colorer\hrc\auto\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Colorer\bin\How to decrypt files Windows!.txt
- C:\Far2\Plugins\AutoWrap\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Brackets\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Colorer\hrd\console\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Colorer\hrd\console\contrib\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Colorer\hrd\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Colorer\hrc\auto\types\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Colorer\hrc\How to decrypt files Windows!.txt
- C:\Far2\Documentation\eng\How to decrypt files Windows!.txt
- C:\Far2\Documentation\rus\How to decrypt files Windows!.txt
- C:\Far2\How to decrypt files Windows!.txt
- C:\Far2\Addons\XLat\How to decrypt files Windows!.txt
- C:\Far2\Addons\XLat\Russian\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Align\How to decrypt files Windows!.txt
- C:\Far2\Plugins\arclite\How to decrypt files Windows!.txt
- C:\Far2\Plugins\7-Zip\How to decrypt files Windows!.txt
- C:\Far2\Encyclopedia\How to decrypt files Windows!.txt
- C:\Far2\FExcept\How to decrypt files Windows!.txt
- C:\Far2\Plugins\HlfViewer\How to decrypt files Windows!.txt
- C:\Far2\Plugins\MacroView\How to decrypt files Windows!.txt
- C:\Far2\Plugins\FTP\lib\How to decrypt files Windows!.txt
- C:\Far2\Plugins\FileCase\How to decrypt files Windows!.txt
- C:\Far2\Plugins\FTP\How to decrypt files Windows!.txt
- C:\Far2\Plugins\WinSCP\How to decrypt files Windows!.txt
- C:\Far2\PluginSDK\Headers.c\How to decrypt files Windows!.txt
- C:\Far2\Plugins\TmpPanel\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Network\How to decrypt files Windows!.txt
- C:\Far2\Plugins\ProcList\How to decrypt files Windows!.txt
- C:\Far2\Plugins\EMenu\How to decrypt files Windows!.txt
- C:\Far2\Plugins\ExtSearch\doc\How to decrypt files Windows!.txt
- C:\Far2\Plugins\EditCase\How to decrypt files Windows!.txt
- C:\Far2\Plugins\Compare\How to decrypt files Windows!.txt
- C:\Far2\Plugins\DrawLine\How to decrypt files Windows!.txt
- C:\Far2\Plugins\ExtSearch\sources\RegExp\How to decrypt files Windows!.txt
- C:\Far2\Plugins\FarCmds\How to decrypt files Windows!.txt
- C:\Far2\Plugins\ExtSearch\sources\How to decrypt files Windows!.txt
- C:\Far2\Plugins\ExtSearch\How to decrypt files Windows!.txt
- C:\Far2\Plugins\ExtSearch\keys\How to decrypt files Windows!.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\How to decrypt files Windows!.txt
- <LS_APPDATA>\VMware\How to decrypt files Windows!.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\How to decrypt files Windows!.txt
- <LS_APPDATA>\Microsoft\Windows Media\9.0\How to decrypt files Windows!.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\How to decrypt files Windows!.txt
- %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\How to decrypt files Windows!.txt
- %TEMP%\How to decrypt files Windows!.txt
- %HOMEPATH%\Local Settings\History\History.IE5\How to decrypt files Windows!.txt
- %HOMEPATH%\Local Settings\How to decrypt files Windows!.txt
- %HOMEPATH%\Local Settings\History\How to decrypt files Windows!.txt
- %HOMEPATH%\Cookies\How to decrypt files Windows!.txt
- %HOMEPATH%\Favorites\How to decrypt files Windows!.txt
- %APPDATA%\Mozilla\Firefox\How to decrypt files Windows!.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\How to decrypt files Windows!.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\How to decrypt files Windows!.txt
- <LS_APPDATA>\Microsoft\Media Player\How to decrypt files Windows!.txt
- <LS_APPDATA>\Microsoft\Windows\How to decrypt files Windows!.txt
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\How to decrypt files Windows!.txt
- %HOMEPATH%\Favorites\Links\How to decrypt files Windows!.txt
- <LS_APPDATA>\How to decrypt files Windows!.txt
- C:\Far2\Addons\Colors\Custom Highlighting\How to decrypt files Windows!.txt
- C:\Far2\Addons\Colors\Default Highlighting\How to decrypt files Windows!.txt
- %HOMEPATH%\Templates\How to decrypt files Windows!.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\How to decrypt files Windows!.txt
- %HOMEPATH%\Start Menu\Programs\How to decrypt files Windows!.txt
- C:\Far2\Addons\SetUp\How to decrypt files Windows!.txt
- C:\Far2\Addons\Shell\How to decrypt files Windows!.txt
- C:\Far2\Addons\Macros\How to decrypt files Windows!.txt
- C:\Far2\Addons\Colors\How to decrypt files Windows!.txt
- C:\Far2\Addons\How to decrypt files Windows!.txt
- %HOMEPATH%\My Documents\My Pictures\How to decrypt files Windows!.txt
- %HOMEPATH%\How to decrypt files Windows!.txt
- %HOMEPATH%\My Documents\My Music\How to decrypt files Windows!.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\How to decrypt files Windows!.txt
- %HOMEPATH%\My Documents\How to decrypt files Windows!.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\How to decrypt files Windows!.txt
- %HOMEPATH%\Start Menu\Programs\Accessories\How to decrypt files Windows!.txt
- %HOMEPATH%\Start Menu\How to decrypt files Windows!.txt
- %HOMEPATH%\Recent\How to decrypt files Windows!.txt
- %HOMEPATH%\SendTo\How to decrypt files Windows!.txt
Moves the following files:
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp-end.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp-end.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-sharp.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-hov.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-hov.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp-end.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp-end.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-rit-sharp.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\columnpicker.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\columnpicker.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-top.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-top.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\chevron.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\chevron.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-hov.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-hov.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-hov.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-lft-hov.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-sharp.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn-sharp.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-dn.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\radio-check.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\radio-check.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\slider.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\slider.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Restore.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Restore.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\radio-check-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\radio\radio-check-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-bottom.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-bottom.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-top.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-top.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar\chevron.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar\chevron.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-left.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-left.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-right.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\splitter\grip-right.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-hov.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-hov.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-sharp.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\arrow-up-sharp.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\checkbox\cbox-check.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Close.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Close.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Minimize.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\Minimize.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-caret.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-caret.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-dash.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\console-error-dash.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-right.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-right.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-hov.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-hov.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp-end.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp-end.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft-sharp.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-hov.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-hov.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp-end.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp-end.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-lft.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-dis.gif.tor
- from %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk to %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Windows Media Player.lnk.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\content\global\notfound.wav to %ProgramFiles%\FireFox\chrome\toolkit\content\global\notfound.wav.tor
- from %APPDATA%\Microsoft\Internet Explorer\brndlog.txt to %APPDATA%\Microsoft\Internet Explorer\brndlog.txt.tor
- from %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk to %APPDATA%\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\res\arrow.gif to %ProgramFiles%\FireFox\chrome\toolkit\res\arrow.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-hov.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-hov.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-sharp.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-sharp.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\res\arrowd.gif to %ProgramFiles%\FireFox\chrome\toolkit\res\arrowd.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-dn-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Minimize.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Minimize.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Restore.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Restore.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-dash.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-dash.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Close.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\Close.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-bottom.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-bottom.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-left.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\grip-left.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\radio-check.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\slider.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\slider.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-dis.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-hov.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-hov.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit-sharp.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-rit.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-sharp.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up-sharp.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-caret.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\console-error-caret.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\arrow-up.gif.tor
- from %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check-dis.gif to %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\cbox-check-dis.gif.tor
Creates ransom message files (Trojan.Encoder).
Modifies user data files (Trojan.Encoder).
Changes user data files extensions (Trojan.Encoder).