Trojan.KillFiles.10059

Technical Information

Modifies file system :

Creates the following files:

<Current directory>\setuperr.log
<Current directory>\setuplog.txt
<Current directory>\setupact.log
<Current directory>\setupapi.log
<Current directory>\Soap Bubbles.bmp
<Current directory>\spupdsvc.log
<Current directory>\sfk.exe
<Current directory>\sleep.exe
<Current directory>\SET8.tmp
<Current directory>\River Sumida.bmp
<Current directory>\Santa Fe Stucco.bmp
<Current directory>\regopt.log
<Current directory>\Rhododendron.bmp
<Current directory>\SET3.tmp
<Current directory>\SET4.tmp
<Current directory>\SchedLgU.Txt
<Current directory>\sessmgr.setup.log
<Current directory>\vb.ini
<Current directory>\vbaddin.ini
<Current directory>\twunk_32.exe
<Current directory>\updspapi.log
<Current directory>\wiadebug.log
<Current directory>\wiaservc.log
<Current directory>\vmmreg32.dll
<Current directory>\Web
<Current directory>\twunk_16.exe
<Current directory>\tabletoc.log
<Current directory>\TASKMAN.EXE
<Current directory>\Sti_Trace.log
<Current directory>\system.ini
<Current directory>\twain.dll
<Current directory>\twain_32.dll
<Current directory>\Tasks
<Current directory>\tsoc.log
<Current directory>\iis6.log
<Current directory>\imsins.BAK
<Current directory>\Greenstone.bmp
<Current directory>\hh.exe
<Current directory>\Installer
<Current directory>\KB942288-v3.log
<Current directory>\imsins.log
<Current directory>\inf
<Current directory>\Gone Fishing.bmp
<Current directory>\DtcInstall.log
<Current directory>\explorer.exe
<Current directory>\desktop.ini
<Current directory>\Downloaded Program Files
<Current directory>\FeatherTexture.bmp
<Current directory>\Fonts
<Current directory>\explorer.scf
<Current directory>\FaxSetup.log
<Current directory>\OEWABLog.txt
<Current directory>\Offline Web Pages
<Current directory>\ocmsn.log
<Current directory>\ODBCINST.INI
<Current directory>\regedit.exe
<Current directory>\REGLOCS.OLD
<Current directory>\Prairie Wind.bmp
<Current directory>\Prefetch
<Current directory>\ocgen.log
<Current directory>\msgsocm.log
<Current directory>\msmqinst.log
<Current directory>\MedCtrOC.log
<Current directory>\msdfmap.ini
<Current directory>\nsreg.dat
<Current directory>\ntdtcsetup.log
<Current directory>\netfxocm.log
<Current directory>\NOTEPAD.EXE
<Current directory>\arrow_l.cur
<Current directory>\arrow_m.cur
<Current directory>\arrow_il.cur
<Current directory>\arrow_im.cur
<Current directory>\arrow_rl.cur
<Current directory>\arrow_rm.cur
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\_filelst.cfg
<Current directory>\arrow_r.cur
<Current directory>\arrow_i.cur
<Current directory>\3dwns.cur
<Current directory>\3dwnwse.cur
<Current directory>\3dwnesw.cur
<Current directory>\3dwno.cur
<Current directory>\appstar3.ani
<Current directory>\appstart.ani
<Current directory>\3dwwe.cur
<Current directory>\appstar2.ani
<Current directory>\busy_il.cur
<Current directory>\busy_im.cur
<Current directory>\beam_rm.cur
<Current directory>\busy_i.cur
<Current directory>\busy_r.cur
<Current directory>\busy_rl.cur
<Current directory>\busy_l.cur
<Current directory>\busy_m.cur
<Current directory>\beam_rl.cur
<Current directory>\beam_i.cur
<Current directory>\beam_il.cur
<Current directory>\banana.ani
<Current directory>\barber.ani
<Current directory>\beam_m.cur
<Current directory>\beam_r.cur
<Current directory>\beam_im.cur
<Current directory>\beam_l.cur
<Current directory>\AcGenral.dll
<Current directory>\AcLayers.dll
<Current directory>\Zapotec.bmp
<Current directory>\_default.pif
<Current directory>\AcSpecfc.dll
<Current directory>\AcXtrnal.dll
<Current directory>\AcLua.dll
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\drivetable.txt
<Current directory>\WMSysPr9.prx
<Current directory>\WindowsUpdate.log
<Current directory>\winhelp.exe
<Current directory>\win.ini
<Current directory>\WindowsShell.Manifest
<Current directory>\winnt256.bmp
<Current directory>\wmsetup.log
<Current directory>\winhlp32.exe
<Current directory>\winnt.bmp
<Current directory>\3dgwe.cur
<Current directory>\3dsmove.cur
<Current directory>\3dgns.cur
<Current directory>\3dgnwse.cur
<Current directory>\3dwarro.cur
<Current directory>\3dwmove.cur
<Current directory>\3dsns.cur
<Current directory>\3dsnwse.cur
<Current directory>\3dgno.cur
<Current directory>\drvmain.sdb
<Current directory>\msimain.sdb
<Current directory>\apphelp.sdb
<Current directory>\apph_sp.sdb
<Current directory>\3dgmove.cur
<Current directory>\3dgnesw.cur
<Current directory>\sysmain.sdb
<Current directory>\3dgarro.cur
<Current directory>\control.ini
<Current directory>\ejcpignqi_5_0
<Current directory>\ejcpignqi_6_0
<Current directory>\ejcpignqi_3_0
<Current directory>\ejcpignqi_4_0
<Current directory>\AVPM.EXE
<Current directory>\AVSYNMGR.EXE
<Current directory>\ejcpignqi_7_0
<Current directory>\AVPCC.EXE
<Current directory>\ejcpignqi_2_0
<Current directory>\ejcpignqi_13_0
<Current directory>\ejcpignqi_14_0
<Current directory>\ejcpignqi_11_0
<Current directory>\ejcpignqi_12_0
<Current directory>\ejcpignqi_17_0
<Current directory>\ejcpignqi_1_0
<Current directory>\ejcpignqi_15_0
<Current directory>\ejcpignqi_16_0
<Current directory>\drweb386.exe
<Current directory>\Drwebupw.exe
<Current directory>\drweb.exe
<Current directory>\Drweb32w.exe
<Current directory>\egni.exe
<Current directory>\ekrn.exe
<Current directory>\Drwebwcl.exe
<Current directory>\ecmd.exe
<Current directory>\dnf.exe
<Current directory>\bdsubmit.exe
<Current directory>\cabalmain.exe
<Current directory>\bdagent.exe
<Current directory>\bdss.exe
<Current directory>\ClamWin.exe
<Current directory>\dekaron.exe
<Current directory>\ccapp.exe
<Current directory>\chrome.exe
<Current directory>\ecugtwu.jnh_0_0
<Current directory>\ecugtwu.npi_0_0
<Current directory>\ecuggpi.jnh_0_0
<Current directory>\ecuggpi.npi_0_0
<Current directory>\ecvcnqi-vgzv.zon_0_0
<Current directory>\ecvcnqi.zon_0_0
<Current directory>\ecvcnqi-eqpuqng.zon_0_0
<Current directory>\ecvcnqi-tid.zon_0_0
<Current directory>\dzcfsqvol.ise_0
<Current directory>\dwi.tgrqtv.vzv_1_0
<Current directory>\dxwr.mdu_0_0_0
<Current directory>\dusmtijguy.sfh_0
<Current directory>\dwi.tgrqtv.vzv_0_0
<Current directory>\dxwrzuds.goo_0_0_0
<Current directory>\dxwrzuds.pds_0_0_0
<Current directory>\dxwrhahf.edw_0_0_0
<Current directory>\dxwrhahf.edw_1_0_0
<Current directory>\eftdsjqu.jpo_6
<Current directory>\eftdsjqu.jpo_7
<Current directory>\eftdsjqu.jpo_4
<Current directory>\eftdsjqu.jpo_5
<Current directory>\ejcpignqi_0_0
<Current directory>\ejcpignqi_10_0
<Current directory>\eftdsjqu.jpo_8
<Current directory>\ejbmph.bmuepxo.sfh_0
<Current directory>\eftdsjqu.jpo_3
<Current directory>\efgbvmu.ise_0
<Current directory>\efgbvmu165.sfh_0
<Current directory>\eeusn.jte_0_0
<Current directory>\efgbvmu vtfs_0
<Current directory>\eftdsjqu.jpo_1
<Current directory>\eftdsjqu.jpo_2
<Current directory>\efnbohmf32.emm_0
<Current directory>\eftdsjqu.jpo_0
<Current directory>\winbaram.exe
<Current directory>\windump.exe
<Current directory>\TwelveSky2.exe
<Current directory>\WebMoney.exe
<Current directory>\wsm.exe
<Current directory>\YahooMessenger.exe
<Current directory>\woool.exe
<Current directory>\wow.exe
<Current directory>\trillian.exe
<Current directory>\RagFree.exe
<Current directory>\skype.exe
<Current directory>\qip.exe
<Current directory>\Ragexe.exe
<Current directory>\spidernt.exe
<Current directory>\sro_client.exe
<Current directory>\smc.exe
<Current directory>\so3d.exe
<Current directory>\bootstat.dat
<Current directory>\clock.avi
<Current directory>\assembly
<Current directory>\Blue Lace 16.bmp
<Current directory>\COM+.log
<Current directory>\comsetup.log
<Current directory>\cmsetacl.log
<Current directory>\Coffee Bean.bmp
<Current directory>\0.log
<Current directory>\zlclient.exe
<Current directory>\ZONEALARM.EXE
<Current directory>\ybclient.exe
<Current directory>\zapro.exe
<Current directory>\$NtUninstallKB942288-v3$
<Current directory>\$NtUninstallWIC$
<Current directory>\ZZ__cd75efb816b2cc__.exe
<Current directory>\__cd75efb816b2cc__.exe
<Current directory>\gw.exe
<Current directory>\httplook.exe
<Current directory>\GUARD.EXE
<Current directory>\GVOnline.bin
<Current directory>\InphaseNXD.exe
<Current directory>\l2.bin
<Current directory>\ICQ.exe
<Current directory>\iexplore.exe
<Current directory>\googletalk.exe
<Current directory>\fsav.exe
<Current directory>\fsav32.exe
<Current directory>\elementclient.exe
<Current directory>\firefox.exe
<Current directory>\gc.exe
<Current directory>\ge.exe
<Current directory>\fsavaui.exe
<Current directory>\fsavgui.exe
<Current directory>\netxray.exe
<Current directory>\nod.exe
<Current directory>\msnmsgr.exe
<Current directory>\NAVAPW32.EXE
<Current directory>\outpost.exe
<Current directory>\pidgin.exe
<Current directory>\nod32.exe
<Current directory>\opera.exe
<Current directory>\msn6.exe
<Current directory>\magent.exe
<Current directory>\maplestory.exe
<Current directory>\lin.bin
<Current directory>\lotroclient.exe
<Current directory>\miranda32.exe
<Current directory>\mpftray.exe
<Current directory>\MCAGENT.EXE
<Current directory>\Mir3Game.exe
<Current directory>\busy_rm.cur
<Current directory>\agt0415.hlp
<Current directory>\agt0416.hlp
<Current directory>\agt0413.hlp
<Current directory>\agt0414.hlp
<Current directory>\agt041f.hlp
<Current directory>\agt0816.hlp
<Current directory>\agt0419.hlp
<Current directory>\agt041d.hlp
<Current directory>\agt0410.hlp
<Current directory>\agt0407.hlp
<Current directory>\agt0408.hlp
<Current directory>\agt0405.hlp
<Current directory>\agt0406.hlp
<Current directory>\agt040c.hlp
<Current directory>\agt040e.hlp
<Current directory>\agt0409.hlp
<Current directory>\agt040b.hlp
<Current directory>\bootcons.chm
<Current directory>\brief.chm
<Current directory>\blutooth.chm
<Current directory>\bnts.dll
<Current directory>\camera.chm
<Current directory>\camera.hlp
<Current directory>\calc.chm
<Current directory>\calc.hlp
<Current directory>\blurbs.chm
<Current directory>\apps_sp.chm
<Current directory>\article.chm
<Current directory>\agt0c0a.hlp
<Current directory>\apps.chm
<Current directory>\audit.chm
<Current directory>\bckg.chm
<Current directory>\atm.chm
<Current directory>\audiocdc.hlp
<Current directory>\mxdwdui.dll
<Current directory>\mxdwdui.gpd
<Current directory>\msxpsinc.ppd
<Current directory>\mxdwdrv.dll
<Current directory>\stddtype.gdl
<Current directory>\stdnames.gpd
<Current directory>\mxdwdui.ini
<Current directory>\sp2.cab
<Current directory>\msxpsinc.gpd
<Current directory>\NetSetup.LOG
<Current directory>\PASSWD.LOG
<Current directory>\wait_rm.cur
<Current directory>\blastcln.log
<Current directory>\filterpipelineprintproc.dll
<Current directory>\msxpsdrv.inf
<Current directory>\userenv.log
<Current directory>\driver.cab
<Current directory>\aclui.chm
<Current directory>\aclui.hlp
<Current directory>\accessib.chm
<Current directory>\acc_dis.chm
<Current directory>\admtools.chm
<Current directory>\adprop.hlp
<Current directory>\addremov.chm
<Current directory>\ade.hlp
<Current directory>\access.hlp
<Current directory>\unidrv.dll
<Current directory>\unidrv.hlp
<Current directory>\stdschem.gdl
<Current directory>\stdschmx.gdl
<Current directory>\custsat.dll
<Current directory>\access.chm
<Current directory>\unidrvui.dll
<Current directory>\unires.dll
<Current directory>\diskmgmt.chm
<Current directory>\diskmgmt.hlp
<Current directory>\digiras.chm
<Current directory>\dijoy.hlp
<Current directory>\dkconcepts.chm
<Current directory>\drvvfp.chm
<Current directory>\display.chm
<Current directory>\display.hlp
<Current directory>\dialer.hlp
<Current directory>\defrag.hlp
<Current directory>\devmgr.chm
<Current directory>\ddeshare.hlp
<Current directory>\defrag.chm
<Current directory>\diagboot.chm
<Current directory>\dialer.chm
<Current directory>\devmgr.hlp
<Current directory>\dfs.hlp
<Current directory>\evconcepts.chm
<Current directory>\evntwin.hlp
<Current directory>\eudcedit.chm
<Current directory>\eudcedit.hlp
<Current directory>\filefold.hlp
<Current directory>\filemgmt.hlp
<Current directory>\fde.hlp
<Current directory>\filefold.chm
<Current directory>\encrypt.chm
<Current directory>\dsclient.hlp
<Current directory>\dskquoui.chm
<Current directory>\drwtsn32.chm
<Current directory>\drwtsn32.hlp
<Current directory>\els.chm
<Current directory>\els.hlp
<Current directory>\dskquoui.hlp
<Current directory>\dxdiag.chm
<Current directory>\clipbrd.chm
<Current directory>\clipbrd.hlp
<Current directory>\ciadmin.htm
<Current directory>\ciquery.htm
<Current directory>\comexp.chm
<Current directory>\comexp.hlp
<Current directory>\cmconcepts.chm
<Current directory>\colormgt.chm
<Current directory>\chooser.hlp
<Current directory>\certmgr.chm
<Current directory>\certmgr.hlp
<Current directory>\cdmedia.chm
<Current directory>\cdmedia.hlp
<Current directory>\chkr.chm
<Current directory>\chnscsvr.hlp
<Current directory>\charmap.chm
<Current directory>\charmap.hlp
<Current directory>\cpanel.chq
<Current directory>\cscui.hlp
<Current directory>\connect.hlp
<Current directory>\cpanel.chm
<Current directory>\datetime.chm
<Current directory>\ddeshare.chm
<Current directory>\cyycoins.chm
<Current directory>\cyzcoins.chm
<Current directory>\connect.cnt
<Current directory>\compmgmt.chm
<Current directory>\compstui.hlp
<Current directory>\common.chm
<Current directory>\compfldr.chm
<Current directory>\conf.hlp
<Current directory>\conf1.chm
<Current directory>\conf.chm
<Current directory>\conf.cnt
<Current directory>\wait_rl.cur
<Current directory>\larrow.cur
<Current directory>\lcross.cur
<Current directory>\hwe.cur
<Current directory>\lappstrt.cur
<Current directory>\lnesw.cur
<Current directory>\lnodrop.cur
<Current directory>\libeam.cur
<Current directory>\lmove.cur
<Current directory>\hourglas.ani
<Current directory>\hnodrop.cur
<Current directory>\hns.cur
<Current directory>\hmove.cur
<Current directory>\hnesw.cur
<Current directory>\hourgla2.ani
<Current directory>\hourgla3.ani
<Current directory>\hnwse.cur
<Current directory>\horse.ani
<Current directory>\move_rl.cur
<Current directory>\move_rm.cur
<Current directory>\move_m.cur
<Current directory>\move_r.cur
<Current directory>\no_im.cur
<Current directory>\no_l.cur
<Current directory>\no_i.cur
<Current directory>\no_il.cur
<Current directory>\move_l.cur
<Current directory>\lwait.cur
<Current directory>\lwe.cur
<Current directory>\lns.cur
<Current directory>\lnwse.cur
<Current directory>\move_il.cur
<Current directory>\move_im.cur
<Current directory>\metronom.ani
<Current directory>\move_i.cur
<Current directory>\dinosau2.ani
<Current directory>\dinosaur.ani
<Current directory>\cross_rl.cur
<Current directory>\cross_rm.cur
<Current directory>\hand.ani
<Current directory>\handapst.ani
<Current directory>\drum.ani
<Current directory>\fillitup.ani
<Current directory>\cross_r.cur
<Current directory>\cross.cur
<Current directory>\cross_i.cur
<Current directory>\coin.ani
<Current directory>\counter.ani
<Current directory>\cross_l.cur
<Current directory>\cross_m.cur
<Current directory>\cross_il.cur
<Current directory>\cross_im.cur
<Current directory>\help_l.cur
<Current directory>\help_m.cur
<Current directory>\help_il.cur
<Current directory>\help_im.cur
<Current directory>\help_rm.cur
<Current directory>\hibeam.cur
<Current directory>\help_r.cur
<Current directory>\help_rl.cur
<Current directory>\help_i.cur
<Current directory>\handns.ani
<Current directory>\handnwse.ani
<Current directory>\handnesw.ani
<Current directory>\handno.ani
<Current directory>\harrow.cur
<Current directory>\hcross.cur
<Current directory>\handwait.ani
<Current directory>\handwe.ani
<Current directory>\size4_rl.cur
<Current directory>\size4_rm.cur
<Current directory>\size4_m.cur
<Current directory>\size4_r.cur
<Current directory>\sizenwse.ani
<Current directory>\sizewe.ani
<Current directory>\sizenesw.ani
<Current directory>\sizens.ani
<Current directory>\size4_l.cur
<Current directory>\size3_r.cur
<Current directory>\size3_rl.cur
<Current directory>\size3_l.cur
<Current directory>\size3_m.cur
<Current directory>\size4_il.cur
<Current directory>\size4_im.cur
<Current directory>\size3_rm.cur
<Current directory>\size4_i.cur
<Current directory>\wait_i.cur
<Current directory>\wait_il.cur
<Current directory>\vanisher.ani
<Current directory>\wagtail.ani
<Current directory>\wait_m.cur
<Current directory>\wait_r.cur
<Current directory>\wait_im.cur
<Current directory>\wait_l.cur
<Current directory>\up_rm.cur
<Current directory>\up_il.cur
<Current directory>\up_im.cur
<Current directory>\stopwtch.ani
<Current directory>\up_i.cur
<Current directory>\up_r.cur
<Current directory>\up_rl.cur
<Current directory>\up_l.cur
<Current directory>\up_m.cur
<Current directory>\pen_rm.cur
<Current directory>\piano.ani
<Current directory>\pen_r.cur
<Current directory>\pen_rl.cur
<Current directory>\size1_i.cur
<Current directory>\size1_il.cur
<Current directory>\rainbow.ani
<Current directory>\raindrop.ani
<Current directory>\pen_m.cur
<Current directory>\no_rl.cur
<Current directory>\no_rm.cur
<Current directory>\no_m.cur
<Current directory>\no_r.cur
<Current directory>\pen_im.cur
<Current directory>\pen_l.cur
<Current directory>\pen_i.cur
<Current directory>\pen_il.cur
<Current directory>\size2_r.cur
<Current directory>\size2_rl.cur
<Current directory>\size2_l.cur
<Current directory>\size2_m.cur
<Current directory>\size3_il.cur
<Current directory>\size3_im.cur
<Current directory>\size2_rm.cur
<Current directory>\size3_i.cur
<Current directory>\size2_im.cur
<Current directory>\size1_m.cur
<Current directory>\size1_r.cur
<Current directory>\size1_im.cur
<Current directory>\size1_l.cur
<Current directory>\size2_i.cur
<Current directory>\size2_il.cur
<Current directory>\size1_rl.cur
<Current directory>\size1_rm.cur
<Current directory>\proto.hrc
<Current directory>\ccsql.hrc
<Current directory>\msg.ent.hrc
<Current directory>\php-prot.ent.hrc
<Current directory>\gen.j2ee.hrc
<Current directory>\litestep.hrc
<Current directory>\fartypes.hrc
<Current directory>\gen.hrc
<Current directory>\ini.ent.hrc
<Current directory>\colorer.hlf
<Current directory>\colorer.lng
<Current directory>\coloree.lng
<Current directory>\colorer.dll
<Current directory>\colorer.ent.hrc
<Current directory>\common.jar
<Current directory>\shortcuts.reg
<Current directory>\changes.txt
<Current directory>\gray.hrd
<Current directory>\hack.hrd
<Current directory>\default.hrd
<Current directory>\dnlike.hrd
<Current directory>\white.hrd
<Current directory>\xmastree.hrd
<Current directory>\mirror.hrd
<Current directory>\nc.hrd
<Current directory>\blue.hrd
<Current directory>\vim.hrc
<Current directory>\auto.jar
<Current directory>\qrm.hrc
<Current directory>\rare-scripts.hrc
<Current directory>\catalog-text.xml
<Current directory>\black.hrd
<Current directory>\catalog-console.xml
<Current directory>\catalog-rgb.xml
<Current directory>\arclite.dll
<Current directory>\arclite.map
<Current directory>\7zS2con.sfx
<Current directory>\7zSD.sfx
<Current directory>\arclite_rus.hlf
<Current directory>\arclite_rus.lng
<Current directory>\arclite_eng.hlf
<Current directory>\arclite_eng.lng
<Current directory>\7zS2.sfx
<Current directory>\Align.dll
<Current directory>\Align.map
<Current directory>\far7z.reg
<Current directory>\far7z.txt
<Current directory>\7z.sfx
<Current directory>\7zCon.sfx
<Current directory>\AlignEng.lng
<Current directory>\AlignRus.lng
<Current directory>\BrackRus.lng
<Current directory>\BrackRus.reg
<Current directory>\Brackets.map
<Current directory>\BrackRus.hlf
<Current directory>\README
<Current directory>\coloree.hlf
<Current directory>\catalog.xml
<Current directory>\LICENSE
<Current directory>\Brackets.dll
<Current directory>\WrapEng.lng
<Current directory>\WrapRus.lng
<Current directory>\AutoWrap.dll
<Current directory>\AutoWrap.map
<Current directory>\BrackEng.lng
<Current directory>\BrackEng.reg
<Current directory>\BrackDel.reg
<Current directory>\BrackEng.hlf
<Current directory>\ES_RUS.REG
<Current directory>\ESEARCH.BAT
<Current directory>\RUS_READ.TXT
<Current directory>\ES_ENG.REG
<Current directory>\ExtClipBoard.cpp
<Current directory>\ExtMenu.cpp
<Current directory>\esearch_debug.bat
<Current directory>\ExtChCase.cpp
<Current directory>\RUS_NEWS.TXT
<Current directory>\ES_ENG.LNG
<Current directory>\ES_RUS.HLF
<Current directory>\esearch.dll
<Current directory>\ES_ENG.HLF
<Current directory>\ENG_READ.TXT
<Current directory>\REGEXPS.TXT
<Current directory>\ES_RUS.LNG
<Current directory>\ENG_NEWS.TXT
<Current directory>\FARCmds.map
<Current directory>\FARCmdsEng.hlf
<Current directory>\CREGEXP.H
<Current directory>\FARCmds.dll
<Current directory>\FARCmdsRus.lng
<Current directory>\CaseEng.hlf
<Current directory>\FARCmdsEng.lng
<Current directory>\FARCmdsRus.hlf
<Current directory>\CREGEXP.CPP
<Current directory>\ExtSearch.hpp
<Current directory>\ExtSearchMix.cpp
<Current directory>\ExtRegExp.cpp
<Current directory>\ExtSearch.cpp
<Current directory>\CLOCALE.CPP
<Current directory>\CLOCALE.H
<Current directory>\ExtSearchReg.cpp
<Current directory>\PLUGIN.HPP
<Current directory>\CompRus.lng
<Current directory>\DrawEng.hlf
<Current directory>\Compare.map
<Current directory>\CompEng.lng
<Current directory>\DrawLine.map
<Current directory>\DrawRus.hlf
<Current directory>\DrawEng.lng
<Current directory>\DrawLine.dll
<Current directory>\Compare.dll
<Current directory>\classic.hrd
<Current directory>\cyberpunk.hrd
<Current directory>\black_ay.hrd
<Current directory>\black_sezal.hrd
<Current directory>\CmpEng.hlf
<Current directory>\CmpRus.hlf
<Current directory>\gray_pult.hrd
<Current directory>\ocean.hrd
<Current directory>\EMenuEng.lng
<Current directory>\EMenuRus.hlf
<Current directory>\EMenuDel.reg
<Current directory>\EMenuEng.hlf
<Current directory>\HotkeyClipboard.reg
<Current directory>\HotkeyProperties.reg
<Current directory>\EMenuRus.lng
<Current directory>\Hotkey.reg
<Current directory>\EMenu.map
<Current directory>\ECaseEng.lng
<Current directory>\ECaseRus.hlf
<Current directory>\DrawRus.lng
<Current directory>\ECaseEng.hlf
<Current directory>\EditCase.map
<Current directory>\EMenu.dll
<Current directory>\ECaseRus.lng
<Current directory>\EditCase.dll
<Current directory>\7zToFar.ini
<Current directory>\FarRus.lng
<Current directory>\FarSpa.lng
<Current directory>\FarPol.lng
<Current directory>\FarRus.hlf
<Current directory>\SaveSettings.cmd
<Current directory>\Descript.ion
<Current directory>\File_id.diz
<Current directory>\RestoreSettings.cmd
<Current directory>\FarHun.lng
<Current directory>\far.map
<Current directory>\FarCze.lng
<Current directory>\ClearPluginsCache.cmd
<Current directory>\Far.exe
<Current directory>\FarGer.lng
<Current directory>\FarHun.hlf
<Current directory>\FarEng.hlf
<Current directory>\FarEng.lng
<Current directory>\GreenMile.reg
<Current directory>\hell.reg
<Current directory>\dn_like.reg
<Current directory>\FARColors242.reg
<Current directory>\VaxColors.reg
<Current directory>\AltMenu.reg
<Current directory>\nc5pal2.reg
<Current directory>\Rodion_Doroshkevich.reg
<Current directory>\Colors_from_Sadovoj.reg
<Current directory>\import_colors.bat
<Current directory>\black_from_Fonarev.reg
<Current directory>\README.TXT
<Current directory>\export_colors.bat
<Current directory>\Colors_from_admin_essp_ru.reg
<Current directory>\Colors_from_Gernichenko.reg
<Current directory>\black_from_july.reg
<Current directory>\black_from_Myodov.reg
<Current directory>\RECYCLER
<Current directory>\startup_local.bat
<Current directory>\pagefile.sys
<Current directory>\Program Files
<Current directory>\LocalService
<Current directory>\NetworkService
<Current directory>\System Volume Information
<Current directory>\Default User
<Current directory>\ntldr
<Current directory>\boot.ini
<Current directory>\CONFIG.SYS
<SYSTEM32>\winnit.exe
<Current directory>\AUTOEXEC.BAT
<Current directory>\network.pcap
<Current directory>\NTDETECT.COM
<Current directory>\IO.SYS
<Current directory>\MSDOS.SYS
<Current directory>\ntuser.ini
<Current directory>\PrintHood
<Current directory>\NetHood
<Current directory>\NTUSER.DAT
<Current directory>\changelog
<Current directory>\changelog_eng
<Current directory>\Recent
<Current directory>\SendTo
<Current directory>\My Documents
<Current directory>\DRM
<Current directory>\Start Menu
<Current directory>\Application Data
<Current directory>\Documents
<Current directory>\Favorites
<Current directory>\Local Settings
<Current directory>\Templates
<Current directory>\Cookies
<Current directory>\AltR.reg
<Current directory>\Apps.reg
<Current directory>\WindowsGUI.reg
<Current directory>\FARHere.inf
<Current directory>\Qwerty.reg
<Current directory>\Arc.Support.txt
<Current directory>\CtrlR.reg
<Current directory>\CtrlShiftX.reg
<Current directory>\Executor.CMD.reg
<Current directory>\View.PgDn.reg
<Current directory>\View.ShiftInsSearch.reg
<Current directory>\View.CtrlUpDown.reg
<Current directory>\View.NextPrevFile.reg
<Current directory>\Default165.reg
<Current directory>\Executor.4NT.reg
<Current directory>\View.Space.reg
<Current directory>\WheelScreenSwitch.reg
<Current directory>\7-ZipEng.lng
<Current directory>\7-ZipFar.dll
<Current directory>\SetFarExceptionHandler.reg
<Current directory>\7-ZipEng.hlf
<Current directory>\7-ZipRus.lng
<Current directory>\7z.dll
<Current directory>\7-ZipFar64.dll
<Current directory>\7-ZipRus.hlf
<Current directory>\FExcept.dll
<Current directory>\Plugins.Install.txt
<Current directory>\Plugins.Review.txt
<Current directory>\Bug.Report.txt
<Current directory>\Far.FAQ.txt
<Current directory>\demangle32.dll
<Current directory>\ExcDump.dll
<Current directory>\TechInfo.txt
<Current directory>\FarEncyclopedia.ru.chm
<Current directory>\F9Table.reg
<Current directory>\MacroConsts.reg
<Current directory>\F3.reg
<Current directory>\F9DeactivateMenu.reg
<Current directory>\Panel.Apps.reg
<Current directory>\Panel.BS.reg
<Current directory>\OpeningLastFile.reg
<Current directory>\Panel.AltBS.reg
<Current directory>\Edit.SaveFile.reg
<Current directory>\AltX.reg
<Current directory>\CtrlDel.reg
<Current directory>\AltScreens.reg
<Current directory>\AltSearch.reg
<Current directory>\Edit.Notepad.reg
<Current directory>\Edit.SaveAndExit.reg
<Current directory>\CtrlF10.reg
<Current directory>\Dialog.AltDown.reg
<Current directory>\Panel.Numpad.reg
<Current directory>\Panel.SelectFromClipboard.reg
<Current directory>\Panel.Lynx-mot.reg
<Current directory>\Panel.MouseWheelTilt.reg
<Current directory>\ShiftF1.reg
<Current directory>\ShiftTab.reg
<Current directory>\Panel.SpaceToSelect.reg
<Current directory>\ShiftBS.reg
<Current directory>\Panel.JumpToSelectedFile.reg
<Current directory>\Panel.CtrlQ.reg
<Current directory>\Panel.CtrlRight.reg
<Current directory>\Panel.CtrlIns...reg
<Current directory>\Panel.CtrlLeft.reg
<Current directory>\Panel.Del.reg
<Current directory>\Panel.Esc.reg
<Current directory>\Panel.CtrlShiftBackSlash.reg
<Current directory>\Panel.CtrlShiftPgUpDn.reg
<Current directory>\CaseEng.lng
<Current directory>\dibohfmph_12
<Current directory>\dibohfmph_13
<Current directory>\dibohfmph_10
<Current directory>\dibohfmph_11
<Current directory>\dibohfmph_16
<Current directory>\dibohfmph_17
<Current directory>\dibohfmph_14
<Current directory>\dibohfmph_15
<Current directory>\dibohfmph_1
<Current directory>\dbubmph-dpotpmf.ynm_0
<Current directory>\dbubmph-shc.ynm_0
<Current directory>\dbtfsvt.img_0
<Current directory>\dbtfsvt.moh_0
<Current directory>\ddtrm.isd_0
<Current directory>\dibohfmph_0
<Current directory>\dbubmph-ufyu.ynm_0
<Current directory>\dbubmph.ynm_0
<Current directory>\dmfbsqmvhjotdbdif.dne_0
<Current directory>\dmpdbmf.dqq_0
<Current directory>\dibohft.uyu_0
<Current directory>\dmbttjd.ise_0
<Current directory>\dncem_ca.jtf_0_0
<Current directory>\dncem_htqo_hqpctgx.tgi_0_0
<Current directory>\dmpdbmf.i_0
<Current directory>\dncem.jtf_0_0
<Current directory>\dibohfmph_foh_0
<Current directory>\dibohfmph_4
<Current directory>\dibohfmph_5
<Current directory>\dibohfmph_2
<Current directory>\dibohfmph_3
<Current directory>\dibohfmph_8
<Current directory>\dibohfmph_9
<Current directory>\dibohfmph_6
<Current directory>\dibohfmph_7
<Current directory>\csbdlfoh.sfh_0
<Current directory>\csbdlfut.emm_0
<Current directory>\csbdlfoh.img_0
<Current directory>\csbdlfoh.moh_0
<Current directory>\csbdlsvt.moh_0
<Current directory>\csbdlsvt.sfh_0
<Current directory>\csbdlfut.nbq_0
<Current directory>\csbdlsvt.img_0
<Current directory>\csbdlefm.sfh_0
<Current directory>\cnvz.tgi_0_0
<Current directory>\cppu.joj_0
<Current directory>\cnvuetggpu.tgi_0_0
<Current directory>\cnvugctej.tgi_0_0
<Current directory>\crrnkecvkqp fcvc_1_0
<Current directory>\crru.tgi_0_0
<Current directory>\cppu.joj_1
<Current directory>\crrnkecvkqp fcvc_0_0
<Current directory>\cwvqgzge.dcv_0_0
<Current directory>\cwvqgzge.dcv_1_0
<Current directory>\cvh.sfqpsu.uyu_1
<Current directory>\cwvq.lct_0_0
<Current directory>\dbtffoh.img_0
<Current directory>\dbtffoh.moh_0
<Current directory>\cwvqytcr.fnn_0_0
<Current directory>\cwvqytcr.ocr_0_0
<Current directory>\cvh.sfqpsu.uyu_0
<Current directory>\ctenkvg.fnn_0_0
<Current directory>\ctenkvg.ocr_0_0
<Current directory>\cte.uwrrqtv.vzv_0_0
<Current directory>\cte.uwrrqtv.vzv_1_0
<Current directory>\ctenkvg_twu.jnh_0_0
<Current directory>\ctenkvg_twu.npi_0_0
<Current directory>\ctenkvg_gpi.jnh_0_0
<Current directory>\ctenkvg_gpi.npi_0_0
<Current directory>\dssolfdwlrq gdwd_0_0_0
<Current directory>\dssolfdwlrq gdwd_1_0_0
<Current directory>\dsfhfyq.dqq_0
<Current directory>\dsfhfyq.i_0
<Current directory>\dtcemgpi.jnh_0_0
<Current directory>\dtcemgpi.npi_0_0
<Current directory>\dssv.uhj_0_0_0
<Current directory>\dtcemfgn.tgi_0_0
<Current directory>\dqqv.kpk_1_0
<Current directory>\dpogjh.tzt_0
<Current directory>\dpogjh.tzt_1
<Current directory>\dpnqpofout_0
<Current directory>\dpnqsvt.moh_0
<Current directory>\dpsf_0
<Current directory>\dqqv.kpk_0_0
<Current directory>\dpotpmf_0
<Current directory>\dppljft_0
<Current directory>\dufolwh_hqj.oqj_0_0_0
<Current directory>\dufolwh_uxv.koi_0_0_0
<Current directory>\dufolwh.pds_0_0_0
<Current directory>\dufolwh_hqj.koi_0_0_0
<Current directory>\dusmg10.sfh_0
<Current directory>\dusms.sfh_0
<Current directory>\dufolwh_uxv.oqj_0_0_0
<Current directory>\dusmefm.sfh_0
<Current directory>\dufolwh.goo_0_0_0
<Current directory>\dtcemgvu.ocr_0_0
<Current directory>\dtcemtwu.jnh_0_0
<Current directory>\dtcemgpi.tgi_0_0
<Current directory>\dtcemgvu.fnn_0_0
<Current directory>\duf.vxssruw.waw_0_0_0
<Current directory>\duf.vxssruw.waw_1_0_0
<Current directory>\dtcemtwu.npi_0_0
<Current directory>\dtcemtwu.tgi_0_0
<Current directory>\doljqhqj.oqj_0_0_0
<Current directory>\doljquxv.oqj_0_0_0
<Current directory>\doljq.goo_0_0_0
<Current directory>\doljq.pds_0_0_0
<Current directory>\dowu.uhj_0_0_0
<Current directory>\dowvfuhhqv.uhj_0_0_0
<Current directory>\dowa.uhj_0_0_0
<Current directory>\dowphqx.uhj_0_0_0
<Current directory>\dnwg.jtf_0_0
<Current directory>\dncem_htqo_lwna.tgi_1_0
<Current directory>\dncem_htqo_oaqfqx.tgi_0_0
<Current directory>\dncem_htqo_hqpctgx.tgi_1_0
<Current directory>\dncem_htqo_lwna.tgi_0_0
<Current directory>\dnqfoh.img_0
<Current directory>\dnqsvt.img_0
<Current directory>\dncem_htqo_oaqfqx.tgi_1_0
<Current directory>\dncem_ugbcn.jtf_0_0
<Current directory>\dpmpst_gspn_tbepwpk.sfh_0
<Current directory>\dpmpst_gspn_tbepwpk.sfh_1
<Current directory>\dpmpst_gspn_hfsojdifolp.sfh_0
<Current directory>\dpmpst_gspn_hfsojdifolp.sfh_1
<Current directory>\dpnqbsf.nbq_0
<Current directory>\dpnqfoh.moh_0
<Current directory>\dpnnpo.kbs_0
<Current directory>\dpnqbsf.emm_0
<Current directory>\dpmpst_gspn_benjo_fttq_sv.sfh_1
<Current directory>\dpmpsff.moh_0
<Current directory>\dpmpsfs.emm_0
<Current directory>\dowvhdufk.uhj_0_0_0
<Current directory>\dpmpsff.img_0
<Current directory>\dpmpsfs.moh_0
<Current directory>\dpmpst_gspn_benjo_fttq_sv.sfh_0
<Current directory>\dpmpsfs.fou.isd_0
<Current directory>\dpmpsfs.img_0
<Current directory>\cnvt.tgi_0_0
<Current directory>\Proclist.map
<Current directory>\ProcRus.hlf
<Current directory>\ProcEng.lng
<Current directory>\Proclist.dll
<Current directory>\disks.rus.temp
<Current directory>\shortcuts.eng.reg
<Current directory>\ProcRus.lng
<Current directory>\disks.eng.temp
<Current directory>\ProcEng.hlf
<Current directory>\NetEng.hlf
<Current directory>\NetEng.lng
<Current directory>\MacroView.dll
<Current directory>\MacroView.map
<Current directory>\Network.dll
<Current directory>\Network.map
<Current directory>\NetRus.hlf
<Current directory>\NetRus.lng
<Current directory>\core
<Current directory>\dragext
<Current directory>\components
<Current directory>\console
<Current directory>\filezilla
<Current directory>\forms
<Current directory>\far
<Current directory>\fari
<Current directory>\TmpRus.lng
<Current directory>\shortcuts.rus.temp
<Current directory>\TmpEng.hlf
<Current directory>\shortcuts.eng.temp
<Current directory>\shortcuts.rus.reg
<Current directory>\TmpPanel.map
<Current directory>\TmpRus.hlf
<Current directory>\TmpEng.lng
<Current directory>\TmpPanel.dll
<Current directory>\FtpRus.lng
<Current directory>\Notes.txt
<Current directory>\FtpEng.lng
<Current directory>\FtpRus.hlf
<Current directory>\TechInfo_rus.reg
<Current directory>\ftpDirList.fll
<Current directory>\Notes_rus.txt
<Current directory>\TechInfo.reg
<Current directory>\FtpEng.hlf
<Current directory>\FileCase.dll
<Current directory>\FileCase.map
<Current directory>\CaseRus.hlf
<Current directory>\CaseRus.lng
<Current directory>\FtpCmds.txt
<Current directory>\FtpCmds_rus.txt
<Current directory>\FarFtp.dll
<Current directory>\FarFtp.map
<Current directory>\HlfViewerRus.hlf
<Current directory>\HlfViewerRus.lng
<Current directory>\HlfViewerEng.hlf
<Current directory>\HlfViewerEng.lng
<Current directory>\MacroRus.hlf
<Current directory>\MacroRus.lng
<Current directory>\MacroEng.hlf
<Current directory>\MacroEng.lng
<Current directory>\HlfViewer.map
<Current directory>\ftpProgress.map
<Current directory>\Progress_FarCopy.reg
<Current directory>\ftpDirList.map
<Current directory>\ftpProgress.fll
<Current directory>\Progress_ZeMA.reg
<Current directory>\HlfViewer.dll
<Current directory>\Progress_JM.reg
<Current directory>\Progress_Wesha.reg
<Current directory>\bsdmjuf_foh.moh_0
<Current directory>\bsdmjuf_svt.img_0
<Current directory>\bsdmjuf.nbq_0
<Current directory>\bsdmjuf_foh.img_0
<Current directory>\bvupfyfd.cbu_0
<Current directory>\bvupfyfd.cbu_1
<Current directory>\bsdmjuf_svt.moh_0
<Current directory>\bvup.kbs_0
<Current directory>\bsdmjuf.emm_0
<Current directory>\bmuy.sfh_0
<Current directory>\bqqmjdbujpo ebub_0
<Current directory>\bmutdsffot.sfh_0
<Current directory>\bmutfbsdi.sfh_0
<Current directory>\bsd.tvqqpsu.uyu_0
<Current directory>\bsd.tvqqpsu.uyu_1
<Current directory>\bqqmjdbujpo ebub_1
<Current directory>\bqqt.sfh_0
<Current directory>\cmvf.ise_0
<Current directory>\cnkip.fnn_0_0
<Current directory>\cmbdl_gspn_nzpepw.sfh_1
<Current directory>\cmbdl_tfabm.ise_0
<Current directory>\cnkiptwu.npi_0_0
<Current directory>\cnvogpw.tgi_0_0
<Current directory>\cnkip.ocr_0_0
<Current directory>\cnkipgpi.npi_0_0
<Current directory>\cmbdl_gspn_nzpepw.sfh_0
<Current directory>\cmbdl.ise_0
<Current directory>\cmbdl_bz.ise_0
<Current directory>\bvupxsbq.emm_0
<Current directory>\bvupxsbq.nbq_0
<Current directory>\cmbdl_gspn_kvmz.sfh_0
<Current directory>\cmbdl_gspn_kvmz.sfh_1
<Current directory>\cmbdl_gspn_gpobsfw.sfh_0
<Current directory>\cmbdl_gspn_gpobsfw.sfh_1
<Current directory>\FarColorW.pas
<Current directory>\FarKeysW.pas
<Current directory>\farcolor.hpp
<Current directory>\farkeys.hpp
<Current directory>\7-ajqfoh.moh_0
<Current directory>\7-ajqgbs.emm_0
<Current directory>\PluginW.pas
<Current directory>\7-ajqfoh.img_0
<Current directory>\WinSCP.lng
<Current directory>\packages
<Current directory>\putty
<Current directory>\lib
<Current directory>\licence
<Current directory>\windows
<Current directory>\WinSCP.dll
<Current directory>\release
<Current directory>\resource
<Current directory>\bmjho.emm_0
<Current directory>\bmjho.nbq_0
<Current directory>\7ate.tgy_0
<Current directory>\7aupgbs.joj_0
<Current directory>\bmunfov.sfh_0
<Current directory>\bmus.sfh_0
<Current directory>\bmjhofoh.moh_0
<Current directory>\bmjhosvt.moh_0
<Current directory>\7at2dpo.tgy_0
<Current directory>\7-ajqsvt.moh_0
<Current directory>\7a.emm_0
<Current directory>\7-ajqgbs64.emm_0
<Current directory>\7-ajqsvt.img_0
<Current directory>\7adpo.tgy_0
<Current directory>\7at2.tgy_0
<Current directory>\7a.emm_1
<Current directory>\7a.tgy_0

Deletes the following files:

<Current directory>\Recent
<Current directory>\mxdwdrv.dll
<Current directory>\Cookies
<SYSTEM32>\Restore\MachineGuid.txt
<Current directory>\TASKMAN.EXE

Miscellaneous:

Searches for the following windows:

ClassName: '<Auxiliary name>wndclass' WindowName: ''
ClassName: 'ConsoleWindowClass' WindowName: ''

Tecnologías

Términos

Formación y educación

Mitos

Technical Information

Curing recommendations

Free trial