Trojan.DownLoader12.27944

Technical Information

Malicious functions:

Creates and executes the following:

'%PROGRAM_FILES%\Java\jre6\bin\unpack200.exe' -r -v -l "%TEMP%\java_install.log" "%PROGRAM_FILES%\Java\jre6\lib\rt.pack" "%PROGRAM_FILES%\Java\jre6\lib\rt.jar"
'%PROGRAM_FILES%\Java\jre6\zipper.exe' "%PROGRAM_FILES%\Java\jre6\core.zip" "%PROGRAM_FILES%\Java\jre6\" "%TEMP%\java_install.log"
'C:\java6.exe' /s

Executes the following:

'<SYSTEM32>\msiexec.exe' -Embedding 2E89C23449FC745E91D4F5B612DE760F
'<SYSTEM32>\msiexec.exe' -Embedding 05240024F3A32226A5DBDCDC4D3CA1E1 M Global\MSI0000
'<SYSTEM32>\msiexec.exe' /i "%APPDATA%\Sun\Java\jre1.6.0_38\jre1.6.0_38.msi" /qn
'<SYSTEM32>\msiexec.exe' /V

Modifies file system :

Creates the following files:

%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Jakarta
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Irkutsk
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Jayapura
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Kabul
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Jerusalem
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Hebron
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Harbin
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Hong_Kong
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Ho_Chi_Minh
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Hovd
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Kuala_Lumpur
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Krasnoyarsk
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Kuching
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Macau
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Kuwait
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Karachi
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Kamchatka
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Kashgar
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Kolkata
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Kathmandu
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Gaza
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Bahrain
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Baghdad
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Baku
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Beirut
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Bangkok
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Anadyr
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Amman
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Aqtau
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Ashgabat
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Aqtobe
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Dhaka
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Damascus
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Dili
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Dushanbe
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Dubai
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Brunei
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Bishkek
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Choibalsan
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Colombo
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Chongqing
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Magadan
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Thimphu
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Tehran
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Tokyo
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Urumqi
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Ulaanbaatar
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Singapore
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Shanghai
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Taipei
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Tbilisi
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Tashkent
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\Bermuda
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\Azores
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\Canary
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\Faroe
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\Cape_Verde
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Vladivostok
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Vientiane
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Yakutsk
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Yerevan
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Yekaterinburg
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Seoul
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Omsk
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Novosibirsk
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Oral
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Pontianak
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Phnom_Penh
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Manila
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Makassar
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Muscat
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Novokuznetsk
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Nicosia
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Riyadh88
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Riyadh87
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Riyadh89
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Samarkand
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Sakhalin
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Qatar
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Pyongyang
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Qyzylorda
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Riyadh
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Rangoon
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Nome
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Nipigon
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Noronha
%PROGRAM_FILES%\Java\jre6\lib\zi\America\North_Dakota\Center
%PROGRAM_FILES%\Java\jre6\lib\zi\America\North_Dakota\Beulah
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Montreal
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Montevideo
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Montserrat
%PROGRAM_FILES%\Java\jre6\lib\zi\America\New_York
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Nassau
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Port-au-Prince
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Phoenix
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Porto_Velho
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Puerto_Rico
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Port_of_Spain
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Ojinaga
%PROGRAM_FILES%\Java\jre6\lib\zi\America\North_Dakota\New_Salem
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Panama
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Paramaribo
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Pangnirtung
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Monterrey
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Lima
%PROGRAM_FILES%\Java\jre6\lib\zi\America\La_Paz
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Los_Angeles
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Managua
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Maceio
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Jamaica
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Iqaluit
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Juneau
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Kentucky\Monticello
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Kentucky\Louisville
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Metlakatla
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Merida
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Mexico_City
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Moncton
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Miquelon
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Martinique
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Manaus
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Matamoros
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Menominee
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Mazatlan
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Rainy_River
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Yakutat
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Winnipeg
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Yellowknife
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\Davis
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\Casey
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Toronto
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Tijuana
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Tortola
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Whitehorse
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Vancouver
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\Syowa
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\Rothera
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\Vostok
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Almaty
%PROGRAM_FILES%\Java\jre6\lib\zi\Asia\Aden
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\Macquarie
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\DumontDUrville
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\Mawson
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\Palmer
%PROGRAM_FILES%\Java\jre6\lib\zi\Antarctica\McMurdo
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Thunder_Bay
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Santa_Isabel
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Santarem
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Santiago
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Sao_Paulo
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Santo_Domingo
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Recife
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Rankin_Inlet
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Regina
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Rio_Branco
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Resolute
%PROGRAM_FILES%\Java\jre6\lib\zi\America\St_Vincent
%PROGRAM_FILES%\Java\jre6\lib\zi\America\St_Thomas
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Swift_Current
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Thule
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Tegucigalpa
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Sitka
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Scoresbysund
%PROGRAM_FILES%\Java\jre6\lib\zi\America\St_Johns
%PROGRAM_FILES%\Java\jre6\lib\zi\America\St_Lucia
%PROGRAM_FILES%\Java\jre6\lib\zi\America\St_Kitts
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Apia
%PROGRAM_FILES%\Java\jre6\lib\zi\MST7MDT
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Auckland
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Chuuk
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Chatham
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Mayotte
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Mauritius
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Reunion
%PROGRAM_FILES%\Java\jre6\lib\zi\MST
%PROGRAM_FILES%\Java\jre6\lib\zi\MET
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Galapagos
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Funafuti
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Gambier
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Guam
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Guadalcanal
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Efate
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Easter
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Enderbury
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Fiji
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Fakaofo
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Maldives
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Vilnius
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Vienna
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Volgograd
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Zaporozhye
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Warsaw
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Tallinn
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Stockholm
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Tirane
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Vaduz
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Uzhgorod
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Cocos
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Christmas
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Comoro
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Mahe
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Kerguelen
%PROGRAM_FILES%\Java\jre6\lib\zi\GMT
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Zurich
%PROGRAM_FILES%\Java\jre6\lib\zi\HST
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Chagos
%PROGRAM_FILES%\Java\jre6\lib\zi\Indian\Antananarivo
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Honolulu
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\CST6CDT
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\CST6
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\EST5
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\HST10
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\EST5EDT
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Wallis
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Wake
%PROGRAM_FILES%\Java\jre6\lib\zi\PST8PDT
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\AST4ADT
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\AST4
%PROGRAM_FILES%\Java\jre6\lib\zi\WET
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\YST9YDT
%PROGRAM_FILES%\Java\jre6\lib\zi\ZoneInfoMappings
%PROGRAM_FILES%\Java\jre6\lib\rt.jar
%WINDIR%\Installer\MSI13.tmp
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\MST7MDT
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\MST7
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\PST8
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\YST9
%PROGRAM_FILES%\Java\jre6\lib\zi\SystemV\PST8PDT
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Tongatapu
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Midway
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Marquesas
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Nauru
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Norfolk
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Niue
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Kiritimati
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Johnston
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Kosrae
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Majuro
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Kwajalein
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Rarotonga
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Port_Moresby
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Saipan
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Tarawa
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Tahiti
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Pago_Pago
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Noumea
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Palau
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Pohnpei
%PROGRAM_FILES%\Java\jre6\lib\zi\Pacific\Pitcairn
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+2
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+12
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+3
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+5
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+4
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT
%PROGRAM_FILES%\Java\jre6\lib\zi\EST5EDT
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+1
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+11
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+10
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-11
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-10
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-12
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-14
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-13
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+7
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+6
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+8
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-1
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT+9
%PROGRAM_FILES%\Java\jre6\lib\zi\EST
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Brisbane
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Adelaide
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Broken_Hill
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Darwin
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Currie
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\Reykjavik
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\Madeira
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\South_Georgia
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\St_Helena
%PROGRAM_FILES%\Java\jre6\lib\zi\Atlantic\Stanley
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Sydney
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Perth
%PROGRAM_FILES%\Java\jre6\lib\zi\CET
%PROGRAM_FILES%\Java\jre6\lib\zi\EET
%PROGRAM_FILES%\Java\jre6\lib\zi\CST6CDT
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Hobart
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Eucla
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Lindeman
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Melbourne
%PROGRAM_FILES%\Java\jre6\lib\zi\Australia\Lord_Howe
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-2
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Luxembourg
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\London
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Madrid
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Minsk
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Malta
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Istanbul
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Helsinki
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Kaliningrad
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Lisbon
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Kiev
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Rome
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Riga
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Samara
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Sofia
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Simferopol
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Moscow
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Monaco
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Oslo
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Prague
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Paris
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Gibraltar
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-9
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-8
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\UCT
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Amsterdam
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\UTC
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-4
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-3
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-5
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-7
%PROGRAM_FILES%\Java\jre6\lib\zi\Etc\GMT-6
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Budapest
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Bucharest
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Chisinau
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Dublin
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Copenhagen
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Athens
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Andorra
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Belgrade
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Brussels
%PROGRAM_FILES%\Java\jre6\lib\zi\Europe\Berlin
%PROGRAM_FILES%\Java\jre6\bin\tnameserv.exe
%PROGRAM_FILES%\Java\jre6\bin\sunmscapi.dll
%PROGRAM_FILES%\Java\jre6\bin\unicows.dll
%PROGRAM_FILES%\Java\jre6\bin\unpack200.exe
%PROGRAM_FILES%\Java\jre6\bin\unpack.dll
%PROGRAM_FILES%\Java\jre6\bin\servertool.exe
%PROGRAM_FILES%\Java\jre6\bin\rmiregistry.exe
%PROGRAM_FILES%\Java\jre6\bin\splashscreen.dll
%PROGRAM_FILES%\Java\jre6\bin\ssvagent.exe
%PROGRAM_FILES%\Java\jre6\bin\ssv.dll
%PROGRAM_FILES%\Java\jre6\lib\charsets.pack
%PROGRAM_FILES%\Java\jre6\lib\calendars.properties
%PROGRAM_FILES%\Java\jre6\lib\classlist
%PROGRAM_FILES%\Java\jre6\lib\cmm\GRAY.pf
%PROGRAM_FILES%\Java\jre6\lib\cmm\CIEXYZ.pf
%PROGRAM_FILES%\Java\jre6\bin\w2k_lsa_auth.dll
%PROGRAM_FILES%\Java\jre6\bin\verify.dll
%PROGRAM_FILES%\Java\jre6\bin\wsdetect.dll
%PROGRAM_FILES%\Java\jre6\lib\audio\soundbank.gm
%PROGRAM_FILES%\Java\jre6\bin\zip.dll
%PROGRAM_FILES%\Java\jre6\bin\rmid.exe
%PROGRAM_FILES%\Java\jre6\bin\mlib_image.dll
%PROGRAM_FILES%\Java\jre6\bin\management.dll
%PROGRAM_FILES%\Java\jre6\bin\msvcr71.dll
%PROGRAM_FILES%\Java\jre6\bin\net.dll
%PROGRAM_FILES%\Java\jre6\bin\msvcrt.dll
%PROGRAM_FILES%\Java\jre6\bin\keytool.exe
%PROGRAM_FILES%\Java\jre6\bin\jsoundds.dll
%PROGRAM_FILES%\Java\jre6\bin\kinit.exe
%PROGRAM_FILES%\Java\jre6\bin\ktab.exe
%PROGRAM_FILES%\Java\jre6\bin\klist.exe
%PROGRAM_FILES%\Java\jre6\bin\plugin2\msvcr71.dll
%PROGRAM_FILES%\Java\jre6\bin\pack200.exe
%PROGRAM_FILES%\Java\jre6\bin\plugin2\npjp2.dll
%PROGRAM_FILES%\Java\jre6\bin\rmi.dll
%PROGRAM_FILES%\Java\jre6\bin\policytool.exe
%PROGRAM_FILES%\Java\jre6\bin\npjpi160_38.dll
%PROGRAM_FILES%\Java\jre6\bin\nio.dll
%PROGRAM_FILES%\Java\jre6\bin\npoji610.dll
%PROGRAM_FILES%\Java\jre6\bin\orbd.exe
%PROGRAM_FILES%\Java\jre6\bin\npt.dll
%PROGRAM_FILES%\Java\jre6\lib\cmm\LINEAR_RGB.pf
%PROGRAM_FILES%\Java\jre6\lib\ext\localedata.pack
%PROGRAM_FILES%\Java\jre6\lib\ext\dnsns.jar
%PROGRAM_FILES%\Java\jre6\lib\ext\meta-index
%PROGRAM_FILES%\Java\jre6\lib\ext\sunmscapi.jar
%PROGRAM_FILES%\Java\jre6\lib\ext\sunjce_provider.jar
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_zh_HK.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_zh_CN.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_zh_TW.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy.pack
%PROGRAM_FILES%\Java\jre6\lib\deploy\splash.gif
%PROGRAM_FILES%\Java\jre6\lib\fonts\LucidaBrightDemiBold.ttf
%PROGRAM_FILES%\Java\jre6\lib\fontconfig.properties.src
%PROGRAM_FILES%\Java\jre6\lib\fonts\LucidaBrightDemiItalic.ttf
%PROGRAM_FILES%\Java\jre6\lib\fonts\LucidaBrightRegular.ttf
%PROGRAM_FILES%\Java\jre6\lib\fonts\LucidaBrightItalic.ttf
%PROGRAM_FILES%\Java\jre6\lib\flavormap.properties
%PROGRAM_FILES%\Java\jre6\lib\ext\sunpkcs11.jar
%PROGRAM_FILES%\Java\jre6\lib\fontconfig.98.bfc
%PROGRAM_FILES%\Java\jre6\lib\fontconfig.bfc
%PROGRAM_FILES%\Java\jre6\lib\fontconfig.98.properties.src
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_sv.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\jqs\ff\chrome.manifest
%PROGRAM_FILES%\Java\jre6\lib\deploy\jqs\ff\chrome\content\overlay.xul
%PROGRAM_FILES%\Java\jre6\lib\deploy\jqs\ff\install.rdf
%PROGRAM_FILES%\Java\jre6\lib\deploy\jqs\jqs.conf
%PROGRAM_FILES%\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
%PROGRAM_FILES%\Java\jre6\lib\cmm\sRGB.pf
%PROGRAM_FILES%\Java\jre6\lib\cmm\PYCC.pf
%PROGRAM_FILES%\Java\jre6\lib\content-types.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\jqs\ff\chrome\content\overlay.js
%PROGRAM_FILES%\Java\jre6\lib\deploy\ffjcext.zip
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_it.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_fr.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_ja.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_pt_BR.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_ko.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\lzma.dll
%PROGRAM_FILES%\Java\jre6\lib\deploy\jqs\jqsmessages.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_es.properties
%PROGRAM_FILES%\Java\jre6\lib\deploy\messages_de.properties
%PROGRAM_FILES%\Java\jre6\bin\regutils.dll
%PROGRAM_FILES%\Java\jre6\core.zip
%WINDIR%\Installer\21e7f.msi
%TEMP%\java_install.log
%TEMP%\java_install_reg.log
%WINDIR%\Installer\MSI10.tmp
%WINDIR%\Installer\MSIF.tmp
%WINDIR%\Installer\MSI11.tmp
%PROGRAM_FILES%\Java\jre6\zipper.exe
C:\Config.Msi\21e7e.rbs
%PROGRAM_FILES%\Java\jre6\bin\axbridge.dll
%PROGRAM_FILES%\Java\jre6\bin\awt.dll
%PROGRAM_FILES%\Java\jre6\bin\client\jvm.dll
%PROGRAM_FILES%\Java\jre6\bin\cmm.dll
%PROGRAM_FILES%\Java\jre6\bin\client\Xusage.txt
%PROGRAM_FILES%\Java\jre6\LICENSE
%PROGRAM_FILES%\Java\jre6\COPYRIGHT
%PROGRAM_FILES%\Java\jre6\README.txt
%PROGRAM_FILES%\Java\jre6\Welcome.html
%PROGRAM_FILES%\Java\jre6\THIRDPARTYLICENSEREADME.txt
%WINDIR%\Installer\MSIE.tmp
%APPDATA%\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
%TEMP%\Cab2.tmp
%APPDATA%\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
%TEMP%\jusched.log
C:\java6.exe
%APPDATA%\Sun\Java\jre1.6.0_38\Data1.cab
%WINDIR%\Installer\21e7b.msi
%APPDATA%\Sun\Java\jre1.6.0_38\jre1.6.0_38.msi
%WINDIR%\Installer\MSIA.tmp
%WINDIR%\Installer\MSI9.tmp
%WINDIR%\Installer\MSIB.tmp
%WINDIR%\Installer\MSID.tmp
%WINDIR%\Installer\MSIC.tmp
%TEMP%\Cab6.tmp
%TEMP%\Cab4.tmp
%WINDIR%\Installer\MSI8.tmp
%TEMP%\~DFD400.tmp
%WINDIR%\Installer\21e7d.ipi
%PROGRAM_FILES%\Java\jre6\bin\dcpr.dll
%PROGRAM_FILES%\Java\jre6\bin\jli.dll
%PROGRAM_FILES%\Java\jre6\bin\jkernel.dll
%PROGRAM_FILES%\Java\jre6\bin\jp2iexp.dll
%PROGRAM_FILES%\Java\jre6\bin\jp2native.dll
%PROGRAM_FILES%\Java\jre6\bin\jp2launcher.exe
%PROGRAM_FILES%\Java\jre6\bin\jawt.dll
%PROGRAM_FILES%\Java\jre6\bin\java_crw_demo.dll
%PROGRAM_FILES%\Java\jre6\bin\jbroker.exe
%PROGRAM_FILES%\Java\jre6\bin\jdwp.dll
%PROGRAM_FILES%\Java\jre6\bin\JdbcOdbc.dll
%PROGRAM_FILES%\Java\jre6\bin\jpishare.dll
%PROGRAM_FILES%\Java\jre6\bin\jpioji.dll
%PROGRAM_FILES%\Java\jre6\bin\jqs.exe
%PROGRAM_FILES%\Java\jre6\bin\jsound.dll
%PROGRAM_FILES%\Java\jre6\bin\jqsnotify.exe
%PROGRAM_FILES%\Java\jre6\bin\jpeg.dll
%PROGRAM_FILES%\Java\jre6\bin\jp2ssv.dll
%PROGRAM_FILES%\Java\jre6\bin\jpicom.dll
%PROGRAM_FILES%\Java\jre6\bin\jpinscp.dll
%PROGRAM_FILES%\Java\jre6\bin\jpiexp.dll
%PROGRAM_FILES%\Java\jre6\bin\javaws.exe
%PROGRAM_FILES%\Java\jre6\bin\fontmanager.dll
%PROGRAM_FILES%\Java\jre6\bin\eula.dll
%PROGRAM_FILES%\Java\jre6\bin\hpi.dll
%PROGRAM_FILES%\Java\jre6\bin\instrument.dll
%PROGRAM_FILES%\Java\jre6\bin\hprof.dll
%PROGRAM_FILES%\Java\jre6\bin\dtplugin\deployJava1.dll
%PROGRAM_FILES%\Java\jre6\bin\deploy.dll
%PROGRAM_FILES%\Java\jre6\bin\dtplugin\npdeployJava1.dll
%PROGRAM_FILES%\Java\jre6\bin\dt_socket.dll
%PROGRAM_FILES%\Java\jre6\bin\dt_shmem.dll
%PROGRAM_FILES%\Java\jre6\bin\java.exe
%PROGRAM_FILES%\Java\jre6\bin\java.dll
%PROGRAM_FILES%\Java\jre6\bin\javacpl.cpl
%PROGRAM_FILES%\Java\jre6\bin\javaw.exe
%PROGRAM_FILES%\Java\jre6\bin\javacpl.exe
%PROGRAM_FILES%\Java\jre6\bin\j2pcsc.dll
%PROGRAM_FILES%\Java\jre6\bin\ioser12.dll
%PROGRAM_FILES%\Java\jre6\bin\j2pkcs11.dll
%PROGRAM_FILES%\Java\jre6\bin\java-rmi.exe
%PROGRAM_FILES%\Java\jre6\bin\jaas_nt.dll
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Ushuaia
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Tucuman
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Aruba
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Atikokan
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Asuncion
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Rio_Gallegos
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Mendoza
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Salta
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\San_Luis
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\San_Juan
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Boa_Vista
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Blanc-Sablon
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Bogota
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Cambridge_Bay
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Boise
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Bahia_Banderas
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Bahia
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Barbados
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Belize
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Belem
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\La_Rioja
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Porto-Novo
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Ouagadougou
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Sao_Tome
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Tunis
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Tripoli
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Nairobi
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Monrovia
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Ndjamena
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Nouakchott
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Niamey
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Buenos_Aires
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Araguaina
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Catamarca
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Jujuy
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Argentina\Cordoba
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Adak
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Windhoek
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Anchorage
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Antigua
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Anguilla
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Campo_Grande
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Guayaquil
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Guatemala
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Guyana
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Havana
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Halifax
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Goose_Bay
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Godthab
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Grand_Turk
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Guadeloupe
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Grenada
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Indiana\Vevay
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Indiana\Tell_City
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Indiana\Vincennes
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Inuvik
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Indiana\Winamac
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Indiana\Indianapolis
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Hermosillo
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Indiana\Knox
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Indiana\Petersburg
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Indiana\Marengo
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Glace_Bay
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Costa_Rica
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Chihuahua
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Creston
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Curacao
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Cuiaba
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Caracas
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Cancun
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Cayenne
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Chicago
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Cayman
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Edmonton
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Dominica
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Eirunepe
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Fortaleza
%PROGRAM_FILES%\Java\jre6\lib\zi\America\El_Salvador
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Dawson
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Danmarkshavn
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Dawson_Creek
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Detroit
%PROGRAM_FILES%\Java\jre6\lib\zi\America\Denver
%PROGRAM_FILES%\Java\jre6\lib\plugin.pack
%PROGRAM_FILES%\Java\jre6\lib\net.properties
%PROGRAM_FILES%\Java\jre6\lib\psfont.properties.ja
%PROGRAM_FILES%\Java\jre6\lib\resources.jar
%PROGRAM_FILES%\Java\jre6\lib\psfontj2d.properties
%PROGRAM_FILES%\Java\jre6\lib\management\management.properties
%PROGRAM_FILES%\Java\jre6\lib\management\jmxremote.password.template
%PROGRAM_FILES%\Java\jre6\lib\management\snmp.acl.template
%PROGRAM_FILES%\Java\jre6\lib\meta-index
%PROGRAM_FILES%\Java\jre6\lib\management-agent.jar
%PROGRAM_FILES%\Java\jre6\lib\security\local_policy.jar
%PROGRAM_FILES%\Java\jre6\lib\security\javaws.policy
%PROGRAM_FILES%\Java\jre6\lib\security\US_export_policy.jar
%PROGRAM_FILES%\Java\jre6\lib\sound.properties
%PROGRAM_FILES%\Java\jre6\lib\servicetag\jdk_header.png
%PROGRAM_FILES%\Java\jre6\lib\security\blacklist
%PROGRAM_FILES%\Java\jre6\lib\rt.pack
%PROGRAM_FILES%\Java\jre6\lib\security\cacerts
%PROGRAM_FILES%\Java\jre6\lib\security\java.security
%PROGRAM_FILES%\Java\jre6\lib\security\java.policy
%PROGRAM_FILES%\Java\jre6\lib\management\jmxremote.access
%PROGRAM_FILES%\Java\jre6\lib\im\thaiim.jar
%PROGRAM_FILES%\Java\jre6\lib\im\indicim.jar
%PROGRAM_FILES%\Java\jre6\lib\images\cursors\cursors.properties
%PROGRAM_FILES%\Java\jre6\lib\images\cursors\win32_CopyDrop32x32.gif
%PROGRAM_FILES%\Java\jre6\lib\images\cursors\invalid32x32.gif
%PROGRAM_FILES%\Java\jre6\lib\fonts\LucidaSansRegular.ttf
%PROGRAM_FILES%\Java\jre6\lib\fonts\LucidaSansDemiBold.ttf
%PROGRAM_FILES%\Java\jre6\lib\fonts\LucidaTypewriterBold.ttf
%PROGRAM_FILES%\Java\jre6\lib\i386\jvm.cfg
%PROGRAM_FILES%\Java\jre6\lib\fonts\LucidaTypewriterRegular.ttf
%PROGRAM_FILES%\Java\jre6\lib\jce.jar
%PROGRAM_FILES%\Java\jre6\lib\javaws.pack
%PROGRAM_FILES%\Java\jre6\lib\jsse.pack
%PROGRAM_FILES%\Java\jre6\lib\logging.properties
%PROGRAM_FILES%\Java\jre6\lib\jvm.hprof.txt
%PROGRAM_FILES%\Java\jre6\lib\images\cursors\win32_LinkDrop32x32.gif
%PROGRAM_FILES%\Java\jre6\lib\images\cursors\win32_CopyNoDrop32x32.gif
%PROGRAM_FILES%\Java\jre6\lib\images\cursors\win32_LinkNoDrop32x32.gif
%PROGRAM_FILES%\Java\jre6\lib\images\cursors\win32_MoveNoDrop32x32.gif
%PROGRAM_FILES%\Java\jre6\lib\images\cursors\win32_MoveDrop32x32.gif
%PROGRAM_FILES%\Java\jre6\lib\tzmappings
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Khartoum
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Kampala
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Kigali
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Lagos
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Kinshasa
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Gaborone
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Freetown
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Harare
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Juba
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Johannesburg
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Maputo
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Malabo
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Maseru
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Mogadishu
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Mbabane
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Lome
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Libreville
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Luanda
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Lusaka
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Lubumbashi
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\El_Aaiun
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Bangui
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Bamako
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Banjul
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Blantyre
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Bissau
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Accra
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Abidjan
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Addis_Ababa
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Asmara
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Algiers
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Dakar
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Conakry
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Dar_es_Salaam
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Douala
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Djibouti
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Bujumbura
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Brazzaville
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Cairo
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Ceuta
%PROGRAM_FILES%\Java\jre6\lib\zi\Africa\Casablanca

Deletes the following files:

%WINDIR%\Installer\MSIF.tmp
%WINDIR%\Installer\MSIE.tmp
%WINDIR%\Installer\MSID.tmp
%WINDIR%\Installer\MSI13.tmp
%WINDIR%\Installer\MSI11.tmp
%WINDIR%\Installer\MSI10.tmp
%WINDIR%\Installer\MSIC.tmp
%TEMP%\Cab6.tmp
%TEMP%\Cab4.tmp
%TEMP%\Cab2.tmp
%WINDIR%\Installer\MSIB.tmp
%WINDIR%\Installer\MSIA.tmp
%WINDIR%\Installer\MSI8.tmp

Network activity:

Connects to:

'www.download.windowsupdate.com':80
'wp#d':80
'ja####-esd.sun.com':80

TCP:

HTTP GET requests:

www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
ja####-esd.sun.com/update/1.6.0/1.6.0_38-b05.xml
wp#d/wpad.dat

UDP:

DNS ASK www.download.windowsupdate.com
DNS ASK wp#d
DNS ASK ja####-esd.sun.com

Miscellaneous:

Searches for the following windows:

ClassName: '#32770' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''

Tecnologías

Términos

Formación y educación

Mitos

Technical Information

Curing recommendations

Free trial