Trojan.Encoder.37735

Техническая информация

Для обеспечения автозапуска и распространения

Создает или изменяет следующие файлы

%ALLUSERSPROFILE%\start menu\programs\startup\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\startup\your_files_are_encrypted.txt

Вредоносные функции

Читает файлы, отвечающие за хранение паролей сторонними программами

%HOMEPATH%\desktop\64bit_notes.htm
%HOMEPATH%\desktop\sdszfo.docx
%HOMEPATH%\desktop\pmd.cer
%HOMEPATH%\desktop\join.avi
%HOMEPATH%\desktop\ituneshelpunavailable.html
%HOMEPATH%\desktop\ituneshelpunavailable.htm
%HOMEPATH%\desktop\howto-index.html
%HOMEPATH%\desktop\holycrosschurchinstructions.docx
%HOMEPATH%\desktop\hanni_umami_chapter.doc
%HOMEPATH%\desktop\fi51.doc
%HOMEPATH%\desktop\february_catalogue__2015.doc
%HOMEPATH%\desktop\dashborder_96.bmp
%HOMEPATH%\desktop\dashborder_144.bmp
%HOMEPATH%\desktop\dashborder_120.bmp
%HOMEPATH%\desktop\cveuropeo.doc
%HOMEPATH%\desktop\correct.avi
%HOMEPATH%\desktop\coffee.bmp
%HOMEPATH%\desktop\browse.htm
%HOMEPATH%\desktop\archer.avi
%HOMEPATH%\desktop\applicantform_en.doc
%HOMEPATH%\desktop\api-hashmap.html
%HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
%HOMEPATH%\desktop\advice_process.htm
%HOMEPATH%\desktop\adhd_and_obesity.docx
%HOMEPATH%\desktop\toolbar.bmp
%HOMEPATH%\desktop\weeklysheet1215.doc

Изменения в файловой системе

Создает следующие файлы

C:\documents and settings\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\sv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\th\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\tr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\uk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\vi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\sk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\zh_cn\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\sr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ar\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ca\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\cs\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\da\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\de\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\el\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\zh_tw\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\es\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\bg\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\mt\lc_messages\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\sl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ru\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\hi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\hr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\hu\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\id\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ro\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\fi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\it\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\en\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\lt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\nb\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\nl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\pl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\pt_br\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ja\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ko\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\pt_pt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\lv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\fi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\sv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\hi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\uk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\vi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\zh_cn\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\zh_tw\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\sr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\bg\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\tr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ca\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\da\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\de\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\el\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\en\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ar\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\sl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\fil\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\cs\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\th\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\sk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ru\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\hr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\hu\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\id\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\it\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ja\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ko\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\he\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\lt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\nl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\no\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\pl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\pt_br\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\pt_pt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\ro\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\et\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\lv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\fr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\fr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\fil\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\es_419\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\es\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ja\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\jv\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ka\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\kab\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\hu\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\hi\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\kk\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\it\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ku\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\lv\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\mk\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ml\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\mo\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\kn\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ko\lc_messages\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\es\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\lt\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\is\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\hr\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\he\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\el\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\en\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\en_au\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\en_ca\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\en_gb\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\eo\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\da\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\es\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\eu\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\fa\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\fi\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\fr\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\fy\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\gl\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\gu\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\et\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\mr\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ms\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\cy\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\my\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\nl\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\uz\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\vi\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\wae\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\zh_cn\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\tw\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\zh_hk\lc_messages\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\bg\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ur\lc_messages\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\ca\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\da\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\de\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\el\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\en\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\zh_tw\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\id\lc_messages\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\en_gb\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\cs\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\uk\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ug\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\tr\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\nn\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\oc\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\pl\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\pt\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\pt_br\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\nb\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ro\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\shn\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sk\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sl\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sq\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sr\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sv\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ta\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ru\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\te\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\th\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ne\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\de\lc_messages\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\fi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\hu\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ru\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\sk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\sl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\sr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\sv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\th\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\pt_pt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ro\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\tr\your_files_are_encrypted.txt
%TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\branding\your_files_are_encrypted.txt
%TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\browser-region\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\openpgp\sap\msg\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\openpgp\sap\util\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\wubi\backends\common\your_files_are_encrypted.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\locale\your_files_are_encrypted.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\locale\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\wubi\frontends\win32\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\wubi\backends\win32\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\no\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\fil\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\fr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\he\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\hi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\hr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\pl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\eu\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\pt_br\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\hu\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ko\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\lt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\lv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ms\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\nl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\id\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\it\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ja\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\es\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ar\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\no\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pt_br\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pt_pt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ro\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ru\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\nl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\tr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\uk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\vi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\zh_cn\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\zh_tw\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\lv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\th\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\lt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ko\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ca\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\da\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\de\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\el\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\en\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\es\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fil\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\cs\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hu\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\id\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\it\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ja\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\et\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\he\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\fi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\es_419\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\en_us\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\wubi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\zh_cn\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\zh_tw\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\__macosx\_locales\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ar\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\th\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\bg\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\cs\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\vi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\da\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\el\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\en\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\en_gb\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\en_us\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ca\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\sr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\fil\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\de\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\uk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\sl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\sk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\id\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\it\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ja\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ko\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\lt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\lv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\hr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\nl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\pl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\pt_br\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\pt_pt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ro\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\ru\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\se\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\es\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\no\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\hi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\tr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\fr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\es_419\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\he\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\tr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\uk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\vi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\zh_cn\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\sl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\zh_tw\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\bg\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\th\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ca\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\da\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\de\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\el\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\en_gb\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\ar\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\sk\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\fi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\cs\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\sv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ru\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ro\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\hi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\hr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\hu\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\id\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\it\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ja\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\fr\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\ko\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\lv\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\nl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\no\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\pl\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\pt_br\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\pt_pt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\et\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\lt\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\fil\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\sr\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\csb\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\cs\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\crh\lc_messages\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\steam\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\winrar\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\history\history.ie5\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\your_files_are_encrypted.txt
C:\documents and settings\default user\start menu\programs\accessories\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft office\your_files_are_encrypted.txt
C:\documents and settings\default user\start menu\programs\startup\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\qip 2012\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\your_files_are_encrypted.txt
%HOMEPATH%\local settings\apps\2.0\your_files_are_encrypted.txt
%HOMEPATH%\local settings\history\history.ie5\your_files_are_encrypted.txt
%TEMP%\2.9.0.1467 (partner)\your_files_are_encrypted.txt
%TEMP%\7f4987fb1a6e43d69e3e94b29eb75926\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\history\history.ie5\your_files_are_encrypted.txt
%TEMP%\adobe_admlogs\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\history\history.ie5\your_files_are_encrypted.txt
%TEMP%\cprogram filesopera\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft .net framework sdk v1.1\your_files_are_encrypted.txt
%HOMEPATH%\userdata\09upir0l\your_files_are_encrypted.txt
%HOMEPATH%\userdata\ubghkdcj\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.en\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.es\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\proof.fr\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\google chrome\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0114-0409-0000-0000000ff1ce}-c\groove.en-us\your_files_are_encrypted.txt
%HOMEPATH%\userdata\e3unqlkn\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\games\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0117-0409-0000-0000000ff1ce}-c\access.en-us\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\my music\sample playlists\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\my pictures\sample pictures\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\administrative tools\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0115-0409-0000-0000000ff1ce}-c\1033\your_files_are_encrypted.txt
%TEMP%\cookies\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\my music\my playlists\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\my music\sample music\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\mqraz07n\your_files_are_encrypted.txt
%TEMP%\history\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\icq\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\winrar\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\my music\sample playlists\00107ff6\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\accessibility\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\communications\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\accessories\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\entertainment\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\microsoft office\microsoft office tools\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\telegram desktop\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\ee7gwdg8\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\h8mbgrq8\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\z9pmdpek\your_files_are_encrypted.txt
C:\documents and settings\default user\start menu\programs\accessories\accessibility\your_files_are_encrypted.txt
C:\documents and settings\default user\start menu\programs\accessories\entertainment\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\accessories\system tools\your_files_are_encrypted.txt
%TEMP%\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}\your_files_are_encrypted.txt
%TEMP%\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\etuaii8e\your_files_are_encrypted.txt
%TEMP%\{615bc16d-60f5-482e-91b3-b51d8130963b}\your_files_are_encrypted.txt
%TEMP%\hsperfdata_user\your_files_are_encrypted.txt
%TEMP%\lilo.1120\your_files_are_encrypted.txt
%TEMP%\microsoft visual c++ 2010 x86 redistributable setup_10.0.30319\your_files_are_encrypted.txt
%TEMP%\opera installer\your_files_are_encrypted.txt
%TEMP%\outlook logging\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\your_files_are_encrypted.txt
%TEMP%\microsoft .net framework 4 setup_4.0.30319\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\your_files_are_encrypted.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\your_files_are_encrypted.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\your_files_are_encrypted.txt
%TEMP%\<INETFILES>\your_files_are_encrypted.txt
%TEMP%\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\your_files_are_encrypted.txt
%TEMP%\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\your_files_are_encrypted.txt
%HOMEPATH%\my documents\my pictures\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\your_files_are_encrypted.txt
%HOMEPATH%\userdata\inafedwn\your_files_are_encrypted.txt
%HOMEPATH%\my documents\my music\your_files_are_encrypted.txt
%HOMEPATH%\my documents\downloads\your_files_are_encrypted.txt
C:\documents and settings\default user\my documents\your_files_are_encrypted.txt
C:\documents and settings\default user\recent\your_files_are_encrypted.txt
C:\documents and settings\default user\sendto\your_files_are_encrypted.txt
C:\documents and settings\default user\start menu\your_files_are_encrypted.txt
C:\documents and settings\default user\templates\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\your_files_are_encrypted.txt
C:\documents and settings\localservice\cookies\your_files_are_encrypted.txt
C:\documents and settings\default user\cookies\your_files_are_encrypted.txt
C:\documents and settings\default user\printhood\your_files_are_encrypted.txt
C:\documents and settings\networkservice\cookies\your_files_are_encrypted.txt
%HOMEPATH%\cookies\your_files_are_encrypted.txt
%HOMEPATH%\desktop\your_files_are_encrypted.txt
%HOMEPATH%\favorites\your_files_are_encrypted.txt
%HOMEPATH%\local settings\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\your_files_are_encrypted.txt
C:\documents and settings\default user\favorites\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\your_files_are_encrypted.txt
%HOMEPATH%\.oracle_jre_usage\your_files_are_encrypted.txt
C:\documents and settings\default user\desktop\your_files_are_encrypted.txt
C:\kms\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\9stcdn6y\your_files_are_encrypted.txt
C:\recycler\your_files_are_encrypted.txt
<Текущая директория>\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\your_files_are_encrypted.txt
C:\documents and settings\default user\your_files_are_encrypted.txt
C:\documents and settings\localservice\your_files_are_encrypted.txt
C:\documents and settings\networkservice\your_files_are_encrypted.txt
%HOMEPATH%\your_files_are_encrypted.txt
C:\msocache\your_files_are_encrypted.txt
C:\msocache\all users\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\desktop\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\drm\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\favorites\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\templates\your_files_are_encrypted.txt
%HOMEPATH%\my documents\your_files_are_encrypted.txt
C:\recycler\s-1-5-21-1229272821-842925246-1060284298-1003\your_files_are_encrypted.txt
%HOMEPATH%\nethood\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\administrative tools\your_files_are_encrypted.txt
%HOMEPATH%\recent\your_files_are_encrypted.txt
%HOMEPATH%\templates\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\<INETFILES>\your_files_are_encrypted.txt
C:\documents and settings\default user\start menu\programs\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\history\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\temp\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\my videos\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\<INETFILES>\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\temp\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\temp\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\your_files_are_encrypted.txt
%HOMEPATH%\local settings\apps\your_files_are_encrypted.txt
%HOMEPATH%\local settings\history\your_files_are_encrypted.txt
%TEMP%\your_files_are_encrypted.txt
%HOMEPATH%\local settings\<INETFILES>\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\history\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\my pictures\your_files_are_encrypted.txt
C:\documents and settings\default user\nethood\your_files_are_encrypted.txt
%HOMEPATH%\favorites\links\your_files_are_encrypted.txt
C:\documents and settings\default user\local settings\history\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\documents\my music\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0117-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
%HOMEPATH%\userdata\your_files_are_encrypted.txt
%HOMEPATH%\voip\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0010-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0016-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0018-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0019-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
%HOMEPATH%\start menu\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-001a-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-002c-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0030-0000-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0044-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-00a1-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0114-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-0115-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
%HOMEPATH%\printhood\your_files_are_encrypted.txt
C:\msocache\all users\{90120000-001b-0409-0000-0000000ff1ce}-c\your_files_are_encrypted.txt
%HOMEPATH%\sendto\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\your_files_are_encrypted.txt
%ALLUSERSPROFILE%\start menu\programs\mirc\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\o4q6sqop\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ro\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sk\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sl\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sq\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sr\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\pt_br\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\sv\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\te\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\shn\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\th\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\tw\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ug\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\uk\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ur\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ta\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\pt\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\kab\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\tr\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ru\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\pl\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\oc\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ku\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\lt\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\lv\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\mk\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ml\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\mo\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\kn\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\mr\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\mt\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\my\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\nb\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ne\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\nl\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\nn\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\uz\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ms\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\kk\your_files_are_encrypted.txt
C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\qiszf4kx\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ko\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\vi\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\_locales\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\wubi\backends\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\wubi\frontends\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\xml\parsers\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\xml\sax\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\crypto\hash\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\af\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\as\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\openpgp\sap\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ast\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\bo\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\br\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\bs\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ca\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ar\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\crypto\cipher\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\zh_cn\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\bg\lc_messages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\crypto\util\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\data\custom-installation\packages\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\data\custom-installation\hooks\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\_locales\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\_locales\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\__macosx\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\_locales\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\_locales\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\zh_tw\your_files_are_encrypted.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\your_files_are_encrypted.txt
%TEMP%\<INETFILES>\content.ie5\4xoboj8j\your_files_are_encrypted.txt
%TEMP%\<INETFILES>\content.ie5\chyzclen\your_files_are_encrypted.txt
%TEMP%\<INETFILES>\content.ie5\g1qjk5mv\your_files_are_encrypted.txt
%TEMP%\<INETFILES>\content.ie5\ibwpozo7\your_files_are_encrypted.txt
%HOMEPATH%\local settings\apps\2.0\p6vnyxmj.ahb\be8ln32k.1b1\manifests\your_files_are_encrypted.txt
%TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\wae\your_files_are_encrypted.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\zh_hk\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\crypto\publickey\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\bg\your_files_are_encrypted.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\locale\branding\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ja\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\accessories\accessibility\your_files_are_encrypted.txt
%HOMEPATH%\start menu\programs\accessories\entertainment\your_files_are_encrypted.txt
%HOMEPATH%\local settings\apps\2.0\p6vnyxmj.ahb\be8ln32k.1b1\your_files_are_encrypted.txt
%TEMP%\2.9.0.1467 (partner)\chrome\en-gb\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\bin\formats\your_files_are_encrypted.txt
%TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_28580\crx_install\your_files_are_encrypted.txt
%TEMP%\<INETFILES>\content.ie5\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\data\custom-installation\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\ctypes\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\encodings\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\logging\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\openpgp\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\sets\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\data\images\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\bittorrent\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\crypto\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_9112\crx_install\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_24406\crx_install\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\urlgrabber\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\etuaii8e\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\h8mbgrq8\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\z9pmdpek\your_files_are_encrypted.txt
%HOMEPATH%\local settings\apps\2.0\p6vnyxmj.ahb\your_files_are_encrypted.txt
%HOMEPATH%\local settings\history\history.ie5\mshist012022090620220907\your_files_are_encrypted.txt
%TEMP%\2.9.0.1467 (partner)\chrome\your_files_are_encrypted.txt
%TEMP%\history\history.ie5\your_files_are_encrypted.txt
C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\ee7gwdg8\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\bin\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\data\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\your_files_are_encrypted.txt
%HOMEPATH%\favorites\links\яндекс.url
%TEMP%\pyl1.tmp\translations\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\winboot\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2064_18724\crx_install\your_files_are_encrypted.txt
%TEMP%\scoped_dir_2812_13253\crx_install\your_files_are_encrypted.txt
%HOMEPATH%\favorites\links\почта.url
%TEMP%\pyl1.tmp\translations\jv\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ka\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\winui\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ar\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\eu\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\fa\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\fi\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\fr\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\fy\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\eo\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\gl\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\et\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\he\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\hr\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\hu\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\id\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\is\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\it\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\gu\your_files_are_encrypted.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\hi\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\es\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\en_gb\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\en_ca\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\as\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ast\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\bg\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\bo\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\br\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\bs\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\af\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\ca\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\cs\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\csb\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\cy\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\da\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\de\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\el\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\en\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\crh\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\translations\en_au\your_files_are_encrypted.txt
%TEMP%\pyl1.tmp\lib\xml\your_files_are_encrypted.txt
%TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\locale\browser-region\your_files_are_encrypted.txt

Перемещает следующие файлы

%HOMEPATH%\favorites\links\почта.url в %HOMEPATH%\favorites\links\почта.url.fixt
%TEMP%\dotnetfx.log в %TEMP%\dotnetfx.log.fixt
%TEMP%\dotnetfxsdk.log в %TEMP%\dotnetfxsdk.log.fixt
%TEMP%\jaureg.log в %TEMP%\jaureg.log.fixt
%TEMP%\javadeployreg.log в %TEMP%\javadeployreg.log.fixt
%TEMP%\jusched.log в %TEMP%\jusched.log.fixt
%TEMP%\java_install_reg.log в %TEMP%\java_install_reg.log.fixt
%TEMP%\dd_depcheck_netfx20_exp_35.txt в %TEMP%\dd_depcheck_netfx20_exp_35.txt.fixt
%TEMP%\dd_dotnetfx35install.txt в %TEMP%\dd_dotnetfx35install.txt.fixt
%TEMP%\wubi-14.04-rev286.log в %TEMP%\wubi-14.04-rev286.log.fixt
%TEMP%\uxeventlog.txt в %TEMP%\uxeventlog.txt.fixt
%TEMP%\setupexe(2015121523093290).log в %TEMP%\setupexe(2015121523093290).log.fixt
%TEMP%\java_install.log в %TEMP%\java_install.log.fixt
%TEMP%\setupexe(201511201342324e4).log в %TEMP%\setupexe(201511201342324e4).log.fixt
%TEMP%\dd_net_framework35_msi77c4.txt в %TEMP%\dd_net_framework35_msi77c4.txt.fixt
%TEMP%\dd_wcf_retca4a2a.txt в %TEMP%\dd_wcf_retca4a2a.txt.fixt
%TEMP%\dd_xps.txt в %TEMP%\dd_xps.txt.fixt
%TEMP%\dd_vcredist_x86_20151215221751_000_vcruntimeminimum_x86.log в %TEMP%\dd_vcredist_x86_20151215221751_000_vcruntimeminimum_x86.log.fixt
%TEMP%\dd_vcredist_x86_20151215221751_001_vcruntimeadditional_x86.log в %TEMP%\dd_vcredist_x86_20151215221751_001_vcruntimeadditional_x86.log.fixt
%TEMP%\dd_vcredist_x86_20151215221751.log в %TEMP%\dd_vcredist_x86_20151215221751.log.fixt
%TEMP%\adobearm.log в %TEMP%\adobearm.log.fixt
%TEMP%\adobearm_notlocked.log в %TEMP%\adobearm_notlocked.log.fixt
%TEMP%\adobesfx.log в %TEMP%\adobesfx.log.fixt
%TEMP%\aspnetsetup.log в %TEMP%\aspnetsetup.log.fixt
%TEMP%\aucheck_parser.txt в %TEMP%\aucheck_parser.txt.fixt
%TEMP%\aspnetsetup_00000.log в %TEMP%\aspnetsetup_00000.log.fixt
%TEMP%\dd_net_framework30_setup7762.txt в %TEMP%\dd_net_framework30_setup7762.txt.fixt
%TEMP%\setupexe(20151215230521214).log в %TEMP%\setupexe(20151215230521214).log.fixt
%TEMP%\dd_clwireg.txt в %TEMP%\dd_clwireg.txt.fixt
%TEMP%\dd_dotnetfx35error.txt в %TEMP%\dd_dotnetfx35error.txt.fixt
%TEMP%\dd_dotnetfx20install.txt в %TEMP%\dd_dotnetfx20install.txt.fixt
%TEMP%\dd_depcheck_netfx_exp_35.txt в %TEMP%\dd_depcheck_netfx_exp_35.txt.fixt
%TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt в %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.fixt
%TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt в %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt.fixt
%TEMP%\dd_dotnetfx45_full_setup_decompression_log.txt в %TEMP%\dd_dotnetfx45_full_setup_decompression_log.txt.fixt
%HOMEPATH%\favorites\links\яндекс.url в %HOMEPATH%\favorites\links\яндекс.url.fixt
%TEMP%\dd_dotnetfx20error.txt в %TEMP%\dd_dotnetfx20error.txt.fixt
%TEMP%\dd_net_framework20_setup74f9.txt в %TEMP%\dd_net_framework20_setup74f9.txt.fixt

Изменяет следующие файлы

C:\documents
%HOMEPATH%\cookies\user@help.softkey[2].txt
%HOMEPATH%\cookies\user@d.castplatform[2].txt
%HOMEPATH%\cookies\user@c.msn[1].txt
%HOMEPATH%\cookies\user@c.bing[1].txt
%HOMEPATH%\cookies\user@bluekai[2].txt
%HOMEPATH%\cookies\user@bing[1].txt
%HOMEPATH%\cookies\user@atdmt[1].txt
%HOMEPATH%\cookies\user@adobe[1].txt
%HOMEPATH%\cookies\user@adnxs[1].txt
%HOMEPATH%\cookies\user@7ba[1].txt
%HOMEPATH%\cookies\user@326944[1].txt
%HOMEPATH%\.oracle_jre_usage\90737d32e3aba45.timestamp
C:\documents and settings\default user\templates\winword2.doc
C:\documents and settings\default user\templates\winword.doc
C:\documents and settings\default user\templates\sndrec.wav
C:\documents and settings\default user\templates\quattro.wb2
C:\documents and settings\default user\templates\presenta.shw
C:\documents and settings\default user\templates\powerpnt.ppt
C:\documents and settings\default user\templates\lotus.wk4
C:\documents and settings\default user\templates\excel.xls
C:\documents and settings\default user\templates\excel4.xls
C:\documents and settings\default user\templates\amipro.sam
C:\documents and settings\default user\cookies\index.dat
%ALLUSERSPROFILE%\drm\drmv2.sst
%ALLUSERSPROFILE%\drm\drmv2.lic
C:\recycler\s-1-5-21-1229272821-842925246-1060284298-1003\info2
%HOMEPATH%\and
%HOMEPATH%\cookies\user@help.softkey[3].txt
%HOMEPATH%\cookies\user@mail[1].txt

Изменяет множество файлов.

Изменяет множество файлов пользовательских данных (Trojan.Encoder).

Изменяет расширения файлов пользовательских данных (Trojan.Encoder).

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней