Technical Information
Modifies file system
Creates the following files
- C:\users\public\public
- %ProgramFiles%\firefox\chrome\toolkit\skin\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\content\mozapps\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\content\global\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\content\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\decrypt_information.html
- %ProgramFiles%\firefox\chrome\pippki\content\decrypt_information.html
- %ProgramFiles%\firefox\chrome\pippki\decrypt_information.html
- %ProgramFiles%\firefox\chrome\en_us\locale\en_us\mozapps\decrypt_information.html
- %ProgramFiles%\firefox\chrome\en_us\locale\en_us\global_platform\decrypt_information.html
- %ProgramFiles%\firefox\chrome\en_us\locale\en_us\global\decrypt_information.html
- %ProgramFiles%\firefox\chrome\en_us\locale\en_us\decrypt_information.html
- %ProgramFiles%\firefox\chrome\en_us\locale\browser\decrypt_information.html
- %ProgramFiles%\firefox\chrome\en_us\locale\decrypt_information.html
- %ProgramFiles%\firefox\chrome\en_us\decrypt_information.html
- %ProgramFiles%\firefox\chrome\browser\skin\classic\browser\decrypt_information.html
- %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\browser\decrypt_information.html
- %ProgramFiles%\firefox\chrome\browser\skin\classic\aero\decrypt_information.html
- %ProgramFiles%\firefox\chrome\browser\skin\classic\decrypt_information.html
- %ProgramFiles%\firefox\chrome\browser\skin\decrypt_information.html
- %ProgramFiles%\firefox\chrome\browser\content\browser\decrypt_information.html
- %ProgramFiles%\firefox\chrome\browser\content\decrypt_information.html
- %ProgramFiles%\firefox\chrome\browser\decrypt_information.html
- %ProgramFiles%\firefox\chrome\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\skin\classic\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\skin\classic\aero\global\decrypt_information.html
- %ProgramFiles%\microsoft office\office14\bibliography\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\skin\classic\aero\mozapps\decrypt_information.html
- %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\decrypt_information.html
- %ProgramFiles%\microsoft office\office14\1033\grooveforms5\decrypt_information.html
- %ProgramFiles%\microsoft office\office14\1033\decrypt_information.html
- %ProgramFiles%\microsoft office\office14\decrypt_information.html
- %ProgramFiles%\microsoft office\media\office14\decrypt_information.html
- %ProgramFiles%\microsoft office\media\cagcat10\decrypt_information.html
- %ProgramFiles%\microsoft office\media\decrypt_information.html
- %ProgramFiles%\microsoft office\document themes 14\decrypt_information.html
- %ProgramFiles%\microsoft office\clipart\publisher\decrypt_information.html
- %ProgramFiles%\microsoft office\clipart\decrypt_information.html
- %ProgramFiles%\microsoft office\decrypt_information.html
- %ProgramFiles%\microsoft analysis services\as oledb\10\resources\decrypt_information.html
- %ProgramFiles%\microsoft analysis services\as oledb\10\decrypt_information.html
- %ProgramFiles%\microsoft analysis services\as oledb\decrypt_information.html
- %ProgramFiles%\microsoft analysis services\decrypt_information.html
- %ProgramFiles%\java\jre1.8.0_45\lib\images\decrypt_information.html
- %ProgramFiles%\java\jre1.8.0_45\lib\decrypt_information.html
- %ProgramFiles%\java\jre1.8.0_45\bin\decrypt_information.html
- %ProgramFiles%\java\jre1.8.0_45\decrypt_information.html
- %ProgramFiles%\java\decrypt_information.html
- %ProgramFiles%\internet explorer\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\skin\classic\mozapps\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\skin\classic\global\decrypt_information.html
- %ProgramFiles%\firefox\decrypt_information.html
- %ProgramFiles%\firefox\chrome\toolkit\skin\classic\aero\decrypt_information.html
- %ProgramFiles%\dvd maker\shared\dvdstyles\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\ink\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\decrypt_information.html
- %CommonProgramFiles%\decrypt_information.html
- %ProgramFiles%\decrypt_information.html
- C:\perflogs\decrypt_information.html
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\decrypt_information.html
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\decrypt_information.html
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\decrypt_information.html
- C:\msocache\all users\decrypt_information.html
- C:\msocache\decrypt_information.html
- C:\far2\pluginsdk\decrypt_information.html
- C:\far2\plugins\ftp\decrypt_information.html
- C:\far2\plugins\decrypt_information.html
- C:\far2\encyclopedia\decrypt_information.html
- C:\far2\documentation\decrypt_information.html
- C:\far2\addons\xlat\decrypt_information.html
- C:\far2\addons\colors\decrypt_information.html
- C:\far2\addons\decrypt_information.html
- C:\far2\decrypt_information.html
- C:\decrypt_information.html
- D:\$recycle.bin\decrypt_information.html
- D:\decrypt_information.html
- %ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\08e575673cce10c72090304839888e02_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
- C:\users\public\unique_id_do_not_remove
- %CommonProgramFiles%\microsoft shared\equation\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\decrypt_information.html
- %ProgramFiles%\dvd maker\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\msinfo\decrypt_information.html
- %CommonProgramFiles%\system\ole db\decrypt_information.html
- %CommonProgramFiles%\system\msmapi\decrypt_information.html
- %CommonProgramFiles%\system\msadc\decrypt_information.html
- %CommonProgramFiles%\system\ado\decrypt_information.html
- %CommonProgramFiles%\system\decrypt_information.html
- %CommonProgramFiles%\speechengines\microsoft\decrypt_information.html
- %CommonProgramFiles%\speechengines\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\web server extensions\14\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\web server extensions\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\web folders\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\vsto\10.0\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\vsto\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\vba\vba7\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\vba\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\triedit\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\translat\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\themes14\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\textconv\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\smart tag\lists\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\smart tag\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\decrypt_information.html
- %CommonProgramFiles%\microsoft shared\office14\decrypt_information.html
- %ProgramFiles%\dvd maker\shared\decrypt_information.html
- %ProgramFiles%\microsoft office\office14\convert\decrypt_information.html
Modifies the following files
- <Drive name for removable media>:\dialmap.bmp
- C:\far2\changelog
- C:\far2\changelog_eng
- C:\far2\addons\macros\descript.ion
- C:\far2\addons\xlat\descript.ion
- C:\far2\addons\shell\farhere.inf
- C:\far2\addons\readme.txt
- C:\far2\addons\shell\descript.ion
- C:\far2\addons\setup\descript.ion
- C:\far2\addons\colors\import_colors.bat
- C:\far2\addons\colors\export_colors.bat
- C:\far2\addons\colors\descript.ion
- C:\far2\addons\colors\default_highlighting\import_colors.bat
- C:\far2\addons\descript.ion
- C:\far2\addons\colors\default_highlighting\descript.ion
- C:\far2\addons\colors\custom_highlighting\descript.ion
- C:\far2\addons\colors\custom_highlighting\import_colors.bat
- <Drive name for removable media>:\alert.html
- <Drive name for removable media>:\ituneshelpunavailable.htm
- <Drive name for removable media>:\tree_view.htm
- <Drive name for removable media>:\alert.htm
- <Drive name for removable media>:\sdkfailsafeemulator.cer
- <Drive name for removable media>:\testcertificate.cer
- <Drive name for removable media>:\contosoroot.cer
- <Drive name for removable media>:\sdksampleprivdeveloper.cer
- <Drive name for removable media>:\pmd.cer
- <Drive name for removable media>:\contoso_1.cer
- <Drive name for removable media>:\toolbar.bmp
- C:\far2\clearpluginscache.cmd
- C:\far2\documentation\eng\arc_support.txt
Modifies multiple files.
Modifies user data files (Trojan.Encoder).