Техническая информация
Для обеспечения автозапуска и распространения:
Изменяет следующие исполняемые системные файлы:
- %WINDIR%\IME\IMEJP10\DICTS\IMJPZP.DIC
Заражает следующие исполняемые файлы:
- C:\Far2\Plugins\arclite\7zS2con.sfx
- C:\Far2\Plugins\arclite\7zSD.sfx
- %WINDIR%\IME\IMEJP10\DICTS\IMJPZP.DIC
- C:\Far2\Plugins\arclite\7z.sfx
- C:\Far2\Plugins\arclite\7zCon.sfx
- C:\Far2\Plugins\arclite\7zS2.sfx
Вредоносные функции:
Запускает на исполнение:
- '<SYSTEM32>\taskhost.exe'
Изменения в файловой системе:
Создает следующие файлы:
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\es\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\en\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\de\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\fr\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\pt\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\nl\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\it\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Providers\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\App_Code\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Security\Wizard\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\SQL\br\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\App_Code\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\AppConfig\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Providers\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Security\Wizard\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.5\SQL\fr\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.5\SQL\es\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.5\SQL\de\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.5\SQL\it\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.5\SQL\pt-PT\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.5\SQL\pt-BR\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v3.5\SQL\nl\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\modules\services-crypto\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\dictionaries\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\modules\services-sync\engines\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\modules\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\modules\services-sync\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\modules\services-sync\ext\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\components\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\xpinstall\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\viewsource\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\defaults\autoconfig\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\defaults\profile\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\defaults\profile\chrome\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\defaults\pref\HOWTODECRYPT.html
- C:\Users\Public\Pictures\Sample Pictures\HOWTODECRYPT.html
- C:\Users\Public\Music\Sample Music\HOWTODECRYPT.html
- %HOMEPATH%\Favorites\Windows Live\HOWTODECRYPT.html
- C:\Users\Public\Videos\Sample Videos\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\AppConfig\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v1.0.3705\HOWTODECRYPT.html
- %WINDIR%\IME\IMEJP10\DICTS\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\res\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\res\html\HOWTODECRYPT.html
- <Служебный элемент>
- %HOMEPATH%\Favorites\MSN Websites\HOWTODECRYPT.html
- %HOMEPATH%\Favorites\Microsoft Websites\HOWTODECRYPT.html
- %HOMEPATH%\Favorites\Links\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SQL\en\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\WPF\HOWTODECRYPT.html
- %WINDIR%\security\database\HOWTODECRYPT.html
- %WINDIR%\Panther\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\HOWTODECRYPT.html
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\places\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\places\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\feeds\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\preferences\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\places\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\pageinfo\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\safebrowsing\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\search\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\bindings\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\alerts\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\cookie\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\xml\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\extensions\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\downloads\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabview\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\preferences\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\pippki\content\pippki\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\communicator\HOWTODECRYPT.html
- C:\Far2\Plugins\Compare\HOWTODECRYPT.html
- C:\Far2\Plugins\Brackets\HOWTODECRYPT.html
- C:\Far2\Plugins\AutoWrap\HOWTODECRYPT.html
- C:\Far2\Plugins\DrawLine\HOWTODECRYPT.html
- C:\Far2\Plugins\FarCmds\HOWTODECRYPT.html
- C:\Far2\Plugins\EMenu\HOWTODECRYPT.html
- C:\Far2\Plugins\EditCase\HOWTODECRYPT.html
- C:\Far2\Addons\HOWTODECRYPT.html
- %TEMP%\Quest Software\PowerGUI\f20e5e08-7b6d-4d5c-8a6b-0fa3886df697\crypter.ps1
- %TEMP%\558a078b-f0ac-47b9-8375-af1d31a0f02f.config
- C:\Far2\Documentation\eng\HOWTODECRYPT.html
- C:\Far2\Plugins\arclite\HOWTODECRYPT.html
- C:\Far2\Plugins\Align\HOWTODECRYPT.html
- C:\Far2\Documentation\rus\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\branding\HOWTODECRYPT.html
- C:\Far2\HOWTODECRYPT.html
- C:\Far2\Plugins\TmpPanel\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\migration\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror\HOWTODECRYPT.html
- C:\Far2\Plugins\FTP\HOWTODECRYPT.html
- C:\Far2\Plugins\FTP\lib\HOWTODECRYPT.html
- C:\Far2\Plugins\FileCase\HOWTODECRYPT.html
- C:\Far2\Plugins\HlfViewer\HOWTODECRYPT.html
- C:\Far2\Plugins\ProcList\HOWTODECRYPT.html
- C:\Far2\Plugins\Network\HOWTODECRYPT.html
- C:\Far2\Plugins\MacroView\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\console\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\checkbox\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\arrow\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\dirListing\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\printpreview\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\media\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\icons\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\places\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\alerts\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\viewsource\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\passwordmgr\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\handling\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\places\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\update\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\profile\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\plugins\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\splitter\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\radio\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\toolbar\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\tree\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\res\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\xbl-marquee\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\satchel\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\alerts\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\console\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\preferences\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\plugins\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\handling\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\profile\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\passwordmgr\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\xpinstall\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\update\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\handling\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\media\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\dirListing\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\printpreview\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\HOWTODECRYPT.html
- %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\HOWTODECRYPT.html
