Trojan.Encoder.38820

Техническая информация

Для обеспечения автозапуска и распространения

Создает или изменяет следующие файлы

%APPDATA%\microsoft\windows\start menu\programs\startup\9rdebcpukefhj1a1jybkpuxsi.exe

Создает следующие файлы на съемном носителе

<Имя диска съемного носителя>:\archer.avi
<Имя диска съемного носителя>:\20140114.rdf
<Имя диска съемного носителя>:\schema.rdf
<Имя диска съемного носителя>:\roozenedowebinar.pptx
<Имя диска съемного носителя>:\samieee_obiee_presentation.pptx
<Имя диска съемного носителя>:\hypothyroidism_slides.pptx
<Имя диска съемного носителя>:\stoc13_ml_quoc_le.pptx
<Имя диска съемного носителя>:\indogerman2010.pptx
<Имя диска съемного носителя>:\waterresourcesag.pptx
<Имя диска съемного носителя>:\asaprojectcompetition.pptx
<Имя диска съемного носителя>:\writingcompletesarnarrative_1103.ppt
<Имя диска съемного носителя>:\metac.ppt
<Имя диска съемного носителя>:\clip_480_5sec_6mbps_h264.mp4
<Имя диска съемного носителя>:\arrow-down.png
<Имя диска съемного носителя>:\background.png
<Имя диска съемного носителя>:\asm.png
<Имя диска съемного носителя>:\block.png
<Имя диска съемного носителя>:\ck_ugo.pem
<Имя диска съемного носителя>:\cert.pem
<Имя диска съемного носителя>:\tunpersonalca1.pem
<Имя диска съемного носителя>:\hhhlcert.pem
<Имя диска съемного носителя>:\systisoft.pem
<Имя диска съемного носителя>:\bc01.pdf
<Имя диска съемного носителя>:\spib_pima.pdf
<Имя диска съемного носителя>:\2015-02-worms-nanoparticle-toxicity.pdf
<Имя диска съемного носителя>:\cbz.png
<Имя диска съемного носителя>:\7790_preview.pdf
<Имя диска съемного носителя>:\digest.rdf
<Имя диска съемного носителя>:\calculatorworksheet.xls
<Имя диска съемного носителя>:\calculatorworksheet.zip
<Имя диска съемного носителя>:\contractualdeadlines.zip
<Имя диска съемного носителя>:\fiche_inscription_2015.zip
<Имя диска съемного носителя>:\excel_example.zip
<Имя диска съемного носителя>:\1sm_price.zip
<Имя диска съемного носителя>:\subjectclassification.zip
<Имя диска съемного носителя>:\national_autism_preparation_programs.xlsx
<Имя диска съемного носителя>:\disclosuredetails.xlsx
<Имя диска съемного носителя>:\productos.xls
<Имя диска съемного носителя>:\contractualdeadlines.xls
<Имя диска съемного носителя>:\price030215.xls
<Имя диска съемного носителя>:\contenttypes.rdf
<Имя диска съемного носителя>:\skos.rdf
<Имя диска съемного носителя>:\1sm_price.xls
<Имя диска съемного носителя>:\babyboymaintoscenesbackground.wmv
<Имя диска съемного носителя>:\flower_trans_matte.wmv
<Имя диска съемного носителя>:\babyboymaintoscenesbackground_pal.wmv
<Имя диска съемного носителя>:\testwmv.wmv
<Имя диска съемного носителя>:\myhrvoldhanssenbiharfamine.rtf
<Имя диска съемного носителя>:\phytoremediation.rtf
<Имя диска съемного носителя>:\waterlandhealthkano.rtf
<Имя диска съемного носителя>:\foaf.rdf
<Имя диска съемного носителя>:\taxus_baccata.rdf
<Имя диска съемного носителя>:\elvisimp.rdf
<Имя диска съемного носителя>:\excel_example.xls
<Имя диска съемного носителя>:\video_1.mp4
<Имя диска съемного носителя>:\51.mp4
<Имя диска съемного носителя>:\video.mp4
<Имя диска съемного носителя>:\issi2013_template_for_posters.docx
<Имя диска съемного носителя>:\cveuropeo.doc
<Имя диска съемного носителя>:\lisp_success.doc
<Имя диска съемного носителя>:\hanni_umami_chapter.doc
<Имя диска съемного носителя>:\ovp25012015.doc
<Имя диска съемного носителя>:\508softwareandos.doc
<Имя диска съемного носителя>:\applicantform_en.doc
<Имя диска съемного носителя>:\uep_form_786_bulletin_1726i602.doc
<Имя диска съемного носителя>:\weeklysheet1215.doc
<Имя диска съемного носителя>:\testee.cer
<Имя диска съемного носителя>:\hadac_newsletter_july_2010_final.docx
<Имя диска съемного носителя>:\contoso_1.cer
<Имя диска съемного носителя>:\contoso.cer
<Имя диска съемного носителя>:\sdksampleunprivdeveloper.cer
<Имя диска съемного носителя>:\dashborder_144.bmp
<Имя диска съемного носителя>:\dashborder_96.bmp
<Имя диска съемного носителя>:\toolbar.bmp
<Имя диска съемного носителя>:\coffee.bmp
<Имя диска съемного носителя>:\dial.bmp
<Имя диска съемного носителя>:\tileimage.bmp
<Имя диска съемного носителя>:\delete.avi
<Имя диска съемного носителя>:\join.avi
<Имя диска съемного носителя>:\000814251_video_01.avi
<Имя диска съемного носителя>:\sdkfailsafeemulator.cer
<Имя диска съемного носителя>:\adhd_and_obesity.docx
<Имя диска съемного носителя>:\glidescope_review_rev_010.docx
<Имя диска съемного носителя>:\aoc_saq_d_v3_merchant.docx
<Имя диска съемного носителя>:\clip_1080_5sec_10mbps_h264.mp4
<Имя диска съемного носителя>:\ituneshelpunavailable.html
<Имя диска съемного носителя>:\d0068197bb5a41fea16a220c45390606.mp4
<Имя диска съемного носителя>:\spanner.mov
<Имя диска съемного носителя>:\dag2_panel1_320_ref.mov
<Имя диска съемного носителя>:\region-north-karelia.jpg
<Имя диска съемного носителя>:\210252809.jpg
<Имя диска съемного носителя>:\168.jpg
<Имя диска съемного носителя>:\2.jpg
<Имя диска съемного носителя>:\1189.jpeg
<Имя диска съемного носителя>:\4f0bf7ff71f28.jpeg
<Имя диска съемного носителя>:\alert.html
<Имя диска съемного носителя>:\about.html
<Имя диска съемного носителя>:\64bit_notes.htm
<Имя диска съемного носителя>:\chromesetup.exe
<Имя диска съемного носителя>:\advice_process.htm
<Имя диска съемного носителя>:\tree_view.htm
<Имя диска съемного носителя>:\ituneshelpunavailable.htm
<Имя диска съемного носителя>:\tcm851ax32.exe
<Имя диска съемного носителя>:\utorrent.exe
<Имя диска съемного носителя>:\calc.exe
<Имя диска съемного носителя>:\dotnetfx45_full_setup.exe
<Имя диска съемного носителя>:\skypesetup.exe
<Имя диска съемного носителя>:\winmine.exe
<Имя диска съемного носителя>:\jre-7u75-windows-i586-iftw.exe
<Имя диска съемного носителя>:\wrar520.exe
<Имя диска съемного носителя>:\productos.zip
<Имя диска съемного носителя>:\---==%$$$open_me_up$$$==---.txt

Вредоносные функции

Для затруднения выявления своего присутствия в системе

блокирует запуск следующих системных утилит:

Системный антивирус (Защитник Windows)

удаляет теневые копии разделов.

Завершает или пытается завершить

следующие системные процессы:

%WINDIR%\explorer.exe

следующие пользовательские процессы:

iexplore.exe

Читает файлы, отвечающие за хранение паролей сторонними программами

%LOCALAPPDATA%\google\chrome\user data\default\cookies
%LOCALAPPDATA%\google\chrome\user data\default\login data
%LOCALAPPDATA%\google\chrome\user data\default\web data

Изменения в файловой системе

Создает следующие файлы

D:\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\vi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\uk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\tr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\th\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\sk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ru\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ro\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pt_pt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pt_br\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\pl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\en\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\no\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\lv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\lt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ko\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ja\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\it\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\id\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hu\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\hi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\he\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fil\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\fi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\nl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\es\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\zh_cn\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ko\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ja\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\it\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\id\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hu\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\hi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\he\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fil\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\fi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\et\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\zh_tw\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_us\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en_gb\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\en\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\el\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\de\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\da\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\cs\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ca\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\bg\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ar\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\es_419\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\nl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\lv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\da\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fil\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\es\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\en\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\el\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\de\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\da\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\cs\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ca\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\bg\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ar\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\fr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\he\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\de\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_cn\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\vi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\uk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\tr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\th\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\sk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ru\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ro\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_pt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\zh_tw\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\el\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ca\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\bg\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\ar\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_tw\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\zh_cn\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\vi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\uk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\tr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\th\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\sr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\__macosx\_locales\cs\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\hu\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ro\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_pt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pt_br\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\pl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\no\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\nl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\lt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ko\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ja\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\it\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\id\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\_locales\ru\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\no\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\office\groove\system\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds cache\15ivkcr3\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\media player\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\media player\sync playlists\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\media player\sync playlists\en-us\0000b025\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\internet explorer\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\internet explorer\recovery\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\internet explorer\recovery\high\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\internet explorer\recovery\high\active\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds cache\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds cache\xwtafhng\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds cache\bbs9hw0e\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds cache\6fwa5ftw\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\office\groove\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\office\groove\user\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\webslices~\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds\microsoft feeds~\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds\feeds for united states~\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\credentials\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\widevinecdm\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\swiftshader\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\pnacl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\pepperflash\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\evwhitelist\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds\{5588acfd-6436-411b-a5ce-666ae6a92d3d}~\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\feeds\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\windows mail\backup\new\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\session storage\---==%$$$open_me_up$$$==---.txt
%TEMP%\microsoft .net framework 4 setup_4.0.30319\---==%$$$open_me_up$$$==---.txt
%TEMP%\low\---==%$$$open_me_up$$$==---.txt
%TEMP%\hsperfdata_user\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\programs\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\programs\common\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\thumbnails\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\startupcache\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\safebrowsing\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\office\---==%$$$open_me_up$$$==---.txt
%TEMP%\microsoft visual c++ 2010 x64 redistributable setup_10.0.30319\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\safebrowsing\google4\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\cache2\entries\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\cache2\doomed\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\m15ucxjx.default\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft help\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\windows sidebar\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\windows sidebar\gadgets\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\windows media\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\windows media\12.0\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\windows mail\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\windows mail\stationery\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\microsoft\windows mail\backup\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\offlinecache\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\v08trqk6.default-release\cache2\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticonsold\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\jumplisticons\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fil\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\es\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\en\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\el\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\de\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\da\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\cs\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ca\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\bg\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ar\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_cn\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\vi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\uk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\tr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\th\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\sk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ru\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\ro\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_pt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pt_br\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\zh_tw\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\fi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\hu\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\se\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__macosx\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\__macosx\_locales\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_tw\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\zh_cn\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\vi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\uk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\tr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\th\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\sk\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ru\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ro\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_pt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pt_br\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\pl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\no\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\nl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\lt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ko\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\ja\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\it\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\_locales\id\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pt_br\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\pl\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\no\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\nl\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\user account pictures\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\store\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\service\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\results\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\scans\history\cachemanager\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\quarantine\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\localcopy\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\definition updates\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\definition updates\{d2b0b133-42ed-44d3-809a-46ebb62ba863}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\definition updates\updates\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\definition updates\backup\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\vault\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\network\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\support\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\office\uicaptions\3082\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\search\data\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\search\data\temp\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\search\data\applications\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\rac\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\rac\temp\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\rac\statedata\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\rac\publisheddata\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\rac\outbound\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\cache\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\office\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\office\uicaptions\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\search\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\user account pictures\default pictures\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\mozilla\updates\308046b0af4a39cb\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\mozilla\updates\d78bf5dd33499ec2\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\vcruntimeminimum_x86\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{050d4fc8-5d48-4b8f-8972-47c82c46020f}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\oracle\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\oracle\java\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\oracle\java\javapath\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\oracle\java\installcache_x64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\mozilla\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\mozilla\updates\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\activitylog\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\common coverpages\en-us\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\wwansvc\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\wpd\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msscan\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\en-us\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\sentitems\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\queue\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\inbox\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\common coverpages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft help\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\office\uicaptions\1036\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\network\downloader\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{13a4ee12-23ea-3371-91ee-efb36ddfff3e}v12.0.21005\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\adobe\arm\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\adobe\arm\{291aa914-a987-4ce9-bd63-ac0a92d435e5}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\adobe\arm\s\---==%$$$open_me_up$$$==---.txt
C:\perflogs\---==%$$$open_me_up$$$==---.txt
C:\perflogs\admin\---==%$$$open_me_up$$$==---.txt
C:\msocache\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\adobe\setup\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
C:\kms\---==%$$$open_me_up$$$==---.txt
<Текущая директория>\---==%$$$open_me_up$$$==---.txt
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\adobe\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\adobe\setup\{ac76ba86-7ad7-1033-7b44-ac0f074e4100}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\en-us\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\network\connections\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\en-us\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\msdn\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\msdn\8.0\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\mf\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\media player\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\identitycrl\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\ehome\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\ehome\logs\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\drm\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\drm\server\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\devicesync\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\task\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\task\{e35be42d-f742-4d96-a50a-1775fb1a7a42}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\assistance\client\1.0\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\task\{07deb856-fc6e-4fb9-8add-d8f2cf8722c9}\en-us\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\device\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\device\{8702d817-5aad-4674-9ef3-4d3decd87120}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\device stage\device\{113527a4-45d4-4b6f-b567-97838f1b04b0}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\crypto\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\crypto\rsa\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\crypto\rsa\s-1-5-18\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\crypto\rsa\machinekeys\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\crypto\keys\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\crypto\dss\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\crypto\dss\machinekeys\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\assistance\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\assistance\client\---==%$$$open_me_up$$$==---.txt
%TEMP%\microsoft visual c++ 2010 x86 redistributable setup_10.0.30319\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\_locales\pl\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{295d1583-fdb9-414b-a4c8-da539362a26b}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\---==%$$$open_me_up$$$==---.txt
C:\users\default\pictures\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extension rules\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\databases\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\cache\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\caps\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\application\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\visualelements\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\pepperflash\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\extensions\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\default_apps\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extension state\---==%$$$open_me_up$$$==---.txt
C:\users\public\---==%$$$open_me_up$$$==---.txt
C:\users\public\videos\sample videos\---==%$$$open_me_up$$$==---.txt
C:\users\public\recorded tv\---==%$$$open_me_up$$$==---.txt
C:\users\public\recorded tv\sample media\---==%$$$open_me_up$$$==---.txt
C:\users\public\pictures\---==%$$$open_me_up$$$==---.txt
C:\users\public\pictures\sample pictures\---==%$$$open_me_up$$$==---.txt
C:\users\public\music\---==%$$$open_me_up$$$==---.txt
C:\users\public\music\sample music\---==%$$$open_me_up$$$==---.txt
C:\users\public\libraries\---==%$$$open_me_up$$$==---.txt
C:\users\public\favorites\---==%$$$open_me_up$$$==---.txt
C:\users\public\downloads\---==%$$$open_me_up$$$==---.txt
C:\users\public\documents\---==%$$$open_me_up$$$==---.txt
C:\users\public\desktop\---==%$$$open_me_up$$$==---.txt
C:\users\default\---==%$$$open_me_up$$$==---.txt
C:\users\public\videos\---==%$$$open_me_up$$$==---.txt
C:\users\default\videos\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\microsoft\windows defender\scans\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ms\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lv\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\lt\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ko\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ja\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\it\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\id\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hu\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\hi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\he\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fr\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\eu\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fil\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\fi\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\et\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es_419\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\es\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_us\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\en_gb\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\el\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\de\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\da\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\cs\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ca\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\bg\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\apdfllckaahabafndbhieahigkjlhalf\6.2_0\_locales\ar\---==%$$$open_me_up$$$==---.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\aohghmighlieiainnegkcijnfilokake\0.0.0.6_0\__macosx\---==%$$$open_me_up$$$==---.txt
C:\users\default\saved games\---==%$$$open_me_up$$$==---.txt
C:\users\default\music\---==%$$$open_me_up$$$==---.txt
C:\users\default\links\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\packages\vcruntimeminimum_amd64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{bd95a8cd-1d9f-35ad-981a-3e7925026ebb}v11.0.61030\packages\vcruntimeminimum_x86\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{b175520c-86a2-35a7-8619-86dc379688b9}v11.0.61030\packages\vcruntimeadditional_x86\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{a749d8e6-b613-3be3-8f5f-045c84eba29b}v12.0.21005\packages\vcruntimeminimum_amd64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{cf2bea3c-26ea-32f8-aa9b-331f7e34ba97}v11.0.61030\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\vcruntimeadditional_amd64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{929fbd26-9020-399b-9a7a-751d61f0b942}v12.0.21005\packages\vcruntimeadditional_amd64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{6cd9e9ed-906d-4196-8dc3-f987d2f6615f}v14.29.30133\packages\vcruntimeminimum_amd64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{42667d2e-b054-46c1-9d46-2ee1332c14c1}v14.29.30133\packages\vcruntimeadditional_x86\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{38b2c744-ad08-4d5b-91a2-3fb6f739ff3e}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{9d29fc96-9eee-4253-943f-96b3bbfdd0b6}v14.16.27024\packages\vcruntimeadditional_amd64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{e699e009-1c3c-4e50-9b57-2b39f0954c7f}v14.29.30133\---==%$$$open_me_up$$$==---.txt
C:\users\default\downloads\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\---==%$$$open_me_up$$$==---.txt
C:\users\default\favorites\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\---==%$$$open_me_up$$$==---.txt
C:\users\default\documents\---==%$$$open_me_up$$$==---.txt
C:\users\default\desktop\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\roaming\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\roaming\microsoft\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\roaming\microsoft\internet explorer\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\roaming\microsoft\internet explorer\quick launch\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\roaming\media center programs\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\local\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\local\temp\---==%$$$open_me_up$$$==---.txt
C:\users\default\appdata\local\microsoft\---==%$$$open_me_up$$$==---.txt
C:\recovery\---==%$$$open_me_up$$$==---.txt
C:\recovery\4cc8e8a4-51d2-11ee-b826-9a90d4dcffb5\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\sun\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\packages\vcruntimeminimum_x86\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\sun\java\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\sun\java\java update\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{fd9b6070-d13e-45dc-819b-41806bf45b6b}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{f8cfeb22-a2e7-3971-9eda-4b11edefc185}v12.0.21005\packages\vcruntimeadditional_x86\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{f65db027-aff3-4070-886a-0d87064aabb1}\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{f1b0fb3a-e0ea-47a6-9383-3650655403b0}v14.16.27024\packages\vcruntimeminimum_amd64\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{ec9807de-b577-47b1-a024-0251805acf24}v14.29.30133\---==%$$$open_me_up$$$==---.txt
%ALLUSERSPROFILE%\package cache\{37b8f9c7-03fb-3253-8781-2517c99d7c00}v11.0.61030\packages\vcruntimeadditional_amd64\---==%$$$open_me_up$$$==---.txt
%TEMP%\opera installer\---==%$$$open_me_up$$$==---.txt

Перемещает следующие файлы

%TEMP%\adobearm.log в %TEMP%\adobearm.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log в %TEMP%\dd_vcredist_amd64_20230912172247_002_vcruntimeadditional_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912172315.log в %TEMP%\dd_vcredist_amd64_20230912172315.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171710.log в %TEMP%\dd_vcredist_x86_20230912171710.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log в %TEMP%\dd_vcredist_x86_20230912171710_0_vcruntimeminimum_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log в %TEMP%\dd_vcredist_x86_20230912171710_1_vcruntimeadditional_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171759.log в %TEMP%\dd_vcredist_x86_20230912171759.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log в %TEMP%\dd_vcredist_x86_20230912171759_0_vcruntimeminimum_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log в %TEMP%\dd_vcredist_x86_20230912171759_1_vcruntimeadditional_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171936.log в %TEMP%\dd_vcredist_x86_20230912171936.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log в %TEMP%\dd_vcredist_x86_20230912171936_000_vcruntimeminimum_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log в %TEMP%\dd_vcredist_x86_20230912171936_001_vcruntimeadditional_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912172157.log в %TEMP%\dd_vcredist_x86_20230912172157.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log в %TEMP%\dd_vcredist_x86_20230912172157_001_vcruntimeminimum_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log в %TEMP%\dd_vcredist_x86_20230912172157_002_vcruntimeadditional_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912172224.log в %TEMP%\dd_vcredist_x86_20230912172224.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912172322.log в %TEMP%\dd_vcredist_x86_20230912172322.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log в %TEMP%\dd_vcredist_x86_20230912172322_001_vcruntimeminimum_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log в %TEMP%\dd_vcredist_x86_20230912172322_002_vcruntimeadditional_x86.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_x86_20230912172350.log в %TEMP%\dd_vcredist_x86_20230912172350.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt в %TEMP%\dd_wcf_ca_smci_20230913_002944_977.txt_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt в %TEMP%\dd_wcf_ca_smci_20230913_002946_802.txt_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log в %TEMP%\dd_vcredist_amd64_20230912172247_001_vcruntimeminimum_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\opera installer\opera_installer_20230912173243.log в %TEMP%\opera installer\opera_installer_20230912173243.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912172247.log в %TEMP%\dd_vcredist_amd64_20230912172247.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log в %TEMP%\dd_vcredist_amd64_20230912172034_002_vcruntimeadditional_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\adobesfx.log в %TEMP%\adobesfx.log_babyfromparadise_{jlq2h7}.777
%TEMP%\armui.ini в %TEMP%\armui.ini_babyfromparadise_{jlq2h7}.777
%TEMP%\aspnetsetup_00000.log в %TEMP%\aspnetsetup_00000.log_babyfromparadise_{jlq2h7}.777
%TEMP%\aspnetsetup_00001.log в %TEMP%\aspnetsetup_00001.log_babyfromparadise_{jlq2h7}.777
%TEMP%\chrome_installer.log в %TEMP%\chrome_installer.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt в %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt в %TEMP%\dd_ndp48-x86-x64-allos-enu_decompression_log.txt_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_setuputility.txt в %TEMP%\dd_setuputility.txt_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredistmsi12db.txt в %TEMP%\dd_vcredistmsi12db.txt_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredistui12db.txt в %TEMP%\dd_vcredistui12db.txt_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171641.log в %TEMP%\dd_vcredist_amd64_20230912171641.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log в %TEMP%\dd_vcredist_amd64_20230912171641_0_vcruntimeminimum_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log в %TEMP%\dd_vcredist_amd64_20230912171641_1_vcruntimeadditional_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171735.log в %TEMP%\dd_vcredist_amd64_20230912171735.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log в %TEMP%\dd_vcredist_amd64_20230912171735_0_vcruntimeminimum_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log в %TEMP%\dd_vcredist_amd64_20230912171735_1_vcruntimeadditional_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171824.log в %TEMP%\dd_vcredist_amd64_20230912171824.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log в %TEMP%\dd_vcredist_amd64_20230912171824_000_vcruntimeminimum_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log в %TEMP%\dd_vcredist_amd64_20230912171824_001_vcruntimeadditional_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912172034.log в %TEMP%\dd_vcredist_amd64_20230912172034.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log в %TEMP%\dd_vcredist_amd64_20230912172034_001_vcruntimeminimum_x64.log_babyfromparadise_{jlq2h7}.777
%TEMP%\dd_vcredist_amd64_20230912172134.log в %TEMP%\dd_vcredist_amd64_20230912172134.log_babyfromparadise_{jlq2h7}.777
%TEMP%\opera installer\opera_installer_20230912173246.log в %TEMP%\opera installer\opera_installer_20230912173246.log_babyfromparadise_{jlq2h7}.777

Изменяет следующие файлы

D:\install.log
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.msi
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
<Имя диска съемного носителя>:\hanni_umami_chapter.doc
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.msi
<Имя диска съемного носителя>:\ovp25012015.doc
<Имя диска съемного носителя>:\508softwareandos.doc
<Имя диска съемного носителя>:\applicantform_en.doc
<Имя диска съемного носителя>:\uep_form_786_bulletin_1726i602.doc
C:\kms\kms_vl_all_aio_debug.log
<Имя диска съемного носителя>:\weeklysheet1215.doc
C:\kms\kms_vl_all_aio.cmd
<Имя диска съемного носителя>:\testee.cer
<Имя диска съемного носителя>:\contoso_1.cer
<Имя диска съемного носителя>:\sdkfailsafeemulator.cer
<Имя диска съемного носителя>:\contoso.cer
<Имя диска съемного носителя>:\sdksampleunprivdeveloper.cer
<Имя диска съемного носителя>:\dashborder_144.bmp
<Имя диска съемного носителя>:\dashborder_96.bmp
<Имя диска съемного носителя>:\toolbar.bmp
<Имя диска съемного носителя>:\coffee.bmp
<Имя диска съемного носителя>:\dial.bmp
<Имя диска съемного носителя>:\tileimage.bmp
<Имя диска съемного носителя>:\delete.avi
<Имя диска съемного носителя>:\join.avi
<Имя диска съемного носителя>:\000814251_video_01.avi
<Имя диска съемного носителя>:\archer.avi
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww.cab
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww2.cab

Изменяет множество файлов.

Изменяет множество файлов пользовательских данных (Trojan.Encoder).

Другое

Ищет следующие окна

ClassName: 'Progman' WindowName: ''
ClassName: 'Proxy Desktop' WindowName: ''

Создает и запускает на исполнение

'<SYSTEM32>\vssadmin.exe' delete shadows /all /quiet' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\explorer.exe'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней