Trojan.Encoder.41012

Техническая информация

Для обеспечения автозапуска и распространения

Создает следующие файлы на съемном носителе

<Имя диска съемного носителя>:\how to recovery files.txt
<Имя диска съемного носителя>:\indogerman2010.pptx.encrypting
<Имя диска съемного носителя>:\indogerman2010.pptx.encrypting.map
<Имя диска съемного носителя>:\indogerman2010.pptx
<Имя диска съемного носителя>:\stoc13_ml_quoc_le.pptx.encrypting
<Имя диска съемного носителя>:\stoc13_ml_quoc_le.pptx.encrypting.map
<Имя диска съемного носителя>:\stoc13_ml_quoc_le.pptx
<Имя диска съемного носителя>:\waterresourcesag.pptx.encrypting
<Имя диска съемного носителя>:\waterresourcesag.pptx.encrypting.map
<Имя диска съемного носителя>:\writingcompletesarnarrative_1103.ppt.encrypting.map
<Имя диска съемного носителя>:\waterresourcesag.pptx
<Имя диска съемного носителя>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx.encrypting.map
<Имя диска съемного носителя>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx
<Имя диска съемного носителя>:\middaugh_keynote.pptx.encrypting
<Имя диска съемного носителя>:\middaugh_keynote.pptx.encrypting.map
<Имя диска съемного носителя>:\middaugh_keynote.pptx
<Имя диска съемного носителя>:\roozenedowebinar.pptx.encrypting
<Имя диска съемного носителя>:\roozenedowebinar.pptx.encrypting.map
<Имя диска съемного носителя>:\roozenedowebinar.pptx
<Имя диска съемного носителя>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx.encrypting
<Имя диска съемного носителя>:\writingcompletesarnarrative_1103.ppt.encrypting
<Имя диска съемного носителя>:\fungalnameauthors.rtf.encrypting.map
<Имя диска съемного носителя>:\price030215.xls.encrypting
<Имя диска съемного носителя>:\1sm_price.zip.encrypting
<Имя диска съемного носителя>:\1sm_price.zip.encrypting.map
<Имя диска съемного носителя>:\disclosuredetails.xlsx.encrypting
<Имя диска съемного носителя>:\disclosuredetails.xlsx.encrypting.map
<Имя диска съемного носителя>:\al.xlsx.encrypting
<Имя диска съемного носителя>:\al.xlsx.encrypting.map
<Имя диска съемного носителя>:\mjaxm19zbwnjy19jb21wzxrpdglvbl9wb2ludhnfanvsmjaxmy54bhn4.encrypted
<Имя диска съемного носителя>:\guide_reorganization_mapping.xls.encrypting
<Имя диска съемного носителя>:\pubnet_855.rtf.encrypting.map
<Имя диска съемного носителя>:\fungalnameauthors.rtf.encrypting
<Имя диска съемного носителя>:\price030215.xls.encrypting.map
<Имя диска съемного носителя>:\pandp.rtf.encrypting
<Имя диска съемного носителя>:\pandp.rtf.encrypting.map
<Имя диска съемного носителя>:\waterlandhealthkano.rtf.encrypting
<Имя диска съемного носителя>:\waterlandhealthkano.rtf.encrypting.map
<Имя диска съемного носителя>:\krsweden.rtf.encrypting
<Имя диска съемного носителя>:\krsweden.rtf.encrypting.map
<Имя диска съемного носителя>:\pubnet_855.rtf.encrypting
<Имя диска съемного носителя>:\guide_reorganization_mapping.xls.encrypting.map
<Имя диска съемного носителя>:\ksearch_esa_talk.ppt.encrypting
<Имя диска съемного носителя>:\ksearch_esa_talk.ppt.encrypting.map
<Имя диска съемного носителя>:\sim_gametheory_to_finance.ppt.encrypting
<Имя диска съемного носителя>:\mjewmjuyoda5lmpwzw==.encrypted
<Имя диска съемного носителя>:\parnas_01.jpg.encrypting
<Имя диска съемного носителя>:\parnas_01.jpg.encrypting.map
<Имя диска съемного носителя>:\nwfieldnotes1966.docx.encrypting
<Имя диска съемного носителя>:\nwfieldnotes1966.docx.encrypting.map
<Имя диска съемного носителя>:\hadac_newsletter_july_2010_final.docx.encrypting
<Имя диска съемного носителя>:\hadac_newsletter_july_2010_final.docx.encrypting.map
<Имя диска съемного носителя>:\2.jpg.encrypting
<Имя диска съемного носителя>:\c2rzemzvlmrvy3g=.encrypted
<Имя диска съемного носителя>:\weeklysheet1215.doc.encrypting.map
<Имя диска съемного носителя>:\february_catalogue__2015.doc.encrypting
<Имя диска съемного носителя>:\february_catalogue__2015.doc.encrypting.map
<Имя диска съемного носителя>:\correct.avi.encrypting
<Имя диска съемного носителя>:\correct.avi.encrypting.map
<Имя диска съемного носителя>:\delete.avi.encrypting
<Имя диска съемного носителя>:\delete.avi.encrypting.map
<Имя диска съемного носителя>:\decryption_ids.txt
<Имя диска съемного носителя>:\weeklysheet1215.doc.encrypting
<Имя диска съемного носителя>:\my5qcgc=.encrypted
<Имя диска съемного носителя>:\2.jpg.encrypting.map
<Имя диска съемного носителя>:\spanner.mov.encrypting.map
<Имя диска съемного носителя>:\sim_gametheory_to_finance.ppt.encrypting.map
<Имя диска съемного носителя>:\10thingscondoms.pdf.encrypting
<Имя диска съемного носителя>:\proposaltemplates.ppt.encrypting
<Имя диска съемного носителя>:\proposaltemplates.ppt.encrypting.map
<Имя диска съемного носителя>:\sacs_presentation_sacs_qep_improving_rt_education_final.ppt.encrypting
<Имя диска съемного носителя>:\sacs_presentation_sacs_qep_improving_rt_education_final.ppt.encrypting.map
<Имя диска съемного носителя>:\metac.ppt.encrypting
<Имя диска съемного носителя>:\metac.ppt.encrypting.map
<Имя диска съемного носителя>:\bc01.pdf.encrypting
<Имя диска съемного носителя>:\bc01.pdf.encrypting.map
<Имя диска съемного носителя>:\10thingscondoms.pdf.encrypting.map
<Имя диска съемного носителя>:\spanner.mov.encrypting
<Имя диска съемного носителя>:\bg9tnjaylnbkzg==.encrypted
<Имя диска съемного носителя>:\fil_20060629111052.pdf.encrypting
<Имя диска съемного носителя>:\fil_20060629111052.pdf.encrypting.map
<Имя диска съемного носителя>:\mjaxns0wmi13b3jtcy1uyw5vcgfydgljbgutdg94awnpdhkucgrm.encrypted
<Имя диска съемного носителя>:\51.mp4.encrypting
<Имя диска съемного носителя>:\51.mp4.encrypting.map
<Имя диска съемного носителя>:\d0068197bb5a41fea16a220c45390606.mp4.encrypting
<Имя диска съемного носителя>:\d0068197bb5a41fea16a220c45390606.mp4.encrypting.map
<Имя диска съемного носителя>:\price.zip.encrypting.map
<Имя диска съемного носителя>:\price.zip.encrypting

Вредоносные функции

Для затруднения выявления своего присутствия в системе

добавляет исключения антивируса:

'%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "<Текущая директория>\"

Читает файлы, отвечающие за хранение паролей сторонними программами

%HOMEPATH%\desktop\000814251_video_01.avi
%HOMEPATH%\desktop\adhd_and_obesity.docx
%HOMEPATH%\desktop\delete.avi
%HOMEPATH%\desktop\file_p_00000000_1371597592.docx
%HOMEPATH%\desktop\glidescope_review_rev_010.docx
%HOMEPATH%\desktop\join.avi
%HOMEPATH%\desktop\lisp_success.doc
%HOMEPATH%\desktop\ovp25012015.doc
%HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc

Изменения в файловой системе

Создает следующие файлы

%APPDATA%\microsoft\crypto\rsa\s-1-5-21-3691498038-2086406363-2140527554-1000\494bf419e40d26ec80a426c8fc08f5e8_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\resources.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\natives_blob.bin.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_200_percent.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_100_percent.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\decryption_ids.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\how to recovery files.txt
%LOCALAPPDATA%\iconcache.db.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\snapshot_blob.bin.encrypting.map
%LOCALAPPDATA%\decryption_ids.txt
C:\users\public\pictures\sample pictures\tulips.jpg.encrypting.map
C:\users\public\pictures\sample pictures\penguins.jpg.encrypting.map
C:\users\public\pictures\sample pictures\lighthouse.jpg.encrypting.map
C:\users\public\pictures\sample pictures\koala.jpg.encrypting.map
C:\users\public\pictures\sample pictures\jellyfish.jpg.encrypting.map
C:\users\public\pictures\sample pictures\hydrangeas.jpg.encrypting.map
C:\users\public\pictures\sample pictures\desert.jpg.encrypting.map
%LOCALAPPDATA%\how to recovery files.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\how to recovery files.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\decryption_ids.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\chrome.7z.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fa.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\et.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\es.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\es-419.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\en-us.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\en-gb.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\el.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\de.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\da.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\cs.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ca.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\bn.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\bg.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ar.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\am.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\decryption_ids.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\how to recovery files.txt
C:\users\public\pictures\sample pictures\chrysanthemum.jpg.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fi.pak.encrypting.map
C:\users\public\pictures\sample pictures\decryption_ids.txt
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\windows6.1-kb2999226-x64.msu.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\th.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\te.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ta.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sw.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sv.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sr.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sk.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\tr.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ru.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-pt.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-br.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pl.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pa.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nn.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nl.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nb.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ro.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\uk.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\uz.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\vi.pak.encrypting.map
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\decryption_ids.txt
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\how to recovery files.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msscan\decryption_ids.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msscan\how to recovery files.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\en-us\decryption_ids.txt
%ALLUSERSPROFILE%\microsoft\windows nt\msfax\virtualinbox\en-us\how to recovery files.txt
%ALLUSERSPROFILE%\microsoft\rac\statedata\racwmieventdata.dat.encrypting.map
%ALLUSERSPROFILE%\microsoft\rac\statedata\decryption_ids.txt
%ALLUSERSPROFILE%\microsoft\rac\statedata\how to recovery files.txt
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\tokens.dat.encrypting.map
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\decryption_ids.txt
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\how to recovery files.txt
%ProgramFiles(x86)%\windows sidebar\gadgets\slideshow.gadget\images\decryption_ids.txt
%ProgramFiles(x86)%\windows sidebar\gadgets\slideshow.gadget\images\how to recovery files.txt
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zu.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-tw.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-cn.pak.encrypting.map
C:\users\public\pictures\sample pictures\how to recovery files.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fil.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\gu.pak.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\y29va2llcy5zcwxpdgu=.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\cert9.db.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\blist.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\abook.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\decryption_ids.txt
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\how to recovery files.txt
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\mzg3mdexmjcynhjzzwdtbm9pdhrldc1lcy5zcwxpdgu=.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\favicons.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\zw5pz21hawwuc3fsaxrl.encrypted
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\formhistory.sqlite.encrypting.map
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\decryption_ids.txt
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\how to recovery files.txt
%LOCALAPPDATA%\thunderbird\profiles\rehh7ft5.default-release\startupcache\startupcache.8.little.encrypting.map
%LOCALAPPDATA%\thunderbird\profiles\rehh7ft5.default-release\startupcache\decryption_ids.txt
%LOCALAPPDATA%\thunderbird\profiles\rehh7ft5.default-release\startupcache\how to recovery files.txt
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\startupcache\decryption_ids.txt
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\decryption_ids.txt
<Текущая директория>\selfdelete.bat
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\formhistory.sqlite.encrypting.map
%HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc.encrypting.map
%HOMEPATH%\desktop\ovp25012015.doc.encrypting.map
%HOMEPATH%\desktop\lisp_success.doc.encrypting.map
%HOMEPATH%\desktop\join.avi.encrypting.map
%HOMEPATH%\desktop\glidescope_review_rev_010.docx.encrypting.map
%HOMEPATH%\desktop\zmlszv9wxzawmdawmdawxzeznze1otc1otiuzg9jea==.encrypted
%HOMEPATH%\desktop\delete.avi.encrypting.map
%HOMEPATH%\desktop\adhd_and_obesity.docx.encrypting.map
%HOMEPATH%\desktop\000814251_video_01.avi.encrypting.map
%HOMEPATH%\desktop\decryption_ids.txt
%HOMEPATH%\desktop\how to recovery files.txt
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\d2viyxbwc3n0b3jllnnxbgl0zq==.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\places.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\cgvybwlzc2lvbnmuc3fsaxrl.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\openpgp.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\key4.db.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\history.sqlite.encrypting.map
%LOCALAPPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\startupcache\how to recovery files.txt
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\storage\permanent\chrome\idb\how to recovery files.txt
%LOCALAPPDATA%\microsoft\windows mail\backup\new\edb00001.log.encrypting.map
%LOCALAPPDATA%\microsoft\windows mail\backup\new\decryption_ids.txt
%LOCALAPPDATA%\microsoft\windows mail\backup\new\how to recovery files.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ko.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\nl.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\nb.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ms.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\mr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ml.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\lv.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\lt.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\kn.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pt-br.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ja.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\it.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\id.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hu.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hi.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\he.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ms.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ro.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pt-pt.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sk.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pl.pak.encrypting.map
%LOCALAPPDATA%\microsoft\windows mail\edb00001.log.encrypting.map
%LOCALAPPDATA%\microsoft\windows mail\edb.log.encrypting.map
%LOCALAPPDATA%\microsoft\windows mail\decryption_ids.txt
%LOCALAPPDATA%\microsoft\windows mail\how to recovery files.txt
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\zh-tw.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\zh-cn.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\vi.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\uk.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\tr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\th.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\te.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ta.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sw.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sv.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sl.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ru.pak.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\global-messages-db.sqlite.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\mk.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-us.pak.encrypting.map
%ProgramFiles%\microsoft office\office14\1033\how to recovery files.txt
%ProgramFiles%\microsoft office\office14\outlfltr.dat.encrypting.map
%ProgramFiles%\microsoft office\office14\t0nssemurefu.encrypted
%ProgramFiles%\microsoft office\office14\te9ps1vqlkrbva==.encrypted
%ProgramFiles%\microsoft office\office14\engdic.dat.encrypting.map
%ProgramFiles%\microsoft office\office14\decryption_ids.txt
%ProgramFiles%\microsoft office\office14\how to recovery files.txt
%ProgramFiles%\microsoft office\office14\1033\decryption_ids.txt
%ProgramFiles%\microsoft office\clipart\pub60cor\uegwmjgyououslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodczmzcuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodq5mdauslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodq4otuuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodq4odguslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodq4oduuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5nzauslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.encrypting.map
%ProgramFiles%\microsoft office\office14\1033\actip10.hlp.encrypting.map
%ProgramFiles%\microsoft office\office14\1033\t1vurk9sts5eqvq=.encrypted
%ProgramFiles%\microsoft office\office14\1033\psrchkey.dat.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\business.one.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\blank.one.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\academic.one.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\decryption_ids.txt
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\how to recovery files.txt
%ProgramFiles%\microsoft office\office14\samples\solvsamp.xls.encrypting.map
%ProgramFiles%\microsoft office\office14\samples\decryption_ids.txt
%ProgramFiles%\microsoft office\office14\samples\how to recovery files.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\sw5mb1bhdghxzwxjb21lsw1hz2uuanbn.encrypted
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\decryption_ids.txt
%ProgramFiles%\microsoft office\office14\groove\tooldata\groove.net\grooveforms5\how to recovery files.txt
%ProgramFiles%\microsoft office\office14\groove\toolbmps\tg9naw5eawfsb2dcywnrz3jvdw5klmpwzw==.encrypted
%ProgramFiles%\microsoft office\office14\groove\toolbmps\decryption_ids.txt
%ProgramFiles%\microsoft office\office14\groove\toolbmps\how to recovery files.txt
%ProgramFiles%\microsoft office\office14\1033\psrchsrn.dat.encrypting.map
%ProgramFiles%\microsoft office\office14\1033\ufnsq0hmvfmurefu.encrypted
%ProgramFiles%\microsoft office\office14\1033\psrchlex.dat.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njkuslbh.encrypted
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\designer.one.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njyuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5mjyuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi4mzyuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjaymjc1ntguslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjaxnzc4mdyuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjaxndkxmtguslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjaxndg3ntcuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjaxnduymtiuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjawotkxnjyuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\decryption_ids.txt
%ProgramFiles%\microsoft office\clipart\pub60cor\how to recovery files.txt
%ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat.encrypting.map
%ProgramFiles%\java\jre1.8.0_45\lib\decryption_ids.txt
%ProgramFiles%\java\jre1.8.0_45\lib\how to recovery files.txt
%ALLUSERSPROFILE%\key
%ProgramFiles%\microsoft office\clipart\pub60cor\sjawotkxoteuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5mzguslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njmuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njeuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ntkuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ntuuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ntquslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ntiuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ntauslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ndcuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ndquslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ndiuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njcuslbh.encrypted
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\planners.one.encrypting.map
%ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\how to recovery files.txt
%ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\decryption_ids.txt
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\da.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\cs.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ca.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\bn.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\bg.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\be.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\az.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\el.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\de.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\how to recovery files.txt
%ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\af.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\lv.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-gb.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\lt.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ko.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\kk.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ja.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\it.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\id.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hu.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hr.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hi.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\gd.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fy.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr-ca.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fil.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fi.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\es.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\es-419.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\decryption_ids.txt
%ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\decryption_ids.txt
%ProgramFiles(x86)%\opera\29.0.1795.47\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\decryption_ids.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\decryption_ids.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\snapshot_blob.bin.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\natives_blob.bin.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_200_percent.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_100_percent.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\rgvmyxvsdelelnbkzg==.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\decryption_ids.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\how to recovery files.txt
%ProgramFiles%\windows sidebar\gadgets\slideshow.gadget\images\decryption_ids.txt
%ProgramFiles%\windows sidebar\gadgets\slideshow.gadget\images\how to recovery files.txt
%ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\me.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\decryption_ids.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\idtemplates\enu\qwrvymvjrc5wzgy=.encrypted
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\u3bsyxnou2nyzwvulnppca==.encrypted
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\decryption_ids.txt
%ProgramFiles(x86)%\microsoft visual studio 8\common7\ide\vsta\itemtemplates\visualbasic\1033\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\icudt26l.dat.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\decryption_ids.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster2x.jpg.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\zwrpdf9wzgzfcg9zdgvylmpwzw==.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\decryption_ids.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\rhluyw1pyy5wzgy=.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\decryption_ids.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\how to recovery files.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\words.pdf.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\decryption_ids.txt
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\jsbytecodewin.bin.encrypting.map
nul

Удаляет следующие файлы

%ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\lt.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\lv.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ml.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\mr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ms.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\nb.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\nl.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pl.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pt-br.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\pt-pt.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ro.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\en-us.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ru.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sl.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sv.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sw.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ta.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\te.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\th.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\tr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\uk.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\vi.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\zh-cn.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\kn.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ko.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ja.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\it.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\id.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\snapshot_blob.bin.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\installer\chrome.7z.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\am.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ar.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\bg.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\bn.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\ca.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\cs.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\da.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\de.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\el.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\zh-tw.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\sk.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\en-gb.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\es.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\et.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fa.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fi.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fil.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\fr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\gu.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\he.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hi.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hr.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\hu.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\resources.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\locales\es-419.pak.encrypting.map
%HOMEPATH%\desktop\adhd_and_obesity.docx.encrypting.map
<Имя диска съемного носителя>:\1sm_price.zip.encrypting.map
%LOCALAPPDATA%\microsoft\windows mail\backup\new\edb00001.log.encrypting.map
<Имя диска съемного носителя>:\fil_20060629111052.pdf.encrypting.map
<Имя диска съемного носителя>:\10thingscondoms.pdf.encrypting.map
<Имя диска съемного носителя>:\bc01.pdf.encrypting.map
<Имя диска съемного носителя>:\metac.ppt.encrypting.map
<Имя диска съемного носителя>:\sacs_presentation_sacs_qep_improving_rt_education_final.ppt.encrypting.map
<Имя диска съемного носителя>:\proposaltemplates.ppt.encrypting.map
<Имя диска съемного носителя>:\sim_gametheory_to_finance.ppt.encrypting.map
<Имя диска съемного носителя>:\ksearch_esa_talk.ppt.encrypting.map
<Имя диска съемного носителя>:\writingcompletesarnarrative_1103.ppt.encrypting.map
<Имя диска съемного носителя>:\roozenedowebinar.pptx.encrypting.map
<Имя диска съемного носителя>:\middaugh_keynote.pptx.encrypting.map
%LOCALAPPDATA%\microsoft\windows mail\edb.log.encrypting.map
<Имя диска съемного носителя>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx.encrypting.map
<Имя диска съемного носителя>:\stoc13_ml_quoc_le.pptx.encrypting.map
<Имя диска съемного носителя>:\indogerman2010.pptx.encrypting.map
<Имя диска съемного носителя>:\fungalnameauthors.rtf.encrypting.map
<Имя диска съемного носителя>:\pubnet_855.rtf.encrypting.map
<Имя диска съемного носителя>:\krsweden.rtf.encrypting.map
<Имя диска съемного носителя>:\waterlandhealthkano.rtf.encrypting.map
<Имя диска съемного носителя>:\pandp.rtf.encrypting.map
<Имя диска съемного носителя>:\price030215.xls.encrypting.map
<Имя диска съемного носителя>:\guide_reorganization_mapping.xls.encrypting.map
<Имя диска съемного носителя>:\al.xlsx.encrypting.map
<Имя диска съемного носителя>:\disclosuredetails.xlsx.encrypting.map
<Имя диска съемного носителя>:\d0068197bb5a41fea16a220c45390606.mp4.encrypting.map
<Имя диска съемного носителя>:\51.mp4.encrypting.map
<Имя диска съемного носителя>:\spanner.mov.encrypting.map
<Имя диска съемного носителя>:\2.jpg.encrypting.map
<Имя диска съемного носителя>:\parnas_01.jpg.encrypting.map
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\formhistory.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\abook.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\blist.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\cert9.db.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\favicons.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\formhistory.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\global-messages-db.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\history.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\key4.db.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\openpgp.sqlite.encrypting.map
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\places.sqlite.encrypting.map
%LOCALAPPDATA%\microsoft\windows mail\edb00001.log.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\natives_blob.bin.encrypting.map
%HOMEPATH%\desktop\000814251_video_01.avi.encrypting.map
%HOMEPATH%\desktop\glidescope_review_rev_010.docx.encrypting.map
%HOMEPATH%\desktop\join.avi.encrypting.map
%HOMEPATH%\desktop\lisp_success.doc.encrypting.map
%HOMEPATH%\desktop\ovp25012015.doc.encrypting.map
%HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc.encrypting.map
<Имя диска съемного носителя>:\delete.avi.encrypting.map
<Имя диска съемного носителя>:\correct.avi.encrypting.map
<Имя диска съемного носителя>:\february_catalogue__2015.doc.encrypting.map
<Имя диска съемного носителя>:\weeklysheet1215.doc.encrypting.map
<Имя диска съемного носителя>:\hadac_newsletter_july_2010_final.docx.encrypting.map
<Имя диска съемного носителя>:\nwfieldnotes1966.docx.encrypting.map
%LOCALAPPDATA%\thunderbird\profiles\rehh7ft5.default-release\startupcache\startupcache.8.little.encrypting.map
%HOMEPATH%\desktop\delete.avi.encrypting.map
<Имя диска съемного носителя>:\waterresourcesag.pptx.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_200_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zu.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_200_percent.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\natives_blob.bin.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\snapshot_blob.bin.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\jsbytecodewin.bin.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\words.pdf.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster2x.jpg.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\icudt26l.dat.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\af.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\az.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\be.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\bg.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\bn.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ca.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\cs.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\da.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_100_percent.pak.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf.encrypting.map
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.encrypting.map
%ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\de.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.encrypting.map
%ProgramFiles%\microsoft office\office14\outlfltr.dat.encrypting.map
%ProgramFiles%\microsoft office\office14\1033\actip10.hlp.encrypting.map
%ProgramFiles%\microsoft office\office14\1033\psrchkey.dat.encrypting.map
%ProgramFiles%\microsoft office\office14\1033\psrchlex.dat.encrypting.map
%ProgramFiles%\microsoft office\office14\1033\psrchsrn.dat.encrypting.map
%ProgramFiles%\microsoft office\office14\samples\solvsamp.xls.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\academic.one.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\blank.one.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\business.one.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\designer.one.encrypting.map
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\planners.one.encrypting.map
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.encrypting.map
%ProgramFiles%\microsoft office\office14\engdic.dat.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ja.pak.encrypting.map
%LOCALAPPDATA%\iconcache.db.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-us.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sr.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sv.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sw.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ta.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\te.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\th.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\tr.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\uk.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\uz.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\vi.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-cn.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\el.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-tw.pak.encrypting.map
%ALLUSERSPROFILE%\microsoft\officesoftwareprotectionplatform\tokens.dat.encrypting.map
%ALLUSERSPROFILE%\microsoft\rac\statedata\racwmieventdata.dat.encrypting.map
%ALLUSERSPROFILE%\package cache\42d5bec7ddfbd49e76467529cbc2868987bf8460\packages\patch\x64\windows6.1-kb2999226-x64.msu.encrypting.map
C:\users\public\pictures\sample pictures\chrysanthemum.jpg.encrypting.map
C:\users\public\pictures\sample pictures\desert.jpg.encrypting.map
C:\users\public\pictures\sample pictures\hydrangeas.jpg.encrypting.map
C:\users\public\pictures\sample pictures\jellyfish.jpg.encrypting.map
C:\users\public\pictures\sample pictures\koala.jpg.encrypting.map
C:\users\public\pictures\sample pictures\lighthouse.jpg.encrypting.map
C:\users\public\pictures\sample pictures\penguins.jpg.encrypting.map
C:\users\public\pictures\sample pictures\tulips.jpg.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ru.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sk.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ro.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-pt.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-br.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\es.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fi.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fil.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr-ca.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fy.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\gd.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hi.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hr.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hu.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\id.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-gb.pak.encrypting.map
%LOCALAPPDATA%\google\chrome\application\42.0.2311.135\chrome_100_percent.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\it.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ko.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\lt.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\lv.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\me.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\mk.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ms.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nb.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nl.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nn.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pa.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pl.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\es-419.pak.encrypting.map
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\kk.pak.encrypting.map
<Имя диска съемного носителя>:\price.zip.encrypting.map

Перемещает следующие файлы

%ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat в %ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\kk.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\kk.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\kk.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\a2sucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ko.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ko.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ko.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\a28ucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\lt.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\lt.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\lt.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bhqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\lv.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\lv.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\lv.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bhyucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\me.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\me.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\me.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bwuucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\it.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\it.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\mk.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\mk.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ms.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ms.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ms.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bxmucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nb.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\nb.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nb.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bmiucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nl.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\nl.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nl.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bmwucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nn.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\nn.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\nn.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bm4ucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pa.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\pa.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pa.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\cgeucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ja.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ja.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ja.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ameucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\it.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\axqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\id.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\awqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pl.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\cgwucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\es-419.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zx<Имя файла>e5lnbhaw==.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\es.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\es.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\es.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zxmucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fi.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\fi.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fi.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zmkucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fil.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\fil.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fil.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zmlslnbhaw==.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr-ca.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr-ca.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr-ca.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\znitq0eucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pl.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\pl.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-us.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zw4tvvmucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\mk.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bwsucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\gd.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\gd.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\gd.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\z2qucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hi.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\hi.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hi.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\agkucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hr.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\hr.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hr.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ahiucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hu.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\hu.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\hu.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ahuucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\id.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\id.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fr.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zniucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fy.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\fy.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\fy.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\znkucgfr.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\jsbytecodewin.bin.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\slncexrlq29kzvdpbi5iaw4=.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-br.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-br.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-cn.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-cn.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-cn.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\emgtq04ucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-tw.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-tw.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zh-tw.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\emgtvfcucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zu.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zu.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\zu.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\enuucgfr.encrypted
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\formhistory.sqlite в %APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\formhistory.sqlite.encrypting
%APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\formhistory.sqlite.encrypting в %APPDATA%\mozilla\firefox\profiles\apc2n9d1.default-release\zm9ybwhpc3rvcnkuc3fsaxrl.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\abook.sqlite в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\abook.sqlite.encrypting
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\abook.sqlite.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\ywjvb2suc3fsaxrl.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\blist.sqlite в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\blist.sqlite.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\vi.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\dmkucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-us.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-us.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\vi.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\vi.pak.encrypting
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\favicons.sqlite.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\zmf2awnvbnmuc3fsaxrl.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\formhistory.sqlite в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\formhistory.sqlite.encrypting
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\formhistory.sqlite.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\zm9ybwhpc3rvcnkuc3fsaxrl.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\global-messages-db.sqlite в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\global-messages-db.sqlite.encrypting
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\global-messages-db.sqlite.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\z2xvymfslw1lc3nhz2vzlwrilnnxbgl0zq==.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\history.sqlite в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\history.sqlite.encrypting
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\history.sqlite.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\aglzdg9yes5zcwxpdgu=.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\key4.db.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\a2v5nc5kyg==.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\openpgp.sqlite в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\openpgp.sqlite.encrypting
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\openpgp.sqlite.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\b3blbnbncc5zcwxpdgu=.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\cert9.db.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\y2vyddkuzgi=.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\blist.sqlite.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\ymxpc3quc3fsaxrl.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\es-419.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\es-419.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\uz.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\uz.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sw.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\c3cucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-pt.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\chqtufqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ro.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ro.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ro.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\cm8ucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ru.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ru.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ru.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\cnuucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sk.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\sk.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sk.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\c2sucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sr.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\sr.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sr.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\c3iucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sv.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\sv.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\uz.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\dxoucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-br.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\chqtqliucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-pt.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\pt-pt.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ta.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ta.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ta.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\dgeucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\te.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\te.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\te.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\dguucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\th.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\th.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\th.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\dggucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\tr.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\tr.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\tr.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\dhiucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\uk.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\uk.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\uk.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\dwsucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sw.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\sw.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\sv.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\c3yucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-gb.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zw4tr0iucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-gb.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\en-gb.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\el.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zwwucgfr.encrypted
%ProgramFiles%\microsoft office\office14\engdic.dat.encrypting в %ProgramFiles%\microsoft office\office14\ru5hreldlkrbva==.encrypted
%ProgramFiles%\microsoft office\office14\outlfltr.dat в %ProgramFiles%\microsoft office\office14\outlfltr.dat.encrypting
%ProgramFiles%\microsoft office\office14\outlfltr.dat.encrypting в %ProgramFiles%\microsoft office\office14\t1vutezmvfiurefu.encrypted
%ProgramFiles%\microsoft office\office14\1033\actip10.hlp в %ProgramFiles%\microsoft office\office14\1033\actip10.hlp.encrypting
%ProgramFiles%\microsoft office\office14\1033\actip10.hlp.encrypting в %ProgramFiles%\microsoft office\office14\1033\qunusvaxmc5itfa=.encrypted
%ProgramFiles%\microsoft office\office14\1033\psrchkey.dat в %ProgramFiles%\microsoft office\office14\1033\psrchkey.dat.encrypting
%ProgramFiles%\microsoft office\office14\1033\psrchkey.dat.encrypting в %ProgramFiles%\microsoft office\office14\1033\ufnsq0hlrvkurefu.encrypted
%ProgramFiles%\microsoft office\office14\1033\psrchlex.dat в %ProgramFiles%\microsoft office\office14\1033\psrchlex.dat.encrypting
%ProgramFiles%\microsoft office\office14\1033\psrchlex.dat.encrypting в %ProgramFiles%\microsoft office\office14\1033\ufnsq0hmrvgurefu.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ndguslbh.encrypted
%ProgramFiles%\microsoft office\office14\engdic.dat в %ProgramFiles%\microsoft office\office14\engdic.dat.encrypting
%ProgramFiles%\microsoft office\office14\1033\psrchsrn.dat в %ProgramFiles%\microsoft office\office14\1033\psrchsrn.dat.encrypting
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\academic.one в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\academic.one.encrypting
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\academic.one.encrypting в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\qunbrevnsumut05f.encrypted
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\blank.one в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\blank.one.encrypting
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\blank.one.encrypting в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\qkxbtksut05f.encrypted
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\business.one в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\business.one.encrypting
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\business.one.encrypting в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\qlvtsu5fu1mut05f.encrypted
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\designer.one в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\designer.one.encrypting
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\designer.one.encrypting в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\revtsudorviut05f.encrypted
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\planners.one в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\planners.one.encrypting
%ProgramFiles%\microsoft office\office14\1033\psrchsrn.dat.encrypting в %ProgramFiles%\microsoft office\office14\1033\ufnsq0htuk4urefu.encrypted
%ProgramFiles%\microsoft office\office14\samples\solvsamp.xls в %ProgramFiles%\microsoft office\office14\samples\solvsamp.xls.encrypting
%ProgramFiles%\microsoft office\office14\samples\solvsamp.xls.encrypting в %ProgramFiles%\microsoft office\office14\samples\u09mvlnbtvauwext.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\places.sqlite в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\places.sqlite.encrypting
%ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\planners.one.encrypting в %ProgramFiles%\microsoft office\templates\1033\onenote\14\stationery\uexbtk5fulmut05f.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njguslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5mjuuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5mjcuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5mzauslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5mzeuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5mzkuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodq4njiuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ntcuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5ntguslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njauslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njiuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\sjazodi5njuuslbh.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.encrypting
%ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat.encrypting в %ProgramFiles%\java\jre1.8.0_45\lib\dhpkyi5kyxq=.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.encrypting
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\favicons.sqlite в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\favicons.sqlite.encrypting
%ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf в %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\pdfsigqformalrep.pdf.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\uergu2lnuuzvcm1hbfjlcc5wzgy=.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\b3blcmffmjuwx3blcmnlbnqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin в %ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\c25hchnob3rfymxvyi5iaw4=.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\af.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\af.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\af.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ywyucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\az.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\az.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\az.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\yxoucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\be.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\be.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\be.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ymuucgfr.encrypted
%ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\synchronizationeula.rtf.encrypting в %ProgramFiles%\microsoft sync framework\v1.0\documentation\1033\license agreements\u3luy2hyb25pemf0aw9urxvsys5ydgy=.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\b3blcmffmjawx3blcmnlbnqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\bn.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ym4ucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ca.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ca.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\ca.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\y2eucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\cs.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\cs.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\cs.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\y3mucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\da.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\da.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\da.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zgeucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\de.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\de.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\de.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\zguucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\el.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\el.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\bg.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bg.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\bn.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\bn.pak.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\1494870c-9912-c184-4cc9-b401-a53f4d8de290.pdf.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\mtq5ndg3memtotkxmi1dmtg0ltrdqzktqjqwms1bntngneq4reuyotaucgrm.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\localization\bg.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\localization\ymcucgfr.encrypted
%ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.encrypting в %ProgramFiles%\microsoft office\clipart\pub60cor\uegwmta0nkouslbh.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef.pak в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef.pak.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef.pak.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\y2vmlnbhaw==.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_100_percent.pak в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_100_percent.pak.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_100_percent.pak.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\y2vmxzewmf9wzxjjzw50lnbhaw==.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_200_percent.pak в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_200_percent.pak.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\cef_200_percent.pak.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\y2vmxziwmf9wzxjjzw50lnbhaw==.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\natives_blob.bin в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\natives_blob.bin.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\natives_blob.bin.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\bmf0axzlc19ibg9ilmjpbg==.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\snapshot_blob.bin в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\snapshot_blob.bin.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\snapshot_blob.bin.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\acrocef\c25hchnob3rfymxvyi5iaw4=.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\b3blcmffmti1x3blcmnlbnqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\b3blcmffmtuwx3blcmnlbnqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\standardbusiness.pdf.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\enu\u3rhbmrhcmrcdxnpbmvzcy5wzgy=.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\edit_pdf_poster2x.jpg.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\webresources\resource0\static\js\plugins\ob-preview\images\zwrpdf9wzgzfcg9zdgvymnguanbn.encrypted
%ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\icudt26l.dat.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\resource\typesupport\unicode\icu\awn1zhqynmwuzgf0.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin в %ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\bmf0axzlc19ibg9ilmjpbg==.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\b3blcmeucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak.encrypting
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak.encrypting в %ProgramFiles(x86)%\opera\29.0.1795.47\b3blcmffmtawx3blcmnlbnqucgfr.encrypted
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\jsbytecodewin.bin в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\javascripts\jsbytecodewin.bin.encrypting
%ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\words.pdf.encrypting в %ProgramFiles(x86)%\adobe\acrobat reader dc\reader\plug_ins\annotations\stamps\v29yzhmucgrm.encrypted
%APPDATA%\thunderbird\profiles\rehh7ft5.default-release\places.sqlite.encrypting в %APPDATA%\thunderbird\profiles\rehh7ft5.default-release\cgxhy2vzlnnxbgl0zq==.encrypted

Изменяет следующие файлы

%ProgramFiles%\java\jre1.8.0_45\lib\tzdb.dat.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.encrypting
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg
%ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.encrypting

Изменяет множество файлов.

Самоудаляется.

Изменяет множество файлов пользовательских данных (Trojan.Encoder).

Изменяет расширения файлов пользовательских данных (Trojan.Encoder).

Другое

Запускает на исполнение

'%WINDIR%\syswow64\cmd.exe' /C "<Текущая директория>\SelfDelete.bat" (со скрытым окном)
'%WINDIR%\syswow64\timeout.exe' /T 5 /NOBREAK
'%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "<Текущая директория>\" (со скрытым окном)

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней