Trojan.PWS.Siggen1.30671

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'svcav_module' = '%APPDATA%\xblibtw.exe'

Изменяет следующие исполняемые системные файлы:

%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.tlb
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.tlb
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.JScript.tlb
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.JScript.dll
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll
%WINDIR%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
%WINDIR%\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\7d61e63dea85f4f77ea4c13df7651ec7\Microsoft.JScript.ni.dll
%WINDIR%\Microsoft.NET\Framework\sbs_microsoft.jscript.dll
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll

Вредоносные функции:

Создает и запускает на исполнение:

'%APPDATA%\xblibtw.exe'

Запускает на исполнение:

'<SYSTEM32>\vssadmin.exe' delete shadows /all

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\cmd.exe

следующие пользовательские процессы:

ecmd.exe

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\Desktop\HELP_TO_SAVE_YOUR_FILES.bmp
%HOMEPATH%\Desktop\HELP_TO_SAVE_YOUR_FILES.txt
%HOMEPATH%\Desktop\CryptoLocker.lnk
<Служебный элемент>
%APPDATA%\xblibtw.exe
%APPDATA%\key.dat
%APPDATA%\log.html

Удаляет следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\ip[1]

Перемещает следующие системные файлы:

<SYSTEM32>\DirectX\Dinput\ms56_8.png в <SYSTEM32>\DirectX\Dinput\ms56_8.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_9.png в <SYSTEM32>\DirectX\Dinput\ms56_9.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6.png в <SYSTEM32>\DirectX\Dinput\ms6.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_7.png в <SYSTEM32>\DirectX\Dinput\ms56_7.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_4.png в <SYSTEM32>\DirectX\Dinput\ms56_4.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_5.png в <SYSTEM32>\DirectX\Dinput\ms56_5.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_6.png в <SYSTEM32>\DirectX\Dinput\ms56_6.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_1.png в <SYSTEM32>\DirectX\Dinput\ms6_1.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_5.png в <SYSTEM32>\DirectX\Dinput\ms6_5.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_6.png в <SYSTEM32>\DirectX\Dinput\ms6_6.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_7.png в <SYSTEM32>\DirectX\Dinput\ms6_7.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_4.png в <SYSTEM32>\DirectX\Dinput\ms6_4.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_10.png в <SYSTEM32>\DirectX\Dinput\ms6_10.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_2.png в <SYSTEM32>\DirectX\Dinput\ms6_2.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_3.png в <SYSTEM32>\DirectX\Dinput\ms6_3.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_3.png в <SYSTEM32>\DirectX\Dinput\ms56_3.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b_2.png в <SYSTEM32>\DirectX\Dinput\ms3b_2.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b_3.png в <SYSTEM32>\DirectX\Dinput\ms3b_3.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b_4.png в <SYSTEM32>\DirectX\Dinput\ms3b_4.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b_1.png в <SYSTEM32>\DirectX\Dinput\ms3b_1.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34_07.png в <SYSTEM32>\DirectX\Dinput\ms34_07.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34_08.png в <SYSTEM32>\DirectX\Dinput\ms34_08.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b.png в <SYSTEM32>\DirectX\Dinput\ms3b.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b_a.png в <SYSTEM32>\DirectX\Dinput\ms3b_a.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_1.png в <SYSTEM32>\DirectX\Dinput\ms56_1.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_10.png в <SYSTEM32>\DirectX\Dinput\ms56_10.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56_2.png в <SYSTEM32>\DirectX\Dinput\ms56_2.png.ecc
<SYSTEM32>\DirectX\Dinput\ms56.png в <SYSTEM32>\DirectX\Dinput\ms56.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b_c.png в <SYSTEM32>\DirectX\Dinput\ms3b_c.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b_m.png в <SYSTEM32>\DirectX\Dinput\ms3b_m.png.ecc
<SYSTEM32>\DirectX\Dinput\ms3b_t.png в <SYSTEM32>\DirectX\Dinput\ms3b_t.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_7.png в <SYSTEM32>\DirectX\Dinput\ms8_7.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_8.png в <SYSTEM32>\DirectX\Dinput\ms8_8.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_9.png в <SYSTEM32>\DirectX\Dinput\ms8_9.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_6.png в <SYSTEM32>\DirectX\Dinput\ms8_6.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_3.png в <SYSTEM32>\DirectX\Dinput\ms8_3.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_4.png в <SYSTEM32>\DirectX\Dinput\ms8_4.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_5.png в <SYSTEM32>\DirectX\Dinput\ms8_5.png.ecc
<SYSTEM32>\DirectX\Dinput\mse.png в <SYSTEM32>\DirectX\Dinput\mse.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_4.png в <SYSTEM32>\DirectX\Dinput\mse_4.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_5.png в <SYSTEM32>\DirectX\Dinput\mse_5.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_6.png в <SYSTEM32>\DirectX\Dinput\mse_6.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_3.png в <SYSTEM32>\DirectX\Dinput\mse_3.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_1.png в <SYSTEM32>\DirectX\Dinput\mse_1.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_10.png в <SYSTEM32>\DirectX\Dinput\mse_10.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_2.png в <SYSTEM32>\DirectX\Dinput\mse_2.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_2.png в <SYSTEM32>\DirectX\Dinput\ms8_2.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_2.png в <SYSTEM32>\DirectX\Dinput\ms7_2.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_3.png в <SYSTEM32>\DirectX\Dinput\ms7_3.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_4.png в <SYSTEM32>\DirectX\Dinput\ms7_4.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_1.png в <SYSTEM32>\DirectX\Dinput\ms7_1.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_8.png в <SYSTEM32>\DirectX\Dinput\ms6_8.png.ecc
<SYSTEM32>\DirectX\Dinput\ms6_9.png в <SYSTEM32>\DirectX\Dinput\ms6_9.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7.png в <SYSTEM32>\DirectX\Dinput\ms7.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_5.png в <SYSTEM32>\DirectX\Dinput\ms7_5.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8.png в <SYSTEM32>\DirectX\Dinput\ms8.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_1.png в <SYSTEM32>\DirectX\Dinput\ms8_1.png.ecc
<SYSTEM32>\DirectX\Dinput\ms8_10.png в <SYSTEM32>\DirectX\Dinput\ms8_10.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_9.png в <SYSTEM32>\DirectX\Dinput\ms7_9.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_6.png в <SYSTEM32>\DirectX\Dinput\ms7_6.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_7.png в <SYSTEM32>\DirectX\Dinput\ms7_7.png.ecc
<SYSTEM32>\DirectX\Dinput\ms7_8.png в <SYSTEM32>\DirectX\Dinput\ms7_8.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b.png в <SYSTEM32>\DirectX\Dinput\ms1b.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_01.png в <SYSTEM32>\DirectX\Dinput\ms1b_01.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_02.png в <SYSTEM32>\DirectX\Dinput\ms1b_02.png.ecc
<SYSTEM32>\DirectX\Dinput\lgc291.png в <SYSTEM32>\DirectX\Dinput\lgc291.png.ecc
<SYSTEM32>\DirectX\Dinput\lgc207.png в <SYSTEM32>\DirectX\Dinput\lgc207.png.ecc
<SYSTEM32>\DirectX\Dinput\lgc209.png в <SYSTEM32>\DirectX\Dinput\lgc209.png.ecc
<SYSTEM32>\DirectX\Dinput\lgc20a.png в <SYSTEM32>\DirectX\Dinput\lgc20a.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_03.png в <SYSTEM32>\DirectX\Dinput\ms1b_03.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_08.png в <SYSTEM32>\DirectX\Dinput\ms1b_08.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_09.png в <SYSTEM32>\DirectX\Dinput\ms1b_09.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_10.png в <SYSTEM32>\DirectX\Dinput\ms1b_10.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_07.png в <SYSTEM32>\DirectX\Dinput\ms1b_07.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_04.png в <SYSTEM32>\DirectX\Dinput\ms1b_04.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_05.png в <SYSTEM32>\DirectX\Dinput\ms1b_05.png.ecc
<SYSTEM32>\DirectX\Dinput\ms1b_06.png в <SYSTEM32>\DirectX\Dinput\ms1b_06.png.ecc
<SYSTEM32>\DirectX\Dinput\lgc202.png в <SYSTEM32>\DirectX\Dinput\lgc202.png.ecc
<SYSTEM32>\config\systemprofile\Templates\winword2.doc в <SYSTEM32>\config\systemprofile\Templates\winword2.doc.ecc
<SYSTEM32>\DirectX\Dinput\act_rs.png в <SYSTEM32>\DirectX\Dinput\act_rs.png.ecc
<SYSTEM32>\DirectX\Dinput\glmda.png в <SYSTEM32>\DirectX\Dinput\glmda.png.ecc
<SYSTEM32>\config\systemprofile\Templates\winword.doc в <SYSTEM32>\config\systemprofile\Templates\winword.doc.ecc
<SYSTEM32>\config\systemprofile\Templates\excel4.xls в <SYSTEM32>\config\systemprofile\Templates\excel4.xls.ecc
<SYSTEM32>\config\systemprofile\Templates\powerpnt.ppt в <SYSTEM32>\config\systemprofile\Templates\powerpnt.ppt.ecc
<SYSTEM32>\config\systemprofile\Templates\quattro.wb2 в <SYSTEM32>\config\systemprofile\Templates\quattro.wb2.ecc
<SYSTEM32>\DirectX\Dinput\glmdiggp.png в <SYSTEM32>\DirectX\Dinput\glmdiggp.png.ecc
<SYSTEM32>\DirectX\Dinput\gr4005.png в <SYSTEM32>\DirectX\Dinput\gr4005.png.ecc
<SYSTEM32>\DirectX\Dinput\ia3002_1.png в <SYSTEM32>\DirectX\Dinput\ia3002_1.png.ecc
<SYSTEM32>\DirectX\Dinput\ia3002_2.png в <SYSTEM32>\DirectX\Dinput\ia3002_2.png.ecc
<SYSTEM32>\DirectX\Dinput\gr4003.png в <SYSTEM32>\DirectX\Dinput\gr4003.png.ecc
<SYSTEM32>\DirectX\Dinput\gr3001.png в <SYSTEM32>\DirectX\Dinput\gr3001.png.ecc
<SYSTEM32>\DirectX\Dinput\gr4001.png в <SYSTEM32>\DirectX\Dinput\gr4001.png.ecc
<SYSTEM32>\DirectX\Dinput\gr4001_g.png в <SYSTEM32>\DirectX\Dinput\gr4001_g.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28_5.png в <SYSTEM32>\DirectX\Dinput\ms28_5.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28_6.png в <SYSTEM32>\DirectX\Dinput\ms28_6.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28_7.png в <SYSTEM32>\DirectX\Dinput\ms28_7.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28_4.png в <SYSTEM32>\DirectX\Dinput\ms28_4.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28_1.png в <SYSTEM32>\DirectX\Dinput\ms28_1.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28_2.png в <SYSTEM32>\DirectX\Dinput\ms28_2.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28_3.png в <SYSTEM32>\DirectX\Dinput\ms28_3.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28_8.png в <SYSTEM32>\DirectX\Dinput\ms28_8.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34_04.png в <SYSTEM32>\DirectX\Dinput\ms34_04.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34_05.png в <SYSTEM32>\DirectX\Dinput\ms34_05.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34_06.png в <SYSTEM32>\DirectX\Dinput\ms34_06.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34_03.png в <SYSTEM32>\DirectX\Dinput\ms34_03.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34.png в <SYSTEM32>\DirectX\Dinput\ms34.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34_01.png в <SYSTEM32>\DirectX\Dinput\ms34_01.png.ecc
<SYSTEM32>\DirectX\Dinput\ms34_02.png в <SYSTEM32>\DirectX\Dinput\ms34_02.png.ecc
<SYSTEM32>\DirectX\Dinput\ms28.png в <SYSTEM32>\DirectX\Dinput\ms28.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26_04.png в <SYSTEM32>\DirectX\Dinput\ms26_04.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26_05.png в <SYSTEM32>\DirectX\Dinput\ms26_05.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26_06.png в <SYSTEM32>\DirectX\Dinput\ms26_06.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26_03.png в <SYSTEM32>\DirectX\Dinput\ms26_03.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26.png в <SYSTEM32>\DirectX\Dinput\ms26.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26_01.png в <SYSTEM32>\DirectX\Dinput\ms26_01.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26_02.png в <SYSTEM32>\DirectX\Dinput\ms26_02.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26_07.png в <SYSTEM32>\DirectX\Dinput\ms26_07.png.ecc
<SYSTEM32>\DirectX\Dinput\ms27_3.png в <SYSTEM32>\DirectX\Dinput\ms27_3.png.ecc
<SYSTEM32>\DirectX\Dinput\ms27_4.png в <SYSTEM32>\DirectX\Dinput\ms27_4.png.ecc
<SYSTEM32>\DirectX\Dinput\ms27_5.png в <SYSTEM32>\DirectX\Dinput\ms27_5.png.ecc
<SYSTEM32>\DirectX\Dinput\ms27_2.png в <SYSTEM32>\DirectX\Dinput\ms27_2.png.ecc
<SYSTEM32>\DirectX\Dinput\ms26_08.png в <SYSTEM32>\DirectX\Dinput\ms26_08.png.ecc
<SYSTEM32>\DirectX\Dinput\ms27.png в <SYSTEM32>\DirectX\Dinput\ms27.png.ecc
<SYSTEM32>\DirectX\Dinput\ms27_1.png в <SYSTEM32>\DirectX\Dinput\ms27_1.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_7.png в <SYSTEM32>\DirectX\Dinput\mse_7.png.ecc
<SYSTEM32>\oobe\images\wpabtm.jpg в <SYSTEM32>\oobe\images\wpabtm.jpg.ecc
<SYSTEM32>\oobe\images\wpaflag.jpg в <SYSTEM32>\oobe\images\wpaflag.jpg.ecc
<SYSTEM32>\oobe\images\wpakey.jpg в <SYSTEM32>\oobe\images\wpakey.jpg.ecc
<SYSTEM32>\oobe\images\wpaback.jpg в <SYSTEM32>\oobe\images\wpaback.jpg.ecc
<SYSTEM32>\oobe\images\thanks10.png в <SYSTEM32>\oobe\images\thanks10.png.ecc
<SYSTEM32>\oobe\images\thanks8.png в <SYSTEM32>\oobe\images\thanks8.png.ecc
<SYSTEM32>\oobe\images\title.wma в <SYSTEM32>\oobe\images\title.wma.ecc
<SYSTEM32>\oobe\images\wpatop.jpg в <SYSTEM32>\oobe\images\wpatop.jpg.ecc
<SYSTEM32>\oobe\sconnect.js в <SYSTEM32>\oobe\sconnect.js.ecc
<SYSTEM32>\oobe\setup\oobestyl.css в <SYSTEM32>\oobe\setup\oobestyl.css.ecc
<SYSTEM32>\Restore\MachineGuid.txt в <SYSTEM32>\Restore\MachineGuid.txt.ecc
<SYSTEM32>\oobe\oobeutil.js в <SYSTEM32>\oobe\oobeutil.js.ecc
<SYSTEM32>\oobe\isptype.js в <SYSTEM32>\oobe\isptype.js.ecc
<SYSTEM32>\oobe\migrate.js в <SYSTEM32>\oobe\migrate.js.ecc
<SYSTEM32>\oobe\mousetut.js в <SYSTEM32>\oobe\mousetut.js.ecc
<SYSTEM32>\oobe\images\skipup.jpg в <SYSTEM32>\oobe\images\skipup.jpg.ecc
<SYSTEM32>\oobe\images\newmark8.jpg в <SYSTEM32>\oobe\images\newmark8.jpg.ecc
<SYSTEM32>\oobe\images\newtop1.jpg в <SYSTEM32>\oobe\images\newtop1.jpg.ecc
<SYSTEM32>\oobe\images\newtop8.jpg в <SYSTEM32>\oobe\images\newtop8.jpg.ecc
<SYSTEM32>\oobe\images\newmark1.jpg в <SYSTEM32>\oobe\images\newmark1.jpg.ecc
<SYSTEM32>\oobe\images\mslogo.jpg в <SYSTEM32>\oobe\images\mslogo.jpg.ecc
<SYSTEM32>\oobe\images\newbtm1.jpg в <SYSTEM32>\oobe\images\newbtm1.jpg.ecc
<SYSTEM32>\oobe\images\newbtm8.jpg в <SYSTEM32>\oobe\images\newbtm8.jpg.ecc
<SYSTEM32>\oobe\images\nextdown.jpg в <SYSTEM32>\oobe\images\nextdown.jpg.ecc
<SYSTEM32>\oobe\images\skipdown.jpg в <SYSTEM32>\oobe\images\skipdown.jpg.ecc
<SYSTEM32>\oobe\images\skipoff.jpg в <SYSTEM32>\oobe\images\skipoff.jpg.ecc
<SYSTEM32>\oobe\images\skipover.jpg в <SYSTEM32>\oobe\images\skipover.jpg.ecc
<SYSTEM32>\oobe\images\oemcoa.jpg в <SYSTEM32>\oobe\images\oemcoa.jpg.ecc
<SYSTEM32>\oobe\images\nextoff.jpg в <SYSTEM32>\oobe\images\nextoff.jpg.ecc
<SYSTEM32>\oobe\images\nextover.jpg в <SYSTEM32>\oobe\images\nextover.jpg.ecc
<SYSTEM32>\oobe\images\nextup.jpg в <SYSTEM32>\oobe\images\nextup.jpg.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca.cat в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca.cat.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca.manifest в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.3053_x-ww_b80fa8ca.manifest.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd.cat в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd.cat.ecc
%WINDIR%\Web\Wallpaper\Windows XP.jpg в %WINDIR%\Web\Wallpaper\Windows XP.jpg.ecc
%WINDIR%\Web\Wallpaper\Tulips.jpg в %WINDIR%\Web\Wallpaper\Tulips.jpg.ecc
%WINDIR%\Web\Wallpaper\Vortec space.jpg в %WINDIR%\Web\Wallpaper\Vortec space.jpg.ecc
%WINDIR%\Web\Wallpaper\Wind.jpg в %WINDIR%\Web\Wallpaper\Wind.jpg.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd.manifest в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd.manifest.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e.cat в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e.cat.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e.manifest в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.30729.4148_x-ww_d495ac4e.manifest.ecc
<Служебный элемент> в <Служебный элемент>
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375.manifest в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375.manifest.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700.cat в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700.cat.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700.manifest в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.762_x-ww_6b128700.manifest.ecc
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375.cat в %WINDIR%\WinSxS\Manifests\x86_Microsoft.VC90.CRT_1fc8b3b9a1e18e3b_9.0.21022.8_x-ww_d08d0375.cat.ecc
%WINDIR%\Web\Wallpaper\Stonehenge.jpg в %WINDIR%\Web\Wallpaper\Stonehenge.jpg.ecc
%WINDIR%\Web\Wallpaper\Crystal.jpg в %WINDIR%\Web\Wallpaper\Crystal.jpg.ecc
%WINDIR%\Web\Wallpaper\Follow.jpg в %WINDIR%\Web\Wallpaper\Follow.jpg.ecc
%WINDIR%\Web\Wallpaper\Friend.jpg в %WINDIR%\Web\Wallpaper\Friend.jpg.ecc
%WINDIR%\Web\Wallpaper\Azul.jpg в %WINDIR%\Web\Wallpaper\Azul.jpg.ecc
%WINDIR%\Web\printers\prtwebvw.css в %WINDIR%\Web\printers\prtwebvw.css.ecc
%WINDIR%\Web\Wallpaper\Ascent.jpg в %WINDIR%\Web\Wallpaper\Ascent.jpg.ecc
%WINDIR%\Web\Wallpaper\Autumn.jpg в %WINDIR%\Web\Wallpaper\Autumn.jpg.ecc
%WINDIR%\Web\Wallpaper\Home.jpg в %WINDIR%\Web\Wallpaper\Home.jpg.ecc
%WINDIR%\Web\Wallpaper\Radiance.jpg в %WINDIR%\Web\Wallpaper\Radiance.jpg.ecc
%WINDIR%\Web\Wallpaper\Red moon desert.jpg в %WINDIR%\Web\Wallpaper\Red moon desert.jpg.ecc
%WINDIR%\Web\Wallpaper\Ripple.jpg в %WINDIR%\Web\Wallpaper\Ripple.jpg.ecc
%WINDIR%\Web\Wallpaper\Purple flower.jpg в %WINDIR%\Web\Wallpaper\Purple flower.jpg.ecc
%WINDIR%\Web\Wallpaper\Moon flower.jpg в %WINDIR%\Web\Wallpaper\Moon flower.jpg.ecc
%WINDIR%\Web\Wallpaper\Peace.jpg в %WINDIR%\Web\Wallpaper\Peace.jpg.ecc
%WINDIR%\Web\Wallpaper\Power.jpg в %WINDIR%\Web\Wallpaper\Power.jpg.ecc
<SYSTEM32>\DirectX\Dinput\msprw_7.png в <SYSTEM32>\DirectX\Dinput\msprw_7.png.ecc
<SYSTEM32>\DirectX\Dinput\msprw_8.png в <SYSTEM32>\DirectX\Dinput\msprw_8.png.ecc
<SYSTEM32>\DirectX\Dinput\SV-262e1.png в <SYSTEM32>\DirectX\Dinput\SV-262e1.png.ecc
<SYSTEM32>\DirectX\Dinput\msprw_6.png в <SYSTEM32>\DirectX\Dinput\msprw_6.png.ecc
<SYSTEM32>\DirectX\Dinput\msprw_3.png в <SYSTEM32>\DirectX\Dinput\msprw_3.png.ecc
<SYSTEM32>\DirectX\Dinput\msprw_4.png в <SYSTEM32>\DirectX\Dinput\msprw_4.png.ecc
<SYSTEM32>\DirectX\Dinput\msprw_5.png в <SYSTEM32>\DirectX\Dinput\msprw_5.png.ecc
<SYSTEM32>\DirectX\Dinput\SV-262e3.png в <SYSTEM32>\DirectX\Dinput\SV-262e3.png.ecc
<SYSTEM32>\eula.txt в <SYSTEM32>\eula.txt.ecc
<SYSTEM32>\ias\dnary.mdb в <SYSTEM32>\ias\dnary.mdb.ecc
<SYSTEM32>\ias\ias.mdb в <SYSTEM32>\ias\ias.mdb.ecc
<DRIVERS>\gmreadme.txt в <DRIVERS>\gmreadme.txt.ecc
<SYSTEM32>\DirectX\Dinput\SV-262e4.png в <SYSTEM32>\DirectX\Dinput\SV-262e4.png.ecc
<SYSTEM32>\DirectX\Dinput\sv2511.png в <SYSTEM32>\DirectX\Dinput\sv2511.png.ecc
<SYSTEM32>\DirectX\Dinput\sv2512.png в <SYSTEM32>\DirectX\Dinput\sv2512.png.ecc
<SYSTEM32>\DirectX\Dinput\msprw_2.png в <SYSTEM32>\DirectX\Dinput\msprw_2.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_10.png в <SYSTEM32>\DirectX\Dinput\msf1f_10.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_2.png в <SYSTEM32>\DirectX\Dinput\msf1f_2.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_3.png в <SYSTEM32>\DirectX\Dinput\msf1f_3.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_1.png в <SYSTEM32>\DirectX\Dinput\msf1f_1.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_8.png в <SYSTEM32>\DirectX\Dinput\mse_8.png.ecc
<SYSTEM32>\DirectX\Dinput\mse_9.png в <SYSTEM32>\DirectX\Dinput\mse_9.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f.png в <SYSTEM32>\DirectX\Dinput\msf1f.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_4.png в <SYSTEM32>\DirectX\Dinput\msf1f_4.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_9.png в <SYSTEM32>\DirectX\Dinput\msf1f_9.png.ecc
<SYSTEM32>\DirectX\Dinput\msprw.png в <SYSTEM32>\DirectX\Dinput\msprw.png.ecc
<SYSTEM32>\DirectX\Dinput\msprw_1.png в <SYSTEM32>\DirectX\Dinput\msprw_1.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_8.png в <SYSTEM32>\DirectX\Dinput\msf1f_8.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_5.png в <SYSTEM32>\DirectX\Dinput\msf1f_5.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_6.png в <SYSTEM32>\DirectX\Dinput\msf1f_6.png.ecc
<SYSTEM32>\DirectX\Dinput\msf1f_7.png в <SYSTEM32>\DirectX\Dinput\msf1f_7.png.ecc
<SYSTEM32>\oobe\html\mouse\images\venice.jpg в <SYSTEM32>\oobe\html\mouse\images\venice.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\venicem.jpg в <SYSTEM32>\oobe\html\mouse\images\venicem.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\verona.jpg в <SYSTEM32>\oobe\html\mouse\images\verona.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\tyrolm.jpg в <SYSTEM32>\oobe\html\mouse\images\tyrolm.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\prague.jpg в <SYSTEM32>\oobe\html\mouse\images\prague.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\praguem.jpg в <SYSTEM32>\oobe\html\mouse\images\praguem.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\tyrol.jpg в <SYSTEM32>\oobe\html\mouse\images\tyrol.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\veronam.jpg в <SYSTEM32>\oobe\html\mouse\images\veronam.jpg.ecc
<SYSTEM32>\oobe\images\backover.jpg в <SYSTEM32>\oobe\images\backover.jpg.ecc
<SYSTEM32>\oobe\images\backup.jpg в <SYSTEM32>\oobe\images\backup.jpg.ecc
<SYSTEM32>\oobe\images\intro.wmv в <SYSTEM32>\oobe\images\intro.wmv.ecc
<SYSTEM32>\oobe\images\backoff.jpg в <SYSTEM32>\oobe\images\backoff.jpg.ecc
<SYSTEM32>\oobe\iconnect.js в <SYSTEM32>\oobe\iconnect.js.ecc
<SYSTEM32>\oobe\icsmgr.js в <SYSTEM32>\oobe\icsmgr.js.ecc
<SYSTEM32>\oobe\images\backdown.jpg в <SYSTEM32>\oobe\images\backdown.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\pisam.jpg в <SYSTEM32>\oobe\html\mouse\images\pisam.jpg.ecc
<SYSTEM32>\oobe\agtscrpt.js в <SYSTEM32>\oobe\agtscrpt.js.ecc
<SYSTEM32>\oobe\dialmgr.js в <SYSTEM32>\oobe\dialmgr.js.ecc
<SYSTEM32>\oobe\dslmain.js в <SYSTEM32>\oobe\dslmain.js.ecc
<SYSTEM32>\oobe\agtscrp2.js в <SYSTEM32>\oobe\agtscrp2.js.ecc
<SYSTEM32>\oobe\actsetup\aregsty2.css в <SYSTEM32>\oobe\actsetup\aregsty2.css.ecc
<SYSTEM32>\oobe\actsetup\aregstyl.css в <SYSTEM32>\oobe\actsetup\aregstyl.css.ecc
<SYSTEM32>\oobe\agtcore.js в <SYSTEM32>\oobe\agtcore.js.ecc
<SYSTEM32>\oobe\error.js в <SYSTEM32>\oobe\error.js.ecc
<SYSTEM32>\oobe\html\mouse\images\paris.jpg в <SYSTEM32>\oobe\html\mouse\images\paris.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\parism.jpg в <SYSTEM32>\oobe\html\mouse\images\parism.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\pisa.jpg в <SYSTEM32>\oobe\html\mouse\images\pisa.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\heidelbm.jpg в <SYSTEM32>\oobe\html\mouse\images\heidelbm.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\bulzano.jpg в <SYSTEM32>\oobe\html\mouse\images\bulzano.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\bulzanom.jpg в <SYSTEM32>\oobe\html\mouse\images\bulzanom.jpg.ecc
<SYSTEM32>\oobe\html\mouse\images\heidelb.jpg в <SYSTEM32>\oobe\html\mouse\images\heidelb.jpg.ecc
<SYSTEM32>\config\systemprofile\Templates\excel.xls в <SYSTEM32>\config\systemprofile\Templates\excel.xls.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_playing_big.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_playing_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_playing_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_playing_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\window_up.jpg в %WINDIR%\Help\Tours\htmlTour\window_up.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_playing.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_playing.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_optimized.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_optimized.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_optimized_big.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_optimized_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_optimized_ghost.jpg.ecc
%WINDIR%\Help\Tours\mmTour\intro.txt в %WINDIR%\Help\Tours\mmTour\intro.txt.ecc
%WINDIR%\Help\Tours\mmTour\segment4.txt в %WINDIR%\Help\Tours\mmTour\segment4.txt.ecc
%WINDIR%\Help\Tours\mmTour\segment5.txt в %WINDIR%\Help\Tours\mmTour\segment5.txt.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Cnt\wmploc.js в %WINDIR%\Help\Tours\WindowsMediaPlayer\Cnt\wmploc.js.ecc
%WINDIR%\Help\Tours\mmTour\segment3.txt в %WINDIR%\Help\Tours\mmTour\segment3.txt.ecc
%WINDIR%\Help\Tours\mmTour\nav.txt в %WINDIR%\Help\Tours\mmTour\nav.txt.ecc
%WINDIR%\Help\Tours\mmTour\segment1.txt в %WINDIR%\Help\Tours\mmTour\segment1.txt.ecc
%WINDIR%\Help\Tours\mmTour\segment2.txt в %WINDIR%\Help\Tours\mmTour\segment2.txt.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_built_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_built_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_easier_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_faster.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_faster.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_faster_big.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_faster_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_easier_big.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_easier_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_better_big.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_better_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_better_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_easier.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_easier.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_faster_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\ul_logo.jpg в %WINDIR%\Help\Tours\htmlTour\ul_logo.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_built.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_built.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\unlock_built_big.jpg в %WINDIR%\Help\Tours\htmlTour\unlock_built_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\taskbar_up.jpg в %WINDIR%\Help\Tours\htmlTour\taskbar_up.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\scripts.js в %WINDIR%\Help\Tours\htmlTour\scripts.js.ecc
%WINDIR%\Help\Tours\htmlTour\start_up.jpg в %WINDIR%\Help\Tours\htmlTour\start_up.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\style.css в %WINDIR%\Help\Tours\htmlTour\style.css.ecc
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\help.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\security_watermark.jpg в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\security_watermark.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\EULA.rtf в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\EULA.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.dll.ecc
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.tlb в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\Microsoft.JScript.tlb.ecc
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3install.txt в %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3install.txt.ecc
%WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\VSMsiLog22FD.txt в %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\VSMsiLog22FD.txt.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1025.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1025.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3error.txt в %WINDIR%\Microsoft.NET\Framework\v3.0\Microsoft .NET Framework 3.0 x86\Logs\dd_dotnetfx3error.txt.ecc
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\WebAdminStyles.css в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ASP.NETWebAdminFiles\WebAdminStyles.css.ecc
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.dll.ecc
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.tlb в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft.JScript.tlb.ecc
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\WebUIValidation.js в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\WebUIValidation.js.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Scr\tour.js в %WINDIR%\Help\Tours\WindowsMediaPlayer\Scr\tour.js.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\copycd.wmv в %WINDIR%\Help\Tours\WindowsMediaPlayer\Video\copycd.wmv.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\mdlib.wmv в %WINDIR%\Help\Tours\WindowsMediaPlayer\Video\mdlib.wmv.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Scr\events.js в %WINDIR%\Help\Tours\WindowsMediaPlayer\Scr\events.js.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Css\controls.css в %WINDIR%\Help\Tours\WindowsMediaPlayer\Css\controls.css.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Css\wmptour.css в %WINDIR%\Help\Tours\WindowsMediaPlayer\Css\wmptour.css.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Scr\controls.js в %WINDIR%\Help\Tours\WindowsMediaPlayer\Scr\controls.js.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\nuskin.wmv в %WINDIR%\Help\Tours\WindowsMediaPlayer\Video\nuskin.wmv.ecc
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU1.txt в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU1.txt.ecc
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU2.txt в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\SetupENU2.txt.ecc
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\SmartNav.js в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ASP.NETClientFiles\SmartNav.js.ecc
%WINDIR%\Microsoft.NET\Framework\sbs_microsoft.jscript.dll в %WINDIR%\Microsoft.NET\Framework\sbs_microsoft.jscript.dll.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\rtuner.wmv в %WINDIR%\Help\Tours\WindowsMediaPlayer\Video\rtuner.wmv.ecc
%WINDIR%\Help\Tours\WindowsMediaPlayer\Video\viz.wmv в %WINDIR%\Help\Tours\WindowsMediaPlayer\Video\viz.wmv.ecc
%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll в %WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.JScript\v4.0_10.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll.ecc
%WINDIR%\Help\Tours\htmlTour\connected_multiple_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\connected_multiple_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_networks.jpg в %WINDIR%\Help\Tours\htmlTour\connected_networks.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_networks_big.jpg в %WINDIR%\Help\Tours\htmlTour\connected_networks_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_multiple_big.jpg в %WINDIR%\Help\Tours\htmlTour\connected_multiple_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_data_big.jpg в %WINDIR%\Help\Tours\htmlTour\connected_data_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_data_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\connected_data_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_multiple.jpg в %WINDIR%\Help\Tours\htmlTour\connected_multiple.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_networks_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\connected_networks_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\desktop_screen_shot.jpg в %WINDIR%\Help\Tours\htmlTour\desktop_screen_shot.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\desktop_up.jpg в %WINDIR%\Help\Tours\htmlTour\desktop_up.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\end_up.jpg в %WINDIR%\Help\Tours\htmlTour\end_up.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\control_up.jpg в %WINDIR%\Help\Tours\htmlTour\control_up.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_wizard.jpg в %WINDIR%\Help\Tours\htmlTour\connected_wizard.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_wizard_big.jpg в %WINDIR%\Help\Tours\htmlTour\connected_wizard_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_wizard_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\connected_wizard_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\connected_data.jpg в %WINDIR%\Help\Tours\htmlTour\connected_data.jpg.ecc
%WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\7d61e63dea85f4f77ea4c13df7651ec7\Microsoft.JScript.ni.dll в %WINDIR%\assembly\NativeImages_v2.0.50727_32\Microsoft.JScript\7d61e63dea85f4f77ea4c13df7651ec7\Microsoft.JScript.ni.dll.ecc
%WINDIR%\clock.avi в %WINDIR%\clock.avi.ecc
%WINDIR%\Help\Tours\htmlTour\best_road.jpg в %WINDIR%\Help\Tours\htmlTour\best_road.jpg.ecc
%WINDIR%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll в %WINDIR%\assembly\GAC_MSIL\Microsoft.JScript\8.0.0.0__b03f5f7f11d50a3a\Microsoft.JScript.dll.ecc
%WINDIR%\$NtUninstallKB942288-v3$\spuninst\spuninst.txt в %WINDIR%\$NtUninstallKB942288-v3$\spuninst\spuninst.txt.ecc
%WINDIR%\$NtUninstallWIC$\spuninst\spuninst.txt в %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.txt.ecc
%WINDIR%\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll в %WINDIR%\assembly\GAC\Microsoft.JScript\7.0.5000.0__b03f5f7f11d50a3a\Microsoft.JScript.dll.ecc
%WINDIR%\Help\Tours\htmlTour\best_road_big.jpg в %WINDIR%\Help\Tours\htmlTour\best_road_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\best_secure.jpg в %WINDIR%\Help\Tours\htmlTour\best_secure.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\best_secure_big.jpg в %WINDIR%\Help\Tours\htmlTour\best_secure_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\best_secure_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\best_secure_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\best_robust_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\best_robust_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\best_road_ghost.jpg в %WINDIR%\Help\Tours\htmlTour\best_road_ghost.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\best_robust.jpg в %WINDIR%\Help\Tours\htmlTour\best_robust.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\best_robust_big.jpg в %WINDIR%\Help\Tours\htmlTour\best_robust_big.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img121.jpg в %WINDIR%\Help\Tours\htmlTour\img121.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img123.jpg в %WINDIR%\Help\Tours\htmlTour\img123.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img126.jpg в %WINDIR%\Help\Tours\htmlTour\img126.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img116.jpg в %WINDIR%\Help\Tours\htmlTour\img116.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img103.jpg в %WINDIR%\Help\Tours\htmlTour\img103.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img109.jpg в %WINDIR%\Help\Tours\htmlTour\img109.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img110.jpg в %WINDIR%\Help\Tours\htmlTour\img110.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img136.jpg в %WINDIR%\Help\Tours\htmlTour\img136.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\question_icon.jpg в %WINDIR%\Help\Tours\htmlTour\question_icon.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\read_icon.jpg в %WINDIR%\Help\Tours\htmlTour\read_icon.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\safe_easy_better.jpg в %WINDIR%\Help\Tours\htmlTour\safe_easy_better.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\pen_icon.jpg в %WINDIR%\Help\Tours\htmlTour\pen_icon.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img149.jpg в %WINDIR%\Help\Tours\htmlTour\img149.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\intro_logo.jpg в %WINDIR%\Help\Tours\htmlTour\intro_logo.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\logo.jpg в %WINDIR%\Help\Tours\htmlTour\logo.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img100.jpg в %WINDIR%\Help\Tours\htmlTour\img100.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img014.jpg в %WINDIR%\Help\Tours\htmlTour\img014.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img033.jpg в %WINDIR%\Help\Tours\htmlTour\img033.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img033a.jpg в %WINDIR%\Help\Tours\htmlTour\img033a.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img004b.jpg в %WINDIR%\Help\Tours\htmlTour\img004b.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\folder_up.jpg в %WINDIR%\Help\Tours\htmlTour\folder_up.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\gradient.jpg в %WINDIR%\Help\Tours\htmlTour\gradient.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\icon_up.jpg в %WINDIR%\Help\Tours\htmlTour\icon_up.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img034.jpg в %WINDIR%\Help\Tours\htmlTour\img034.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img072.jpg в %WINDIR%\Help\Tours\htmlTour\img072.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img074a.jpg в %WINDIR%\Help\Tours\htmlTour\img074a.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img089.jpg в %WINDIR%\Help\Tours\htmlTour\img089.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img068.jpg в %WINDIR%\Help\Tours\htmlTour\img068.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img040.jpg в %WINDIR%\Help\Tours\htmlTour\img040.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img046.jpg в %WINDIR%\Help\Tours\htmlTour\img046.jpg.ecc
%WINDIR%\Help\Tours\htmlTour\img060.jpg в %WINDIR%\Help\Tours\htmlTour\img060.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1028.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1028.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3082\eula.rtf.ecc
%WINDIR%\OEWABLog.txt в %WINDIR%\OEWABLog.txt.ecc
%WINDIR%\pchealth\helpctr\System\css\Behaviors.css в %WINDIR%\pchealth\helpctr\System\css\Behaviors.css.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\3076\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1055\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2052\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\2070\eula.rtf.ecc
%WINDIR%\pchealth\helpctr\System\css\Layout.css в %WINDIR%\pchealth\helpctr\System\css\Layout.css.ecc
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\constants.js в %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\constants.js.ecc
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Css\RAChat.css в %WINDIR%\pchealth\helpctr\System\Remote Assistance\Css\RAChat.css.ecc
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Css\rc.css в %WINDIR%\pchealth\helpctr\System\Remote Assistance\Css\rc.css.ecc
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\common.js в %WINDIR%\pchealth\helpctr\System\Remote Assistance\Common\common.js.ecc
%WINDIR%\pchealth\helpctr\System\dialogs\DlgLib.js в %WINDIR%\pchealth\helpctr\System\dialogs\DlgLib.js.ecc
%WINDIR%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.js в %WINDIR%\pchealth\helpctr\System\DVDUpgrd\dvdupgrd.js.ecc
%WINDIR%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg в %WINDIR%\pchealth\helpctr\System\DVDUpgrd\stripe.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1053\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1036\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1037\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1038\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1035\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1031\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1032\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1033\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1040\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1045\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1046\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1049\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1044\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1041\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1042\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1043\eula.rtf.ecc
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\RAChat.css в %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\RAChat.css.ecc
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rc.css в %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rc.css.ecc
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rcbuddy.css в %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Css\rcbuddy.css.ecc
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\constants.js в %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\constants.js.ecc
%WINDIR%\pchealth\helpctr\System\sysinfo\wmi_data.js в %WINDIR%\pchealth\helpctr\System\sysinfo\wmi_data.js.ecc
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\PSS.css в %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\PSS.css.ecc
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js в %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Common\common.js.ecc
%WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png в %WINDIR%\pchealth\helpctr\Vendors\CN=Microsoft Corporation,L=Redmond,S=Washington,C=US\Remote Assistance\Escalation\Common\Remote_Assistance_Graphic.png.ecc
<SYSTEM32>\config\system.sav в <SYSTEM32>\config\system.sav.ecc
<SYSTEM32>\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt в <SYSTEM32>\config\systemprofile\Application Data\Microsoft\Internet Explorer\brndlog.txt.ecc
<SYSTEM32>\config\systemprofile\SendTo\Mail Recipient.MAPIMail в <SYSTEM32>\config\systemprofile\SendTo\Mail Recipient.MAPIMail.ecc
<SYSTEM32>\config\software.sav в <SYSTEM32>\config\software.sav.ecc
%WINDIR%\setuplog.txt в %WINDIR%\setuplog.txt.ecc
<SYSTEM32>\CatRoot2\dberr.txt в <SYSTEM32>\CatRoot2\dberr.txt.ecc
<SYSTEM32>\config\default.sav в <SYSTEM32>\config\default.sav.ecc
%WINDIR%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.js в %WINDIR%\pchealth\helpctr\System\sysinfo\sysSoftwareInfo.js.ecc
%WINDIR%\pchealth\helpctr\System\scripts\Common.js в %WINDIR%\pchealth\helpctr\System\scripts\Common.js.ecc
%WINDIR%\pchealth\helpctr\System\scripts\HomePage__DESKTOP.js в %WINDIR%\pchealth\helpctr\System\scripts\HomePage__DESKTOP.js.ecc
%WINDIR%\pchealth\helpctr\System\scripts\HomePage__SERVER.js в %WINDIR%\pchealth\helpctr\System\scripts\HomePage__SERVER.js.ecc
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.js в %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Server\RAServer.js.ecc
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Css\rcbuddy.css в %WINDIR%\pchealth\helpctr\System\Remote Assistance\Css\rcbuddy.css.ecc
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.js в %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Client\RAClient.js.ecc
%WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RAControl.js в %WINDIR%\pchealth\helpctr\System\Remote Assistance\Interaction\Common\RAControl.js.ecc
%WINDIR%\pchealth\helpctr\System\scripts\HomePage__SHARED.js в %WINDIR%\pchealth\helpctr\System\scripts\HomePage__SHARED.js.ecc
%WINDIR%\pchealth\helpctr\System\sysinfo\RSoP.js в %WINDIR%\pchealth\helpctr\System\sysinfo\RSoP.js.ecc
%WINDIR%\pchealth\helpctr\System\sysinfo\sysComponentInfo.js в %WINDIR%\pchealth\helpctr\System\sysinfo\sysComponentInfo.js.ecc
%WINDIR%\pchealth\helpctr\System\sysinfo\sysHealthInfo.js в %WINDIR%\pchealth\helpctr\System\sysinfo\sysHealthInfo.js.ecc
%WINDIR%\pchealth\helpctr\System\sysinfo\msinfohss.css в %WINDIR%\pchealth\helpctr\System\sysinfo\msinfohss.css.ecc
%WINDIR%\pchealth\helpctr\System\scripts\wrapperparam.js в %WINDIR%\pchealth\helpctr\System\scripts\wrapperparam.js.ecc
%WINDIR%\pchealth\helpctr\System\sysinfo\commonFunc.js в %WINDIR%\pchealth\helpctr\System\sysinfo\commonFunc.js.ecc
%WINDIR%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg в %WINDIR%\pchealth\helpctr\System\sysinfo\graphics\greendot.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.2070.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.2070.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.3082.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.3082.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35error.txt в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35error.txt.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.2052.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.2052.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1049.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1049.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1053.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1053.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1055.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1055.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35install.txt в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\Logs\dd_dotnetfx35install.txt.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\security_watermark.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\topGradRepeat.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\WebAdminStyles.css в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\WebAdminStyles.css.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\help.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\defaults\preferences\defaults.js в %WINDIR%\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension\defaults\preferences\defaults.js.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\ASPdotNET_logo.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ASP.NETWebAdminFiles\Images\darkBlue_GRAD.jpg.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1046.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1046.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1033.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1033.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1035.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1035.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1036.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1036.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1032.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1032.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1029.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1029.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1030.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1030.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1031.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1031.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1037.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1037.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1043.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1043.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1044.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1044.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1045.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1045.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1042.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1042.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1038.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1038.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1040.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1040.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1041.rtf в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\eula.1041.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1049\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1053\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1055\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1046\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1043\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1044\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1045\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2052\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1028\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1029\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1030\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Extended\1025\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\2070\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3076\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\3082\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1042\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1029\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1030\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1031\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1028\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.JScript.dll в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.JScript.dll.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.JScript.tlb в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.JScript.tlb.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1025\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1032\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1038\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1040\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1041\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1037\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1033\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1035\eula.rtf.ecc
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\eula.rtf в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\SetupCache\Client\1036\eula.rtf.ecc

Перемещает следующие файлы:

<Служебный элемент> в <Служебный элемент>

Самоудаляется.

Сетевая активность:

Подключается к:

'7t######47vlep5o.2kjb9.net':80
'ip##fo.io':80

TCP:

Запросы HTTP GET:

http://7t######47vlep5o.2kjb9.net/state1.php?U3##################################################################################################################################################################################################################################################################################################################
http://7t######47vlep5o.2kjb9.net/state1.php?U3######################################################################################################################################################################################################################################################################################################
http://ip##fo.io/ip

UDP:

DNS ASK 7t######47vlep5o.2kjb9.net
DNS ASK ip##fo.io

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней