Trojan.Encoder.43107

Technical Information

To ensure autorun and distribution

Creates or modifies the following files

%WINDIR%\system.ini
%WINDIR%\win.ini

Creates the following files on removable media

<Drive name for removable media>:\readme.txt
<Drive name for removable media>:\delete.avi
<Drive name for removable media>:\000814251_video_01.avi
<Drive name for removable media>:\join.avi
<Drive name for removable media>:\correct.avi
<Drive name for removable media>:\archer.avi
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\dashborder_144.bmp
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\contosoroot_1.cer
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\february_catalogue__2015.doc
<Drive name for removable media>:\ovp25012015.doc
<Drive name for removable media>:\applicantform_en.doc
<Drive name for removable media>:\calc.exe
<Drive name for removable media>:\jre-7u75-windows-i586-iftw.exe
<Drive name for removable media>:\wrar520.exe
<Drive name for removable media>:\notepad.exe
<Drive name for removable media>:\utorrent.exe
<Drive name for removable media>:\winmine.exe
<Drive name for removable media>:\skypesetup.exe
<Drive name for removable media>:\system volume information\readme.txt

Modifies file system

Creates the following files

C:\readme.txt
D:\readme.txt
D:\$recycle.bin\readme.txt
D:\$recycle.bin\s-1-5-21-4226853953-3309226944-3078887307-1000\readme.txt
C:\$recycle.bin\readme.txt
C:\kms\readme.txt
C:\msocache\readme.txt
%ProgramFiles%\readme.txt
%ProgramFiles(x86)%\readme.txt
%ALLUSERSPROFILE%\readme.txt
C:\recovery\readme.txt
C:\users\readme.txt
%WINDIR%\readme.txt
<Current directory>\readme.txt
C:\$recycle.bin\s-1-5-21-4226853953-3309226944-3078887307-1000\readme.txt
C:\msocache\all users\readme.txt
%CommonProgramFiles%\readme.txt
%ProgramFiles%\internet explorer\readme.txt
%ProgramFiles%\java\readme.txt
%ProgramFiles%\microsoft office\readme.txt
%ProgramFiles%\mozilla firefox\readme.txt
%ProgramFiles%\mozilla thunderbird\readme.txt
%ProgramFiles%\uninstall information\readme.txt
%ProgramFiles%\windows defender advanced threat protection\readme.txt
%ProgramFiles%\windows defender.bak\readme.txt
%ProgramFiles%\windows mail\readme.txt
%ProgramFiles%\windows media player\readme.txt
%ProgramFiles%\windows multimedia platform\readme.txt
%ProgramFiles%\windows nt\readme.txt
%ProgramFiles%\windows photo viewer\readme.txt
%ProgramFiles%\windows portable devices\readme.txt
%ProgramFiles%\windows security\readme.txt
%ProgramFiles%\windows sidebar\readme.txt
%ProgramFiles%\windowspowershell\readme.txt
%ProgramFiles(x86)%\adobe\readme.txt
%CommonProgramFiles(x86)%\readme.txt
%ProgramFiles(x86)%\internet explorer\readme.txt
%ProgramFiles(x86)%\microsoft\readme.txt
%ProgramFiles(x86)%\microsoft analysis services\readme.txt
%ProgramFiles(x86)%\microsoft office\readme.txt
%ProgramFiles(x86)%\microsoft sql server\readme.txt
%ProgramFiles(x86)%\microsoft.net\readme.txt
%ProgramFiles(x86)%\mozilla firefox\readme.txt
%ProgramFiles(x86)%\opera\readme.txt
%ProgramFiles(x86)%\steam\readme.txt
%ProgramFiles(x86)%\windows defender.bak\readme.txt
%ProgramFiles(x86)%\windows mail\readme.txt
%ProgramFiles(x86)%\windows media player\readme.txt
%ProgramFiles(x86)%\windows multimedia platform\readme.txt
%ProgramFiles(x86)%\windows nt\readme.txt
%ProgramFiles(x86)%\windows photo viewer\readme.txt
%ProgramFiles(x86)%\windows portable devices\readme.txt
%ProgramFiles(x86)%\windows sidebar\readme.txt
%ProgramFiles(x86)%\windowspowershell\readme.txt
%ALLUSERSPROFILE%\adobe\readme.txt
%ALLUSERSPROFILE%\microsoft\readme.txt
%ALLUSERSPROFILE%\microsoft help\readme.txt
%ALLUSERSPROFILE%\mozilla\readme.txt
%ALLUSERSPROFILE%\oracle\readme.txt
%ALLUSERSPROFILE%\package cache\readme.txt
%ALLUSERSPROFILE%\packages\readme.txt
%ALLUSERSPROFILE%\regid.1991-06.com.microsoft\readme.txt
%ALLUSERSPROFILE%\softwaredistribution\readme.txt
%ALLUSERSPROFILE%\ssh\readme.txt
%ALLUSERSPROFILE%\usoshared\readme.txt
%ALLUSERSPROFILE%\windowsholographicdevices\readme.txt
C:\recovery\windowsre\readme.txt

Moves the following system files

from %WINDIR%\dtcinstall.log to %WINDIR%\dtcinstall.log.lockbit
from %WINDIR%\lsasetup.log to %WINDIR%\lsasetup.log.lockbit
from %WINDIR%\pfro.log to %WINDIR%\pfro.log.lockbit
from %WINDIR%\setupact.log to %WINDIR%\setupact.log.lockbit
from %WINDIR%\system.ini to %WINDIR%\system.ini.lockbit
from %WINDIR%\win.ini to %WINDIR%\win.ini.lockbit
from %WINDIR%\windowsupdate.log to %WINDIR%\windowsupdate.log.lockbit
from %WINDIR%\debug\netsetup.log to %WINDIR%\debug\netsetup.log.lockbit
from %WINDIR%\debug\sammui.log to %WINDIR%\debug\sammui.log.lockbit
from %WINDIR%\downloaded program files\desktop.ini to %WINDIR%\downloaded program files\desktop.ini.lockbit
from %WINDIR%\fonts\agencyb.ttf to %WINDIR%\fonts\agencyb.ttf.lockbit
from %WINDIR%\fonts\agencyr.ttf to %WINDIR%\fonts\agencyr.ttf.lockbit
from %WINDIR%\fonts\alger.ttf to %WINDIR%\fonts\alger.ttf.lockbit
from %WINDIR%\fonts\antquab.ttf to %WINDIR%\fonts\antquab.ttf.lockbit
from %WINDIR%\fonts\antquabi.ttf to %WINDIR%\fonts\antquabi.ttf.lockbit
from %WINDIR%\fonts\antquai.ttf to %WINDIR%\fonts\antquai.ttf.lockbit
from %WINDIR%\fonts\arialn.ttf to %WINDIR%\fonts\arialn.ttf.lockbit
from %WINDIR%\fonts\arialnb.ttf to %WINDIR%\fonts\arialnb.ttf.lockbit
from %WINDIR%\fonts\arialnbi.ttf to %WINDIR%\fonts\arialnbi.ttf.lockbit
from %WINDIR%\fonts\arialni.ttf to %WINDIR%\fonts\arialni.ttf.lockbit
from %WINDIR%\fonts\arlrdbd.ttf to %WINDIR%\fonts\arlrdbd.ttf.lockbit
from %WINDIR%\fonts\baskvill.ttf to %WINDIR%\fonts\baskvill.ttf.lockbit
from %WINDIR%\fonts\bauhs93.ttf to %WINDIR%\fonts\bauhs93.ttf.lockbit
from %WINDIR%\fonts\bell.ttf to %WINDIR%\fonts\bell.ttf.lockbit
from %WINDIR%\fonts\bellb.ttf to %WINDIR%\fonts\bellb.ttf.lockbit
from %WINDIR%\fonts\belli.ttf to %WINDIR%\fonts\belli.ttf.lockbit
from %WINDIR%\fonts\bernhc.ttf to %WINDIR%\fonts\bernhc.ttf.lockbit
from %WINDIR%\fonts\bkant.ttf to %WINDIR%\fonts\bkant.ttf.lockbit
from %WINDIR%\fonts\bod_b.ttf to %WINDIR%\fonts\bod_b.ttf.lockbit
from %WINDIR%\fonts\bod_bi.ttf to %WINDIR%\fonts\bod_bi.ttf.lockbit
from %WINDIR%\fonts\bod_blai.ttf to %WINDIR%\fonts\bod_blai.ttf.lockbit
from %WINDIR%\fonts\bod_blar.ttf to %WINDIR%\fonts\bod_blar.ttf.lockbit
from %WINDIR%\fonts\bod_cb.ttf to %WINDIR%\fonts\bod_cb.ttf.lockbit
from %WINDIR%\fonts\bod_cbi.ttf to %WINDIR%\fonts\bod_cbi.ttf.lockbit
from %WINDIR%\fonts\bod_ci.ttf to %WINDIR%\fonts\bod_ci.ttf.lockbit
from %WINDIR%\fonts\bod_cr.ttf to %WINDIR%\fonts\bod_cr.ttf.lockbit
from %WINDIR%\fonts\bod_i.ttf to %WINDIR%\fonts\bod_i.ttf.lockbit
from %WINDIR%\fonts\bod_pstc.ttf to %WINDIR%\fonts\bod_pstc.ttf.lockbit
from %WINDIR%\fonts\bod_r.ttf to %WINDIR%\fonts\bod_r.ttf.lockbit
from %WINDIR%\fonts\bookos.ttf to %WINDIR%\fonts\bookos.ttf.lockbit
from %WINDIR%\fonts\bookosb.ttf to %WINDIR%\fonts\bookosb.ttf.lockbit
from %WINDIR%\fonts\bookosbi.ttf to %WINDIR%\fonts\bookosbi.ttf.lockbit
from %WINDIR%\fonts\bookosi.ttf to %WINDIR%\fonts\bookosi.ttf.lockbit
from %WINDIR%\fonts\bradhitc.ttf to %WINDIR%\fonts\bradhitc.ttf.lockbit
from %WINDIR%\fonts\britanic.ttf to %WINDIR%\fonts\britanic.ttf.lockbit
from %WINDIR%\fonts\brlnsb.ttf to %WINDIR%\fonts\brlnsb.ttf.lockbit
from %WINDIR%\fonts\brlnsdb.ttf to %WINDIR%\fonts\brlnsdb.ttf.lockbit
from %WINDIR%\fonts\brlnsr.ttf to %WINDIR%\fonts\brlnsr.ttf.lockbit
from %WINDIR%\fonts\broadw.ttf to %WINDIR%\fonts\broadw.ttf.lockbit
from %WINDIR%\fonts\brushsci.ttf to %WINDIR%\fonts\brushsci.ttf.lockbit
from %WINDIR%\fonts\bssym7.ttf to %WINDIR%\fonts\bssym7.ttf.lockbit
from %WINDIR%\fonts\califb.ttf to %WINDIR%\fonts\califb.ttf.lockbit
from %WINDIR%\fonts\califi.ttf to %WINDIR%\fonts\califi.ttf.lockbit
from %WINDIR%\fonts\califr.ttf to %WINDIR%\fonts\califr.ttf.lockbit
from %WINDIR%\fonts\calist.ttf to %WINDIR%\fonts\calist.ttf.lockbit
from %WINDIR%\fonts\calistb.ttf to %WINDIR%\fonts\calistb.ttf.lockbit
from %WINDIR%\fonts\calistbi.ttf to %WINDIR%\fonts\calistbi.ttf.lockbit
from %WINDIR%\fonts\calisti.ttf to %WINDIR%\fonts\calisti.ttf.lockbit
from %WINDIR%\fonts\castelar.ttf to %WINDIR%\fonts\castelar.ttf.lockbit
from %WINDIR%\fonts\censcbk.ttf to %WINDIR%\fonts\censcbk.ttf.lockbit
from %WINDIR%\fonts\centaur.ttf to %WINDIR%\fonts\centaur.ttf.lockbit
from %WINDIR%\fonts\century.ttf to %WINDIR%\fonts\century.ttf.lockbit
from %WINDIR%\fonts\chiller.ttf to %WINDIR%\fonts\chiller.ttf.lockbit
from %WINDIR%\fonts\colonna.ttf to %WINDIR%\fonts\colonna.ttf.lockbit
from %WINDIR%\fonts\coopbl.ttf to %WINDIR%\fonts\coopbl.ttf.lockbit
from %WINDIR%\fonts\coprgtb.ttf to %WINDIR%\fonts\coprgtb.ttf.lockbit
from %WINDIR%\fonts\coprgtl.ttf to %WINDIR%\fonts\coprgtl.ttf.lockbit
from %WINDIR%\fonts\curlz___.ttf to %WINDIR%\fonts\curlz___.ttf.lockbit
from %WINDIR%\fonts\desktop.ini to %WINDIR%\fonts\desktop.ini.lockbit
from %WINDIR%\fonts\elephnt.ttf to %WINDIR%\fonts\elephnt.ttf.lockbit
from %WINDIR%\fonts\elephnti.ttf to %WINDIR%\fonts\elephnti.ttf.lockbit
from %WINDIR%\fonts\engr.ttf to %WINDIR%\fonts\engr.ttf.lockbit
from %WINDIR%\fonts\erasbd.ttf to %WINDIR%\fonts\erasbd.ttf.lockbit
from %WINDIR%\fonts\erasdemi.ttf to %WINDIR%\fonts\erasdemi.ttf.lockbit
from %WINDIR%\fonts\eraslght.ttf to %WINDIR%\fonts\eraslght.ttf.lockbit
from %WINDIR%\fonts\erasmd.ttf to %WINDIR%\fonts\erasmd.ttf.lockbit
from %WINDIR%\fonts\felixti.ttf to %WINDIR%\fonts\felixti.ttf.lockbit
from %WINDIR%\fonts\forte.ttf to %WINDIR%\fonts\forte.ttf.lockbit
from %WINDIR%\fonts\frabk.ttf to %WINDIR%\fonts\frabk.ttf.lockbit
from %WINDIR%\fonts\frabkit.ttf to %WINDIR%\fonts\frabkit.ttf.lockbit
from %WINDIR%\fonts\fradm.ttf to %WINDIR%\fonts\fradm.ttf.lockbit
from %WINDIR%\fonts\fradmcn.ttf to %WINDIR%\fonts\fradmcn.ttf.lockbit
from %WINDIR%\fonts\fradmit.ttf to %WINDIR%\fonts\fradmit.ttf.lockbit
from %WINDIR%\fonts\frahv.ttf to %WINDIR%\fonts\frahv.ttf.lockbit
from %WINDIR%\fonts\frahvit.ttf to %WINDIR%\fonts\frahvit.ttf.lockbit
from %WINDIR%\fonts\framdcn.ttf to %WINDIR%\fonts\framdcn.ttf.lockbit
from %WINDIR%\fonts\freescpt.ttf to %WINDIR%\fonts\freescpt.ttf.lockbit
from %WINDIR%\fonts\frscript.ttf to %WINDIR%\fonts\frscript.ttf.lockbit
from %WINDIR%\fonts\ftltlt.ttf to %WINDIR%\fonts\ftltlt.ttf.lockbit
from %WINDIR%\fonts\gara.ttf to %WINDIR%\fonts\gara.ttf.lockbit
from %WINDIR%\fonts\garabd.ttf to %WINDIR%\fonts\garabd.ttf.lockbit
from %WINDIR%\fonts\garait.ttf to %WINDIR%\fonts\garait.ttf.lockbit
from %WINDIR%\fonts\gigi.ttf to %WINDIR%\fonts\gigi.ttf.lockbit
from %WINDIR%\fonts\gilbi___.ttf to %WINDIR%\fonts\gilbi___.ttf.lockbit
from %WINDIR%\fonts\gilb____.ttf to %WINDIR%\fonts\gilb____.ttf.lockbit
from %WINDIR%\fonts\gilc____.ttf to %WINDIR%\fonts\gilc____.ttf.lockbit
from %WINDIR%\fonts\gili____.ttf to %WINDIR%\fonts\gili____.ttf.lockbit
from %WINDIR%\fonts\gillubcd.ttf to %WINDIR%\fonts\gillubcd.ttf.lockbit
from %WINDIR%\fonts\gilsanub.ttf to %WINDIR%\fonts\gilsanub.ttf.lockbit
from %WINDIR%\fonts\gil_____.ttf to %WINDIR%\fonts\gil_____.ttf.lockbit
from %WINDIR%\fonts\glecb.ttf to %WINDIR%\fonts\glecb.ttf.lockbit
from %WINDIR%\fonts\glsnecb.ttf to %WINDIR%\fonts\glsnecb.ttf.lockbit
from %WINDIR%\fonts\gothic.ttf to %WINDIR%\fonts\gothic.ttf.lockbit
from %WINDIR%\fonts\gothicb.ttf to %WINDIR%\fonts\gothicb.ttf.lockbit
from %WINDIR%\fonts\gothicbi.ttf to %WINDIR%\fonts\gothicbi.ttf.lockbit
from %WINDIR%\fonts\gothici.ttf to %WINDIR%\fonts\gothici.ttf.lockbit
from %WINDIR%\fonts\goudos.ttf to %WINDIR%\fonts\goudos.ttf.lockbit
from %WINDIR%\fonts\goudosb.ttf to %WINDIR%\fonts\goudosb.ttf.lockbit
from %WINDIR%\fonts\goudosi.ttf to %WINDIR%\fonts\goudosi.ttf.lockbit
from %WINDIR%\fonts\goudysto.ttf to %WINDIR%\fonts\goudysto.ttf.lockbit
from %WINDIR%\fonts\harlowsi.ttf to %WINDIR%\fonts\harlowsi.ttf.lockbit
from %WINDIR%\fonts\harngton.ttf to %WINDIR%\fonts\harngton.ttf.lockbit
from %WINDIR%\fonts\hatten.ttf to %WINDIR%\fonts\hatten.ttf.lockbit
from %WINDIR%\fonts\htowert.ttf to %WINDIR%\fonts\htowert.ttf.lockbit
from %WINDIR%\fonts\htowerti.ttf to %WINDIR%\fonts\htowerti.ttf.lockbit
from %WINDIR%\fonts\imprisha.ttf to %WINDIR%\fonts\imprisha.ttf.lockbit
from %WINDIR%\fonts\infroman.ttf to %WINDIR%\fonts\infroman.ttf.lockbit
from %WINDIR%\fonts\itcblkad.ttf to %WINDIR%\fonts\itcblkad.ttf.lockbit
from %WINDIR%\fonts\itcedscr.ttf to %WINDIR%\fonts\itcedscr.ttf.lockbit
from %WINDIR%\fonts\itckrist.ttf to %WINDIR%\fonts\itckrist.ttf.lockbit
from %WINDIR%\fonts\jokerman.ttf to %WINDIR%\fonts\jokerman.ttf.lockbit
from %WINDIR%\fonts\juice___.ttf to %WINDIR%\fonts\juice___.ttf.lockbit
from %WINDIR%\fonts\kunstler.ttf to %WINDIR%\fonts\kunstler.ttf.lockbit
from %WINDIR%\fonts\latinwd.ttf to %WINDIR%\fonts\latinwd.ttf.lockbit
from %WINDIR%\fonts\lbrite.ttf to %WINDIR%\fonts\lbrite.ttf.lockbit
from %WINDIR%\fonts\lbrited.ttf to %WINDIR%\fonts\lbrited.ttf.lockbit
from %WINDIR%\fonts\lbritedi.ttf to %WINDIR%\fonts\lbritedi.ttf.lockbit
from %WINDIR%\fonts\lbritei.ttf to %WINDIR%\fonts\lbritei.ttf.lockbit
from %WINDIR%\fonts\lcallig.ttf to %WINDIR%\fonts\lcallig.ttf.lockbit
from %WINDIR%\fonts\leelawad.ttf to %WINDIR%\fonts\leelawad.ttf.lockbit
from %WINDIR%\fonts\leelawdb.ttf to %WINDIR%\fonts\leelawdb.ttf.lockbit
from %WINDIR%\fonts\lfax.ttf to %WINDIR%\fonts\lfax.ttf.lockbit
from %WINDIR%\fonts\lfaxd.ttf to %WINDIR%\fonts\lfaxd.ttf.lockbit
from %WINDIR%\fonts\lfaxdi.ttf to %WINDIR%\fonts\lfaxdi.ttf.lockbit
from %WINDIR%\fonts\lfaxi.ttf to %WINDIR%\fonts\lfaxi.ttf.lockbit
from %WINDIR%\fonts\lhandw.ttf to %WINDIR%\fonts\lhandw.ttf.lockbit
from %WINDIR%\fonts\lsans.ttf to %WINDIR%\fonts\lsans.ttf.lockbit
from %WINDIR%\fonts\lsansd.ttf to %WINDIR%\fonts\lsansd.ttf.lockbit
from %WINDIR%\fonts\lsansdi.ttf to %WINDIR%\fonts\lsansdi.ttf.lockbit
from %WINDIR%\fonts\lsansi.ttf to %WINDIR%\fonts\lsansi.ttf.lockbit
from %WINDIR%\fonts\ltype.ttf to %WINDIR%\fonts\ltype.ttf.lockbit
from %WINDIR%\fonts\ltypeb.ttf to %WINDIR%\fonts\ltypeb.ttf.lockbit
from %WINDIR%\fonts\ltypebo.ttf to %WINDIR%\fonts\ltypebo.ttf.lockbit
from %WINDIR%\fonts\ltypeo.ttf to %WINDIR%\fonts\ltypeo.ttf.lockbit
from %WINDIR%\fonts\magnetob.ttf to %WINDIR%\fonts\magnetob.ttf.lockbit
from %WINDIR%\fonts\maian.ttf to %WINDIR%\fonts\maian.ttf.lockbit
from %WINDIR%\fonts\maturasc.ttf to %WINDIR%\fonts\maturasc.ttf.lockbit
from %WINDIR%\fonts\mistral.ttf to %WINDIR%\fonts\mistral.ttf.lockbit
from %WINDIR%\fonts\mod20.ttf to %WINDIR%\fonts\mod20.ttf.lockbit
from %WINDIR%\fonts\msuighub.ttf to %WINDIR%\fonts\msuighub.ttf.lockbit
from %WINDIR%\fonts\msuighur.ttf to %WINDIR%\fonts\msuighur.ttf.lockbit
from %WINDIR%\fonts\mtcorsva.ttf to %WINDIR%\fonts\mtcorsva.ttf.lockbit
from %WINDIR%\fonts\niageng.ttf to %WINDIR%\fonts\niageng.ttf.lockbit
from %WINDIR%\fonts\niagsol.ttf to %WINDIR%\fonts\niagsol.ttf.lockbit
from %WINDIR%\fonts\ocraext.ttf to %WINDIR%\fonts\ocraext.ttf.lockbit
from %WINDIR%\fonts\oldengl.ttf to %WINDIR%\fonts\oldengl.ttf.lockbit
from %WINDIR%\fonts\onyx.ttf to %WINDIR%\fonts\onyx.ttf.lockbit
from %WINDIR%\fonts\outlook.ttf to %WINDIR%\fonts\outlook.ttf.lockbit
from %WINDIR%\fonts\palscri.ttf to %WINDIR%\fonts\palscri.ttf.lockbit
from %WINDIR%\fonts\papyrus.ttf to %WINDIR%\fonts\papyrus.ttf.lockbit
from %WINDIR%\fonts\parchm.ttf to %WINDIR%\fonts\parchm.ttf.lockbit
from %WINDIR%\fonts\perbi___.ttf to %WINDIR%\fonts\perbi___.ttf.lockbit
from %WINDIR%\fonts\perb____.ttf to %WINDIR%\fonts\perb____.ttf.lockbit
from %WINDIR%\fonts\peri____.ttf to %WINDIR%\fonts\peri____.ttf.lockbit
from %WINDIR%\fonts\pertibd.ttf to %WINDIR%\fonts\pertibd.ttf.lockbit
from %WINDIR%\fonts\pertili.ttf to %WINDIR%\fonts\pertili.ttf.lockbit
from %WINDIR%\fonts\per_____.ttf to %WINDIR%\fonts\per_____.ttf.lockbit
from %WINDIR%\fonts\playbill.ttf to %WINDIR%\fonts\playbill.ttf.lockbit
from %WINDIR%\fonts\poorich.ttf to %WINDIR%\fonts\poorich.ttf.lockbit
from %WINDIR%\fonts\pristina.ttf to %WINDIR%\fonts\pristina.ttf.lockbit
from %WINDIR%\fonts\rage.ttf to %WINDIR%\fonts\rage.ttf.lockbit
from %WINDIR%\fonts\ravie.ttf to %WINDIR%\fonts\ravie.ttf.lockbit
from %WINDIR%\fonts\refsan.ttf to %WINDIR%\fonts\refsan.ttf.lockbit
from %WINDIR%\fonts\refspcl.ttf to %WINDIR%\fonts\refspcl.ttf.lockbit
from %WINDIR%\fonts\roccb___.ttf to %WINDIR%\fonts\roccb___.ttf.lockbit
from %WINDIR%\fonts\rocc____.ttf to %WINDIR%\fonts\rocc____.ttf.lockbit
from %WINDIR%\fonts\rock.ttf to %WINDIR%\fonts\rock.ttf.lockbit
from %WINDIR%\fonts\rockb.ttf to %WINDIR%\fonts\rockb.ttf.lockbit
from %WINDIR%\fonts\rockbi.ttf to %WINDIR%\fonts\rockbi.ttf.lockbit
from %WINDIR%\fonts\rockeb.ttf to %WINDIR%\fonts\rockeb.ttf.lockbit
from %WINDIR%\fonts\rocki.ttf to %WINDIR%\fonts\rocki.ttf.lockbit
from %WINDIR%\fonts\schlbkb.ttf to %WINDIR%\fonts\schlbkb.ttf.lockbit
from %WINDIR%\fonts\schlbkbi.ttf to %WINDIR%\fonts\schlbkbi.ttf.lockbit
from %WINDIR%\fonts\schlbki.ttf to %WINDIR%\fonts\schlbki.ttf.lockbit
from %WINDIR%\fonts\scriptbl.ttf to %WINDIR%\fonts\scriptbl.ttf.lockbit
from %WINDIR%\fonts\showg.ttf to %WINDIR%\fonts\showg.ttf.lockbit
from %WINDIR%\fonts\snap____.ttf to %WINDIR%\fonts\snap____.ttf.lockbit
from %WINDIR%\fonts\stencil.ttf to %WINDIR%\fonts\stencil.ttf.lockbit
from %WINDIR%\fonts\tcbi____.ttf to %WINDIR%\fonts\tcbi____.ttf.lockbit
from %WINDIR%\fonts\tcb_____.ttf to %WINDIR%\fonts\tcb_____.ttf.lockbit
from %WINDIR%\fonts\tccb____.ttf to %WINDIR%\fonts\tccb____.ttf.lockbit
from %WINDIR%\fonts\tcceb.ttf to %WINDIR%\fonts\tcceb.ttf.lockbit
from %WINDIR%\fonts\tccm____.ttf to %WINDIR%\fonts\tccm____.ttf.lockbit
from %WINDIR%\fonts\tcmi____.ttf to %WINDIR%\fonts\tcmi____.ttf.lockbit
from %WINDIR%\fonts\tcm_____.ttf to %WINDIR%\fonts\tcm_____.ttf.lockbit
from %WINDIR%\fonts\tempsitc.ttf to %WINDIR%\fonts\tempsitc.ttf.lockbit
from %WINDIR%\fonts\vineritc.ttf to %WINDIR%\fonts\vineritc.ttf.lockbit
from %WINDIR%\fonts\vivaldii.ttf to %WINDIR%\fonts\vivaldii.ttf.lockbit
from %WINDIR%\fonts\vladimir.ttf to %WINDIR%\fonts\vladimir.ttf.lockbit
from %WINDIR%\fonts\wingdng2.ttf to %WINDIR%\fonts\wingdng2.ttf.lockbit
from %WINDIR%\fonts\wingdng3.ttf to %WINDIR%\fonts\wingdng3.ttf.lockbit
from %WINDIR%\inf\1394.pnf to %WINDIR%\inf\1394.pnf.lockbit
from %WINDIR%\inf\acpi.pnf to %WINDIR%\inf\acpi.pnf.lockbit
from %WINDIR%\inf\acpidev.pnf to %WINDIR%\inf\acpidev.pnf.lockbit
from %WINDIR%\inf\acpipagr.pnf to %WINDIR%\inf\acpipagr.pnf.lockbit
from %WINDIR%\inf\acpipmi.pnf to %WINDIR%\inf\acpipmi.pnf.lockbit
from %WINDIR%\inf\acpitime.pnf to %WINDIR%\inf\acpitime.pnf.lockbit
from %WINDIR%\inf\amdgpio2.pnf to %WINDIR%\inf\amdgpio2.pnf.lockbit
from %WINDIR%\inf\amdi2c.pnf to %WINDIR%\inf\amdi2c.pnf.lockbit
from %WINDIR%\inf\arcsas.pnf to %WINDIR%\inf\arcsas.pnf.lockbit
from %WINDIR%\inf\basicdisplay.pnf to %WINDIR%\inf\basicdisplay.pnf.lockbit
from %WINDIR%\inf\basicrender.pnf to %WINDIR%\inf\basicrender.pnf.lockbit
from %WINDIR%\inf\bcmfn2.pnf to %WINDIR%\inf\bcmfn2.pnf.lockbit
from %WINDIR%\inf\bth.pnf to %WINDIR%\inf\bth.pnf.lockbit
from %WINDIR%\inf\bthleenum.pnf to %WINDIR%\inf\bthleenum.pnf.lockbit
from %WINDIR%\inf\buttonconverter.pnf to %WINDIR%\inf\buttonconverter.pnf.lockbit
from %WINDIR%\inf\cdrom.pnf to %WINDIR%\inf\cdrom.pnf.lockbit
from %WINDIR%\inf\chargearbitration.pnf to %WINDIR%\inf\chargearbitration.pnf.lockbit
from %WINDIR%\inf\cht4vx64.pnf to %WINDIR%\inf\cht4vx64.pnf.lockbit
from %WINDIR%\inf\circlass.pnf to %WINDIR%\inf\circlass.pnf.lockbit
from %WINDIR%\inf\cmbatt.pnf to %WINDIR%\inf\cmbatt.pnf.lockbit
from %WINDIR%\inf\compositebus.pnf to %WINDIR%\inf\compositebus.pnf.lockbit
from %WINDIR%\inf\cpu.pnf to %WINDIR%\inf\cpu.pnf.lockbit
from %WINDIR%\inf\c_swdevice.pnf to %WINDIR%\inf\c_swdevice.pnf.lockbit
from %WINDIR%\inf\disk.pnf to %WINDIR%\inf\disk.pnf.lockbit
from %WINDIR%\inf\ehstortcgdrv.pnf to %WINDIR%\inf\ehstortcgdrv.pnf.lockbit
from %WINDIR%\inf\errdev.pnf to %WINDIR%\inf\errdev.pnf.lockbit
from %WINDIR%\inf\fdc.pnf to %WINDIR%\inf\fdc.pnf.lockbit
from %WINDIR%\inf\flpydisk.pnf to %WINDIR%\inf\flpydisk.pnf.lockbit
from %WINDIR%\inf\genericusbfn.pnf to %WINDIR%\inf\genericusbfn.pnf.lockbit
from %WINDIR%\inf\hal.pnf to %WINDIR%\inf\hal.pnf.lockbit
from %WINDIR%\inf\hdaudbus.pnf to %WINDIR%\inf\hdaudbus.pnf.lockbit
from %WINDIR%\inf\hdaudio.pnf to %WINDIR%\inf\hdaudio.pnf.lockbit
from %WINDIR%\inf\hidbatt.pnf to %WINDIR%\inf\hidbatt.pnf.lockbit
from %WINDIR%\inf\hidbth.pnf to %WINDIR%\inf\hidbth.pnf.lockbit
from %WINDIR%\inf\hiddigi.pnf to %WINDIR%\inf\hiddigi.pnf.lockbit
from %WINDIR%\inf\hidi2c.pnf to %WINDIR%\inf\hidi2c.pnf.lockbit
from %WINDIR%\inf\hidinterrupt.pnf to %WINDIR%\inf\hidinterrupt.pnf.lockbit
from %WINDIR%\inf\hidir.pnf to %WINDIR%\inf\hidir.pnf.lockbit
from %WINDIR%\inf\hidspi_km.pnf to %WINDIR%\inf\hidspi_km.pnf.lockbit
from %WINDIR%\inf\hidvhf.pnf to %WINDIR%\inf\hidvhf.pnf.lockbit
from %WINDIR%\inf\iagpio.pnf to %WINDIR%\inf\iagpio.pnf.lockbit
from %WINDIR%\inf\iai2c.pnf to %WINDIR%\inf\iai2c.pnf.lockbit
from %WINDIR%\inf\ialpss2i_gpio2_bxt_p.pnf to %WINDIR%\inf\ialpss2i_gpio2_bxt_p.pnf.lockbit
from %WINDIR%\inf\ialpss2i_gpio2_cnl.pnf to %WINDIR%\inf\ialpss2i_gpio2_cnl.pnf.lockbit
from %WINDIR%\inf\ialpss2i_gpio2_glk.pnf to %WINDIR%\inf\ialpss2i_gpio2_glk.pnf.lockbit
from %WINDIR%\inf\ialpss2i_gpio2_skl.pnf to %WINDIR%\inf\ialpss2i_gpio2_skl.pnf.lockbit
from %WINDIR%\inf\ialpss2i_i2c_bxt_p.pnf to %WINDIR%\inf\ialpss2i_i2c_bxt_p.pnf.lockbit
from %WINDIR%\inf\ialpss2i_i2c_cnl.pnf to %WINDIR%\inf\ialpss2i_i2c_cnl.pnf.lockbit
from %WINDIR%\inf\ialpss2i_i2c_glk.pnf to %WINDIR%\inf\ialpss2i_i2c_glk.pnf.lockbit
from %WINDIR%\inf\ialpss2i_i2c_skl.pnf to %WINDIR%\inf\ialpss2i_i2c_skl.pnf.lockbit
from %WINDIR%\inf\ialpssi_gpio.pnf to %WINDIR%\inf\ialpssi_gpio.pnf.lockbit
from %WINDIR%\inf\ialpssi_i2c.pnf to %WINDIR%\inf\ialpssi_i2c.pnf.lockbit
from %WINDIR%\inf\iastorav.pnf to %WINDIR%\inf\iastorav.pnf.lockbit
from %WINDIR%\inf\iastorv.pnf to %WINDIR%\inf\iastorv.pnf.lockbit
from %WINDIR%\inf\input.pnf to %WINDIR%\inf\input.pnf.lockbit
from %WINDIR%\inf\intelpep.pnf to %WINDIR%\inf\intelpep.pnf.lockbit
from %WINDIR%\inf\intelpmax.pnf to %WINDIR%\inf\intelpmax.pnf.lockbit
from %WINDIR%\inf\intelta.pnf to %WINDIR%\inf\intelta.pnf.lockbit
from %WINDIR%\inf\iscsi.pnf to %WINDIR%\inf\iscsi.pnf.lockbit
from %WINDIR%\inf\kdnic.pnf to %WINDIR%\inf\kdnic.pnf.lockbit
from %WINDIR%\inf\keyboard.pnf to %WINDIR%\inf\keyboard.pnf.lockbit
from %WINDIR%\inf\ksfilter.pnf to %WINDIR%\inf\ksfilter.pnf.lockbit
from %WINDIR%\inf\lsi_sas.pnf to %WINDIR%\inf\lsi_sas.pnf.lockbit
from %WINDIR%\inf\machine.pnf to %WINDIR%\inf\machine.pnf.lockbit
from %WINDIR%\inf\mausbhost.pnf to %WINDIR%\inf\mausbhost.pnf.lockbit
from %WINDIR%\inf\mdmbtmdm.pnf to %WINDIR%\inf\mdmbtmdm.pnf.lockbit
from %WINDIR%\inf\memory.pnf to %WINDIR%\inf\memory.pnf.lockbit
from %WINDIR%\inf\microsoft_bluetooth_a2dp.pnf to %WINDIR%\inf\microsoft_bluetooth_a2dp.pnf.lockbit
from %WINDIR%\inf\microsoft_bluetooth_avrcptransport.pnf to %WINDIR%\inf\microsoft_bluetooth_avrcptransport.pnf.lockbit
from %WINDIR%\inf\microsoft_bluetooth_hfp.pnf to %WINDIR%\inf\microsoft_bluetooth_hfp.pnf.lockbit
from %WINDIR%\inf\mlx4_bus.pnf to %WINDIR%\inf\mlx4_bus.pnf.lockbit
from %WINDIR%\inf\monitor.pnf to %WINDIR%\inf\monitor.pnf.lockbit
from %WINDIR%\inf\msgpiowin32.pnf to %WINDIR%\inf\msgpiowin32.pnf.lockbit
from %WINDIR%\inf\mshdc.pnf to %WINDIR%\inf\mshdc.pnf.lockbit
from %WINDIR%\inf\msmouse.pnf to %WINDIR%\inf\msmouse.pnf.lockbit
from %WINDIR%\inf\msports.pnf to %WINDIR%\inf\msports.pnf.lockbit
from %WINDIR%\inf\mssmbios.pnf to %WINDIR%\inf\mssmbios.pnf.lockbit
from %WINDIR%\inf\mtconfig.pnf to %WINDIR%\inf\mtconfig.pnf.lockbit
from %WINDIR%\inf\ndisvirtualbus.pnf to %WINDIR%\inf\ndisvirtualbus.pnf.lockbit
from %WINDIR%\inf\netavpna.pnf to %WINDIR%\inf\netavpna.pnf.lockbit
from %WINDIR%\inf\netbvbda.pnf to %WINDIR%\inf\netbvbda.pnf.lockbit
from %WINDIR%\inf\nete1g3e.pnf to %WINDIR%\inf\nete1g3e.pnf.lockbit
from %WINDIR%\inf\netevbda.pnf to %WINDIR%\inf\netevbda.pnf.lockbit
from %WINDIR%\inf\netrtl64.pnf to %WINDIR%\inf\netrtl64.pnf.lockbit
from %WINDIR%\inf\npsvctrig.pnf to %WINDIR%\inf\npsvctrig.pnf.lockbit
from %WINDIR%\inf\nvdimm.pnf to %WINDIR%\inf\nvdimm.pnf.lockbit
from %WINDIR%\inf\oem0.inf to %WINDIR%\inf\oem0.inf.lockbit
from %WINDIR%\inf\oem1.inf to %WINDIR%\inf\oem1.inf.lockbit
from %WINDIR%\inf\oem2.inf to %WINDIR%\inf\oem2.inf.lockbit
from %WINDIR%\inf\pci.pnf to %WINDIR%\inf\pci.pnf.lockbit
from %WINDIR%\inf\pmem.pnf to %WINDIR%\inf\pmem.pnf.lockbit
from %WINDIR%\inf\printqueue.pnf to %WINDIR%\inf\printqueue.pnf.lockbit
from %WINDIR%\inf\rdpbus.pnf to %WINDIR%\inf\rdpbus.pnf.lockbit
from %WINDIR%\inf\rhproxy.pnf to %WINDIR%\inf\rhproxy.pnf.lockbit
from %WINDIR%\inf\sbp2.pnf to %WINDIR%\inf\sbp2.pnf.lockbit
from %WINDIR%\inf\scmbus.pnf to %WINDIR%\inf\scmbus.pnf.lockbit
from %WINDIR%\inf\sdfrd.pnf to %WINDIR%\inf\sdfrd.pnf.lockbit
from %WINDIR%\inf\sdstor.pnf to %WINDIR%\inf\sdstor.pnf.lockbit
from %WINDIR%\inf\setupapi.dev.log to %WINDIR%\inf\setupapi.dev.log.lockbit
from %WINDIR%\inf\setupapi.offline.20191207_091437.log to %WINDIR%\inf\setupapi.offline.20191207_091437.log.lockbit
from %WINDIR%\inf\setupapi.setup.log to %WINDIR%\inf\setupapi.setup.log.lockbit
from %WINDIR%\inf\spaceport.pnf to %WINDIR%\inf\spaceport.pnf.lockbit
from %WINDIR%\inf\stornvme.pnf to %WINDIR%\inf\stornvme.pnf.lockbit
from %WINDIR%\inf\storufs.pnf to %WINDIR%\inf\storufs.pnf.lockbit
from %WINDIR%\inf\swenum.pnf to %WINDIR%\inf\swenum.pnf.lockbit
from %WINDIR%\inf\tdibth.pnf to %WINDIR%\inf\tdibth.pnf.lockbit
from %WINDIR%\inf\termmou.pnf to %WINDIR%\inf\termmou.pnf.lockbit
from %WINDIR%\inf\tpm.pnf to %WINDIR%\inf\tpm.pnf.lockbit
from %WINDIR%\inf\tsgenericusbdriver.pnf to %WINDIR%\inf\tsgenericusbdriver.pnf.lockbit
from %WINDIR%\inf\tsusbhub.pnf to %WINDIR%\inf\tsusbhub.pnf.lockbit
from %WINDIR%\inf\uaspstor.pnf to %WINDIR%\inf\uaspstor.pnf.lockbit
from %WINDIR%\inf\ucmucsiacpiclient.pnf to %WINDIR%\inf\ucmucsiacpiclient.pnf.lockbit
from %WINDIR%\inf\uefi.pnf to %WINDIR%\inf\uefi.pnf.lockbit
from %WINDIR%\inf\ufxchipidea.pnf to %WINDIR%\inf\ufxchipidea.pnf.lockbit
from %WINDIR%\inf\ufxsynopsys.pnf to %WINDIR%\inf\ufxsynopsys.pnf.lockbit
from %WINDIR%\inf\umbus.pnf to %WINDIR%\inf\umbus.pnf.lockbit
from %WINDIR%\inf\umpass.pnf to %WINDIR%\inf\umpass.pnf.lockbit
from %WINDIR%\inf\urschipidea.pnf to %WINDIR%\inf\urschipidea.pnf.lockbit
from %WINDIR%\inf\urssynopsys.pnf to %WINDIR%\inf\urssynopsys.pnf.lockbit
from %WINDIR%\inf\usb.pnf to %WINDIR%\inf\usb.pnf.lockbit
from %WINDIR%\inf\usbaudio2.pnf to %WINDIR%\inf\usbaudio2.pnf.lockbit
from %WINDIR%\inf\usbcir.pnf to %WINDIR%\inf\usbcir.pnf.lockbit
from %WINDIR%\inf\usbhub3.pnf to %WINDIR%\inf\usbhub3.pnf.lockbit
from %WINDIR%\inf\usbport.pnf to %WINDIR%\inf\usbport.pnf.lockbit
from %WINDIR%\inf\usbprint.pnf to %WINDIR%\inf\usbprint.pnf.lockbit
from %WINDIR%\inf\usbser.pnf to %WINDIR%\inf\usbser.pnf.lockbit
from %WINDIR%\inf\usbstor.pnf to %WINDIR%\inf\usbstor.pnf.lockbit
from %WINDIR%\inf\usbxhci.pnf to %WINDIR%\inf\usbxhci.pnf.lockbit
from %WINDIR%\inf\vdrvroot.pnf to %WINDIR%\inf\vdrvroot.pnf.lockbit
from %WINDIR%\inf\virtdisk.pnf to %WINDIR%\inf\virtdisk.pnf.lockbit
from %WINDIR%\inf\volmgr.pnf to %WINDIR%\inf\volmgr.pnf.lockbit
from %WINDIR%\inf\volsnap.pnf to %WINDIR%\inf\volsnap.pnf.lockbit
from %WINDIR%\inf\volume.pnf to %WINDIR%\inf\volume.pnf.lockbit
from %WINDIR%\inf\vstxraid.pnf to %WINDIR%\inf\vstxraid.pnf.lockbit
from %WINDIR%\inf\wdmaudio.pnf to %WINDIR%\inf\wdmaudio.pnf.lockbit
from %WINDIR%\inf\wdma_usb.pnf to %WINDIR%\inf\wdma_usb.pnf.lockbit
from %WINDIR%\inf\wgencounter.pnf to %WINDIR%\inf\wgencounter.pnf.lockbit
from %WINDIR%\inf\windowstrustedrtproxy.pnf to %WINDIR%\inf\windowstrustedrtproxy.pnf.lockbit
from %WINDIR%\inf\winusb.pnf to %WINDIR%\inf\winusb.pnf.lockbit
from %WINDIR%\inf\wmiacpi.pnf to %WINDIR%\inf\wmiacpi.pnf.lockbit
from %WINDIR%\inf\wpdfs.pnf to %WINDIR%\inf\wpdfs.pnf.lockbit
from %WINDIR%\inf\wstorflt.pnf to %WINDIR%\inf\wstorflt.pnf.lockbit
from %WINDIR%\inf\wvid.pnf to %WINDIR%\inf\wvid.pnf.lockbit
from %WINDIR%\inf\wvmbus.pnf to %WINDIR%\inf\wvmbus.pnf.lockbit
from %WINDIR%\inf\wvmgid.pnf to %WINDIR%\inf\wvmgid.pnf.lockbit
from %WINDIR%\inf\wvpci.pnf to %WINDIR%\inf\wvpci.pnf.lockbit
from %WINDIR%\inf\xboxgip.pnf to %WINDIR%\inf\xboxgip.pnf.lockbit
from %WINDIR%\inf\xinputhid.pnf to %WINDIR%\inf\xinputhid.pnf.lockbit
from %WINDIR%\installer\1c795.msi to %WINDIR%\installer\1c795.msi.lockbit
from %WINDIR%\installer\20a0c.msi to %WINDIR%\installer\20a0c.msi.lockbit
from %WINDIR%\installer\20a14.msi to %WINDIR%\installer\20a14.msi.lockbit
from %WINDIR%\installer\413d6.msi to %WINDIR%\installer\413d6.msi.lockbit
from %WINDIR%\installer\413db.msi to %WINDIR%\installer\413db.msi.lockbit
from %WINDIR%\installer\413e0.msi to %WINDIR%\installer\413e0.msi.lockbit
from %WINDIR%\installer\413e5.msi to %WINDIR%\installer\413e5.msi.lockbit
from %WINDIR%\installer\413ea.msi to %WINDIR%\installer\413ea.msi.lockbit
from %WINDIR%\installer\413ef.msi to %WINDIR%\installer\413ef.msi.lockbit
from %WINDIR%\installer\413f4.msi to %WINDIR%\installer\413f4.msi.lockbit
from %WINDIR%\installer\413f9.msi to %WINDIR%\installer\413f9.msi.lockbit
from %WINDIR%\installer\41465.msi to %WINDIR%\installer\41465.msi.lockbit
from %WINDIR%\installer\4147b.msi to %WINDIR%\installer\4147b.msi.lockbit
from %WINDIR%\installer\4148b.msi to %WINDIR%\installer\4148b.msi.lockbit
from %WINDIR%\installer\414a1.msi to %WINDIR%\installer\414a1.msi.lockbit
from %WINDIR%\installer\b9e80.msi to %WINDIR%\installer\b9e80.msi.lockbit
from %WINDIR%\installer\b9e85.msi to %WINDIR%\installer\b9e85.msi.lockbit
from %WINDIR%\installer\b9ecf.msi to %WINDIR%\installer\b9ecf.msi.lockbit

Moves the following files

from %ProgramFiles%\desktop.ini to %ProgramFiles%\desktop.ini.lockbit
from %ProgramFiles(x86)%\desktop.ini to %ProgramFiles(x86)%\desktop.ini.lockbit
from %ProgramFiles%\mozilla firefox\accessible.tlb to %ProgramFiles%\mozilla firefox\accessible.tlb.lockbit
from %ProgramFiles%\mozilla firefox\accessiblehandler.dll to %ProgramFiles%\mozilla firefox\accessiblehandler.dll.lockbit
from %ProgramFiles%\mozilla firefox\accessiblemarshal.dll to %ProgramFiles%\mozilla firefox\accessiblemarshal.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l1-2-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-file-l2-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-localization-l1-2-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-processthreads-l1-1-1.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-synch-l1-2-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-core-timezone-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-conio-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-convert-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-environment-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-filesystem-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-heap-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-locale-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-math-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-multibyte-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-private-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-process-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-runtime-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-stdio-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-string-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-time-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll to %ProgramFiles%\mozilla firefox\api-ms-win-crt-utility-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla firefox\application.ini to %ProgramFiles%\mozilla firefox\application.ini.lockbit
from %ProgramFiles%\mozilla firefox\crashreporter.exe to %ProgramFiles%\mozilla firefox\crashreporter.exe.lockbit
from %ProgramFiles%\mozilla firefox\crashreporter.ini to %ProgramFiles%\mozilla firefox\crashreporter.ini.lockbit
from %ProgramFiles%\mozilla firefox\d3dcompiler_47.dll to %ProgramFiles%\mozilla firefox\d3dcompiler_47.dll.lockbit
from %ProgramFiles%\mozilla firefox\default-browser-agent.exe to %ProgramFiles%\mozilla firefox\default-browser-agent.exe.lockbit
from %ProgramFiles%\mozilla firefox\defaultagent.ini to %ProgramFiles%\mozilla firefox\defaultagent.ini.lockbit
from %ProgramFiles%\mozilla firefox\defaultagent_localized.ini to %ProgramFiles%\mozilla firefox\defaultagent_localized.ini.lockbit
from %ProgramFiles%\mozilla firefox\dependentlibs.list to %ProgramFiles%\mozilla firefox\dependentlibs.list.lockbit
from %ProgramFiles%\mozilla firefox\firefox.exe to %ProgramFiles%\mozilla firefox\firefox.exe.lockbit
from %ProgramFiles%\mozilla firefox\firefox.exe.sig to %ProgramFiles%\mozilla firefox\firefox.exe.sig.lockbit
from %ProgramFiles%\mozilla firefox\freebl3.dll to %ProgramFiles%\mozilla firefox\freebl3.dll.lockbit
from %ProgramFiles%\mozilla firefox\ia2marshal.dll to %ProgramFiles%\mozilla firefox\ia2marshal.dll.lockbit
from %ProgramFiles%\mozilla firefox\install.log to %ProgramFiles%\mozilla firefox\install.log.lockbit
from %ProgramFiles%\mozilla firefox\installation_telemetry.json to %ProgramFiles%\mozilla firefox\installation_telemetry.json.lockbit
from %ProgramFiles%\mozilla firefox\lgpllibs.dll to %ProgramFiles%\mozilla firefox\lgpllibs.dll.lockbit
from %ProgramFiles%\mozilla firefox\libegl.dll to %ProgramFiles%\mozilla firefox\libegl.dll.lockbit
from %ProgramFiles%\mozilla firefox\libglesv2.dll to %ProgramFiles%\mozilla firefox\libglesv2.dll.lockbit
from %ProgramFiles%\mozilla firefox\locale.ini to %ProgramFiles%\mozilla firefox\locale.ini.lockbit
from %ProgramFiles%\mozilla firefox\maintenanceservice.exe to %ProgramFiles%\mozilla firefox\maintenanceservice.exe.lockbit
from %ProgramFiles%\mozilla firefox\maintenanceservice_installer.exe to %ProgramFiles%\mozilla firefox\maintenanceservice_installer.exe.lockbit
from %ProgramFiles%\mozilla firefox\minidump-analyzer.exe to %ProgramFiles%\mozilla firefox\minidump-analyzer.exe.lockbit
from %ProgramFiles%\mozilla firefox\mozavcodec.dll to %ProgramFiles%\mozilla firefox\mozavcodec.dll.lockbit
from %ProgramFiles%\mozilla firefox\mozavutil.dll to %ProgramFiles%\mozilla firefox\mozavutil.dll.lockbit
from %ProgramFiles%\mozilla firefox\mozglue.dll to %ProgramFiles%\mozilla firefox\mozglue.dll.lockbit
from %ProgramFiles%\mozilla firefox\mozwer.dll to %ProgramFiles%\mozilla firefox\mozwer.dll.lockbit
from %ProgramFiles%\mozilla firefox\msvcp140.dll to %ProgramFiles%\mozilla firefox\msvcp140.dll.lockbit
from %ProgramFiles%\mozilla firefox\nss3.dll to %ProgramFiles%\mozilla firefox\nss3.dll.lockbit
from %ProgramFiles%\mozilla firefox\nssckbi.dll to %ProgramFiles%\mozilla firefox\nssckbi.dll.lockbit
from %ProgramFiles%\mozilla firefox\omni.ja to %ProgramFiles%\mozilla firefox\omni.ja.lockbit
from %ProgramFiles%\mozilla firefox\osclientcerts.dll to %ProgramFiles%\mozilla firefox\osclientcerts.dll.lockbit
from %ProgramFiles%\mozilla firefox\pingsender.exe to %ProgramFiles%\mozilla firefox\pingsender.exe.lockbit
from %ProgramFiles%\mozilla firefox\platform.ini to %ProgramFiles%\mozilla firefox\platform.ini.lockbit
from %ProgramFiles%\mozilla firefox\plugin-container.exe to %ProgramFiles%\mozilla firefox\plugin-container.exe.lockbit
from %ProgramFiles%\mozilla firefox\plugin-container.exe.sig to %ProgramFiles%\mozilla firefox\plugin-container.exe.sig.lockbit
from %ProgramFiles%\mozilla firefox\precomplete to %ProgramFiles%\mozilla firefox\precomplete.lockbit
from %ProgramFiles%\mozilla firefox\qipcap64.dll to %ProgramFiles%\mozilla firefox\qipcap64.dll.lockbit
from %ProgramFiles%\mozilla firefox\removed-files to %ProgramFiles%\mozilla firefox\removed-files.lockbit
from %ProgramFiles%\mozilla firefox\softokn3.dll to %ProgramFiles%\mozilla firefox\softokn3.dll.lockbit
from %ProgramFiles%\mozilla firefox\ucrtbase.dll to %ProgramFiles%\mozilla firefox\ucrtbase.dll.lockbit
from %ProgramFiles%\mozilla firefox\update-settings.ini to %ProgramFiles%\mozilla firefox\update-settings.ini.lockbit
from %ProgramFiles%\mozilla firefox\updater.exe to %ProgramFiles%\mozilla firefox\updater.exe.lockbit
from %ProgramFiles%\mozilla firefox\updater.ini to %ProgramFiles%\mozilla firefox\updater.ini.lockbit
from %ProgramFiles%\mozilla firefox\vcruntime140.dll to %ProgramFiles%\mozilla firefox\vcruntime140.dll.lockbit
from %ProgramFiles%\mozilla firefox\xul.dll to %ProgramFiles%\mozilla firefox\xul.dll.lockbit
from %ProgramFiles%\mozilla firefox\xul.dll.sig to %ProgramFiles%\mozilla firefox\xul.dll.sig.lockbit
from %ProgramFiles%\mozilla thunderbird\accessible.tlb to %ProgramFiles%\mozilla thunderbird\accessible.tlb.lockbit
from %ProgramFiles%\mozilla thunderbird\accessiblehandler.dll to %ProgramFiles%\mozilla thunderbird\accessiblehandler.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\accessiblemarshal.dll to %ProgramFiles%\mozilla thunderbird\accessiblemarshal.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l1-2-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l2-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-file-l2-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-localization-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-localization-l1-2-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-processthreads-l1-1-1.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-processthreads-l1-1-1.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-synch-l1-2-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-synch-l1-2-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-core-timezone-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-core-timezone-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-conio-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-conio-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-convert-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-convert-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-environment-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-environment-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-filesystem-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-filesystem-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-heap-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-heap-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-locale-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-locale-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-math-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-math-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-multibyte-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-multibyte-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-private-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-private-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-process-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-process-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-runtime-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-runtime-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-stdio-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-stdio-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-string-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-string-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-time-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-time-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-utility-l1-1-0.dll to %ProgramFiles%\mozilla thunderbird\api-ms-win-crt-utility-l1-1-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\application.ini to %ProgramFiles%\mozilla thunderbird\application.ini.lockbit
from %ProgramFiles%\mozilla thunderbird\crashreporter.exe to %ProgramFiles%\mozilla thunderbird\crashreporter.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\crashreporter.ini to %ProgramFiles%\mozilla thunderbird\crashreporter.ini.lockbit
from %ProgramFiles%\mozilla thunderbird\d3dcompiler_47.dll to %ProgramFiles%\mozilla thunderbird\d3dcompiler_47.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\dependentlibs.list to %ProgramFiles%\mozilla thunderbird\dependentlibs.list.lockbit
from %ProgramFiles%\mozilla thunderbird\freebl3.dll to %ProgramFiles%\mozilla thunderbird\freebl3.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\ia2marshal.dll to %ProgramFiles%\mozilla thunderbird\ia2marshal.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\install.log to %ProgramFiles%\mozilla thunderbird\install.log.lockbit
from %ProgramFiles%\mozilla thunderbird\ldap60.dll to %ProgramFiles%\mozilla thunderbird\ldap60.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\ldif60.dll to %ProgramFiles%\mozilla thunderbird\ldif60.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\lgpllibs.dll to %ProgramFiles%\mozilla thunderbird\lgpllibs.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\libegl.dll to %ProgramFiles%\mozilla thunderbird\libegl.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\libgcrypt-20.dll to %ProgramFiles%\mozilla thunderbird\libgcrypt-20.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\libglesv2.dll to %ProgramFiles%\mozilla thunderbird\libglesv2.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\libgpg-error6-0.dll to %ProgramFiles%\mozilla thunderbird\libgpg-error6-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\libotr-5.dll to %ProgramFiles%\mozilla thunderbird\libotr-5.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\libssp-0.dll to %ProgramFiles%\mozilla thunderbird\libssp-0.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\maintenanceservice.exe to %ProgramFiles%\mozilla thunderbird\maintenanceservice.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\maintenanceservice_installer.exe to %ProgramFiles%\mozilla thunderbird\maintenanceservice_installer.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\mapiproxy.dll to %ProgramFiles%\mozilla thunderbird\mapiproxy.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\mapiproxy_inuse.dll to %ProgramFiles%\mozilla thunderbird\mapiproxy_inuse.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\minidump-analyzer.exe to %ProgramFiles%\mozilla thunderbird\minidump-analyzer.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\mozglue.dll to %ProgramFiles%\mozilla thunderbird\mozglue.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\mozmapi32.dll to %ProgramFiles%\mozilla thunderbird\mozmapi32.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\mozmapi32_inuse.dll to %ProgramFiles%\mozilla thunderbird\mozmapi32_inuse.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\msvcp140.dll to %ProgramFiles%\mozilla thunderbird\msvcp140.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\nss3.dll to %ProgramFiles%\mozilla thunderbird\nss3.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\nssckbi.dll to %ProgramFiles%\mozilla thunderbird\nssckbi.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\omni.ja to %ProgramFiles%\mozilla thunderbird\omni.ja.lockbit
from %ProgramFiles%\mozilla thunderbird\osclientcerts.dll to %ProgramFiles%\mozilla thunderbird\osclientcerts.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\pingsender.exe to %ProgramFiles%\mozilla thunderbird\pingsender.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\platform.ini to %ProgramFiles%\mozilla thunderbird\platform.ini.lockbit
from %ProgramFiles%\mozilla thunderbird\plugin-container.exe to %ProgramFiles%\mozilla thunderbird\plugin-container.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\plugin-hang-ui.exe to %ProgramFiles%\mozilla thunderbird\plugin-hang-ui.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\precomplete to %ProgramFiles%\mozilla thunderbird\precomplete.lockbit
from %ProgramFiles%\mozilla thunderbird\prldap60.dll to %ProgramFiles%\mozilla thunderbird\prldap60.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\qipcap64.dll to %ProgramFiles%\mozilla thunderbird\qipcap64.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\removed-files to %ProgramFiles%\mozilla thunderbird\removed-files.lockbit
from %ProgramFiles%\mozilla thunderbird\rnp.dll to %ProgramFiles%\mozilla thunderbird\rnp.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\softokn3.dll to %ProgramFiles%\mozilla thunderbird\softokn3.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\thunderbird.exe to %ProgramFiles%\mozilla thunderbird\thunderbird.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\ucrtbase.dll to %ProgramFiles%\mozilla thunderbird\ucrtbase.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\update-settings.ini to %ProgramFiles%\mozilla thunderbird\update-settings.ini.lockbit
from %ProgramFiles%\mozilla thunderbird\updater.exe to %ProgramFiles%\mozilla thunderbird\updater.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\updater.ini to %ProgramFiles%\mozilla thunderbird\updater.ini.lockbit
from %ProgramFiles%\mozilla thunderbird\vcruntime140.dll to %ProgramFiles%\mozilla thunderbird\vcruntime140.dll.lockbit
from %ProgramFiles%\mozilla thunderbird\wsenable.exe to %ProgramFiles%\mozilla thunderbird\wsenable.exe.lockbit
from %ProgramFiles%\mozilla thunderbird\xul.dll to %ProgramFiles%\mozilla thunderbird\xul.dll.lockbit
from %ProgramFiles%\winrar\7zxa.dll to %ProgramFiles%\winrar\7zxa.dll.lockbit
from %ProgramFiles%\winrar\ace32loader.exe to %ProgramFiles%\winrar\ace32loader.exe.lockbit
from %ProgramFiles%\winrar\default.sfx to %ProgramFiles%\winrar\default.sfx.lockbit
from %ProgramFiles%\winrar\default64.sfx to %ProgramFiles%\winrar\default64.sfx.lockbit
from %ProgramFiles%\winrar\descript.ion to %ProgramFiles%\winrar\descript.ion.lockbit
from %ProgramFiles%\winrar\license.txt to %ProgramFiles%\winrar\license.txt.lockbit
from %ProgramFiles%\winrar\rar.exe to %ProgramFiles%\winrar\rar.exe.lockbit
from %ProgramFiles%\winrar\rar.txt to %ProgramFiles%\winrar\rar.txt.lockbit
from %ProgramFiles%\winrar\rarext.dll to %ProgramFiles%\winrar\rarext.dll.lockbit
from %ProgramFiles%\winrar\rarext32.dll to %ProgramFiles%\winrar\rarext32.dll.lockbit
from %ProgramFiles%\winrar\rarfiles.lst to %ProgramFiles%\winrar\rarfiles.lst.lockbit
from %ProgramFiles%\winrar\unacev2.dll to %ProgramFiles%\winrar\unacev2.dll.lockbit
from %ProgramFiles%\winrar\uninstall.exe to %ProgramFiles%\winrar\uninstall.exe.lockbit
from %ProgramFiles%\winrar\uninstall.lst to %ProgramFiles%\winrar\uninstall.lst.lockbit
from %ProgramFiles%\winrar\unrar.exe to %ProgramFiles%\winrar\unrar.exe.lockbit
from %ProgramFiles%\winrar\whatsnew.txt to %ProgramFiles%\winrar\whatsnew.txt.lockbit
from %ProgramFiles%\winrar\wincon.sfx to %ProgramFiles%\winrar\wincon.sfx.lockbit
from %ProgramFiles%\winrar\wincon64.sfx to %ProgramFiles%\winrar\wincon64.sfx.lockbit
from %ProgramFiles%\winrar\winrar.chm to %ProgramFiles%\winrar\winrar.chm.lockbit
from %ProgramFiles%\winrar\winrar.exe to %ProgramFiles%\winrar\winrar.exe.lockbit
from %ProgramFiles%\winrar\zip.sfx to %ProgramFiles%\winrar\zip.sfx.lockbit
from %ProgramFiles%\winrar\zip64.sfx to %ProgramFiles%\winrar\zip64.sfx.lockbit
from %ProgramFiles(x86)%\opera\installer_prefs.json to %ProgramFiles(x86)%\opera\installer_prefs.json.lockbit
from %ProgramFiles(x86)%\opera\launcher.exe to %ProgramFiles(x86)%\opera\launcher.exe.lockbit
from %ProgramFiles(x86)%\opera\resources.pri to %ProgramFiles(x86)%\opera\resources.pri.lockbit
from %ProgramFiles(x86)%\steam\steam.cfg to %ProgramFiles(x86)%\steam\steam.cfg.lockbit
from %ProgramFiles(x86)%\steam\steam.exe to %ProgramFiles(x86)%\steam\steam.exe.lockbit
from %ProgramFiles(x86)%\steam\uninstall.exe to %ProgramFiles(x86)%\steam\uninstall.exe.lockbit

Modifies the following files

D:\$recycle.bin\s-1-5-21-4226853953-3309226944-3078887307-1000\desktop.ini
<Drive name for removable media>:\delete.avi
<Drive name for removable media>:\000814251_video_01.avi
%ProgramFiles%\desktop.ini
%ProgramFiles(x86)%\desktop.ini
<Drive name for removable media>:\join.avi
<Drive name for removable media>:\correct.avi
<Drive name for removable media>:\archer.avi
<Drive name for removable media>:\dial.bmp
<Drive name for removable media>:\dialmap.bmp
<Drive name for removable media>:\dashborder_96.bmp
<Drive name for removable media>:\dashborder_144.bmp
<Drive name for removable media>:\dashborder_120.bmp
<Drive name for removable media>:\sdksampleunprivdeveloper.cer
<Drive name for removable media>:\contoso_1.cer
<Drive name for removable media>:\contosoroot_1.cer
<Drive name for removable media>:\testcertificate.cer
<Drive name for removable media>:\february_catalogue__2015.doc
<Drive name for removable media>:\ovp25012015.doc
<Drive name for removable media>:\applicantform_en.doc
C:\users\desktop.ini
C:\$recycle.bin\s-1-5-21-4226853953-3309226944-3078887307-1000\desktop.ini
%ProgramFiles%\mozilla firefox\accessible.tlb
%ProgramFiles%\mozilla firefox\application.ini
%ProgramFiles%\mozilla firefox\crashreporter.ini
%ProgramFiles%\mozilla firefox\defaultagent.ini
%ProgramFiles%\mozilla firefox\defaultagent_localized.ini
%ProgramFiles%\mozilla firefox\dependentlibs.list

Modifies multiple files.

Modifies user data files (Trojan.Encoder).

Changes user data files extensions (Trojan.Encoder).

Network activity

Connects to

'<LOCALNET>..37.0':445
'<LOCALNET>..37.1':445
'<LOCALNET>..37.2':445
'<LOCALNET>..37.3':445
'<LOCALNET>..37.4':445
'<LOCALNET>..37.5':445
'<LOCALNET>..37.6':445
'<LOCALNET>..37.7':445
'<LOCALNET>..37.8':445
'<LOCALNET>..37.9':445
'<LOCALNET>..37.10':445
'<LOCALNET>..37.11':445
'<LOCALNET>..37.12':445
'<LOCALNET>..37.13':445
'<LOCALNET>..37.14':445
'<LOCALNET>..37.15':445
'<LOCALNET>..37.16':445
'<LOCALNET>..37.17':445
'<LOCALNET>..37.18':445
'<LOCALNET>..37.19':445
'<LOCALNET>..37.20':445
'<LOCALNET>..37.21':445
'<LOCALNET>..37.22':445
'<LOCALNET>..37.23':445
'<LOCALNET>..37.24':445
'<LOCALNET>..37.25':445
'<LOCALNET>..37.26':445
'<LOCALNET>..37.27':445
'<LOCALNET>..37.28':445
'<LOCALNET>..37.29':445
'<LOCALNET>..37.30':445
'<LOCALNET>..37.31':445
'<LOCALNET>..37.32':445
'<LOCALNET>..37.33':445
'<LOCALNET>..37.34':445
'<LOCALNET>..37.35':445
'<LOCALNET>..37.36':445
'<LOCALNET>..37.37':445
'<LOCALNET>..37.38':445
'<LOCALNET>..37.39':445
'<LOCALNET>..37.40':445
'<LOCALNET>..37.41':445
'<LOCALNET>..37.42':445
'<LOCALNET>..37.43':445
'<LOCALNET>..37.44':445
'<LOCALNET>..37.45':445
'<LOCALNET>..37.46':445
'<LOCALNET>..37.47':445
'<LOCALNET>..37.48':445
'<LOCALNET>..37.49':445
'<LOCALNET>..37.50':445
'<LOCALNET>..37.51':445
'<LOCALNET>..37.52':445
'<LOCALNET>..37.53':445
'<LOCALNET>..37.54':445
'<LOCALNET>..37.55':445
'<LOCALNET>..37.56':445
'<LOCALNET>..37.57':445
'<LOCALNET>..37.58':445
'<LOCALNET>..37.59':445
'<LOCALNET>..37.60':445
'<LOCALNET>..37.61':445
'<LOCALNET>..37.62':445
'<LOCALNET>..37.63':445
'<LOCALNET>..37.64':445
'<LOCALNET>..37.65':445
'<LOCALNET>..37.66':445
'<LOCALNET>..37.67':445
'<LOCALNET>..37.68':445
'<LOCALNET>..37.69':445
'<LOCALNET>..37.70':445
'<LOCALNET>..37.71':445
'<LOCALNET>..37.72':445
'<LOCALNET>..37.73':445
'<LOCALNET>..37.74':445
'<LOCALNET>..37.75':445
'<LOCALNET>..37.76':445
'<LOCALNET>..37.77':445
'<LOCALNET>..37.78':445
'<LOCALNET>..37.79':445
'<LOCALNET>..37.80':445
'<LOCALNET>..37.81':445
'<LOCALNET>..37.82':445
'<LOCALNET>..37.83':445
'<LOCALNET>..37.84':445
'<LOCALNET>..37.85':445
'<LOCALNET>..37.86':445
'<LOCALNET>..37.87':445
'<LOCALNET>..37.88':445
'<LOCALNET>..37.89':445
'<LOCALNET>..37.90':445
'<LOCALNET>..37.91':445
'<LOCALNET>..37.92':445
'<LOCALNET>..37.93':445
'<LOCALNET>..37.94':445
'<LOCALNET>..37.95':445
'<LOCALNET>..37.96':445
'<LOCALNET>..37.97':445
'<LOCALNET>..37.98':445
'<LOCALNET>..37.99':445
'<LOCALNET>..37.100':445
'<LOCALNET>..37.101':445
'<LOCALNET>..37.102':445
'<LOCALNET>..37.103':445
'<LOCALNET>..37.104':445
'<LOCALNET>..37.105':445
'<LOCALNET>..37.106':445
'<LOCALNET>..37.107':445
'<LOCALNET>..37.108':445
'<LOCALNET>..37.109':445
'<LOCALNET>..37.110':445
'<LOCALNET>..37.111':445
'<LOCALNET>..37.112':445
'<LOCALNET>..37.113':445
'<LOCALNET>..37.114':445
'<LOCALNET>..37.115':445
'<LOCALNET>..37.116':445
'<LOCALNET>..37.117':445
'<LOCALNET>..37.118':445
'<LOCALNET>..37.119':445
'<LOCALNET>..37.120':445
'<LOCALNET>..37.121':445
'<LOCALNET>..37.122':445
'<LOCALNET>..37.123':445
'<LOCALNET>..37.124':445
'<LOCALNET>..37.125':445
'<LOCALNET>..37.126':445
'<LOCALNET>..37.127':445
'<LOCALNET>..37.128':445
'<LOCALNET>..37.129':445
'<LOCALNET>..37.130':445
'<LOCALNET>..37.131':445
'<LOCALNET>..37.132':445
'<LOCALNET>..37.133':445
'<LOCALNET>..37.134':445
'<LOCALNET>..37.135':445
'<LOCALNET>..37.136':445
'<LOCALNET>..37.137':445
'<LOCALNET>..37.138':445
'<LOCALNET>..37.139':445
'<LOCALNET>..37.140':445
'<LOCALNET>..37.141':445
'<LOCALNET>..37.142':445
'<LOCALNET>..37.143':445
'<LOCALNET>..37.144':445
'<LOCALNET>..37.145':445
'<LOCALNET>..37.146':445
'<LOCALNET>..37.147':445
'<LOCALNET>..37.148':445
'<LOCALNET>..37.149':445
'<LOCALNET>..37.150':445
'<LOCALNET>..37.151':445
'<LOCALNET>..37.152':445
'<LOCALNET>..37.153':445
'<LOCALNET>..37.154':445
'<LOCALNET>..37.155':445
'<LOCALNET>..37.156':445
'<LOCALNET>..37.157':445
'<LOCALNET>..37.158':445
'<LOCALNET>..37.159':445
'<LOCALNET>..37.160':445
'<LOCALNET>..37.161':445
'<LOCALNET>..37.162':445
'<LOCALNET>..37.163':445
'<LOCALNET>..37.164':445
'<LOCALNET>..37.165':445
'<LOCALNET>..37.166':445
'<LOCALNET>..37.167':445
'<LOCALNET>..37.168':445
'<LOCALNET>..37.169':445
'<LOCALNET>..37.170':445
'<LOCALNET>..37.171':445
'<LOCALNET>..37.172':445
'<LOCALNET>..37.173':445
'<LOCALNET>..37.174':445
'<LOCALNET>..37.175':445
'<LOCALNET>..37.176':445
'<LOCALNET>..37.177':445
'<LOCALNET>..37.178':445
'<LOCALNET>..37.179':445
'<LOCALNET>..37.180':445
'<LOCALNET>..37.181':445
'<LOCALNET>..37.182':445
'<LOCALNET>..37.183':445
'<LOCALNET>..37.184':445
'<LOCALNET>..37.185':445
'<LOCALNET>..37.186':445
'<LOCALNET>..37.187':445
'<LOCALNET>..37.188':445
'<LOCALNET>..37.189':445
'<LOCALNET>..37.190':445
'<LOCALNET>..37.191':445
'<LOCALNET>..37.192':445
'<LOCALNET>..37.193':445
'<LOCALNET>..37.194':445
'<LOCALNET>..37.195':445
'<LOCALNET>..37.196':445
'<LOCALNET>..37.197':445
'<LOCALNET>..37.198':445
'<LOCALNET>..37.199':445
'<LOCALNET>..37.200':445
'<LOCALNET>..37.201':445
'<LOCALNET>..37.202':445
'<LOCALNET>..37.203':445
'<LOCALNET>..37.204':445
'<LOCALNET>..37.205':445
'<LOCALNET>..37.206':445
'<LOCALNET>..37.207':445
'<LOCALNET>..37.208':445
'<LOCALNET>..37.209':445
'<LOCALNET>..37.210':445
'<LOCALNET>..37.211':445
'<LOCALNET>..37.212':445
'<LOCALNET>..37.213':445
'<LOCALNET>..37.214':445
'<LOCALNET>..37.215':445
'<LOCALNET>..37.216':445
'<LOCALNET>..37.217':445
'<LOCALNET>..37.218':445
'<LOCALNET>..37.219':445
'<LOCALNET>..37.220':445
'<LOCALNET>..37.221':445
'<LOCALNET>..37.222':445
'<LOCALNET>..37.223':445
'<LOCALNET>..37.224':445
'<LOCALNET>..37.225':445
'<LOCALNET>..37.226':445
'<LOCALNET>..37.227':445
'<LOCALNET>..37.228':445
'<LOCALNET>..37.229':445
'<LOCALNET>..37.230':445
'<LOCALNET>..37.231':445
'<LOCALNET>..37.232':445
'<LOCALNET>..37.233':445
'<LOCALNET>..37.234':445
'<LOCALNET>..37.235':445
'<LOCALNET>..37.236':445
'<LOCALNET>..37.237':445
'<LOCALNET>..37.238':445
'<LOCALNET>..37.239':445
'<LOCALNET>..37.240':445
'<LOCALNET>..37.241':445
'<LOCALNET>..37.242':445
'<LOCALNET>..37.243':445
'<LOCALNET>..37.244':445
'<LOCALNET>..37.245':445
'<LOCALNET>..37.246':445
'<LOCALNET>..37.247':445
'<LOCALNET>..37.248':445
'<LOCALNET>..37.249':445
'<LOCALNET>..37.250':445
'<LOCALNET>..37.251':445
'<LOCALNET>..37.252':445
'<LOCALNET>..37.253':445
'<LOCALNET>..37.254':445

技术

术语

教育培训

误区

Technical Information

Curing recommendations

Free trial