Trojan.Encoder.38446

Техническая информация

Для обеспечения автозапуска и распространения

Создает следующие файлы на съемном носителе

<Имя диска съемного носителя>:\\readme.txt
<Имя диска съемного носителя>:\calc.exe
<Имя диска съемного носителя>:\168.jpg
<Имя диска съемного носителя>:\region-north-karelia.jpg
<Имя диска съемного носителя>:\tileimage.bmp
<Имя диска съемного носителя>:\trivial-merge.htm
<Имя диска съемного носителя>:\browse.htm
<Имя диска съемного носителя>:\dashborder_192.bmp
<Имя диска съемного носителя>:\winmine.exe
<Имя диска съемного носителя>:\dashborder_144.bmp
<Имя диска съемного носителя>:\coffee.bmp
<Имя диска съемного носителя>:\dashborder_96.bmp
<Имя диска съемного носителя>:\contoso_1.cer
<Имя диска съемного носителя>:\testee.cer
<Имя диска съемного носителя>:\sdkfailsafeemulator.cer
<Имя диска съемного носителя>:\toolbar.bmp
<Имя диска съемного носителя>:\\readme.html
<Имя диска съемного носителя>:\notepad.exe
<Имя диска съемного носителя>:\jre-7u75-windows-i586-iftw.exe

Вредоносные функции

Для затруднения выявления своего присутствия в системе

удаляет теневые копии разделов.

Внедряет код в

следующие системные процессы:

<SYSTEM32>\vds.exe

Изменения в файловой системе

Создает следующие файлы

C:\\readme.txt
D:\\readme.txt
C:\\readme.html
D:\\readme.html
%TEMP%\1576693964120002259.hta

Перемещает следующие файлы

%ProgramFiles%\java\jre1.8.0_45\bin\fxplugins.dll в %ProgramFiles%\java\jre1.8.0_45\bin\fxplugins.dll.2023lock
%ProgramFiles%\microsoft office\office14\1033\quickstyles\traditional.dotx в %ProgramFiles%\microsoft office\office14\1033\quickstyles\traditional.dotx.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00915_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00915_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubwzint.dll в %ProgramFiles%\microsoft office\office14\1033\pubwzint.dll.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00726_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00726_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00486_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00486_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00364_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00364_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4b.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir4b.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00197_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00197_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir41f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir41f.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\sl01395_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\sl01395_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\road_01.mid в %ProgramFiles%\microsoft office\clipart\pub60cor\road_01.mid.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\ph03014_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03014_.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir29f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir29f.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir15f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir15f.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir5f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir5f.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir45f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir45f.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe03513_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe03513_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir35f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir35f.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe02296_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe02296_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe01661_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe01661_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir28f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir28f.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so01568_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so01568_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxc в %ProgramFiles%\microsoft office\office14\1033\winword.dev_col.hxc.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0222019.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\xlintl32.dll в %ProgramFiles%\microsoft office\office14\1033\xlintl32.dll.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0205582.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0187423.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0088542.wmf.2023lock
%ProgramFiles%\microsoft office\document themes 14\theme effects\opulent.eftx в %ProgramFiles%\microsoft office\document themes 14\theme effects\opulent.eftx.2023lock
%ProgramFiles%\microsoft office\document themes 14\theme effects\composite.eftx в %ProgramFiles%\microsoft office\document themes 14\theme effects\composite.eftx.2023lock
%ProgramFiles%\microsoft office\document themes 14\horizon.thmx в %ProgramFiles%\microsoft office\document themes 14\horizon.thmx.2023lock
%ProgramFiles%\microsoft office\document themes 14\aspect.thmx в %ProgramFiles%\microsoft office\document themes 14\aspect.thmx.2023lock
%ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif в %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143750.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na00389_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na00389_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\wb01839_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\wb01839_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\wb01304g.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\wb01304g.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\wb01243_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\wb01243_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\tr00172_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\tr00172_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\tn00234_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\tn00234_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\sy01252_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\sy01252_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\sprng_01.mid в %ProgramFiles%\microsoft office\clipart\pub60cor\sprng_01.mid.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so02413_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so02413_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so02054_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so02054_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir15f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir15f.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme46.css в %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme46.css.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe00640_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe00640_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0187817.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0187817.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0185786.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0185786.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\outlook_f_col.hxk в %ProgramFiles%\microsoft office\office14\1033\outlook_f_col.hxk.2023lock
%ProgramFiles%\microsoft office\office14\1033\onintl.rest.idx_dll в %ProgramFiles%\microsoft office\office14\1033\onintl.rest.idx_dll.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0172067.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0172067.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\ois_col.hxc в %ProgramFiles%\microsoft office\office14\1033\ois_col.hxc.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0153514.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0153514.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\mspub.hxs в %ProgramFiles%\microsoft office\office14\1033\mspub.hxs.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0152898.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0152898.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0152690.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0152690.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0152556.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0152556.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0107658.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0107658.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0107480.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0107480.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0107308.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0107308.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0107154.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0107154.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0106222.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0106222.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0105504.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0105504.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0105368.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0105368.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0195788.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0195788.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0198226.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0198226.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0187895.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0187895.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0199483.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0199483.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe00050_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe00050_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0212299.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0212299.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme30.css в %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme30.css.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\outdr_01.mid в %ProgramFiles%\microsoft office\clipart\pub60cor\outdr_01.mid.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na02423_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na02423_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na02361_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na02361_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na01852_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na01852_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na01357_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na01357_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme14.css в %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme14.css.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na01069_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na01069_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif в %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02077_.gif.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0251301.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pub6intl.rest.idx_dll в %ProgramFiles%\microsoft office\office14\1033\pub6intl.rest.idx_dll.2023lock
%ProgramFiles%\microsoft office\office14\1033\ppintl.dll в %ProgramFiles%\microsoft office\office14\1033\ppintl.dll.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0304405.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0304405.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0295069.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0295069.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0285484.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0285484.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0251007.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0251007.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0239973.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0239973.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0238927.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0238927.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0232393.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0232393.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na00523_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na00523_.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0287005.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0287005.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0297749.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0297749.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18187_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18187_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir36f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir36f.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate.css в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\slate.css.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\tab_on.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\graycheck\tab_on.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\tab_off.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\brightorange\tab_off.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir29f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir29f.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_right.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\button_right.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir17f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir17f.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_earthy.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\bg_earthy.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme48.css в %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme48.css.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\utilityfunctions.js в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\utilityfunctions.js.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition.fdt в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\formstemplates\hiring requisition.fdt.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme32.css в %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme32.css.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme16.css в %ProgramFiles%\microsoft office\office14\1033\pubftscm\scheme16.css.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_slateblue.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms\bg_slateblue.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubftscm\fontschm.ini в %ProgramFiles%\microsoft office\office14\1033\pubftscm\fontschm.ini.2023lock
%ProgramFiles%\microsoft office\office14\1033\ppintl.rest.idx_dll в %ProgramFiles%\microsoft office\office14\1033\ppintl.rest.idx_dll.2023lock
%ProgramFiles%\microsoft office\office14\1033\outlperf.h в %ProgramFiles%\microsoft office\office14\1033\outlperf.h.2023lock
%ProgramFiles%\microsoft office\office14\1033\ois_f_col.hxk в %ProgramFiles%\microsoft office\office14\1033\ois_f_col.hxk.2023lock
%ProgramFiles%\microsoft office\office14\1033\mspub_col.hxc в %ProgramFiles%\microsoft office\office14\1033\mspub_col.hxc.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\background.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\formsstyles\swirl\background.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir46f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir46f.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir6f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\pdir6f.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir17f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir17f.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\toolicons\indomain.ico в %ProgramFiles%\microsoft office\office14\groove\toolicons\indomain.ico.2023lock
%ProgramFiles%\microsoft office\office14\1033\xlintl32.rest.idx_dll в %ProgramFiles%\microsoft office\office14\1033\xlintl32.rest.idx_dll.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_center.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\rtf_center.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\utilityfunctions.js в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\utilityfunctions.js.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_alignright.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\rtf_alignright.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\tab_on.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\swirl\tab_on.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\tab_off.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\softblue\tab_off.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lightspirit.css в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\lightspirit.css.2023lock
%ProgramFiles%\microsoft office\office14\1033\winword.dev_f_col.hxk в %ProgramFiles%\microsoft office\office14\1033\winword.dev_f_col.hxk.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\header.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\brightyellow\header.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\reviewrouting_review.xsn в %ProgramFiles%\microsoft office\office14\1033\reviewrouting_review.xsn.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana\tab_off.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\formsstyles\americana\tab_off.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\delete.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\delete.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\qryint32.dll в %ProgramFiles%\microsoft office\office14\1033\qryint32.dll.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_formshomepageslice.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms4\bg_formshomepageslice.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\submit.js в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\submit.js.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50b.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir50b.gif.2023lock
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\macroprogress.gif в %ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms3\macroprogress.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir43b.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir43b.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir2f.gif в %ProgramFiles%\microsoft office\office14\1033\pubspapr\zpdir2f.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0105276.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0105276.wmf.2023lock
%ProgramFiles%\microsoft office\office14\borders\msart10.bdr в %ProgramFiles%\microsoft office\office14\borders\msart10.bdr.2023lock
%ProgramFiles%\microsoft office\office14\1033\msaccess_f_col.hxk в %ProgramFiles%\microsoft office\office14\1033\msaccess_f_col.hxk.2023lock
%ProgramFiles%\microsoft office\office14\1033\ipedintl.dll в %ProgramFiles%\microsoft office\office14\1033\ipedintl.dll.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\j0115855.gif в %ProgramFiles%\microsoft office\media\office14\lines\j0115855.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd21330_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd21330_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd21305_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd21305_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd14845_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd14845_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd10307_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd10307_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\j0115839.gif в %ProgramFiles%\microsoft office\media\office14\bullets\j0115839.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd21480_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd21480_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd21344_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd21344_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd21304_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd21304_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd15173_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd15173_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd15056_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd15056_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd14868_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd14868_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd14756_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd14756_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd14578_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd14578_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd10300_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd10300_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18254_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18254_.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18237_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18237_.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18221_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18221_.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18205_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18205_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\certintl.dll в %ProgramFiles%\microsoft office\office14\1033\certintl.dll.2023lock
%ProgramFiles%\microsoft office\office14\1033\envelopr.dll в %ProgramFiles%\microsoft office\office14\1033\envelopr.dll.2023lock
%ProgramFiles%\microsoft office\office14\1033\graph_col.hxc в %ProgramFiles%\microsoft office\office14\1033\graph_col.hxc.2023lock
%ProgramFiles%\microsoft office\office14\accicons.exe в %ProgramFiles%\microsoft office\office14\accicons.exe.2023lock
%ProgramFiles%\microsoft office\office14\forms\1033\signs.ico в %ProgramFiles%\microsoft office\office14\forms\1033\signs.ico.2023lock
%ProgramFiles%\microsoft office\office14\forms\1033\scdrestl.ico в %ProgramFiles%\microsoft office\office14\forms\1033\scdrestl.ico.2023lock
%ProgramFiles%\microsoft office\office14\forms\1033\reportl.ico в %ProgramFiles%\microsoft office\office14\forms\1033\reportl.ico.2023lock
%ProgramFiles%\microsoft office\office14\forms\1033\ooftmpl.cfg в %ProgramFiles%\microsoft office\office14\forms\1033\ooftmpl.cfg.2023lock
%ProgramFiles%\microsoft office\office14\forms\1033\exitems.ico в %ProgramFiles%\microsoft office\office14\forms\1033\exitems.ico.2023lock
%ProgramFiles%\microsoft office\office14\forms\1033\appts.ico в %ProgramFiles%\microsoft office\office14\forms\1033\appts.ico.2023lock
%ProgramFiles%\microsoft office\office14\entitydatahandler.dll в %ProgramFiles%\microsoft office\office14\entitydatahandler.dll.2023lock
%ProgramFiles%\microsoft office\office14\convert\pab.sam в %ProgramFiles%\microsoft office\office14\convert\pab.sam.2023lock
%ProgramFiles%\microsoft office\office14\convert\1033\org97r.sam в %ProgramFiles%\microsoft office\office14\convert\1033\org97r.sam.2023lock
%ProgramFiles%\microsoft office\office14\groove\toolicons\sessionowner.ico в %ProgramFiles%\microsoft office\office14\groove\toolicons\sessionowner.ico.2023lock
%ProgramFiles%\microsoft office\office14\charsettable.chr в %ProgramFiles%\microsoft office\office14\charsettable.chr.2023lock
%ProgramFiles%\microsoft office\office14\1033\groove_col.hxt в %ProgramFiles%\microsoft office\office14\1033\groove_col.hxt.2023lock
%ProgramFiles%\microsoft office\office14\bibliography\sort\year.xsl в %ProgramFiles%\microsoft office\office14\bibliography\sort\year.xsl.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts.css в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\sts.css.2023lock
%ProgramFiles%\microsoft office\office14\bcsclient.msg.dll в %ProgramFiles%\microsoft office\office14\bcsclient.msg.dll.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis.css в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis.css.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert.css в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert.css.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay\tab_off.gif в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\biscay\tab_off.gif.2023lock
%ProgramFiles%\microsoft office\office14\addins\msspc.ecf в %ProgramFiles%\microsoft office\office14\addins\msspc.ecf.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_lightspirit.gif в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_lightspirit.gif.2023lock
%ProgramFiles%\microsoft office\office14\forms\1033\tasks.ico в %ProgramFiles%\microsoft office\office14\forms\1033\tasks.ico.2023lock
%ProgramFiles%\microsoft office\office14\groove\sounds\things\coupler.wav в %ProgramFiles%\microsoft office\office14\groove\sounds\things\coupler.wav.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0102984.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0102984.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\j0115835.gif в %ProgramFiles%\microsoft office\media\office14\bullets\j0115835.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0199473.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0199473.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0198102.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0198102.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0195428.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0195428.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0187883.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0187883.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0187647.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0187647.wmf.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties в %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_it.properties.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg в %ProgramFiles%\java\jre1.8.0_45\lib\amd64\jvm.cfg.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\splashscreen.dll в %ProgramFiles%\java\jre1.8.0_45\bin\splashscreen.dll.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0185778.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0185778.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0171847.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0171847.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0153398.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0153398.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0152892.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0152892.wmf.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\orbd.exe в %ProgramFiles%\java\jre1.8.0_45\bin\orbd.exe.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0152628.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0152628.wmf.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\jpeg.dll в %ProgramFiles%\java\jre1.8.0_45\bin\jpeg.dll.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0152432.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0152432.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0136865.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0136865.wmf.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\javafx_iio.dll в %ProgramFiles%\java\jre1.8.0_45\bin\javafx_iio.dll.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0107528.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0107528.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0107458.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0107458.wmf.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\glib-lite.dll в %ProgramFiles%\java\jre1.8.0_45\bin\glib-lite.dll.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0215718.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0215718.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0230558.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0230558.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe02288_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe02288_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe01172_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe01172_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe00608_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe00034_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe00034_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\nbook_01.mid в %ProgramFiles%\microsoft office\clipart\pub60cor\nbook_01.mid.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na02413_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na02413_.wmf.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar в %ProgramFiles%\java\jre1.8.0_45\lib\ext\localedata.jar.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na02264_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na02264_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na01848_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na01848_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na01064_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na01064_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\hh00623_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na00494_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na00494_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na00330_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na00330_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0301432.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0301432.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0294989.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0294989.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0287417.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287417.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0282932.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0282932.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0250504.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0250504.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0239965.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0239965.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0237759.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0237759.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0107300.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0107300.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0107150.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0107150.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0106146.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0106146.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bd09194_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bd00141_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\an04195_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\an01173_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\ag00171_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\ag00129_.gif.2023lock
%ProgramFiles%\microsoft analysis services\as oledb\10\msolui100.dll в %ProgramFiles%\microsoft analysis services\as oledb\10\msolui100.dll.2023lock
%ProgramFiles%\java\jre1.8.0_45\license в %ProgramFiles%\java\jre1.8.0_45\license.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja в %ProgramFiles%\java\jre1.8.0_45\lib\psfont.properties.ja.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\jce.jar в %ProgramFiles%\java\jre1.8.0_45\lib\jce.jar.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf в %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidabrightregular.ttf.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar в %ProgramFiles%\java\jre1.8.0_45\lib\ext\jaccess.jar.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties в %ProgramFiles%\java\jre1.8.0_45\lib\deploy\messages_es.properties.2023lock
%ProgramFiles%\java\jre1.8.0_45\copyright в %ProgramFiles%\java\jre1.8.0_45\copyright.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt в %ProgramFiles%\java\jre1.8.0_45\bin\server\xusage.txt.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\nio.dll в %ProgramFiles%\java\jre1.8.0_45\bin\nio.dll.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\jp2native.dll в %ProgramFiles%\java\jre1.8.0_45\bin\jp2native.dll.2023lock
%ProgramFiles%\java\jre1.8.0_45\bin\javafx_font.dll в %ProgramFiles%\java\jre1.8.0_45\bin\javafx_font.dll.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bl00265_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bl00985_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bl00098_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bs00439_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0105496.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0105496.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid в %ProgramFiles%\microsoft office\clipart\pub60cor\carbn_01.mid.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0105348.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0105348.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0105266.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0105266.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0102594.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0102594.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099204.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099172.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0090779.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\j0075478.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\hm00426_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\na01354_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\na01354_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\pe03466_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\pe03466_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\hh00231_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\fd02075_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\fd00799_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\fd00382_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\en00397_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\dd01630_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\dd01172_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\dd01140_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\dd00297_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\hh01329_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\re00006_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\re00006_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\sl01041_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\sl01041_.wmf.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf в %ProgramFiles%\java\jre1.8.0_45\lib\fonts\lucidasansregular.ttf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bl00269_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_greentea.gif в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\bg_greentea.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bl00122_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bd09664_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bd00155_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\gr8galry.gra в %ProgramFiles%\microsoft office\office14\1033\gr8galry.gra.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\an04206_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\an01184_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\ag00174_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\ag00135_.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\eawfintl.dll в %ProgramFiles%\microsoft office\office14\1033\eawfintl.dll.2023lock
%ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll в %ProgramFiles%\microsoft analysis services\as oledb\10\resources\1033\msolui100.rll.2023lock
%ProgramFiles%\microsoft office\office14\1033\bhointl.dll в %ProgramFiles%\microsoft office\office14\1033\bhointl.dll.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd21527_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd21527_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd21326_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd21326_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd15302_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd15302_.gif.2023lock
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt в %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd14801_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd14801_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\lines\bd10289_.gif в %ProgramFiles%\microsoft office\media\office14\lines\bd10289_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\boatinst.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue.css в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\babyblue.css.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\tab_off.gif в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\desert\tab_off.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\tab_off.gif в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\oasis\tab_off.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0090783.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0086420.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\in00046_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\hh01618_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\hh00636_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\hh00236_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\fd02097_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\fd00965_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\fd00403_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\dd01761_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid в %ProgramFiles%\microsoft office\clipart\pub60cor\explr_01.mid.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\dd01176_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\dd01145_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\dd00405_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\msaccess_col.hxc в %ProgramFiles%\microsoft office\office14\1033\msaccess_col.hxc.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\classic1.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\bs00441_.wmf.2023lock
%ProgramFiles%\microsoft office\office14\1033\invite or link.one в %ProgramFiles%\microsoft office\office14\1033\invite or link.one.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\tab_on.gif в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\springgreen\tab_on.gif.2023lock
%ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\tab_on.gif в %ProgramFiles%\microsoft office\office14\1033\grooveforms5\formsstyles\softblue\tab_on.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099174.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18203_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18203_.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd21434_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd21434_.gif.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\resources.jar в %ProgramFiles%\java\jre1.8.0_45\lib\resources.jar.2023lock
%ProgramFiles%\microsoft office\document themes 14\apex.thmx в %ProgramFiles%\microsoft office\document themes 14\apex.thmx.2023lock
%ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif в %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\wb02073_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif в %ProgramFiles%\microsoft office\clipart\publisher\backgrounds\j0143748.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\wb01770_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\wb01770_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\wb01300_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\wb01300_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\wb01241_.gif в %ProgramFiles%\microsoft office\clipart\pub60cor\wb01241_.gif.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\tr00116_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\tr00116_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\tn00218_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\tn00218_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\sy00882_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\sy00882_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so02958_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so02958_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so02270_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so02270_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so02048_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so02048_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so01563_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so01563_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00913_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00913_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00694_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00694_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00479_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00479_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00350_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00350_.wmf.2023lock
%ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc в %ProgramFiles%\java\jre1.8.0_45\lib\jfr\profile.jfc.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\so00192_.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\so00192_.wmf.2023lock
%ProgramFiles%\microsoft office\document themes 14\grid.thmx в %ProgramFiles%\microsoft office\document themes 14\grid.thmx.2023lock
%ProgramFiles%\microsoft office\document themes 14\thatch.thmx в %ProgramFiles%\microsoft office\document themes 14\thatch.thmx.2023lock
%ProgramFiles%\microsoft office\document themes 14\theme effects\civic.eftx в %ProgramFiles%\microsoft office\document themes 14\theme effects\civic.eftx.2023lock
%ProgramFiles%\microsoft office\document themes 14\theme effects\module.eftx в %ProgramFiles%\microsoft office\document themes 14\theme effects\module.eftx.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd21301_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd21301_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd15171_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd15171_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd15022_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd15022_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd14866_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd14866_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd14754_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd14754_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd14533_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd14533_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd10298_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd10298_.gif.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18252_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18252_.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18235_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18235_.wmf.2023lock
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099158.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18219_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18219_.wmf.2023lock
%ProgramFiles%\microsoft office\media\office14\autoshap\bd18184_.wmf в %ProgramFiles%\microsoft office\media\office14\autoshap\bd18184_.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0301480.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0301480.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0297551.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0297551.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0286034.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0286034.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0240695.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0222015.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0205462.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf в %ProgramFiles%\microsoft office\media\cagcat10\j0186002.wmf.2023lock
%ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw в %ProgramFiles%\microsoft office\media\cagcat10\cagcat10.mmw.2023lock
%ProgramFiles%\microsoft office\media\office14\bullets\bd21342_.gif в %ProgramFiles%\microsoft office\media\office14\bullets\bd21342_.gif.2023lock
%ProgramFiles%\microsoft office\office14\installed_schemas14.xss в %ProgramFiles%\microsoft office\office14\installed_schemas14.xss.2023lock

Изменяет следующие файлы

Изменяет множество файлов.

Изменяет множество файлов пользовательских данных (Trojan.Encoder).

Изменяет расширения файлов пользовательских данных (Trojan.Encoder).

Другое

Запускает на исполнение

'<SYSTEM32>\cmd.exe' wbadmin delete catalog -quiet && vssadmin.exe delete shadows /all /quiet && bcdedit.exe /set {current} nx AlwaysOff && wmic SHADOWCOPY DELETE
'<SYSTEM32>\wbadmin.exe' delete catalog -quiet
'<SYSTEM32>\wbengine.exe'
'%WINDIR%\syswow64\mshta.exe' "%TEMP%\1576693964120002259.hta"
'<SYSTEM32>\vds.exe'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней