マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.DownLoader22.24547

Added to the Dr.Web virus database: 2016-08-22

Virus description added:

Technical Information

Malicious functions:
Executes the following:
  • '<SYSTEM32>\msiexec.exe' -Embedding A80E40275C18B352817D5177F3124D57 M Global\MSI0000
  • '%ProgramFiles%\Java\jre7\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%ProgramFiles%\Java\jre7\lib\rt.pack" "%ProgramFiles%\Java\jre7\lib\rt.jar"
  • '<SYSTEM32>\msiexec.exe' -Embedding F1AA1C42FC5FE1181B2465D059465E91
  • '<SYSTEM32>\msiexec.exe' /i "%TEMP%\Java\x86\Java_x86\jre1.7.0_01.msi" /qn ADDLOCAL=ALL IEXPLORER=1 MOZILLA=1 REBOOT=SUPPRESS AUTOUPDATECHECK=0 JAVAUPDATE=0 JU=0 SYSTRAY=0 JQS=0
  • '<SYSTEM32>\msiexec.exe' /V
Modifies file system:
Creates the following files:
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Krasnoyarsk
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Kolkata
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Kuching
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Kuala_Lumpur
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Kathmandu
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Kamchatka
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Kabul
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Kashgar
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Karachi
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Kuwait
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Novokuznetsk
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Nicosia
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Omsk
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Novosibirsk
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Muscat
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Magadan
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Macau
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Manila
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Makassar
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Jerusalem
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Damascus
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Colombo
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Dili
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Dhaka
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Chongqing
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Bishkek
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Beirut
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Choibalsan
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Brunei
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Dubai
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Irkutsk
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Ho_Chi_Minh
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Jayapura
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Jakarta
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Hovd
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Gaza
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Dushanbe
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Hong_Kong
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Harbin
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Oral
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Yekaterinburg
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Yakutsk
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\Azores
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Yerevan
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Vladivostok
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Ulaanbaatar
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Tokyo
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Vientiane
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Urumqi
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\Bermuda
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\Stanley
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\South_Georgia
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Adelaide
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\St_Helena
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\Reykjavik
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\Cape_Verde
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\Canary
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\Madeira
  • %ProgramFiles%\Java\jre7\lib\zi\Atlantic\Faroe
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Thimphu
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Riyadh
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Rangoon
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Riyadh88
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Riyadh87
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Qyzylorda
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Pontianak
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Phnom_Penh
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Qatar
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Pyongyang
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Riyadh89
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Tashkent
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Taipei
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Tehran
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Tbilisi
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Singapore
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Samarkand
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Sakhalin
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Shanghai
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Seoul
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Bangkok
  • %ProgramFiles%\Java\jre7\lib\zi\America\Porto_Velho
  • %ProgramFiles%\Java\jre7\lib\zi\America\Port-au-Prince
  • %ProgramFiles%\Java\jre7\lib\zi\America\Puerto_Rico
  • %ProgramFiles%\Java\jre7\lib\zi\America\Port_of_Spain
  • %ProgramFiles%\Java\jre7\lib\zi\America\Phoenix
  • %ProgramFiles%\Java\jre7\lib\zi\America\Panama
  • %ProgramFiles%\Java\jre7\lib\zi\America\Ojinaga
  • %ProgramFiles%\Java\jre7\lib\zi\America\Paramaribo
  • %ProgramFiles%\Java\jre7\lib\zi\America\Pangnirtung
  • %ProgramFiles%\Java\jre7\lib\zi\America\Rainy_River
  • %ProgramFiles%\Java\jre7\lib\zi\America\Santa_Isabel
  • %ProgramFiles%\Java\jre7\lib\zi\America\Santarem
  • %ProgramFiles%\Java\jre7\lib\zi\America\Santo_Domingo
  • %ProgramFiles%\Java\jre7\lib\zi\America\Santiago
  • %ProgramFiles%\Java\jre7\lib\zi\America\Rio_Branco
  • %ProgramFiles%\Java\jre7\lib\zi\America\Recife
  • %ProgramFiles%\Java\jre7\lib\zi\America\Rankin_Inlet
  • %ProgramFiles%\Java\jre7\lib\zi\America\Resolute
  • %ProgramFiles%\Java\jre7\lib\zi\America\Regina
  • %ProgramFiles%\Java\jre7\lib\zi\America\North_Dakota\New_Salem
  • %ProgramFiles%\Java\jre7\lib\zi\America\Miquelon
  • %ProgramFiles%\Java\jre7\lib\zi\America\Mexico_City
  • %ProgramFiles%\Java\jre7\lib\zi\America\Monterrey
  • %ProgramFiles%\Java\jre7\lib\zi\America\Moncton
  • %ProgramFiles%\Java\jre7\lib\zi\America\Metlakatla
  • %ProgramFiles%\Java\jre7\lib\zi\America\Mazatlan
  • %ProgramFiles%\Java\jre7\lib\zi\America\Matamoros
  • %ProgramFiles%\Java\jre7\lib\zi\America\Merida
  • %ProgramFiles%\Java\jre7\lib\zi\America\Menominee
  • %ProgramFiles%\Java\jre7\lib\zi\America\Montevideo
  • %ProgramFiles%\Java\jre7\lib\zi\America\Noronha
  • %ProgramFiles%\Java\jre7\lib\zi\America\Nome
  • %ProgramFiles%\Java\jre7\lib\zi\America\North_Dakota\Center
  • %ProgramFiles%\Java\jre7\lib\zi\America\North_Dakota\Beulah
  • %ProgramFiles%\Java\jre7\lib\zi\America\Nipigon
  • %ProgramFiles%\Java\jre7\lib\zi\America\Montserrat
  • %ProgramFiles%\Java\jre7\lib\zi\America\Montreal
  • %ProgramFiles%\Java\jre7\lib\zi\America\New_York
  • %ProgramFiles%\Java\jre7\lib\zi\America\Nassau
  • %ProgramFiles%\Java\jre7\lib\zi\America\Sao_Paulo
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\Rothera
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\Palmer
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\Vostok
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\Syowa
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\McMurdo
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\DumontDUrville
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\Davis
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\Mawson
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\Macquarie
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Aden
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Baghdad
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Ashgabat
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Baku
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Bahrain
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Aqtobe
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Amman
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Almaty
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Aqtau
  • %ProgramFiles%\Java\jre7\lib\zi\Asia\Anadyr
  • %ProgramFiles%\Java\jre7\lib\zi\Antarctica\Casey
  • %ProgramFiles%\Java\jre7\lib\zi\America\St_Vincent
  • %ProgramFiles%\Java\jre7\lib\zi\America\St_Thomas
  • %ProgramFiles%\Java\jre7\lib\zi\America\Tegucigalpa
  • %ProgramFiles%\Java\jre7\lib\zi\America\Swift_Current
  • %ProgramFiles%\Java\jre7\lib\zi\America\St_Lucia
  • %ProgramFiles%\Java\jre7\lib\zi\America\Sitka
  • %ProgramFiles%\Java\jre7\lib\zi\America\Scoresbysund
  • %ProgramFiles%\Java\jre7\lib\zi\America\St_Kitts
  • %ProgramFiles%\Java\jre7\lib\zi\America\St_Johns
  • %ProgramFiles%\Java\jre7\lib\zi\America\Thule
  • %ProgramFiles%\Java\jre7\lib\zi\America\Winnipeg
  • %ProgramFiles%\Java\jre7\lib\zi\America\Whitehorse
  • %ProgramFiles%\Java\jre7\lib\zi\America\Yellowknife
  • %ProgramFiles%\Java\jre7\lib\zi\America\Yakutat
  • %ProgramFiles%\Java\jre7\lib\zi\America\Vancouver
  • %ProgramFiles%\Java\jre7\lib\zi\America\Tijuana
  • %ProgramFiles%\Java\jre7\lib\zi\America\Thunder_Bay
  • %ProgramFiles%\Java\jre7\lib\zi\America\Tortola
  • %ProgramFiles%\Java\jre7\lib\zi\America\Toronto
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Brisbane
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Chuuk
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Chatham
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Efate
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Easter
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Auckland
  • %ProgramFiles%\Java\jre7\lib\zi\MST
  • %ProgramFiles%\Java\jre7\lib\zi\MET
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Apia
  • %ProgramFiles%\Java\jre7\lib\zi\MST7MDT
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Enderbury
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Guam
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Guadalcanal
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Johnston
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Honolulu
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Gambier
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Fiji
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Fakaofo
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Galapagos
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Funafuti
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Reunion
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Zurich
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Zaporozhye
  • %ProgramFiles%\Java\jre7\lib\zi\HST
  • %ProgramFiles%\Java\jre7\lib\zi\GMT
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Warsaw
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Vienna
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Vaduz
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Volgograd
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Vilnius
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Antananarivo
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Maldives
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Mahe
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Mayotte
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Mauritius
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Kerguelen
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Christmas
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Chagos
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Comoro
  • %ProgramFiles%\Java\jre7\lib\zi\Indian\Cocos
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Kiritimati
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\EST5
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\CST6CDT
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\HST10
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\EST5EDT
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\CST6
  • %ProgramFiles%\Java\jre7\lib\zi\PST8PDT
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Wallis
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\AST4ADT
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\AST4
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\MST7
  • %ProgramFiles%\Java\jre7\lib\zi\ZoneInfoMappings
  • %ProgramFiles%\Java\jre7\lib\zi\WET
  • %ProgramFiles%\Java\jre7\lib\rt.jar
  • %ProgramFiles%\Java\jre7\release
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\YST9YDT
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\PST8
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\MST7MDT
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\YST9
  • %ProgramFiles%\Java\jre7\lib\zi\SystemV\PST8PDT
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Wake
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Niue
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Nauru
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Noumea
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Norfolk
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Midway
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Kwajalein
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Kosrae
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Marquesas
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Majuro
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Pago_Pago
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Tahiti
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Saipan
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Tongatapu
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Tarawa
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Rarotonga
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Pitcairn
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Palau
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Port_Moresby
  • %ProgramFiles%\Java\jre7\lib\zi\Pacific\Pohnpei
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Uzhgorod
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+8
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+7
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-1
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+9
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+6
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+3
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+2
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+5
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+4
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-10
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-4
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-3
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-6
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-5
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-2
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-12
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-11
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-14
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-13
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+12
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Lord_Howe
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Lindeman
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Perth
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Melbourne
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Hobart
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Currie
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Broken_Hill
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Eucla
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Darwin
  • %ProgramFiles%\Java\jre7\lib\zi\Australia\Sydney
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+1
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+11
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT+10
  • %ProgramFiles%\Java\jre7\lib\zi\EST5EDT
  • %ProgramFiles%\Java\jre7\lib\zi\CST6CDT
  • %ProgramFiles%\Java\jre7\lib\zi\CET
  • %ProgramFiles%\Java\jre7\lib\zi\EST
  • %ProgramFiles%\Java\jre7\lib\zi\EET
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-7
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Monaco
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Minsk
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Oslo
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Moscow
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Malta
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\London
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Lisbon
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Madrid
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Luxembourg
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Paris
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Stockholm
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Sofia
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Tirane
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Tallinn
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Simferopol
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Riga
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Prague
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Samara
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Rome
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Kiev
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Athens
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Andorra
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Berlin
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Belgrade
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Amsterdam
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-9
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\GMT-8
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\UTC
  • %ProgramFiles%\Java\jre7\lib\zi\Etc\UCT
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Brussels
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Helsinki
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Gibraltar
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Kaliningrad
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Istanbul
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Dublin
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Budapest
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Bucharest
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Copenhagen
  • %ProgramFiles%\Java\jre7\lib\zi\Europe\Chisinau
  • %ProgramFiles%\Java\jre7\lib\zi\America\Martinique
  • %ProgramFiles%\Java\jre7\lib\cmm\CIEXYZ.pf
  • %ProgramFiles%\Java\jre7\lib\classlist
  • %ProgramFiles%\Java\jre7\lib\cmm\LINEAR_RGB.pf
  • %ProgramFiles%\Java\jre7\lib\cmm\GRAY.pf
  • %ProgramFiles%\Java\jre7\lib\charsets.pack
  • %ProgramFiles%\Java\jre7\bin\zip.dll
  • %ProgramFiles%\Java\jre7\bin\wsdetect.dll
  • %ProgramFiles%\Java\jre7\lib\calendars.properties
  • %ProgramFiles%\Java\jre7\lib\alt-rt.jar
  • %ProgramFiles%\Java\jre7\lib\cmm\PYCC.pf
  • %ProgramFiles%\Java\jre7\lib\deploy\messages.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\jqs\jqsmessages.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_es.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_de.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\jqs\jqs.conf
  • %ProgramFiles%\Java\jre7\lib\content-types.properties
  • %ProgramFiles%\Java\jre7\lib\cmm\sRGB.pf
  • %ProgramFiles%\Java\jre7\lib\deploy\ffjcext.zip
  • %ProgramFiles%\Java\jre7\lib\currency.data
  • %ProgramFiles%\Java\jre7\bin\w2k_lsa_auth.dll
  • %ProgramFiles%\Java\jre7\bin\rmid.exe
  • %ProgramFiles%\Java\jre7\bin\rmi.dll
  • %ProgramFiles%\Java\jre7\bin\servertool.exe
  • %ProgramFiles%\Java\jre7\bin\rmiregistry.exe
  • %ProgramFiles%\Java\jre7\bin\policytool.exe
  • %ProgramFiles%\Java\jre7\bin\npt.dll
  • %ProgramFiles%\Java\jre7\bin\npoji610.dll
  • %ProgramFiles%\Java\jre7\bin\pack200.exe
  • %ProgramFiles%\Java\jre7\bin\orbd.exe
  • %ProgramFiles%\Java\jre7\bin\splashscreen.dll
  • %ProgramFiles%\Java\jre7\bin\unpack.dll
  • %ProgramFiles%\Java\jre7\bin\tnameserv.exe
  • %ProgramFiles%\Java\jre7\bin\verify.dll
  • %ProgramFiles%\Java\jre7\bin\unpack200.exe
  • %ProgramFiles%\Java\jre7\bin\t2k.dll
  • %ProgramFiles%\Java\jre7\bin\ssvagent.exe
  • %ProgramFiles%\Java\jre7\bin\ssv.dll
  • %ProgramFiles%\Java\jre7\bin\sunmscapi.dll
  • %ProgramFiles%\Java\jre7\bin\sunec.dll
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_fr.properties
  • %ProgramFiles%\Java\jre7\lib\fonts\LucidaSansRegular.ttf
  • %ProgramFiles%\Java\jre7\lib\fonts\LucidaSansDemiBold.ttf
  • %ProgramFiles%\Java\jre7\lib\fonts\LucidaTypewriterRegular.ttf
  • %ProgramFiles%\Java\jre7\lib\fonts\LucidaTypewriterBold.ttf
  • %ProgramFiles%\Java\jre7\lib\fonts\LucidaBrightRegular.ttf
  • %ProgramFiles%\Java\jre7\lib\fonts\LucidaBrightDemiBold.ttf
  • %ProgramFiles%\Java\jre7\lib\fontconfig.properties.src
  • %ProgramFiles%\Java\jre7\lib\fonts\LucidaBrightItalic.ttf
  • %ProgramFiles%\Java\jre7\lib\fonts\LucidaBrightDemiItalic.ttf
  • %ProgramFiles%\Java\jre7\lib\i386\jvm.cfg
  • %ProgramFiles%\Java\jre7\lib\images\cursors\win32_MoveDrop32x32.gif
  • %ProgramFiles%\Java\jre7\lib\images\cursors\win32_LinkNoDrop32x32.gif
  • %ProgramFiles%\Java\jre7\lib\javaws.pack
  • %ProgramFiles%\Java\jre7\lib\images\cursors\win32_MoveNoDrop32x32.gif
  • %ProgramFiles%\Java\jre7\lib\images\cursors\win32_LinkDrop32x32.gif
  • %ProgramFiles%\Java\jre7\lib\images\cursors\invalid32x32.gif
  • %ProgramFiles%\Java\jre7\lib\images\cursors\cursors.properties
  • %ProgramFiles%\Java\jre7\lib\images\cursors\win32_CopyNoDrop32x32.gif
  • %ProgramFiles%\Java\jre7\lib\images\cursors\win32_CopyDrop32x32.gif
  • %ProgramFiles%\Java\jre7\lib\fontconfig.bfc
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_zh_HK.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_zh_CN.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\splash.gif
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_zh_TW.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_sv.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_ja.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_it.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_pt_BR.properties
  • %ProgramFiles%\Java\jre7\lib\deploy\messages_ko.properties
  • %ProgramFiles%\Java\jre7\lib\deploy.pack
  • %ProgramFiles%\Java\jre7\lib\ext\sunpkcs11.jar
  • %ProgramFiles%\Java\jre7\lib\ext\sunmscapi.jar
  • %ProgramFiles%\Java\jre7\lib\flavormap.properties
  • %ProgramFiles%\Java\jre7\lib\ext\zipfs.jar
  • %ProgramFiles%\Java\jre7\lib\ext\sunjce_provider.jar
  • %ProgramFiles%\Java\jre7\lib\ext\localedata.pack
  • %ProgramFiles%\Java\jre7\lib\ext\dnsns.jar
  • %ProgramFiles%\Java\jre7\lib\ext\sunec.jar
  • %ProgramFiles%\Java\jre7\lib\ext\meta-index
  • %ProgramFiles%\Java\jre7\bin\npjpi170_01.dll
  • %ProgramFiles%\Java\jre7\bin\client\jvm.dll
  • %ProgramFiles%\Java\jre7\bin\axbridge.dll
  • %ProgramFiles%\Java\jre7\bin\dcpr.dll
  • %ProgramFiles%\Java\jre7\bin\client\Xusage.txt
  • %ProgramFiles%\Java\jre7\bin\awt.dll
  • %ProgramFiles%\Java\jre7\README.txt
  • %ProgramFiles%\Java\jre7\LICENSE
  • %ProgramFiles%\Java\jre7\Welcome.html
  • %ProgramFiles%\Java\jre7\THIRDPARTYLICENSEREADME.txt
  • %ProgramFiles%\Java\jre7\bin\deploy.dll
  • %ProgramFiles%\Java\jre7\bin\instrument.dll
  • %ProgramFiles%\Java\jre7\bin\hprof.dll
  • %ProgramFiles%\Java\jre7\bin\j2pkcs11.dll
  • %ProgramFiles%\Java\jre7\bin\j2pcsc.dll
  • %ProgramFiles%\Java\jre7\bin\fontmanager.dll
  • %ProgramFiles%\Java\jre7\bin\dt_shmem.dll
  • %ProgramFiles%\Java\jre7\bin\deployJava1.dll
  • %ProgramFiles%\Java\jre7\bin\eula.dll
  • %ProgramFiles%\Java\jre7\bin\dt_socket.dll
  • %ProgramFiles%\Java\jre7\COPYRIGHT
  • %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\0797C381B2F87EB5A1D5573BD15BA4F4
  • %APPDATA%\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
  • %WINDIR%\Installer\MSI4.tmp
  • %APPDATA%\Microsoft\CryptnetUrlCache\Content\0797C381B2F87EB5A1D5573BD15BA4F4
  • %APPDATA%\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
  • %TEMP%\nsa3.tmp\modern-header.bmp
  • %TEMP%\nsk2.tmp
  • %WINDIR%\Installer\29bd8.msi
  • %TEMP%\Java\x86\Java_x86\jre1.7.0_01.msi
  • %TEMP%\jusched.log
  • %WINDIR%\Installer\MSI7.tmp
  • %WINDIR%\Installer\29bdc.msi
  • %TEMP%\java_install.log
  • %TEMP%\java_install_reg.log
  • %ProgramFiles%\Java\jre7\core.zip
  • %TEMP%\~DF8E41.tmp
  • %WINDIR%\Installer\29bda.ipi
  • C:\Config.Msi\29bdb.rbs
  • %WINDIR%\Installer\MSI5.tmp
  • %ProgramFiles%\Java\jre7\bin\jaas_nt.dll
  • %ProgramFiles%\Java\jre7\bin\jsoundds.dll
  • %ProgramFiles%\Java\jre7\bin\jsound.dll
  • %ProgramFiles%\Java\jre7\bin\keytool.exe
  • %ProgramFiles%\Java\jre7\bin\kcms.dll
  • %ProgramFiles%\Java\jre7\bin\jsdt.dll
  • %ProgramFiles%\Java\jre7\bin\jpioji.dll
  • %ProgramFiles%\Java\jre7\bin\jpinscp.dll
  • %ProgramFiles%\Java\jre7\bin\jqs.exe
  • %ProgramFiles%\Java\jre7\bin\jpishare.dll
  • %ProgramFiles%\Java\jre7\bin\kinit.exe
  • %ProgramFiles%\Java\jre7\bin\new_plugin\npjp2.dll
  • %ProgramFiles%\Java\jre7\bin\net.dll
  • %ProgramFiles%\Java\jre7\bin\npdeployJava1.dll
  • %ProgramFiles%\Java\jre7\bin\nio.dll
  • %ProgramFiles%\Java\jre7\bin\msvcr100.dll
  • %ProgramFiles%\Java\jre7\bin\ktab.exe
  • %ProgramFiles%\Java\jre7\bin\klist.exe
  • %ProgramFiles%\Java\jre7\bin\mlib_image.dll
  • %ProgramFiles%\Java\jre7\bin\management.dll
  • %ProgramFiles%\Java\jre7\bin\jpiexp.dll
  • %ProgramFiles%\Java\jre7\bin\javaws.exe
  • %ProgramFiles%\Java\jre7\bin\javaw.exe
  • %ProgramFiles%\Java\jre7\bin\jawt.dll
  • %ProgramFiles%\Java\jre7\bin\java_crw_demo.dll
  • %ProgramFiles%\Java\jre7\bin\javacpl.exe
  • %ProgramFiles%\Java\jre7\bin\java.dll
  • %ProgramFiles%\Java\jre7\bin\java-rmi.exe
  • %ProgramFiles%\Java\jre7\bin\javacpl.cpl
  • %ProgramFiles%\Java\jre7\bin\java.exe
  • %ProgramFiles%\Java\jre7\bin\jbroker.exe
  • %ProgramFiles%\Java\jre7\bin\jp2ssv.dll
  • %ProgramFiles%\Java\jre7\bin\jp2native.dll
  • %ProgramFiles%\Java\jre7\bin\jpicom.dll
  • %ProgramFiles%\Java\jre7\bin\jpeg.dll
  • %ProgramFiles%\Java\jre7\bin\jp2launcher.exe
  • %ProgramFiles%\Java\jre7\bin\jdwp.dll
  • %ProgramFiles%\Java\jre7\bin\JdbcOdbc.dll
  • %ProgramFiles%\Java\jre7\bin\jp2iexp.dll
  • %ProgramFiles%\Java\jre7\bin\jli.dll
  • %ProgramFiles%\Java\jre7\lib\jce.jar
  • %ProgramFiles%\Java\jre7\lib\zi\America\Cambridge_Bay
  • %ProgramFiles%\Java\jre7\lib\zi\America\Boise
  • %ProgramFiles%\Java\jre7\lib\zi\America\Cancun
  • %ProgramFiles%\Java\jre7\lib\zi\America\Campo_Grande
  • %ProgramFiles%\Java\jre7\lib\zi\America\Bogota
  • %ProgramFiles%\Java\jre7\lib\zi\America\Belize
  • %ProgramFiles%\Java\jre7\lib\zi\America\Belem
  • %ProgramFiles%\Java\jre7\lib\zi\America\Boa_Vista
  • %ProgramFiles%\Java\jre7\lib\zi\America\Blanc-Sablon
  • %ProgramFiles%\Java\jre7\lib\zi\America\Caracas
  • %ProgramFiles%\Java\jre7\lib\zi\America\Curacao
  • %ProgramFiles%\Java\jre7\lib\zi\America\Cuiaba
  • %ProgramFiles%\Java\jre7\lib\zi\America\Dawson
  • %ProgramFiles%\Java\jre7\lib\zi\America\Danmarkshavn
  • %ProgramFiles%\Java\jre7\lib\zi\America\Costa_Rica
  • %ProgramFiles%\Java\jre7\lib\zi\America\Cayman
  • %ProgramFiles%\Java\jre7\lib\zi\America\Cayenne
  • %ProgramFiles%\Java\jre7\lib\zi\America\Chihuahua
  • %ProgramFiles%\Java\jre7\lib\zi\America\Chicago
  • %ProgramFiles%\Java\jre7\lib\zi\America\Barbados
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\La_Rioja
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Jujuy
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Rio_Gallegos
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Mendoza
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Cordoba
  • %ProgramFiles%\Java\jre7\lib\zi\America\Araguaina
  • %ProgramFiles%\Java\jre7\lib\zi\America\Antigua
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Catamarca
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Buenos_Aires
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Salta
  • %ProgramFiles%\Java\jre7\lib\zi\America\Atikokan
  • %ProgramFiles%\Java\jre7\lib\zi\America\Asuncion
  • %ProgramFiles%\Java\jre7\lib\zi\America\Bahia_Banderas
  • %ProgramFiles%\Java\jre7\lib\zi\America\Bahia
  • %ProgramFiles%\Java\jre7\lib\zi\America\Aruba
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\San_Luis
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\San_Juan
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Ushuaia
  • %ProgramFiles%\Java\jre7\lib\zi\America\Argentina\Tucuman
  • %ProgramFiles%\Java\jre7\lib\zi\America\Dawson_Creek
  • %ProgramFiles%\Java\jre7\lib\zi\America\Indiana\Winamac
  • %ProgramFiles%\Java\jre7\lib\zi\America\Indiana\Vincennes
  • %ProgramFiles%\Java\jre7\lib\zi\America\Iqaluit
  • %ProgramFiles%\Java\jre7\lib\zi\America\Inuvik
  • %ProgramFiles%\Java\jre7\lib\zi\America\Indiana\Vevay
  • %ProgramFiles%\Java\jre7\lib\zi\America\Indiana\Marengo
  • %ProgramFiles%\Java\jre7\lib\zi\America\Indiana\Knox
  • %ProgramFiles%\Java\jre7\lib\zi\America\Indiana\Tell_City
  • %ProgramFiles%\Java\jre7\lib\zi\America\Indiana\Petersburg
  • %ProgramFiles%\Java\jre7\lib\zi\America\Jamaica
  • %ProgramFiles%\Java\jre7\lib\zi\America\Maceio
  • %ProgramFiles%\Java\jre7\lib\zi\America\Los_Angeles
  • %ProgramFiles%\Java\jre7\lib\zi\America\Manaus
  • %ProgramFiles%\Java\jre7\lib\zi\America\Managua
  • %ProgramFiles%\Java\jre7\lib\zi\America\Lima
  • %ProgramFiles%\Java\jre7\lib\zi\America\Kentucky\Louisville
  • %ProgramFiles%\Java\jre7\lib\zi\America\Juneau
  • %ProgramFiles%\Java\jre7\lib\zi\America\La_Paz
  • %ProgramFiles%\Java\jre7\lib\zi\America\Kentucky\Monticello
  • %ProgramFiles%\Java\jre7\lib\zi\America\Indiana\Indianapolis
  • %ProgramFiles%\Java\jre7\lib\zi\America\Fortaleza
  • %ProgramFiles%\Java\jre7\lib\zi\America\El_Salvador
  • %ProgramFiles%\Java\jre7\lib\zi\America\Godthab
  • %ProgramFiles%\Java\jre7\lib\zi\America\Glace_Bay
  • %ProgramFiles%\Java\jre7\lib\zi\America\Eirunepe
  • %ProgramFiles%\Java\jre7\lib\zi\America\Detroit
  • %ProgramFiles%\Java\jre7\lib\zi\America\Denver
  • %ProgramFiles%\Java\jre7\lib\zi\America\Edmonton
  • %ProgramFiles%\Java\jre7\lib\zi\America\Dominica
  • %ProgramFiles%\Java\jre7\lib\zi\America\Goose_Bay
  • %ProgramFiles%\Java\jre7\lib\zi\America\Halifax
  • %ProgramFiles%\Java\jre7\lib\zi\America\Guyana
  • %ProgramFiles%\Java\jre7\lib\zi\America\Hermosillo
  • %ProgramFiles%\Java\jre7\lib\zi\America\Havana
  • %ProgramFiles%\Java\jre7\lib\zi\America\Guayaquil
  • %ProgramFiles%\Java\jre7\lib\zi\America\Grenada
  • %ProgramFiles%\Java\jre7\lib\zi\America\Grand_Turk
  • %ProgramFiles%\Java\jre7\lib\zi\America\Guatemala
  • %ProgramFiles%\Java\jre7\lib\zi\America\Guadeloupe
  • %ProgramFiles%\Java\jre7\lib\zi\America\Anguilla
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Abidjan
  • %ProgramFiles%\Java\jre7\lib\tzmappings
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Addis_Ababa
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Accra
  • %ProgramFiles%\Java\jre7\lib\sound.properties
  • %ProgramFiles%\Java\jre7\lib\security\trusted.libraries
  • %ProgramFiles%\Java\jre7\lib\security\local_policy.jar
  • %ProgramFiles%\Java\jre7\lib\servicetag\jdk_header.png
  • %ProgramFiles%\Java\jre7\lib\security\US_export_policy.jar
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Algiers
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Brazzaville
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Blantyre
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Cairo
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Bujumbura
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Bissau
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Bamako
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Asmara
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Banjul
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Bangui
  • %ProgramFiles%\Java\jre7\lib\security\javaws.policy
  • %ProgramFiles%\Java\jre7\lib\management\snmp.acl.template
  • %ProgramFiles%\Java\jre7\lib\management\management.properties
  • %ProgramFiles%\Java\jre7\lib\meta-index
  • %ProgramFiles%\Java\jre7\lib\management-agent.jar
  • %ProgramFiles%\Java\jre7\lib\management\jmxremote.password.template
  • %ProgramFiles%\Java\jre7\lib\jvm.hprof.txt
  • %ProgramFiles%\Java\jre7\lib\jsse.pack
  • %ProgramFiles%\Java\jre7\lib\management\jmxremote.access
  • %ProgramFiles%\Java\jre7\lib\logging.properties
  • %ProgramFiles%\Java\jre7\lib\net.properties
  • %ProgramFiles%\Java\jre7\lib\security\cacerts
  • %ProgramFiles%\Java\jre7\lib\security\blacklist
  • %ProgramFiles%\Java\jre7\lib\security\java.security
  • %ProgramFiles%\Java\jre7\lib\security\java.policy
  • %ProgramFiles%\Java\jre7\lib\rt.pack
  • %ProgramFiles%\Java\jre7\lib\psfont.properties.ja
  • %ProgramFiles%\Java\jre7\lib\plugin.pack
  • %ProgramFiles%\Java\jre7\lib\resources.jar
  • %ProgramFiles%\Java\jre7\lib\psfontj2d.properties
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Casablanca
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Monrovia
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Mogadishu
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Ndjamena
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Nairobi
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Mbabane
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Malabo
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Lusaka
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Maseru
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Maputo
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Niamey
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Windhoek
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Tunis
  • %ProgramFiles%\Java\jre7\lib\zi\America\Anchorage
  • %ProgramFiles%\Java\jre7\lib\zi\America\Adak
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Tripoli
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Ouagadougou
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Nouakchott
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Sao_Tome
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Porto-Novo
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Lubumbashi
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\El_Aaiun
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Douala
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Gaborone
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Freetown
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Djibouti
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Conakry
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Ceuta
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Dar_es_Salaam
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Dakar
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Harare
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Libreville
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Lagos
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Luanda
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Lome
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Kinshasa
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Kampala
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Johannesburg
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Kigali
  • %ProgramFiles%\Java\jre7\lib\zi\Africa\Khartoum
Deletes the following files:
  • %WINDIR%\Installer\MSI4.tmp
Network activity:
Connects to:
  • 'cs#######-2-crl.verisign.com':80
  • 'crl.verisign.com':80
  • 'wp#d':80
TCP:
HTTP GET requests:
  • http://cs#######-2-crl.verisign.com/CSC3-2009-2.crl
  • http://crl.verisign.com/pca3.crl
  • http://11#.#11.111.1/wpad.dat via wp#d
UDP:
  • DNS ASK cs#######-2-crl.verisign.com
  • DNS ASK crl.verisign.com
  • DNS ASK wp#d
Miscellaneous:
Searches for the following windows:
  • ClassName: 'Shell_TrayWnd' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android