Техническая информация
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = '%ALLUSERSPROFILE%\Documents\sshbthid.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,%ALLUSERSPROFILE%\Documents\sshbthid.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'tlqbrvgt' = '%HOMEPATH%\My Documents\My Music\ujgzliso.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'fehfxika' = '%ALLUSERSPROFILE%\Documents\sshbthid.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = '%ALLUSERSPROFILE%\Documents\My Videos\wsbmsjjg.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,%ALLUSERSPROFILE%\Documents\My Videos\wsbmsjjg.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'fehfxika' = '%ALLUSERSPROFILE%\Documents\sshbthid.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'dwvbnknp' = '%HOMEPATH%\My Documents\nnlzihwl.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = '%HOMEPATH%\My Documents\nnlzihwl.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,%HOMEPATH%\My Documents\nnlzihwl.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'dwvbnknp' = '%HOMEPATH%\My Documents\nnlzihwl.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'tlqbrvgt' = '%HOMEPATH%\My Documents\My Music\ujgzliso.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = '%HOMEPATH%\My Documents\My Music\ujgzliso.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,%HOMEPATH%\My Documents\My Music\ujgzliso.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rsuaskre' = '%ALLUSERSPROFILE%\Documents\My Music\jqthjaqj.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'rsuaskre' = '%ALLUSERSPROFILE%\Documents\My Music\jqthjaqj.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = '%ALLUSERSPROFILE%\Documents\My Music\jqthjaqj.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,<Полный путь к файлу>'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ltxppzcr' = '<Полный путь к файлу>'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'ltxppzcr' = '<Полный путь к файлу>'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = '<Полный путь к файлу>'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,%ALLUSERSPROFILE%\Documents\My Pictures\hsfmuakq.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'vchzfxlj' = '%ALLUSERSPROFILE%\Documents\My Videos\wsbmsjjg.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'vchzfxlj' = '%ALLUSERSPROFILE%\Documents\My Videos\wsbmsjjg.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Windows] 'Run' = '%ALLUSERSPROFILE%\Documents\My Pictures\hsfmuakq.exe'
- [<HKCU>\Software\Microsoft\Windows NT\CurrentVersion\Winlogon] 'Shell' = 'explorer.exe,%ALLUSERSPROFILE%\Documents\My Music\jqthjaqj.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'rfhlabpy' = '%ALLUSERSPROFILE%\Documents\My Pictures\hsfmuakq.exe'
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'rfhlabpy' = '%ALLUSERSPROFILE%\Documents\My Pictures\hsfmuakq.exe'
- %HOMEPATH%\Start Menu\Programs\Startup\sshbthid.exe
- %WINDIR%\Tasks\fehfxika.job
- %HOMEPATH%\Start Menu\Programs\Startup\wsbmsjjg.exe
- %WINDIR%\Tasks\tlqbrvgt.job
- %HOMEPATH%\Start Menu\Programs\Startup\nnlzihwl.exe
- %WINDIR%\Tasks\dwvbnknp.job
- %HOMEPATH%\Start Menu\Programs\Startup\ujgzliso.exe
- %WINDIR%\Tasks\vchzfxlj.job
- %HOMEPATH%\Start Menu\Programs\Startup\<Имя файла>.exe
- %WINDIR%\Tasks\ltxppzcr.job
- %HOMEPATH%\Start Menu\Programs\Startup\x.vbs
- %WINDIR%\Tasks\rsuaskre.job
- %HOMEPATH%\Start Menu\Programs\Startup\hsfmuakq.exe
- %WINDIR%\Tasks\rfhlabpy.job
- %HOMEPATH%\Start Menu\Programs\Startup\jqthjaqj.exe
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE'
- '<SYSTEM32>\cmd.exe' /c echo on error resume next:CreateObject("WScript.Shell").Run "<Полный путь к файлу>",1: >"%HOMEPATH%\Start Menu\Programs\Startup\x.vbs"
- <SYSTEM32>\cmd.exe
- C:\Far2\Documentation\rus\Plugins.Review.ap19
- C:\Far2\Documentation\rus\Plugins.Review.a19
- C:\Far2\Documentation\rus\Plugins.Install.ap19
- C:\Far2\Plugins\7-Zip\far7z.a19
- C:\Far2\Documentation\rus\TechInfo.ap19
- C:\Far2\Documentation\rus\TechInfo.a19
- C:\Far2\Documentation\rus\Bug.Report.ap19
- C:\Far2\Documentation\rus\Bug.Report.a19
- C:\Far2\Documentation\rus\Arc.Support.ap19
- C:\Far2\Documentation\rus\Plugins.Install.a19
- C:\Far2\Documentation\rus\Far.FAQ.ap19
- C:\Far2\Documentation\rus\Far.FAQ.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-rgb.ap19
- C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-console.ap19
- C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-text.ap19
- C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
- C:\Far2\Plugins\Colorer\catalog.ap19
- C:\Far2\Plugins\Colorer\catalog.a19
- C:\Far2\Plugins\7-Zip\far7z.ap19
- C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
- C:\Far2\Plugins\Colorer\hrc\changes.ap19
- C:\Far2\Plugins\Colorer\hrc\changes.a19
- %HOMEPATH%\Templates\winword2.ap19
- %HOMEPATH%\Templates\winword2.a19
- %HOMEPATH%\Templates\winword.ap19
- C:\Far2\Documentation\eng\Arc.Support.a19
- C:\Far2\Addons\README.ap19
- C:\Far2\Addons\README.a19
- %HOMEPATH%\Templates\powerpnt.ap19
- %HOMEPATH%\Templates\powerpnt.a19
- %HOMEPATH%\Templates\excel4.ap19
- %HOMEPATH%\Templates\winword.a19
- %HOMEPATH%\Templates\quattro.ap19
- %HOMEPATH%\Templates\quattro.a19
- C:\Far2\Documentation\eng\Plugins.Review.ap19
- C:\Far2\Documentation\eng\Plugins.Review.a19
- C:\Far2\Documentation\eng\Plugins.Install.ap19
- C:\Far2\Documentation\rus\Arc.Support.a19
- C:\Far2\Documentation\eng\TechInfo.ap19
- C:\Far2\Documentation\eng\TechInfo.a19
- C:\Far2\Documentation\eng\Bug.Report.ap19
- C:\Far2\Documentation\eng\Bug.Report.a19
- C:\Far2\Documentation\eng\Arc.Support.ap19
- C:\Far2\Documentation\eng\Plugins.Install.a19
- C:\Far2\Documentation\eng\Far.FAQ.ap19
- C:\Far2\Documentation\eng\Far.FAQ.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.ap19
- C:\Far2\Plugins\FTP\Notes.a19
- C:\Far2\Plugins\FTP\FtpCmds_rus.ap19
- C:\Far2\Plugins\FTP\FtpCmds_rus.a19
- C:\Far2\Plugins\FTP\Notes_rus.ap19
- C:\Far2\Plugins\FTP\Notes_rus.a19
- C:\Far2\Plugins\FTP\Notes.ap19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.ap19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
- C:\Far2\Plugins\FTP\FtpCmds.ap19
- C:\Far2\Plugins\FTP\FtpCmds.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.ap19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.ap19
- C:\Far2\PluginSDK\Headers.c\farkeys.a19
- C:\Far2\PluginSDK\Headers.c\farcolor.ap19
- C:\Far2\PluginSDK\Headers.c\farcolor.a19
- C:\Far2\PluginSDK\Headers.c\plugin.ap19
- C:\Far2\PluginSDK\Headers.c\plugin.a19
- C:\Far2\PluginSDK\Headers.c\farkeys.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_READ.ap19
- C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtChCase.ap19
- C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_READ.ap19
- C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.ap19
- C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
- C:\Far2\Plugins\ExtSearch\doc\REGEXPS.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
- C:\Far2\Plugins\ExtSearch\sources\PLUGIN.ap19
- C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtMenu.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.ap19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.ap19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.ap19
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.ap19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.ap19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.ap19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.ap19
- C:\Documents and Settings\Default User\Templates\winword.a19
- C:\Documents and Settings\Default User\Templates\quattro.ap19
- C:\Documents and Settings\Default User\Templates\quattro.a19
- C:\Documents and Settings\Default User\Templates\winword2.ap19
- C:\Documents and Settings\Default User\Templates\winword2.a19
- C:\Documents and Settings\Default User\Templates\winword.ap19
- C:\Documents and Settings\Default User\Templates\excel4.a19
- C:\Documents and Settings\Default User\Templates\excel.ap19
- C:\Documents and Settings\Default User\Templates\excel.a19
- C:\Documents and Settings\Default User\Templates\powerpnt.ap19
- C:\Documents and Settings\Default User\Templates\powerpnt.a19
- C:\Documents and Settings\Default User\Templates\excel4.ap19
- <Текущая директория>\!!! For Decrypt !!!.bat
- %HOMEPATH%\My Documents\!!! Readme For Decrypt !!!.txt
- %HOMEPATH%\My Documents\nnlzihwl.exe
- C:\Documents and Settings\!!! Readme For Decrypt !!!.txt
- C:\Documents and Settings\!!! For Decrypt !!!.bat
- <Текущая директория>\!!! Readme For Decrypt !!!.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\hsfmuakq.exe
- %ALLUSERSPROFILE%\Documents\My Music\jqthjaqj.exe
- %ALLUSERSPROFILE%\Documents\!!!ForDecrypt!!!.exe
- %HOMEPATH%\My Documents\My Music\ujgzliso.exe
- %ALLUSERSPROFILE%\Documents\sshbthid.exe
- %ALLUSERSPROFILE%\Documents\My Videos\wsbmsjjg.exe
- <STUBS_DIR>\!!! For Decrypt !!!.bat
- C:\RECYCLER\!!! Readme For Decrypt !!!.txt
- C:\RECYCLER\!!! For Decrypt !!!.bat
- %WINDIR%\!!! Readme For Decrypt !!!.txt
- %WINDIR%\!!! For Decrypt !!!.bat
- <STUBS_DIR>\!!! Readme For Decrypt !!!.txt
- C:\Muldrop\!!! For Decrypt !!!.bat
- C:\Far2\!!! Readme For Decrypt !!!.txt
- C:\Far2\!!! For Decrypt !!!.bat
- %ProgramFiles%\!!! Readme For Decrypt !!!.txt
- %ProgramFiles%\!!! For Decrypt !!!.bat
- C:\Muldrop\!!! Readme For Decrypt !!!.txt
- %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
- %TEMP%\5994_appcompat.ap19
- %TEMP%\5994_appcompat.a19
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.ap19
- %HOMEPATH%\Templates\excel4.a19
- %HOMEPATH%\Templates\excel.ap19
- %HOMEPATH%\Templates\excel.a19
- <LS_APPDATA>\IconCache.ap19
- <LS_APPDATA>\IconCache.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.ap19
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.ap19
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
- C:\Far2\Plugins\Colorer\hrc\changes.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
- C:\Far2\Plugins\Colorer\catalog.a19
- C:\Far2\Documentation\rus\TechInfo.a19
- C:\Far2\Plugins\7-Zip\far7z.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
- C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
- C:\Far2\Documentation\rus\Plugins.Review.a19
- C:\Far2\Documentation\eng\Plugins.Install.a19
- C:\Far2\Documentation\eng\Plugins.Review.a19
- C:\Far2\Documentation\eng\Far.FAQ.a19
- C:\Far2\Documentation\eng\Arc.Support.a19
- C:\Far2\Documentation\eng\Bug.Report.a19
- C:\Far2\Documentation\rus\Far.FAQ.a19
- C:\Far2\Documentation\rus\Plugins.Install.a19
- C:\Far2\Documentation\rus\Bug.Report.a19
- C:\Far2\Documentation\eng\TechInfo.a19
- C:\Far2\Documentation\rus\Arc.Support.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
- C:\Far2\Plugins\FTP\Notes_rus.a19
- C:\Far2\PluginSDK\Headers.c\farcolor.a19
- C:\Far2\Plugins\FTP\Notes.a19
- C:\Far2\Plugins\FTP\FtpCmds.a19
- C:\Far2\Plugins\FTP\FtpCmds_rus.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
- C:\Far2\PluginSDK\Headers.c\farkeys.a19
- C:\Far2\PluginSDK\Headers.c\plugin.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
- C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
- C:\Documents and Settings\Default User\Templates\winword.a19
- C:\Documents and Settings\Default User\Templates\winword2.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
- C:\Documents and Settings\Default User\Templates\quattro.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
- %ALLUSERSPROFILE%\Documents\!!!ForDecrypt!!!.exe
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
- C:\Documents and Settings\Default User\Templates\excel4.a19
- C:\Documents and Settings\Default User\Templates\powerpnt.a19
- C:\Documents and Settings\Default User\Templates\excel.a19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
- %HOMEPATH%\Templates\excel.a19
- %HOMEPATH%\Templates\excel4.a19
- %TEMP%\5994_appcompat.a19
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
- %HOMEPATH%\Templates\winword2.a19
- C:\Far2\Addons\README.a19
- %HOMEPATH%\Templates\winword.a19
- %HOMEPATH%\Templates\powerpnt.a19
- %HOMEPATH%\Templates\quattro.a19
- <LS_APPDATA>\IconCache.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
- C:\Far2\Plugins\Colorer\hrc\changes.a19
- C:\Far2\Plugins\7-Zip\far7z.a19
- C:\Far2\Plugins\Colorer\catalog.a19
- C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
- C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
- C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
- C:\Far2\Documentation\rus\TechInfo.a19
- C:\Far2\Documentation\eng\Plugins.Review.a19
- C:\Far2\Documentation\eng\TechInfo.a19
- C:\Far2\Documentation\eng\Plugins.Install.a19
- C:\Far2\Documentation\eng\Bug.Report.a19
- C:\Far2\Documentation\eng\Far.FAQ.a19
- C:\Far2\Documentation\rus\Plugins.Install.a19
- C:\Far2\Documentation\rus\Plugins.Review.a19
- C:\Far2\Documentation\rus\Far.FAQ.a19
- C:\Far2\Documentation\rus\Arc.Support.a19
- C:\Far2\Documentation\rus\Bug.Report.a19
- C:\Far2\Plugins\FTP\Notes_rus.a19
- C:\Far2\PluginSDK\Headers.c\farcolor.a19
- C:\Far2\Plugins\FTP\Notes.a19
- C:\Far2\Plugins\FTP\FtpCmds.a19
- C:\Far2\Plugins\FTP\FtpCmds_rus.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
- %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
- C:\Far2\PluginSDK\Headers.c\farkeys.a19
- C:\Far2\PluginSDK\Headers.c\plugin.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
- C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
- C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
- C:\Far2\Documentation\eng\Arc.Support.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
- C:\Documents and Settings\Default User\Templates\winword2.a19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
- C:\Documents and Settings\Default User\Templates\winword.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
- C:\Documents and Settings\Default User\Templates\powerpnt.a19
- C:\Documents and Settings\Default User\Templates\quattro.a19
- C:\Documents and Settings\Default User\Templates\excel4.a19
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
- C:\Documents and Settings\Default User\Templates\excel.a19
- %HOMEPATH%\Templates\excel.a19
- %HOMEPATH%\Templates\excel4.a19
- %TEMP%\5994_appcompat.a19
- <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
- %HOMEPATH%\Templates\winword2.a19
- C:\Far2\Addons\README.a19
- %HOMEPATH%\Templates\winword.a19
- %HOMEPATH%\Templates\powerpnt.a19
- %HOMEPATH%\Templates\quattro.a19
- <LS_APPDATA>\IconCache.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
- %TEMP%\5994_appcompat.ap19 в %TEMP%\5994_appcompat.txt
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.ap19
- C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.ap19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
- C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.ap19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.ap19
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.ap19
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
- %APPDATA%\Microsoft\Internet Explorer\brndlog.ap19
- 'rd######dgrulwqg.onion.link':80
- DNS ASK rd######dgrulwqg.onion.link
- ClassName: 'Progman' WindowName: ''