Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'FIX2-ephuou' = '<SYSTEM32>\CMD.EXE /C START "" "%APPDATA%\wsmprovhost.exe"'
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\{RecOveR}-tgver__.Png
- '%APPDATA%\wsmprovhost.exe'
- '<SYSTEM32>\cmd.exe' /c DEL <Full path to file> >> NUL
- <SYSTEM32>\cmd.exe
- ecmd.exe
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-20\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Cookies\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Cookies\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Cookies\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\History\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\Temp\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\Temp\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\History\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\History\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\Temp\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\LBMMC3H3\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\CJCTQ25G\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\MOE00UY1\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\Application Data\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\Application Data\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\Temp\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\Temp\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\Content.IE5\BGGTYMH1\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\Temp\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\History\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\History\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\History\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\Application Data\Microsoft\Credentials\S-1-5-20\{RecOveR}-tgver__.Htm
- %HOMEPATH%\Cookies\{RecOveR}-tgver__.Png
- %HOMEPATH%\Cookies\{RecOveR}-tgver__.Txt
- %HOMEPATH%\Cookies\{RecOveR}-tgver__.Htm
- %APPDATA%\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\{RecOveR}-tgver__.Htm
- %APPDATA%\{RecOveR}-tgver__.Png
- %APPDATA%\{RecOveR}-tgver__.Txt
- %HOMEPATH%\Favorites\{RecOveR}-tgver__.Txt
- %HOMEPATH%\Favorites\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\{RecOveR}-tgver__.Png
- %HOMEPATH%\Favorites\{RecOveR}-tgver__.Png
- %HOMEPATH%\Favorites\Links\{RecOveR}-tgver__.Png
- %HOMEPATH%\Favorites\Links\{RecOveR}-tgver__.Txt
- %HOMEPATH%\Favorites\Links\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\{RecOveR}-tgver__.Txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\{RecOveR}-tgver__.Png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\{RecOveR}-tgver__.Txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\{RecOveR}-tgver__.Png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\{RecOveR}-tgver__.Txt
- %APPDATA%\Mozilla\Firefox\{RecOveR}-tgver__.Txt
- %APPDATA%\Mozilla\Firefox\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\{RecOveR}-tgver__.Png
- %APPDATA%\Mozilla\Firefox\{RecOveR}-tgver__.Png
- %APPDATA%\Mozilla\Firefox\Profiles\{RecOveR}-tgver__.Png
- %APPDATA%\Mozilla\Firefox\Profiles\{RecOveR}-tgver__.Txt
- %APPDATA%\Mozilla\Firefox\Profiles\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Microsoft\Windows\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Microsoft\Windows\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Microsoft\Windows\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Microsoft\Media Player\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Microsoft\Credentials\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Microsoft\Media Player\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Microsoft\Media Player\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Microsoft\Windows Media\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Microsoft\Windows Media\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Microsoft\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Microsoft\Windows Media\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Microsoft\Windows Media\9.0\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Microsoft\Windows Media\9.0\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Microsoft\Windows Media\9.0\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Microsoft\Credentials\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\Outlook Express\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\Microsoft\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\{RecOveR}-tgver__.Htm
- <LS_APPDATA>\Microsoft\Credentials\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Identities\{RecOveR}-tgver__.Png
- <LS_APPDATA>\Identities\{RecOveR}-tgver__.Txt
- <LS_APPDATA>\Identities\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\Internet Explorer\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\Internet Explorer\Quick Launch\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\Credentials\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\Credentials\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\Credentials\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\Media Player\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\MMC\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\MMC\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\Media Player\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\Internet Explorer\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\Internet Explorer\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\Media Player\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\{RecOveR}-tgver__.Htm
- %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\{RecOveR}-tgver__.Txt
- %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\{RecOveR}-tgver__.Htm
- %APPDATA%\Identities\{RecOveR}-tgver__.Png
- %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\{RecOveR}-tgver__.Png
- C:\Documents and Settings\NetworkService\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\NetworkService\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\Address Book\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\Credentials\S-1-5-21-2052111302-484763869-725345543-1003\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\Address Book\{RecOveR}-tgver__.Txt
- %APPDATA%\Identities\{RecOveR}-tgver__.Txt
- %APPDATA%\Identities\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\Address Book\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\MMC\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\Windows\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\Windows\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\Windows\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\Windows\Themes\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\Windows\Themes\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\Windows\Themes\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\Extensions\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\{RecOveR}-tgver__.Png
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\{RecOveR}-tgver__.Txt
- %APPDATA%\Mozilla\Extensions\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\{RecOveR}-tgver__.Htm
- %APPDATA%\Mozilla\Extensions\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\SystemCertificates\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\SystemCertificates\{RecOveR}-tgver__.Png
- %APPDATA%\Microsoft\SystemCertificates\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Txt
- %APPDATA%\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Htm
- %APPDATA%\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Start Menu\Programs\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Start Menu\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\Programs\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Templates\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Templates\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Templates\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Favorites\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Favorites\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Favorites\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\Microsoft\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Application Data\Microsoft\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Cookies\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Cookies\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Cookies\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\Microsoft\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Application Data\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Application Data\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Documents\My Music\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Documents\My Music\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Documents\My Music\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Documents\My Pictures\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Documents\My Pictures\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\My Videos\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Documents\My Pictures\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\{RecOveR}-tgver__.Txt
- <Current directory>\{RecOveR}-tgver__.Txt
- <Current directory>\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\{RecOveR}-tgver__.Png
- <Current directory>\{RecOveR}-tgver__.Png
- %APPDATA%\wsmprovhost.exe
- %HOMEPATH%\My Documents\storage_data
- %HOMEPATH%\My Documents\+recover+file.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\{RecOveR}-tgver__.Htm
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\binfile[1].htm
- %ALLUSERSPROFILE%\Documents\My Videos\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\DRM\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\DRM\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\DRM\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\My Videos\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Documents\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Documents\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\{RecOveR}-tgver__.Htm
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Favorites\{RecOveR}-tgver__.Png
- %ALLUSERSPROFILE%\Favorites\{RecOveR}-tgver__.Txt
- %ALLUSERSPROFILE%\Favorites\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Internet Explorer\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\Certificates\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Media Player\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Start Menu\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Start Menu\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Start Menu\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Start Menu\Programs\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Start Menu\Programs\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Start Menu\Programs\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\Credentials\S-1-5-19\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Templates\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Templates\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Templates\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\S-1-5-19\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Cookies\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Cookies\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Cookies\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Credentials\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CRLs\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\My\CTLs\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\LocalService\Application Data\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Png
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\LocalService\Application Data\Microsoft\SystemCertificates\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\U98D4X8H\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\YPORKZYZ\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\History\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\Application Data\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\Application Data\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\Temp\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\Content.IE5\2VAZY7AN\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\Temp\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\History\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\History\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Local Settings\Temp\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\<INETFILES>\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\SendTo\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\SendTo\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\SendTo\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Recent\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\My Documents\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\My Documents\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\NetHood\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\My Documents\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Local Settings\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\Local Settings\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\PrintHood\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\Recent\{RecOveR}-tgver__.Png
- C:\Documents and Settings\Default User\Recent\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\PrintHood\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\NetHood\{RecOveR}-tgver__.Txt
- C:\Documents and Settings\Default User\NetHood\{RecOveR}-tgver__.Htm
- C:\Documents and Settings\Default User\PrintHood\{RecOveR}-tgver__.Png
- %APPDATA%\wsmprovhost.exe
- 'st####sundaytv.com':80
- 'th###nesact.com':80
- 'pc##und.com':80
- 'ho####inogames.org':80
- 'go####rg-share.com':80
- 'th####flooring.com':80
- http://st####sundaytv.com/wp-content/themes/sketch/binfile.php
- http://th###nesact.com/wp-content/themes/sketch/binfile.php
- http://pc##und.com/binfile.php
- http://ho####inogames.org/binfile.php
- http://go####rg-share.com/wp-content/plugins/contact-form-7/includes/js/jquery-ui/themes/smoothness/images/binfile.php
- http://th####flooring.com/wp-content/themes/sketch/binfile.php
- DNS ASK st####sundaytv.com
- DNS ASK th###nesact.com
- DNS ASK pc##und.com
- DNS ASK ho####inogames.org
- DNS ASK go####rg-share.com
- DNS ASK th####flooring.com