ユーザー向け情報

閉じる

マイライブラリ
マイライブラリ

+ マイライブラリに追加

検索
検索

電話
テクニカルサポート利用方法

問い合わせ

新規お問い合わせ

電話（英語）

+7 (495) 789-45-86

フォーラム（英語）

お問い合わせ履歴

新規お問い合わせ

電話（英語）

+7 (495) 789-45-86

Profile

JP

RU CN DE EN ES FR IT JP KZ UZ PL BY
閉じる
サービス
スキャナー
Dr.Web vxCube
トライアル
ウイルスライブラリ
ナレッジベース

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

ニュース

Trojan.MulDrop8.22448

Added to the Dr.Web virus database: 2018-05-09

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKLM>\SOFTWARE\Classes\XecureWebFileVerify\shell\open\command] '' = 'rundll32.exe %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWEBFI~1.DLL,SFXW_FileVerify %1'
  • [<HKLM>\SOFTWARE\Classes\XecureWebFileDeEnvelop\shell\open\command] '' = 'rundll32.exe %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWEBFI~1.DLL,SFXW_FileDeEnvelop %1'
Malicious functions:
Terminates or attempts to terminate
the following user processes:
  • iexplore.exe
Modifies file system:
Creates the following files:
  • %TEMP%\ext2.tmp
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureCodec_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureCMP_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureASN_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\MiraePKIX_v4.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\nsldap32v50.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\ClientSM.exe
  • %ProgramFiles%\SoftForum\XecureWeb\xw_setup.exe
  • %TEMP%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\cert_04.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\.svn\text-base\cert_04.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\.svn\prop-base\cert_04.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureCrypto_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureCRL_v20.dll
  • %TEMP%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\cert_3b9aca03.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\text-base\cert_3b9aca03.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\prop-base\cert_3b9aca03.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\root\e76d641b04091c92f9cb5c47b95f09339926eb44\cert_10.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\e76d641b04091c92f9cb5c47b95f09339926eb44\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\e76d641b04091c92f9cb5c47b95f09339926eb44\.svn\text-base\cert_10.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\e76d641b04091c92f9cb5c47b95f09339926eb44\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\e76d641b04091c92f9cb5c47b95f09339926eb44\.svn\prop-base\cert_10.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\.svn\format
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\Download\default\xecure_big.bmp
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureCSP_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\conf\issuer.tbl
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\conf\policy_en.tbl
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\conf\policy.tbl
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\conf\ClientSM.cfg
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XCrSvr.exe
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\xwUACWrapper.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWSmartCard.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\Unzip32.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\Zip32.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebUtil.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebUpdate.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebUI.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebSSL.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebFileRD.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebCS.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebCMP.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebCertMng.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureST_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureNEAT_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureTSP_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecurePVD_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecurePKCS12_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecurePKCS8_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecurePKCS7_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecurePKCS5_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecurePKC_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureOCSP_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureLDAP_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureIO_v20.dll
  • %TEMP%\WZSE0.TMP\CertStorage\root\e76d641b04091c92f9cb5c47b95f09339926eb44\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\ef6ae6aa613c3d225296fc08dff93cca47512ce0\.svn\entries
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XecureCTL_v20.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\conf\BankCode.tbl
  • %TEMP%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\cert_01.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\root\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\root\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\newroot.der
  • %TEMP%\WZSE0.TMP\CertStorage\newmndca.der
  • %TEMP%\WZSE0.TMP\CertStorage\calist.ini
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\cert_2768.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\.svn\text-base\cert_2768.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\.svn\prop-base\cert_2768.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\.svn\text-base\cert_48479209034cb66f1005525650458b7b.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\cert_48479209034cb66f1005525650458b7b.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\cert_42df402301a9ac1f7d411833d75765c5.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\text-base\cert_42df402301a9ac1f7d411833d75765c5.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\prop-base\cert_42df402301a9ac1f7d411833d75765c5.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\cert_2748.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\.svn\text-base\cert_2748.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\e76d641b04091c92f9cb5c47b95f09339926eb44\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\.svn\prop-base\cert_48479209034cb66f1005525650458b7b.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\text-base\cert_01.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\prop-base\cert_01.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\cert_3cc2814b00e7524d9baa47b7e161f50e.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\text-base\cert_3cc2814b00e7524d9baa47b7e161f50e.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\prop-base\cert_3cc2814b00e7524d9baa47b7e161f50e.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\cert_03.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\.svn\text-base\cert_03.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\.svn\prop-base\cert_03.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\root\1507a4cd887f33f0a30ddc5a685f77798d199a4f\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\cert_02.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\text-base\cert_02.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\prop-base\cert_02.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\root\e76d641b04091c92f9cb5c47b95f09339926eb44\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\entries
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\Download\default\xecureweb_big.bmp
  • %ProgramFiles%\SoftForum\CertStorage\root\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\root\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\newroot.der
  • %ProgramFiles%\SoftForum\CertStorage\newmndca.der
  • %ProgramFiles%\SoftForum\CertStorage\calist.ini
  • %ProgramFiles%\NPKI\CrossCert\d3c1937bd61f964f1c2c6872acec4c85614cd2dc_10088.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\cert_42df402301a9ac1f7d411833d75765c5.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\text-base\cert_42df402301a9ac1f7d411833d75765c5.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\prop-base\cert_42df402301a9ac1f7d411833d75765c5.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\.svn\prop-base\cert_48479209034cb66f1005525650458b7b.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\f0496fd72c050996eb08e05280687f17a336ae83\.svn\entries
  • %ProgramFiles%\NPKI\CrossCert\0FD92CAF8B33B1B2B4F1151C9D786162E19B1427_10078.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\cert_410743f0027dad4fe11db9487df2a9ba.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\text-base\cert_410743f0027dad4fe11db9487df2a9ba.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\prop-base\cert_410743f0027dad4fe11db9487df2a9ba.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\entries
  • %ProgramFiles%\NPKI\SignKorea\b063e7eba3dbd862c64427ff65e9316273a7c6cc_10043.der
  • %ProgramFiles%\NPKI\TradeSign\CE671644B27E73FD85A7CD0D1ED3F0D3A52D2639_10023.der
  • %ProgramFiles%\NPKI\NCASign\FE2A1DC3637EBFFD31830AB1F1D3F0DA2BE78D7A_10082.der
  • %ProgramFiles%\NPKI\KICA\6F1F0BD880BE4AC7184E62CDCE3A6FA19B447061_10056.der
  • %ProgramFiles%\NPKI\KICA\B909F2B621489A2ABA025980862793166A77F559_10081.der
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebCLT.dll
  • %ProgramFiles%\SoftForum\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\.svn\text-base\cert_48479209034cb66f1005525650458b7b.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\entries
  • %ProgramFiles%\NPKI\KISA\2587df3e181c92c06c2e9677d44a009559077649_16.der
  • %ProgramFiles%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\cert_01.der
  • %ProgramFiles%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\text-base\cert_01.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\prop-base\cert_01.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\root\5e8d54cd0953a9279f79a5ee62b6702271a08bd9\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\cert_3cc2814b00e7524d9baa47b7e161f50e.der
  • %ProgramFiles%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\text-base\cert_3cc2814b00e7524d9baa47b7e161f50e.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\prop-base\cert_3cc2814b00e7524d9baa47b7e161f50e.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\root\2df9c06ae840c62438fb338257ebd9dc0f95a0b2\.svn\entries
  • %ProgramFiles%\NPKI\KISA\FF8A46723358E8488822AA1768DA1648098B3591_3.der
  • %ProgramFiles%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\cert_02.der
  • %ProgramFiles%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\text-base\cert_02.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\prop-base\cert_02.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\root\143f06757a32fb4a04efe58ae847a92e28462f81\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\cert_48479209034cb66f1005525650458b7b.der
  • %ProgramFiles%\NPKI\yessign\4AFBBD332D8BB1D18C946BFFE042365F1C91CB08_10080.der
  • %ProgramFiles%\NPKI\NCASign\766D8BCDAD940DF5A5B63F2202B6F59F4349398A_10045.der
  • %ProgramFiles%\SoftForum\CertStorage\root\0ef12e12c6f31a2ea28b9028473313fccdd888c6\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\cert_03.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\cert_07.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\text-base\cert_07.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\prop-base\cert_07.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\cert_02.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\text-base\cert_02.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\prop-base\cert_02.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\ca\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\.svn\prop-base\cert_2748.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\.svn\text-base\newroot.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\.svn\text-base\newmndca.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\.svn\text-base\calist.ini.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\.svn\prop-base\newroot.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\.svn\prop-base\newmndca.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\.svn\entries
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\log\StartInfo.log
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\xwUACUpdatectl.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\xwUACctl.dll
  • %ProgramFiles%\SoftForum\XecureWeb\ActiveX\XWebFileCLT.dll
  • %ProgramFiles%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\f441e6bfa36cfd1d0287dd2faa5394f1641ee7b8\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\prop-base\cert_42df407a00311243eed8d8155bde0393.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\prop-base\cert_03.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\entries
  • %ProgramFiles%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\cert_3f811b7a026cc2fbe96c9c69b6c689c8.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\text-base\cert_3f811b7a026cc2fbe96c9c69b6c689c8.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\prop-base\cert_3f811b7a026cc2fbe96c9c69b6c689c8.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\entries
  • %ProgramFiles%\NPKI\SignKorea\8DAA2008F089E01141BC7FA48E2AC4405ECA563A_10079.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\cert_3f810c2a014d7da56956f7a5ff03fcb7.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\text-base\cert_3f810c2a014d7da56956f7a5ff03fcb7.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\prop-base\cert_3f810c2a014d7da56956f7a5ff03fcb7.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\format
  • %ProgramFiles%\SoftForum\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\entries
  • %ProgramFiles%\NPKI\TradeSign\2B7602AE825C7DEE81919EF5895BB9E2995BA9AF_10084.der
  • %ProgramFiles%\NPKI\yessign\E2EC6D2CE57D9BC09EAC015379BA9A8F9A85D90B_10050.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\cert_42df407a00311243eed8d8155bde0393.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\cert.der
  • %ProgramFiles%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\text-base\cert_42df407a00311243eed8d8155bde0393.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\text-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\text-base\cert_03.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\daeacb7c3975441a8f3fc738af9504bbd2c18ac3\.svn\entries
  • %TEMP%\WZSE0.TMP\XecureCTL_v20.dll
  • %TEMP%\WZSE0.TMP\XecureST_v20.dll
  • %TEMP%\WZSE0.TMP\XecureTSP_v20.dll
  • %TEMP%\WZSE0.TMP\XecurePVD_v20.dll
  • %TEMP%\WZSE0.TMP\XecurePKCS12_v20.dll
  • %TEMP%\WZSE0.TMP\XecurePKCS8_v20.dll
  • %TEMP%\WZSE0.TMP\XecurePKCS7_v20.dll
  • %TEMP%\WZSE0.TMP\XecurePKCS5_v20.dll
  • %TEMP%\WZSE0.TMP\XecurePKC_v20.dll
  • %TEMP%\WZSE0.TMP\XecureOCSP_v20.dll
  • %TEMP%\WZSE0.TMP\XecureNEAT_v20.dll
  • %TEMP%\WZSE0.TMP\XecureLDAP_v20.dll
  • %TEMP%\WZSE0.TMP\XecureIO_v20.dll
  • %TEMP%\WZSE0.TMP\xwUACUpdatectl.dll
  • %TEMP%\WZSE0.TMP\XWebFileCLT.dll
  • %TEMP%\WZSE0.TMP\xwUACctl.dll
  • %TEMP%\WZSE0.TMP\XecureCRL_v20.dll
  • %TEMP%\WZSE0.TMP\XecureCodec_v20.dll
  • %TEMP%\WZSE0.TMP\XecureCMP_v20.dll
  • %TEMP%\WZSE0.TMP\XecureASN_v20.dll
  • %TEMP%\WZSE0.TMP\nsldap32v50.dll
  • %TEMP%\WZSE0.TMP\MiraePKIX_v4.dll
  • %TEMP%\WZSE0.TMP\xwUACWrapper.dll
  • %TEMP%\WZSE0.TMP\XWSmartCard.dll
  • %TEMP%\WZSE0.TMP\Unzip32.dll
  • %TEMP%\WZSE0.TMP\Zip32.dll
  • %TEMP%\WZSE0.TMP\XWebUtil.dll
  • %TEMP%\WZSE0.TMP\XWebUpdate.dll
  • %TEMP%\WZSE0.TMP\XecureCrypto_v20.dll
  • %TEMP%\WZSE0.TMP\XCrSvr.exe
  • %TEMP%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\XWebUI.dll
  • %TEMP%\WZSE0.TMP\XWebFileRD.dll
  • %TEMP%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\prop-base\cert_02.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\.svn\text-base\newroot.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\.svn\text-base\newmndca.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\.svn\text-base\calist.ini.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\.svn\prop-base\newroot.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\.svn\prop-base\newmndca.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\.svn\entries
  • %TEMP%\WZSE0.TMP\npxwfile.dll
  • %TEMP%\WZSE0.TMP\npxwfile.xpt
  • %TEMP%\WZSE0.TMP\npxecure.dll
  • %TEMP%\WZSE0.TMP\npxecure.xpt
  • %TEMP%\WZSE0.TMP\XecSSL40.class
  • %TEMP%\WZSE0.TMP\NPFileAccess.class
  • %TEMP%\WZSE0.TMP\NPxwfilectl.dll
  • %TEMP%\WZSE0.TMP\NPXecSSL40.dll
  • %TEMP%\WZSE0.TMP\BankCode.tbl
  • %TEMP%\WZSE0.TMP\issuer.tbl
  • %TEMP%\WZSE0.TMP\policy_en.tbl
  • %TEMP%\WZSE0.TMP\policy.tbl
  • %TEMP%\WZSE0.TMP\xecureweb_big.bmp
  • %TEMP%\WZSE0.TMP\xecure_big.bmp
  • %TEMP%\WZSE0.TMP\ClientSM.cfg
  • %TEMP%\WZSE0.TMP\XecureCSP_v20.dll
  • %TEMP%\WZSE0.TMP\XWebSSL.dll
  • %TEMP%\WZSE0.TMP\XWebCS.dll
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
  • %TEMP%\9963.rra
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
  • %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\_IsRb5e3.rra
  • %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\defab557.rra
  • %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\isrtb4da.rra
  • %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\valub45d.rra
  • %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\liceb3c1.rra
  • %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\setub324.rra
  • %CommonProgramFiles%\InstallShield\IScript\iscra5f5.rra
  • %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\iusea2d8.rra
  • %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\objea23c.rra
  • %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\ctor9f4e.rra
  • %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\core9ee1.rra
  • %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\temp.000
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
  • %TEMP%\IEC4.tmp
  • %TEMP%\pft3.tmp\Disk1\Thumbs.db
  • %TEMP%\pft3.tmp\Disk1\setup.inx
  • %TEMP%\pft3.tmp\Disk1\Setup.ini
  • %TEMP%\pft3.tmp\Disk1\Setup.exe
  • %TEMP%\pft3.tmp\Disk1\Setup.bmp
  • %TEMP%\pft3.tmp\Disk1\layout.bin
  • %TEMP%\pft3.tmp\Disk1\ikernel.ex_
  • %TEMP%\pft3.tmp\Disk1\data2.cab
  • %TEMP%\pft3.tmp\Disk1\data1.hdr
  • %TEMP%\pft3.tmp\Disk1\data1.cab
  • %TEMP%\pft3.tmp\pftw1.pkg
  • %TEMP%\plf1.tmp
  • %TEMP%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\.svn\text-base\cert_02.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\prop-base\cert.der.svn-base
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_.DEFAULT
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
  • %TEMP%\WZSE0.TMP\XWebCMP.dll
  • %TEMP%\WZSE0.TMP\XWebCertMng.dll
  • %TEMP%\WZSE0.TMP\ClientSM.exe
  • %TEMP%\WZSE0.TMP\xw_setup.exe
  • %ProgramFiles%\KB\ActiveXs\xw_i13d2.rra
  • %ProgramFiles%\KB\ActiveXs\KB_T13a3.rra
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.MAP
  • %ProgramFiles%\KB\ActiveXs\SCSKcdd.rra
  • %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\Setup.ini
  • %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\setubf3.rra
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.DATA
  • %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\Setubd3.rra
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING2.MAP
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING1.MAP
  • %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\Setub95.rra
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING.VER
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.MAP
  • %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\datab47.rra
  • %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\dataa8b.rra
  • %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\layoa6c.rra
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.BTR
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\$WinMgmt.CFG
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\domain.txt
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\ComDb.Dat
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SAM
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SYSTEM
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SOFTWARE
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SECURITY
  • C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
  • %ProgramFiles%\SoftForum\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\.svn\text-base\cert_2727.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\.svn\prop-base\cert_2727.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\cert_2762.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\.svn\text-base\cert_2762.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\.svn\prop-base\cert_2762.der.svn-base
  • %TEMP%\WZSE0.TMP\XWebCLT.dll
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\cert_2760.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\.svn\text-base\cert_2760.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\.svn\prop-base\cert_2760.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5c7448e248b10311a69fbffa223c233d41687ca3\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\cert_273d.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\.svn\text-base\cert_273d.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\60450c53212dab7c6f6a6426c554cd708fcc6c92\cert_2727.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\cert_2761.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\.svn\text-base\cert_2761.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\.svn\prop-base\cert_2761.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\dac052905418132dc647c7a040ceb6aa45edaf13\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\cert_275e.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\.svn\text-base\cert_275e.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\.svn\prop-base\cert_275e.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\bf3f4cbad08086cd0782afd2b4403cd0a839b37a\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\cert_410743f0027dad4fe11db9487df2a9ba.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\text-base\cert_410743f0027dad4fe11db9487df2a9ba.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\prop-base\cert_410743f0027dad4fe11db9487df2a9ba.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\ade9d66e18288893e8234df8cdc970087d005047\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\cert_273b.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\.svn\text-base\cert_273b.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\764e7cf9a3f1eefb32773bae85114926cb94b3d9\.svn\prop-base\cert_273b.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\.svn\prop-base\cert_273d.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5e98c8c99dd7a0abe2b3d37cbab5a0f1dfe19365\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5b24eb6212d26d2552d62417c39c05a1967b99a7\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\03fa3e5aa4df9ef779646a2b165bb17c31b0009e\cert_02.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\cert_42df407a00311243eed8d8155bde0393.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\.svn\prop-base\cert_2764.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\cert_2742.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\.svn\text-base\cert_2742.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\.svn\prop-base\cert_2742.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\2acaad71b5ad3b07e829bb60020ba94ce5f11bc4\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\text-base\cert_42df407a00311243eed8d8155bde0393.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\prop-base\cert_42df407a00311243eed8d8155bde0393.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\137fb162b695db9b6af5c773a8495982532b34f3\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\cert_07.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\text-base\cert_07.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\prop-base\cert_07.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\cert_2764.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\0a22c999c9a1372490e1be6013e4aff15ae33eb8\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\prop-base\cert_3f810c2a014d7da56956f7a5ff03fcb7.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\cert_03.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\409a9f6e45acc757e949e73dbd4582d0b95e0411\.svn\text-base\cert_2764.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\text-base\cert_03.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\prop-base\cert_03.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\5578e97a76f02507041458c94b23ea9e11d775d6\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\cert_3f811b7a026cc2fbe96c9c69b6c689c8.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\text-base\cert_3f811b7a026cc2fbe96c9c69b6c689c8.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\prop-base\cert_3f811b7a026cc2fbe96c9c69b6c689c8.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\527d0fe16be781803176a83fbef722731a12e617\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\cert_275f.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\.svn\text-base\cert_275f.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\.svn\prop-base\cert_275f.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\.svn\prop-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\.svn\format
  • %TEMP%\WZSE0.TMP\CertStorage\ca\4b3d4575915a11f8acb3cc6922c28e9df75919ce\.svn\entries
  • %TEMP%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\cert_3f810c2a014d7da56956f7a5ff03fcb7.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\cert.der
  • %TEMP%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\text-base\cert_3f810c2a014d7da56956f7a5ff03fcb7.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\text-base\cert.der.svn-base
  • %TEMP%\WZSE0.TMP\CertStorage\ca\48fa520704829eb91999fb7ebd7b569bd78e93dd\.svn\prop-base\cert.der.svn-base
  • %ProgramFiles%\SoftForum\CertStorage\root\e7efa5bc23cc9c3e6683c558a7fb14d7fea6107c\.svn\prop-base\cert_3b9aca03.der.svn-base
Sets the 'hidden' attribute to the following files:
  • %TEMP%\pft3.tmp\Disk1\Thumbs.db
Deletes the following files:
  • %TEMP%\ext2.tmp
  • %TEMP%\pft3.tmp\pftw1.pkg
  • %TEMP%\IEC4.tmp
Moves the following files:
  • from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\temp.000 to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\IKernel.exe
  • from %ProgramFiles%\KB\ActiveXs\SCSKcdd.rra to %ProgramFiles%\KB\ActiveXs\SCSKInstaller_total.exe
  • from %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\setubf3.rra to %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\setup.inx
  • from %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\Setubd3.rra to %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\Setup.ini
  • from %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\Setub95.rra to %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\Setup.exe
  • from %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\datab47.rra to %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\data1.cab
  • from %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\dataa8b.rra to %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\data1.hdr
  • from %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\layoa6c.rra to %ProgramFiles%\InstallShield Installation Information\{34651A9D-D609-410B-9DF0-F112C78A33AC}\layout.bin
  • from %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\_IsRb5e3.rra to %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\_IsRes.dll
  • from %ProgramFiles%\KB\ActiveXs\KB_T13a3.rra to %ProgramFiles%\KB\ActiveXs\KB_TOOL.exe
  • from %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\defab557.rra to %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\default.pal
  • from %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\valub45d.rra to %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\value.shl
  • from %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\liceb3c1.rra to %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\license.txt
  • from %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\setub324.rra to %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\setup.inx
  • from %CommonProgramFiles%\InstallShield\IScript\iscra5f5.rra to %CommonProgramFiles%\InstallShield\IScript\iscript.dll
  • from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\iusea2d8.rra to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\iuser.dll
  • from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\objea23c.rra to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\objectps.dll
  • from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\ctor9f4e.rra to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\ctor.dll
  • from %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\core9ee1.rra to %CommonProgramFiles%\InstallShield\Engine\6\Intel 32\corecomp.ini
  • from %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\isrtb4da.rra to %TEMP%\{34651A9D-D609-410B-9DF0-F112C78A33AC}\isrt.dll
  • from %ProgramFiles%\KB\ActiveXs\xw_i13d2.rra to %ProgramFiles%\KB\ActiveXs\xw_install_v7225.exe
Miscellaneous:
Searches for the following windows:
  • ClassName: 'ClientSM' WindowName: 'ClientSM'
Creates and executes the following:
  • '%TEMP%\pft3.tmp\Disk1\Setup.exe'
  • '%CommonProgramFiles%\InstallShield\Engine\6\Intel 32\IKernel.exe' -RegServer
  • '%CommonProgramFiles%\InstallShield\Engine\6\Intel 32\IKernel.exe' 32\IKernel.exe -Embedding
  • '%CommonProgramFiles%\InstallShield\Engine\6\Intel 32\IKernel.exe' /REGSERVER
  • '%ProgramFiles%\KB\ActiveXs\KB_TOOL.exe'
  • '%ProgramFiles%\KB\ActiveXs\xw_install_v7225.exe'
  • '%TEMP%\WZSE0.TMP\xw_setup.exe' -i a

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Free trial

 

Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

Free trial

 

Download Dr.Web

Download by serial number

Download on App Store

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Free trial

 

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android

Free trial

14 days

Download now
Get it on Google Play