Technical Information
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '*abfcea34.exe' = '%APPDATA%\abfcea34.exe'
- '%APPDATA%\abfcea34.exe' <Full path to file>
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\dirListing\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\icons\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\arrow\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\console\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\tree\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\media\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\printpreview\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\global\toolbar\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\printpreview\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\media\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\places\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\passwordmgr\!!!!!readme!!!!!.htm
- %WINDIR%\$NtUninstallKB942288-v3$\spuninst\!!!!!readme!!!!!.htm
- %WINDIR%\$NtUninstallWIC$\spuninst\!!!!!readme!!!!!.htm
- %WINDIR%\!!!!!readme!!!!!.htm
- %ProgramFiles%\Windows Media Player\!!!!!readme!!!!!.htm
- %ProgramFiles%\Windows NT\Pinball\!!!!!readme!!!!!.htm
- <STUBS_DIR>\!!!!!readme!!!!!.htm
- %WINDIR%\Help\Tours\WindowsMediaPlayer\Video\!!!!!readme!!!!!.htm
- %WINDIR%\Media\!!!!!readme!!!!!.htm
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\1033\!!!!!readme!!!!!.htm
- %WINDIR%\Help\Tours\htmlTour\!!!!!readme!!!!!.htm
- %WINDIR%\Help\Tours\mmTour\!!!!!readme!!!!!.htm
- %WINDIR%\Help\Tours\WindowsMediaPlayer\Audio\Wav\!!!!!readme!!!!!.htm
- %ProgramFiles%\Outlook Express\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\update\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\xpinstall\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\places\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\plugins\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\mozapps\profile\!!!!!readme!!!!!.htm
- %ProgramFiles%\Movie Maker\Shared\!!!!!readme!!!!!.htm
- %ProgramFiles%\Movie Maker\Shared\Profiles\!!!!!readme!!!!!.htm
- %ProgramFiles%\NetMeeting\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\res\html\!!!!!readme!!!!!.htm
- %ProgramFiles%\Messenger\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\dirListing\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\Colorer\hrc\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\Compare\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\DrawLine\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\arclite\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\AutoWrap\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\Brackets\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\ExtSearch\sources\RegExp\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\FarCmds\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\FileCase\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\EditCase\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\EMenu\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\ExtSearch\doc\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\Align\!!!!!readme!!!!!.htm
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\!!!!!readme!!!!!.htm
- C:\Documents and Settings\Default User\Templates\!!!!!readme!!!!!.htm
- <LS_APPDATA>\!!!!!readme!!!!!.htm
- %APPDATA%\abfcea34.exe
- %APPDATA%\abfcea34.exe.dat
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\!!!!!readme!!!!!.htm
- C:\Far2\Documentation\rus\!!!!!readme!!!!!.htm
- C:\Far2\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\7-Zip\!!!!!readme!!!!!.htm
- %HOMEPATH%\Templates\!!!!!readme!!!!!.htm
- C:\Far2\Addons\!!!!!readme!!!!!.htm
- C:\Far2\Documentation\eng\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\FTP\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\res\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\skin\classic\aero\global\console\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabview\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\toolkit\content\global\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\Network\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\ProcList\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\TmpPanel\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\FTP\lib\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\HlfViewer\!!!!!readme!!!!!.htm
- C:\Far2\Plugins\MacroView\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\!!!!!readme!!!!!.htm
- %CommonProgramFiles%\Microsoft Shared\Stationery\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\content\branding\!!!!!readme!!!!!.htm
- %ProgramFiles%\FireFox\chrome\browser\content\browser\!!!!!readme!!!!!.htm
- %APPDATA%\abfcea34.exe.dat
- <Full path to file>