Trojan.Encoder.41225

Technical Information

To ensure autorun and distribution

Creates the following files on removable media

<Drive name for removable media>:\#howtorecover.txt

Modifies file system

Creates the following files

C:\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\vsto\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\vba\vba7\1033\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\translat\fren\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\translat\frar\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\translat\esen\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\translat\enfr\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\translat\enes\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\translat\arfr\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\translat\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\watermar\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\water\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\sumipntg\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\studio\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\strtedge\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\vsto\10.0\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\spring\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\slate\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\sky\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\satin\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\rmnsque\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\ripple\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\ricepapr\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\refined\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\radial\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\quad\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\profile\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\pixel\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\papyrus\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\network\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\level\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\sonora\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\#howtorecover.txt
%CommonProgramFiles%\services\#howtorecover.txt
%CommonProgramFiles%\speechengines\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\push\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\specialoccasion\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\sports\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\travel\#howtorecover.txt
%ProgramFiles%\java\jre1.8.0_45\bin\server\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\videowall\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\vignette\#howtorecover.txt
%ProgramFiles%\internet explorer\#howtorecover.txt
%ProgramFiles%\internet explorer\signup\#howtorecover.txt
%ProgramFiles%\java\jre1.8.0_45\#howtorecover.txt
%ProgramFiles%\java\jre1.8.0_45\bin\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\full\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\#howtorecover.txt
%ProgramFiles%\dvd maker\#howtorecover.txt
%CommonProgramFiles%\system\ole db\en-us\#howtorecover.txt
%CommonProgramFiles%\system\ole db\#howtorecover.txt
%CommonProgramFiles%\system\msadc\#howtorecover.txt
%CommonProgramFiles%\system\ado\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\layers\#howtorecover.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\stacking\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\journal\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\concrete\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\cultures\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\1033\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\grphflt\#howtorecover.txt
D:\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\equation\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\boldstri\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\breeze\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\canyon\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\capsules\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\cascade\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\compass\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\deepblue\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\indust\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\echo\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\eclipse\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\edge\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\evrgreen\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\expeditn\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\ice\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\blueprnt\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\bluecalm\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\blends\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\axis\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\arctic\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\aftrnoon\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\textconv\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\stationery\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\smart tag\lists\1033\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\smart tag\lists\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\smart tag\1033\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\smart tag\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\proof\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\#howtorecover.txt
%CommonProgramFiles%\microsoft shared\themes14\iris\#howtorecover.txt
%ProgramFiles%\java\jre1.8.0_45\lib\#howtorecover.txt

Moves the following files

from %ProgramFiles%\internet explorer\signup\install.ins to %ProgramFiles%\internet explorer\signup\install.ins.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.policy.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts to %ProgramFiles%\java\jre1.8.0_45\lib\security\cacerts.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklisted.certs.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist to %ProgramFiles%\java\jre1.8.0_45\lib\security\blacklist.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\snmp.acl.template.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties to %ProgramFiles%\java\jre1.8.0_45\lib\management\management.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.password.template.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access to %ProgramFiles%\java\jre1.8.0_45\lib\management\jmxremote.access.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc to %ProgramFiles%\java\jre1.8.0_45\lib\jfr\default.jfc.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movenodrop32x32.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_movedrop32x32.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linknodrop32x32.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_linkdrop32x32.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\nashorn.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copynodrop32x32.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\invalid32x32.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\cursors.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterregular.ttf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidatypewriterbold.ttf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansdemibold.ttf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightitalic.ttf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemiitalic.ttf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf to %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightdemibold.ttf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\zipfs.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunpkcs11.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunmscapi.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunjce_provider.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif to %ProgramFiles%\java\jre1.8.0_45\lib\images\cursors\win32_copydrop32x32.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\sunec.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security to %ProgramFiles%\java\jre1.8.0_45\lib\security\java.security.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00037_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00040_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00052_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00057_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00090_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00092_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00103_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00126_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\ciexyz.pf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00130_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00139_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00142_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00154_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\local_policy.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy to %ProgramFiles%\java\jre1.8.0_45\lib\security\javaws.policy.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00021_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00011_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00004_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll to %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msmdsrv.rll.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sybase.xsl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql90.xsl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql70.xsl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\sql2000.xsl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\msjet.xsl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\informix.xsl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as90.xsl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl to %ProgramFiles%\microsoft analysis services\as oledb\10\cartridges\as80.xsl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\security\us_export_policy.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00038_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\ext\meta-index.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jfxrt.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties to %ProgramFiles%\java\jre1.8.0_45\lib\logging.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt to %ProgramFiles%\java\jre1.8.0_45\lib\jvm.hprof.txt.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jsse.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfxswt.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jfr.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar to %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar to %ProgramFiles%\java\jre1.8.0_45\lib\javaws.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties to %ProgramFiles%\java\jre1.8.0_45\lib\javafx.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties to %ProgramFiles%\java\jre1.8.0_45\lib\hijrah-config-umalqura.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.properties.src.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc to %ProgramFiles%\java\jre1.8.0_45\lib\fontconfig.bfc.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties to %ProgramFiles%\java\jre1.8.0_45\lib\flavormap.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar to %ProgramFiles%\java\jre1.8.0_45\lib\deploy.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\meta-index to %ProgramFiles%\java\jre1.8.0_45\lib\meta-index.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\currency.data to %ProgramFiles%\java\jre1.8.0_45\lib\currency.data.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\classlist to %ProgramFiles%\java\jre1.8.0_45\lib\classlist.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar to %ProgramFiles%\java\jre1.8.0_45\lib\charsets.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties to %ProgramFiles%\java\jre1.8.0_45\lib\calendars.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties to %ProgramFiles%\java\jre1.8.0_45\lib\accessibility.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt to %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa to %ProgramFiles%\java\jre1.8.0_45\bin\server\classes.jsa.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl to %ProgramFiles%\java\jre1.8.0_45\bin\javacpl.cpl.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\welcome.html to %ProgramFiles%\java\jre1.8.0_45\welcome.html.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt to %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\release to %ProgramFiles%\java\jre1.8.0_45\release.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\readme.txt to %ProgramFiles%\java\jre1.8.0_45\readme.txt.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\license to %ProgramFiles%\java\jre1.8.0_45\license.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\copyright to %ProgramFiles%\java\jre1.8.0_45\copyright.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties to %ProgramFiles%\java\jre1.8.0_45\lib\content-types.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\net.properties to %ProgramFiles%\java\jre1.8.0_45\lib\net.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar to %ProgramFiles%\java\jre1.8.0_45\lib\management-agent.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar to %ProgramFiles%\java\jre1.8.0_45\lib\plugin.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\dnsns.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\cldrdata.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar to %ProgramFiles%\java\jre1.8.0_45\lib\ext\access-bridge-64.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash@2x.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\splash.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_tw.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_hk.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_zh_cn.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_sv.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_pt_br.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ko.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_ja.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_fr.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_de.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja to %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip to %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\srgb.pf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\pycc.pf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\linear_rgb.pf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf to %ProgramFiles%\java\jre1.8.0_45\lib\cmm\gray.pf.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00120_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg to %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings to %ProgramFiles%\java\jre1.8.0_45\lib\tzmappings.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat to %ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties to %ProgramFiles%\java\jre1.8.0_45\lib\sound.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar to %ProgramFiles%\java\jre1.8.0_45\lib\rt.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar to %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties to %ProgramFiles%\java\jre1.8.0_45\lib\psfontj2d.properties.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00157_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda
from %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif to %ProgramFiles%\microsoft office\clipart\pub60cor\ag00158_.gif.[id-e8330fe1-1337].[hedaransom@gmail.com].heda

Modifies the following files

%CommonProgramFiles%\microsoft shared\equation\eqnedt32.cnt
%CommonProgramFiles%\microsoft shared\smart tag\mstag.tlb
%CommonProgramFiles%\microsoft shared\smart tag\metconv.txt
%CommonProgramFiles%\microsoft shared\proof\mswds_fr.lex
%CommonProgramFiles%\microsoft shared\proof\mswds_es.lex
%CommonProgramFiles%\microsoft shared\proof\mswds_en.lex
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppwmi.mof
%CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\osppobjs-spp-plugin-manifest-signed.xrm-ms
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\setup.chm
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\pss10r.chm
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\pss10o.chm
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\psconfig.chm
%CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\oct.chm
%CommonProgramFiles%\microsoft shared\office14\office setup controller\pkeyconfig-office.xrm-ms
%CommonProgramFiles%\microsoft shared\office14\1033\readme.htm
%CommonProgramFiles%\microsoft shared\office14\1033\ado210.chm
%CommonProgramFiles%\microsoft shared\office14\muauth.cab
%CommonProgramFiles%\microsoft shared\grphflt\ms.wpg
%CommonProgramFiles%\microsoft shared\grphflt\ms.png
%CommonProgramFiles%\microsoft shared\grphflt\ms.jpg
%CommonProgramFiles%\microsoft shared\grphflt\ms.gif
%CommonProgramFiles%\microsoft shared\grphflt\ms.eps
%CommonProgramFiles%\microsoft shared\grphflt\ms.cgm
%CommonProgramFiles%\microsoft shared\grphflt\cgmimp32.fnt
%CommonProgramFiles%\microsoft shared\grphflt\cgmimp32.cfg
%CommonProgramFiles%\microsoft shared\equation\mtextra.ttf
%CommonProgramFiles%\microsoft shared\equation\eqnedt32.hlp
<Drive name for removable media>:\archer.avi
%CommonProgramFiles%\microsoft shared\smart tag\lists\basmla.xsl
%CommonProgramFiles%\microsoft shared\themes14\themes.inf

Modifies multiple files.

Modifies user data files (Trojan.Encoder).

Network activity

Connects to

'<LOCALNET>.77.0':445
'<LOCALNET>.77.161':445
'<LOCALNET>.77.162':445
'<LOCALNET>.77.163':445
'<LOCALNET>.77.164':445
'<LOCALNET>.77.165':445
'<LOCALNET>.77.166':445
'<LOCALNET>.77.167':445
'<LOCALNET>.77.168':445
'<LOCALNET>.77.169':445
'<LOCALNET>.77.170':445
'<LOCALNET>.77.171':445
'<LOCALNET>.77.172':445
'<LOCALNET>.77.173':445
'<LOCALNET>.77.175':445
'<LOCALNET>.77.189':445
'<LOCALNET>.77.176':445
'<LOCALNET>.77.177':445
'<LOCALNET>.77.178':445
'<LOCALNET>.77.179':445
'<LOCALNET>.77.180':445
'<LOCALNET>.77.181':445
'<LOCALNET>.77.182':445
'<LOCALNET>.77.183':445
'<LOCALNET>.77.184':445
'<LOCALNET>.77.185':445
'<LOCALNET>.77.186':445
'<LOCALNET>.77.187':445
'<LOCALNET>.77.188':445
'<LOCALNET>.77.160':445
'<LOCALNET>.77.174':445
'<LOCALNET>.77.159':445
'<LOCALNET>.77.142':445
'<LOCALNET>.77.129':445
'<LOCALNET>.77.130':445
'<LOCALNET>.77.131':445
'<LOCALNET>.77.132':445
'<LOCALNET>.77.133':445
'<LOCALNET>.77.134':445
'<LOCALNET>.77.135':445
'<LOCALNET>.77.136':445
'<LOCALNET>.77.137':445
'<LOCALNET>.77.138':445
'<LOCALNET>.77.139':445
'<LOCALNET>.77.140':445
'<LOCALNET>.77.141':445
'<LOCALNET>.77.143':445
'<LOCALNET>.77.157':445
'<LOCALNET>.77.144':445
'<LOCALNET>.77.145':445
'<LOCALNET>.77.146':445
'<LOCALNET>.77.147':445
'<LOCALNET>.77.148':445
'<LOCALNET>.77.149':445
'<LOCALNET>.77.150':445
'<LOCALNET>.77.151':445
'<LOCALNET>.77.152':445
'<LOCALNET>.77.153':445
'<LOCALNET>.77.154':445
'<LOCALNET>.77.155':445
'<LOCALNET>.77.156':445
'<LOCALNET>.77.158':445
'<LOCALNET>.77.207':445
'<LOCALNET>.77.253':445
'<LOCALNET>.77.192':445
'<LOCALNET>.77.225':445
'<LOCALNET>.77.226':445
'<LOCALNET>.77.227':445
'<LOCALNET>.77.228':445
'<LOCALNET>.77.229':445
'<LOCALNET>.77.230':445
'<LOCALNET>.77.231':445
'<LOCALNET>.77.232':445
'<LOCALNET>.77.233':445
'<LOCALNET>.77.234':445
'<LOCALNET>.77.235':445
'<LOCALNET>.77.236':445
'<LOCALNET>.77.237':445
'<LOCALNET>.77.239':445
'<LOCALNET>.77.191':445
'<LOCALNET>.77.240':445
'<LOCALNET>.77.241':445
'<LOCALNET>.77.242':445
'<LOCALNET>.77.243':445
'<LOCALNET>.77.244':445
'<LOCALNET>.77.245':445
'<LOCALNET>.77.246':445
'<LOCALNET>.77.247':445
'<LOCALNET>.77.248':445
'<LOCALNET>.77.249':445
'<LOCALNET>.77.250':445
'<LOCALNET>.77.251':445
'<LOCALNET>.77.252':445
'<LOCALNET>.77.224':445
'<LOCALNET>.77.128':445
'<LOCALNET>.77.223':445
'<LOCALNET>.77.206':445
'<LOCALNET>.77.193':445
'<LOCALNET>.77.194':445
'<LOCALNET>.77.195':445
'<LOCALNET>.77.196':445
'<LOCALNET>.77.197':445
'<LOCALNET>.77.198':445
'<LOCALNET>.77.199':445
'<LOCALNET>.77.200':445
'<LOCALNET>.77.201':445
'<LOCALNET>.77.202':445
'<LOCALNET>.77.203':445
'<LOCALNET>.77.204':445
'<LOCALNET>.77.205':445
'<LOCALNET>.77.190':445
'<LOCALNET>.77.221':445
'<LOCALNET>.77.208':445
'<LOCALNET>.77.209':445
'<LOCALNET>.77.210':445
'<LOCALNET>.77.211':445
'<LOCALNET>.77.212':445
'<LOCALNET>.77.213':445
'<LOCALNET>.77.214':445
'<LOCALNET>.77.215':445
'<LOCALNET>.77.216':445
'<LOCALNET>.77.217':445
'<LOCALNET>.77.218':445
'<LOCALNET>.77.219':445
'<LOCALNET>.77.220':445
'<LOCALNET>.77.222':445
'<LOCALNET>.77.238':445
'<LOCALNET>.77.127':445
'<LOCALNET>.77.110':445
'<LOCALNET>.77.33':445
'<LOCALNET>.77.34':445
'<LOCALNET>.77.35':445
'<LOCALNET>.77.36':445
'<LOCALNET>.77.37':445
'<LOCALNET>.77.38':445
'<LOCALNET>.77.39':445
'<LOCALNET>.77.40':445
'<LOCALNET>.77.41':445
'<LOCALNET>.77.42':445
'<LOCALNET>.77.43':445
'<LOCALNET>.77.44':445
'<LOCALNET>.77.45':445
'<LOCALNET>.77.47':445
'<LOCALNET>.77.61':445
'<LOCALNET>.77.48':445
'<LOCALNET>.77.49':445
'<LOCALNET>.77.50':445
'<LOCALNET>.77.51':445
'<LOCALNET>.77.52':445
'<LOCALNET>.77.53':445
'<LOCALNET>.77.54':445
'<LOCALNET>.77.55':445
'<LOCALNET>.77.56':445
'<LOCALNET>.77.57':445
'<LOCALNET>.77.58':445
'<LOCALNET>.77.59':445
'<LOCALNET>.77.60':445
'<LOCALNET>.77.32':445
'<LOCALNET>.77.46':445
'<LOCALNET>.77.31':445
'<LOCALNET>.77.14':445
'<LOCALNET>.77.1':445
'<LOCALNET>.77.2':445
'<LOCALNET>.77.3':445
'<LOCALNET>.77.4':445
'<LOCALNET>.77.5':445
'<LOCALNET>.77.6':445
'<LOCALNET>.77.7':445
'<LOCALNET>.77.8':445
'<LOCALNET>.77.9':445
'<LOCALNET>.77.10':445
'<LOCALNET>.77.11':445
'<LOCALNET>.77.12':445
'<LOCALNET>.77.13':445
'<LOCALNET>.77.15':445
'<LOCALNET>.77.29':445
'<LOCALNET>.77.16':445
'<LOCALNET>.77.17':445
'<LOCALNET>.77.18':445
'<LOCALNET>.77.19':445
'<LOCALNET>.77.20':445
'<LOCALNET>.77.21':445
'<LOCALNET>.77.22':445
'<LOCALNET>.77.23':445
'<LOCALNET>.77.24':445
'<LOCALNET>.77.25':445
'<LOCALNET>.77.26':445
'<LOCALNET>.77.27':445
'<LOCALNET>.77.28':445
'<LOCALNET>.77.30':445
'<LOCALNET>.77.79':445
'<LOCALNET>.77.125':445
'<LOCALNET>.77.64':445
'<LOCALNET>.77.97':445
'<LOCALNET>.77.98':445
'<LOCALNET>.77.99':445
'<LOCALNET>.77.100':445
'<LOCALNET>.77.101':445
'<LOCALNET>.77.102':445
'<LOCALNET>.77.103':445
'<LOCALNET>.77.104':445
'<LOCALNET>.77.105':445
'<LOCALNET>.77.106':445
'<LOCALNET>.77.107':445
'<LOCALNET>.77.108':445
'<LOCALNET>.77.109':445
'<LOCALNET>.77.111':445
'<LOCALNET>.77.63':445
'<LOCALNET>.77.112':445
'<LOCALNET>.77.113':445
'<LOCALNET>.77.114':445
'<LOCALNET>.77.115':445
'<LOCALNET>.77.116':445
'<LOCALNET>.77.117':445
'<LOCALNET>.77.118':445
'<LOCALNET>.77.119':445
'<LOCALNET>.77.120':445
'<LOCALNET>.77.121':445
'<LOCALNET>.77.122':445
'<LOCALNET>.77.123':445
'<LOCALNET>.77.124':445
'<LOCALNET>.77.96':445
'<LOCALNET>.77.126':445
'<LOCALNET>.77.95':445
'<LOCALNET>.77.78':445
'<LOCALNET>.77.65':445
'<LOCALNET>.77.66':445
'<LOCALNET>.77.67':445
'<LOCALNET>.77.68':445
'<LOCALNET>.77.69':445
'<LOCALNET>.77.70':445
'<LOCALNET>.77.71':445
'<LOCALNET>.77.72':445
'<LOCALNET>.77.73':445
'<LOCALNET>.77.74':445
'<LOCALNET>.77.75':445
'<LOCALNET>.77.76':445
'<LOCALNET>.77.77':445
'<LOCALNET>.77.62':445
'<LOCALNET>.77.93':445
'<LOCALNET>.77.80':445
'<LOCALNET>.77.81':445
'<LOCALNET>.77.82':445
'<LOCALNET>.77.83':445
'<LOCALNET>.77.84':445
'<LOCALNET>.77.85':445
'<LOCALNET>.77.86':445
'<LOCALNET>.77.87':445
'<LOCALNET>.77.88':445
'<LOCALNET>.77.89':445
'<LOCALNET>.77.90':445
'<LOCALNET>.77.91':445
'<LOCALNET>.77.92':445
'<LOCALNET>.77.94':445
'<LOCALNET>.77.254':445

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial