Library
My library

+ Add to library

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

Your tickets

Profile

Trojan.KillFiles.60132

Added to the Dr.Web virus database: 2016-11-01

Virus description added:

Technical Information

To ensure autorun and distribution:
Substitutes the following executable system files:
  • <SYSTEM32>\kbdinmal.dll with <SYSTEM32>\SETFA.tmp
  • <SYSTEM32>\kbdinben.dll with <SYSTEM32>\SETF7.tmp
  • <SYSTEM32>\kbdinbe1.dll with <SYSTEM32>\SETF4.tmp
Malicious functions:
Executes the following:
  • '<SYSTEM32>\rundll32.exe' advpack.dll,LaunchINFSection Unicode_Fonts.inf,DefaultInstall,10
  • '%WINDIR%\regedit.exe' /s Smoothing.reg
  • '<SYSTEM32>\cmd.exe' /c ""%TEMP%\7ZipSfx.000\Add All.bat" "
  • '<SYSTEM32>\rundll32.exe' advpack.dll,LaunchINFSection Complex_Fonts.inf,LANGUAGE_COLLECTION.COMPLEX.INSTALL,10
Modifies file system:
Creates the following files:
  • %WINDIR%\Fonts\SETAE.tmp
  • %WINDIR%\Fonts\SETAD.tmp
  • %WINDIR%\Fonts\SETAF.tmp
  • %WINDIR%\Fonts\SETB1.tmp
  • %WINDIR%\Fonts\SETB0.tmp
  • %WINDIR%\Fonts\SETAC.tmp
  • %WINDIR%\Fonts\SETA8.tmp
  • %WINDIR%\Fonts\SETA7.tmp
  • %WINDIR%\Fonts\SETA9.tmp
  • %WINDIR%\Temp\OLDAB.tmp
  • %WINDIR%\LastGood\TMPAA.tmp
  • %WINDIR%\Fonts\SETB2.tmp
  • %WINDIR%\Help\SETBA.tmp
  • %WINDIR%\msagent\intl\SETB9.tmp
  • <SYSTEM32>\SETBB.tmp
  • %WINDIR%\LastGood\TMPBC.tmp
  • <SYSTEM32>\dllcache\dosapp.fon.new
  • %WINDIR%\Fonts\SETB8.tmp
  • %WINDIR%\Fonts\SETB4.tmp
  • %WINDIR%\Fonts\SETB3.tmp
  • %WINDIR%\Fonts\SETB5.tmp
  • %WINDIR%\Fonts\SETB7.tmp
  • %WINDIR%\Fonts\SETB6.tmp
  • <SYSTEM32>\SET9B.tmp
  • <SYSTEM32>\SET9A.tmp
  • <SYSTEM32>\SET9C.tmp
  • <SYSTEM32>\dllcache\c_862.nls.new
  • <SYSTEM32>\SET9D.tmp
  • <SYSTEM32>\SET99.tmp
  • <SYSTEM32>\SET95.tmp
  • <SYSTEM32>\SET94.tmp
  • <SYSTEM32>\SET96.tmp
  • <SYSTEM32>\SET98.tmp
  • <SYSTEM32>\SET97.tmp
  • <SYSTEM32>\SET9E.tmp
  • %WINDIR%\Fonts\SETA3.tmp
  • %WINDIR%\Fonts\SETA2.tmp
  • %WINDIR%\Fonts\SETA4.tmp
  • %WINDIR%\Fonts\SETA6.tmp
  • %WINDIR%\Fonts\SETA5.tmp
  • <SYSTEM32>\SETA1.tmp
  • <SYSTEM32>\SET9F.tmp
  • <SYSTEM32>\dllcache\c_10005.nls.new
  • <SYSTEM32>\dllcache\c_28598.nls.new
  • <SYSTEM32>\SETA0.tmp
  • <SYSTEM32>\dllcache\kbdheb.dll.new
  • <SYSTEM32>\SETD5.tmp
  • <SYSTEM32>\dllcache\c_28596.nls.new
  • <SYSTEM32>\dllcache\kbda1.dll.new
  • <SYSTEM32>\dllcache\kbda2.dll.new
  • <SYSTEM32>\SETD6.tmp
  • <SYSTEM32>\SETD4.tmp
  • <SYSTEM32>\dllcache\c_708.nls.new
  • <SYSTEM32>\SETD2.tmp
  • <SYSTEM32>\SETD3.tmp
  • <SYSTEM32>\dllcache\c_10004.nls.new
  • <SYSTEM32>\dllcache\c_864.nls.new
  • %WINDIR%\LastGood\TMPD7.tmp
  • <SYSTEM32>\dllcache\kbdurdu.dll.new
  • %WINDIR%\Temp\OLDDB.tmp
  • %WINDIR%\Fonts\SETDC.tmp
  • %WINDIR%\LastGood\TMPDD.tmp
  • <SYSTEM32>\dllcache\kbddiv1.dll.new
  • %WINDIR%\LastGood\TMPDA.tmp
  • %WINDIR%\Temp\OLDD8.tmp
  • <SYSTEM32>\dllcache\kbda3.dll.new
  • %WINDIR%\Fonts\SETD9.tmp
  • <SYSTEM32>\dllcache\kbdfa.dll.new
  • <SYSTEM32>\dllcache\kbdusa.dll.new
  • %WINDIR%\Fonts\SETC4.tmp
  • %WINDIR%\Temp\OLDC3.tmp
  • %WINDIR%\LastGood\TMPC5.tmp
  • %WINDIR%\Fonts\SETC7.tmp
  • %WINDIR%\Temp\OLDC6.tmp
  • %WINDIR%\LastGood\TMPC2.tmp
  • %WINDIR%\Fonts\SETBE.tmp
  • %WINDIR%\Temp\OLDBD.tmp
  • %WINDIR%\LastGood\TMPBF.tmp
  • %WINDIR%\Fonts\SETC1.tmp
  • %WINDIR%\Temp\OLDC0.tmp
  • %WINDIR%\LastGood\TMPC8.tmp
  • <SYSTEM32>\SETD0.tmp
  • <SYSTEM32>\SETCF.tmp
  • %WINDIR%\msagent\intl\agt040d.dll.new
  • <SYSTEM32>\dllcache\c_720.nls.new
  • <SYSTEM32>\SETD1.tmp
  • <SYSTEM32>\SETCE.tmp
  • %WINDIR%\Fonts\SETCA.tmp
  • %WINDIR%\Temp\OLDC9.tmp
  • %WINDIR%\LastGood\TMPCB.tmp
  • %WINDIR%\Fonts\SETCD.tmp
  • %WINDIR%\Temp\OLDCC.tmp
  • %WINDIR%\Temp\OLD56.tmp
  • %WINDIR%\LastGood\TMP55.tmp
  • %WINDIR%\Fonts\SET57.tmp
  • %WINDIR%\Temp\OLD59.tmp
  • %WINDIR%\LastGood\TMP58.tmp
  • %WINDIR%\Fonts\SET54.tmp
  • %WINDIR%\Temp\OLD50.tmp
  • %WINDIR%\LastGood\TMP4F.tmp
  • %WINDIR%\Fonts\SET51.tmp
  • %WINDIR%\Temp\OLD53.tmp
  • %WINDIR%\LastGood\TMP52.tmp
  • %WINDIR%\Fonts\SET5A.tmp
  • %WINDIR%\Temp\OLD62.tmp
  • %WINDIR%\LastGood\TMP61.tmp
  • %WINDIR%\Fonts\SET63.tmp
  • %WINDIR%\Temp\OLD65.tmp
  • %WINDIR%\LastGood\TMP64.tmp
  • %WINDIR%\Fonts\SET60.tmp
  • %WINDIR%\Temp\OLD5C.tmp
  • %WINDIR%\LastGood\TMP5B.tmp
  • %WINDIR%\Fonts\SET5D.tmp
  • %WINDIR%\Temp\OLD5F.tmp
  • %WINDIR%\LastGood\TMP5E.tmp
  • %WINDIR%\Temp\OLD3F.tmp
  • %WINDIR%\LastGood\TMP3E.tmp
  • %WINDIR%\Fonts\SET40.tmp
  • %WINDIR%\Fonts\SET42.tmp
  • %WINDIR%\Fonts\SET41.tmp
  • %WINDIR%\Fonts\SET3D.tmp
  • %WINDIR%\Fonts\SET39.tmp
  • %WINDIR%\Fonts\SET38.tmp
  • %WINDIR%\Fonts\SET3A.tmp
  • %WINDIR%\Fonts\SET3C.tmp
  • %WINDIR%\Fonts\SET3B.tmp
  • %WINDIR%\LastGood\TMP43.tmp
  • %WINDIR%\Fonts\SET4B.tmp
  • %WINDIR%\Temp\OLD4A.tmp
  • %WINDIR%\LastGood\TMP4C.tmp
  • %WINDIR%\Fonts\SET4E.tmp
  • %WINDIR%\Temp\OLD4D.tmp
  • %WINDIR%\LastGood\TMP49.tmp
  • %WINDIR%\Fonts\SET45.tmp
  • %WINDIR%\Temp\OLD44.tmp
  • %WINDIR%\LastGood\TMP46.tmp
  • %WINDIR%\Fonts\SET48.tmp
  • %WINDIR%\Temp\OLD47.tmp
  • %WINDIR%\Fonts\SET84.tmp
  • %WINDIR%\Fonts\SET83.tmp
  • %WINDIR%\Fonts\SET85.tmp
  • %WINDIR%\Temp\OLD87.tmp
  • %WINDIR%\LastGood\TMP86.tmp
  • %WINDIR%\Fonts\SET82.tmp
  • %WINDIR%\Fonts\SET7E.tmp
  • %WINDIR%\Fonts\SET7D.tmp
  • %WINDIR%\Fonts\SET7F.tmp
  • %WINDIR%\Fonts\SET81.tmp
  • %WINDIR%\Fonts\SET80.tmp
  • %WINDIR%\Fonts\SET88.tmp
  • %WINDIR%\Fonts\SET90.tmp
  • %WINDIR%\Fonts\SET8F.tmp
  • %WINDIR%\msagent\intl\SET91.tmp
  • <SYSTEM32>\SET93.tmp
  • %WINDIR%\Help\SET92.tmp
  • %WINDIR%\Fonts\SET8E.tmp
  • %WINDIR%\Fonts\SET8A.tmp
  • %WINDIR%\Fonts\SET89.tmp
  • %WINDIR%\Fonts\SET8B.tmp
  • %WINDIR%\Fonts\SET8D.tmp
  • %WINDIR%\Fonts\SET8C.tmp
  • %WINDIR%\Fonts\SET6D.tmp
  • %WINDIR%\Fonts\SET6C.tmp
  • <SYSTEM32>\SET6E.tmp
  • %WINDIR%\LastGood\TMP70.tmp
  • <SYSTEM32>\SET6F.tmp
  • %WINDIR%\Fonts\SET6B.tmp
  • %WINDIR%\Fonts\SET67.tmp
  • %WINDIR%\Fonts\SET66.tmp
  • %WINDIR%\Fonts\SET68.tmp
  • %WINDIR%\Temp\OLD6A.tmp
  • %WINDIR%\LastGood\TMP69.tmp
  • %WINDIR%\Temp\OLD71.tmp
  • %WINDIR%\Fonts\SET79.tmp
  • %WINDIR%\Fonts\SET78.tmp
  • %WINDIR%\Fonts\SET7A.tmp
  • %WINDIR%\Fonts\SET7C.tmp
  • %WINDIR%\Fonts\SET7B.tmp
  • %WINDIR%\Fonts\SET77.tmp
  • <SYSTEM32>\SET73.tmp
  • <SYSTEM32>\SET72.tmp
  • %WINDIR%\Fonts\SET74.tmp
  • %WINDIR%\Fonts\SET76.tmp
  • %WINDIR%\Fonts\SET75.tmp
  • <SYSTEM32>\dllcache\kbddiv2.dll.new
  • %WINDIR%\Fonts\SET13F.tmp
  • %WINDIR%\Fonts\SET13E.tmp
  • %WINDIR%\Fonts\SET140.tmp
  • %WINDIR%\Fonts\SET142.tmp
  • %WINDIR%\Fonts\SET141.tmp
  • %WINDIR%\Fonts\SET13D.tmp
  • %WINDIR%\Fonts\SET139.tmp
  • %WINDIR%\Fonts\SET138.tmp
  • %WINDIR%\Fonts\SET13A.tmp
  • %WINDIR%\Fonts\SET13C.tmp
  • %WINDIR%\Fonts\SET13B.tmp
  • %WINDIR%\Fonts\SET143.tmp
  • %WINDIR%\Fonts\SET14B.tmp
  • %WINDIR%\Fonts\SET14A.tmp
  • %WINDIR%\Fonts\SET14C.tmp
  • %WINDIR%\Fonts\SET14E.tmp
  • %WINDIR%\Fonts\SET14D.tmp
  • %WINDIR%\Fonts\SET149.tmp
  • %WINDIR%\Fonts\SET145.tmp
  • %WINDIR%\Fonts\SET144.tmp
  • %WINDIR%\Fonts\SET146.tmp
  • %WINDIR%\Fonts\SET148.tmp
  • %WINDIR%\Fonts\SET147.tmp
  • %WINDIR%\Fonts\SET128.tmp
  • %WINDIR%\Fonts\SET127.tmp
  • %WINDIR%\Fonts\SET129.tmp
  • %WINDIR%\Fonts\SET12B.tmp
  • %WINDIR%\Fonts\SET12A.tmp
  • %WINDIR%\Fonts\SET126.tmp
  • %WINDIR%\Fonts\SET122.tmp
  • %WINDIR%\Fonts\SET121.tmp
  • %WINDIR%\Fonts\SET123.tmp
  • %WINDIR%\Fonts\SET125.tmp
  • %WINDIR%\Fonts\SET124.tmp
  • %WINDIR%\Fonts\SET12C.tmp
  • %WINDIR%\Fonts\SET134.tmp
  • %WINDIR%\Fonts\SET133.tmp
  • %WINDIR%\Fonts\SET135.tmp
  • %WINDIR%\Fonts\SET137.tmp
  • %WINDIR%\Fonts\SET136.tmp
  • %WINDIR%\Fonts\SET132.tmp
  • %WINDIR%\Fonts\SET12E.tmp
  • %WINDIR%\Fonts\SET12D.tmp
  • %WINDIR%\Fonts\SET12F.tmp
  • %WINDIR%\Fonts\SET131.tmp
  • %WINDIR%\Fonts\SET130.tmp
  • %WINDIR%\Fonts\SET16D.tmp
  • %WINDIR%\Fonts\SET16C.tmp
  • %WINDIR%\Fonts\SET16E.tmp
  • %WINDIR%\Fonts\SET170.tmp
  • %WINDIR%\Fonts\SET16F.tmp
  • %WINDIR%\Fonts\SET16B.tmp
  • %WINDIR%\Fonts\SET167.tmp
  • %WINDIR%\Fonts\SET166.tmp
  • %WINDIR%\Fonts\SET168.tmp
  • %WINDIR%\Fonts\SET16A.tmp
  • %WINDIR%\Fonts\SET169.tmp
  • %WINDIR%\Fonts\SET171.tmp
  • %WINDIR%\Fonts\SET179.tmp
  • %WINDIR%\Fonts\SET178.tmp
  • %WINDIR%\Fonts\SET17A.tmp
  • %WINDIR%\Fonts\SET17C.tmp
  • %WINDIR%\Fonts\SET17B.tmp
  • %WINDIR%\Fonts\SET177.tmp
  • %WINDIR%\Fonts\SET173.tmp
  • %WINDIR%\Fonts\SET172.tmp
  • %WINDIR%\Fonts\SET174.tmp
  • %WINDIR%\Fonts\SET176.tmp
  • %WINDIR%\Fonts\SET175.tmp
  • %WINDIR%\Fonts\SET156.tmp
  • %WINDIR%\Fonts\SET155.tmp
  • %WINDIR%\Fonts\SET157.tmp
  • %WINDIR%\Fonts\SET159.tmp
  • %WINDIR%\Fonts\SET158.tmp
  • %WINDIR%\Fonts\SET154.tmp
  • %WINDIR%\Fonts\SET150.tmp
  • %WINDIR%\Fonts\SET14F.tmp
  • %WINDIR%\Fonts\SET151.tmp
  • %WINDIR%\Fonts\SET153.tmp
  • %WINDIR%\Fonts\SET152.tmp
  • %WINDIR%\Fonts\SET15A.tmp
  • %WINDIR%\Fonts\SET162.tmp
  • %WINDIR%\Fonts\SET161.tmp
  • %WINDIR%\Fonts\SET163.tmp
  • %WINDIR%\Fonts\SET165.tmp
  • %WINDIR%\Fonts\SET164.tmp
  • %WINDIR%\Fonts\SET160.tmp
  • %WINDIR%\Fonts\SET15C.tmp
  • %WINDIR%\Fonts\SET15B.tmp
  • %WINDIR%\Fonts\SET15D.tmp
  • %WINDIR%\Fonts\SET15F.tmp
  • %WINDIR%\Fonts\SET15E.tmp
  • %WINDIR%\LastGood\TMPF8.tmp
  • <SYSTEM32>\SETF7.tmp
  • %WINDIR%\Temp\OLDF9.tmp
  • %WINDIR%\LastGood\TMPFB.tmp
  • <SYSTEM32>\SETFA.tmp
  • %WINDIR%\Temp\OLDF6.tmp
  • %WINDIR%\LastGood\TMPF2.tmp
  • %WINDIR%\Temp\OLDF1.tmp
  • %WINDIR%\Temp\OLDF3.tmp
  • %WINDIR%\LastGood\TMPF5.tmp
  • <SYSTEM32>\SETF4.tmp
  • %WINDIR%\Temp\OLDFC.tmp
  • <SYSTEM32>\dllcache\agt040d.dll.new
  • <SYSTEM32>\dllcache\kbdintam.dll.new
  • <SYSTEM32>\dllcache\kbdinmar.dll.new
  • <SYSTEM32>\dllcache\kbdinpun.dll.new
  • <SYSTEM32>\dllcache\kbdinhin.dll.new
  • <SYSTEM32>\dllcache\kbdindev.dll.new
  • %WINDIR%\LastGood\TMPFE.tmp
  • %WINDIR%\Fonts\SETFD.tmp
  • %WINDIR%\Temp\OLDFF.tmp
  • <SYSTEM32>\dllcache\c_iscii.dll.new
  • %WINDIR%\Fonts\SET100.tmp
  • %WINDIR%\LastGood\TMPE3.tmp
  • %WINDIR%\Fonts\SETE2.tmp
  • %WINDIR%\Temp\OLDE4.tmp
  • %WINDIR%\LastGood\TMPE6.tmp
  • %WINDIR%\Fonts\SETE5.tmp
  • %WINDIR%\Temp\OLDE1.tmp
  • <SYSTEM32>\dllcache\kbdsyr1.dll.new
  • %WINDIR%\Temp\OLDDE.tmp
  • %WINDIR%\Fonts\SETDF.tmp
  • %WINDIR%\LastGood\TMPE0.tmp
  • <SYSTEM32>\dllcache\kbdsyr2.dll.new
  • %WINDIR%\Temp\OLDE7.tmp
  • %WINDIR%\msagent\intl\agt0401.dll.new
  • <SYSTEM32>\SETEE.tmp
  • <SYSTEM32>\SETEF.tmp
  • %WINDIR%\LastGood\TMPF0.tmp
  • <SYSTEM32>\dllcache\kbdvntc.dll.new
  • <SYSTEM32>\SETED.tmp
  • <SYSTEM32>\SETE9.tmp
  • %WINDIR%\Fonts\SETE8.tmp
  • %WINDIR%\LastGood\TMPEA.tmp
  • %WINDIR%\Fonts\SETEC.tmp
  • %WINDIR%\Temp\OLDEB.tmp
  • %WINDIR%\Fonts\SET111.tmp
  • %WINDIR%\Fonts\SET110.tmp
  • %WINDIR%\Fonts\SET112.tmp
  • %WINDIR%\Fonts\SET114.tmp
  • %WINDIR%\Fonts\SET113.tmp
  • %WINDIR%\Fonts\SET10F.tmp
  • %WINDIR%\Fonts\SET10B.tmp
  • %WINDIR%\Fonts\SET10A.tmp
  • %WINDIR%\Fonts\SET10C.tmp
  • %WINDIR%\Fonts\SET10E.tmp
  • %WINDIR%\Fonts\SET10D.tmp
  • %WINDIR%\Fonts\SET115.tmp
  • %WINDIR%\Fonts\SET11D.tmp
  • %WINDIR%\Fonts\SET11C.tmp
  • %WINDIR%\Fonts\SET11E.tmp
  • %WINDIR%\Fonts\SET120.tmp
  • %WINDIR%\Fonts\SET11F.tmp
  • %WINDIR%\Fonts\SET11B.tmp
  • %WINDIR%\Fonts\SET117.tmp
  • %WINDIR%\Fonts\SET116.tmp
  • %WINDIR%\Fonts\SET118.tmp
  • %WINDIR%\Fonts\SET11A.tmp
  • %WINDIR%\Fonts\SET119.tmp
  • <SYSTEM32>\dllcache\thawbrkr.dll.new
  • <SYSTEM32>\dllcache\agt0401.dll.new
  • <SYSTEM32>\kbdinbe1.dll.new
  • <SYSTEM32>\kbdinmal.dll.new
  • <SYSTEM32>\kbdinben.dll.new
  • <SYSTEM32>\dllcache\kbdarmw.dll.new
  • <SYSTEM32>\dllcache\kbdintel.dll.new
  • <SYSTEM32>\dllcache\kbdinguj.dll.new
  • <SYSTEM32>\dllcache\kbdinkan.dll.new
  • <SYSTEM32>\dllcache\kbdarme.dll.new
  • <SYSTEM32>\dllcache\kbdgeo.dll.new
  • <SYSTEM32>\dllcache\kbdinbe1.dll.new
  • %WINDIR%\Fonts\SET106.tmp
  • %WINDIR%\Fonts\SET105.tmp
  • %WINDIR%\Fonts\SET107.tmp
  • %WINDIR%\Fonts\SET109.tmp
  • %WINDIR%\Fonts\SET108.tmp
  • %WINDIR%\Fonts\SET104.tmp
  • <SYSTEM32>\dllcache\kbdinmal.dll.new
  • <SYSTEM32>\dllcache\kbdinben.dll.new
  • %WINDIR%\Fonts\SET101.tmp
  • %WINDIR%\Fonts\SET103.tmp
  • %WINDIR%\Fonts\SET102.tmp
  • %WINDIR%\Fonts\SET37.tmp
  • %TEMP%\7ZipSfx.000\i386\davidtr.TT_
  • %TEMP%\7ZipSfx.000\i386\davidbd.TT_
  • %TEMP%\7ZipSfx.000\DHANEBI_.TT_
  • %TEMP%\7ZipSfx.000\DHANEI__.TT_
  • %TEMP%\7ZipSfx.000\DHANEB__.TT_
  • %TEMP%\7ZipSfx.000\i386\david.TT_
  • %TEMP%\7ZipSfx.000\i386\CORDIAUB.TT_
  • %TEMP%\7ZipSfx.000\i386\CORDIAU.TT_
  • %TEMP%\7ZipSfx.000\i386\CORDIAUI.TT_
  • %TEMP%\7ZipSfx.000\i386\CORDIAZ.TT_
  • %TEMP%\7ZipSfx.000\i386\CORDIAUZ.TT_
  • %TEMP%\7ZipSfx.000\DHANE___.TT_
  • %TEMP%\7ZipSfx.000\i386\Gautami.TT_
  • %TEMP%\7ZipSfx.000\i386\frank.TT_
  • %TEMP%\7ZipSfx.000\Godhuli.tt_
  • %TEMP%\7ZipSfx.000\kalpurush.tt_
  • %TEMP%\7ZipSfx.000\kalpurush ANSI.tt_
  • %TEMP%\7ZipSfx.000\i386\estre.TT_
  • %TEMP%\7ZipSfx.000\DHANMB__.TT_
  • %TEMP%\7ZipSfx.000\DHANMBI_.TT_
  • %TEMP%\7ZipSfx.000\DHANMI__.TT_
  • %TEMP%\7ZipSfx.000\Durga.tt_
  • %TEMP%\7ZipSfx.000\DHANM___.TT_
  • %TEMP%\7ZipSfx.000\BenSen.tt_
  • %TEMP%\7ZipSfx.000\Bangla.tt_
  • %TEMP%\7ZipSfx.000\BenSenHandwriting.tt_
  • %TEMP%\7ZipSfx.000\Boishkhi.tt_
  • %TEMP%\7ZipSfx.000\bngsalpn.tt_
  • %TEMP%\7ZipSfx.000\Azad.tt_
  • %TEMP%\7ZipSfx.000\i386\ANGSAZ.TT_
  • %TEMP%\7ZipSfx.000\i386\ANGSAUZ.TT_
  • %TEMP%\7ZipSfx.000\AponaLohit.tt_
  • %TEMP%\7ZipSfx.000\i386\artro.TT_
  • %TEMP%\7ZipSfx.000\i386\artrbdo.TT_
  • %TEMP%\7ZipSfx.000\BOISKUNI.TT_
  • %TEMP%\7ZipSfx.000\i386\BROWAZ.TT_
  • %TEMP%\7ZipSfx.000\i386\BROWAUZ.TT_
  • %TEMP%\7ZipSfx.000\i386\CORDIA.TT_
  • %TEMP%\7ZipSfx.000\i386\CORDIAI.TT_
  • %TEMP%\7ZipSfx.000\i386\CORDIAB.TT_
  • %TEMP%\7ZipSfx.000\i386\BROWAUI.TT_
  • %TEMP%\7ZipSfx.000\i386\BROWAB.TT_
  • %TEMP%\7ZipSfx.000\i386\BROWA.TT_
  • %TEMP%\7ZipSfx.000\i386\BROWAI.TT_
  • %TEMP%\7ZipSfx.000\i386\BROWAUB.TT_
  • %TEMP%\7ZipSfx.000\i386\BROWAU.TT_
  • %TEMP%\7ZipSfx.000\i386\mriamtr.TT_
  • %TEMP%\7ZipSfx.000\i386\mriamfx.TT_
  • %TEMP%\7ZipSfx.000\Mukti.tt_
  • %TEMP%\7ZipSfx.000\Nikosh.tt_
  • %TEMP%\7ZipSfx.000\muktinarrow.tt_
  • %TEMP%\7ZipSfx.000\i386\mriamc.TT_
  • %TEMP%\7ZipSfx.000\i386\mangal.TT_
  • %TEMP%\7ZipSfx.000\MAHOUAMJ.TT_
  • %TEMP%\7ZipSfx.000\mitra.tt_
  • %TEMP%\7ZipSfx.000\i386\mriam.TT_
  • %TEMP%\7ZipSfx.000\Mohua.tt_
  • %TEMP%\7ZipSfx.000\NikoshBAN.tt_
  • %TEMP%\7ZipSfx.000\PADMCBI_.TT_
  • %TEMP%\7ZipSfx.000\PADMAMJ_.TT_
  • %TEMP%\7ZipSfx.000\PADMCB__.TT_
  • %TEMP%\7ZipSfx.000\PADMMBI_.TT_
  • %TEMP%\7ZipSfx.000\PADMCI__.TT_
  • %TEMP%\7ZipSfx.000\PADMAEMJ.TT_
  • %TEMP%\7ZipSfx.000\NikoshLight.tt_
  • %TEMP%\7ZipSfx.000\NikoshGrameen.tt_
  • %TEMP%\7ZipSfx.000\NikoshLightBan.tt_
  • %TEMP%\7ZipSfx.000\PADMACMJ.TT_
  • %TEMP%\7ZipSfx.000\i386\nrkis.TT_
  • %TEMP%\7ZipSfx.000\KARNE___.TT_
  • %TEMP%\7ZipSfx.000\KARNEI__.TT_
  • %TEMP%\7ZipSfx.000\KARNMBI_.TT_
  • %TEMP%\7ZipSfx.000\KARNMI__.TT_
  • %TEMP%\7ZipSfx.000\KARNMB__.TT_
  • %TEMP%\7ZipSfx.000\KARNEB__.TT_
  • %TEMP%\7ZipSfx.000\KARNCB__.TT_
  • %TEMP%\7ZipSfx.000\KARNCBI_.TT_
  • %TEMP%\7ZipSfx.000\KARNCI__.TT_
  • %TEMP%\7ZipSfx.000\KARNEBI_.TT_
  • %TEMP%\7ZipSfx.000\KARNC___.TT_
  • %TEMP%\7ZipSfx.000\KARNM___.TT_
  • %TEMP%\7ZipSfx.000\i386\lvnm.TT_
  • %TEMP%\7ZipSfx.000\Lohit.tt_
  • %TEMP%\7ZipSfx.000\i386\lvnmbd.TT_
  • %TEMP%\7ZipSfx.000\MAHOe___.TT_
  • %TEMP%\7ZipSfx.000\MAHOC___.TT_
  • %TEMP%\7ZipSfx.000\LIPI_NO.TT_
  • %TEMP%\7ZipSfx.000\i386\latha.TT_
  • %TEMP%\7ZipSfx.000\i386\Kartika.TT_
  • %TEMP%\7ZipSfx.000\LikhanNormal.tt_
  • %TEMP%\7ZipSfx.000\LIPI_E.TT_
  • %TEMP%\7ZipSfx.000\LIPI_C.TT_
  • %TEMP%\7ZipSfx.000\i386\ega40850.FO_
  • %TEMP%\7ZipSfx.000\i386\dosapp.FO_
  • %TEMP%\7ZipSfx.000\i386\ega80850.FO_
  • %TEMP%\7ZipSfx.000\i386\sere1255.FO_
  • %TEMP%\7ZipSfx.000\i386\MSDLG874.FO_
  • %TEMP%\7ZipSfx.000\i386\courf.FO_
  • %TEMP%\7ZipSfx.000\i386\coue1256.FO_
  • %TEMP%\7ZipSfx.000\i386\coue1255.FO_
  • %TEMP%\7ZipSfx.000\i386\couf1255.FO_
  • %TEMP%\7ZipSfx.000\i386\coure.FO_
  • %TEMP%\7ZipSfx.000\i386\couf1256.FO_
  • %TEMP%\7ZipSfx.000\i386\sere1256.FO_
  • %TEMP%\7ZipSfx.000\i386\smaf1256.FO_
  • %TEMP%\7ZipSfx.000\i386\smaf1255.FO_
  • %TEMP%\7ZipSfx.000\i386\smalle.FO_
  • %TEMP%\7ZipSfx.000\i386\ssee1255.FO_
  • %TEMP%\7ZipSfx.000\i386\smallf.FO_
  • %TEMP%\7ZipSfx.000\i386\smae1256.FO_
  • %TEMP%\7ZipSfx.000\i386\serf1256.FO_
  • %TEMP%\7ZipSfx.000\i386\serf1255.FO_
  • %TEMP%\7ZipSfx.000\i386\serife.FO_
  • %TEMP%\7ZipSfx.000\i386\smae1255.FO_
  • %TEMP%\7ZipSfx.000\i386\seriff.FO_
  • %TEMP%\7ZipSfx.000\i386\kbdinben.dl_
  • %TEMP%\7ZipSfx.000\i386\kbdinbe1.dl_
  • %TEMP%\7ZipSfx.000\i386\kbdinmal.dl_
  • %TEMP%\7ZipSfx.000\i386\Thawbrkr.dl_
  • %TEMP%\7ZipSfx.000\i386\kbdusa.dl_
  • %TEMP%\7ZipSfx.000\i386\FTLX041E.DL_
  • %TEMP%\7ZipSfx.000\Smoothing.reg
  • %TEMP%\7ZipSfx.000\Add All.bat
  • %TEMP%\7ZipSfx.000\i386\agt0401.dl_
  • %TEMP%\7ZipSfx.000\i386\c_iscii.dl_
  • %TEMP%\7ZipSfx.000\i386\agt040d.dl_
  • %TEMP%\7ZipSfx.000\i386\8514fix.FO_
  • %TEMP%\7ZipSfx.000\i386\85s874.FO_
  • %TEMP%\7ZipSfx.000\i386\85s1256.FO_
  • %TEMP%\7ZipSfx.000\i386\app850.FO_
  • %TEMP%\7ZipSfx.000\i386\cga80850.FO_
  • %TEMP%\7ZipSfx.000\i386\cga40850.FO_
  • %TEMP%\7ZipSfx.000\i386\85s1255.FO_
  • %TEMP%\7ZipSfx.000\i386\8514sys.FO_
  • %TEMP%\7ZipSfx.000\i386\8514oem.FO_
  • %TEMP%\7ZipSfx.000\i386\85f1255.FO_
  • %TEMP%\7ZipSfx.000\i386\85f874.FO_
  • %TEMP%\7ZipSfx.000\i386\85f1256.FO_
  • %TEMP%\7ZipSfx.000\LikhanNormal.ot_
  • %TEMP%\7ZipSfx.000\i386\c_864.NL_
  • %TEMP%\7ZipSfx.000\i386\noise.Th_
  • %TEMP%\7ZipSfx.000\AdorshoLipi.tt_
  • %TEMP%\7ZipSfx.000\AdarshaBangla.tt_
  • %TEMP%\7ZipSfx.000\i386\c_862.NL_
  • %TEMP%\7ZipSfx.000\i386\C_28596.NL_
  • %TEMP%\7ZipSfx.000\i386\C_10021.NL_
  • %TEMP%\7ZipSfx.000\i386\c_28598.NL_
  • %TEMP%\7ZipSfx.000\i386\c_720.NL_
  • %TEMP%\7ZipSfx.000\i386\c_708.NL_
  • %TEMP%\7ZipSfx.000\i386\ahronbd.TT_
  • %TEMP%\7ZipSfx.000\i386\ANGSAI.TT_
  • %TEMP%\7ZipSfx.000\i386\ANGSAB.TT_
  • %TEMP%\7ZipSfx.000\i386\ANGSAU.TT_
  • %TEMP%\7ZipSfx.000\i386\ANGSAUI.TT_
  • %TEMP%\7ZipSfx.000\i386\ANGSAUB.TT_
  • %TEMP%\7ZipSfx.000\i386\ANGSA.TT_
  • %TEMP%\7ZipSfx.000\alipi_co.TT_
  • %TEMP%\7ZipSfx.000\akaashnormal.tt_
  • %TEMP%\7ZipSfx.000\alipi_ex.TT_
  • %TEMP%\7ZipSfx.000\i386\andlso.TT_
  • %TEMP%\7ZipSfx.000\alipi_no.TT_
  • %TEMP%\7ZipSfx.000\i386\vga850.FO_
  • %TEMP%\7ZipSfx.000\i386\sseriff.FO_
  • %TEMP%\7ZipSfx.000\i386\vgaf1255.FO_
  • %TEMP%\7ZipSfx.000\i386\vgaf874.FO_
  • %TEMP%\7ZipSfx.000\i386\vgaf1256.FO_
  • %TEMP%\7ZipSfx.000\i386\sserife.FO_
  • %TEMP%\7ZipSfx.000\i386\ssee874.FO_
  • %TEMP%\7ZipSfx.000\i386\ssee1256.FO_
  • %TEMP%\7ZipSfx.000\i386\ssef1255.FO_
  • %TEMP%\7ZipSfx.000\i386\ssef874.FO_
  • %TEMP%\7ZipSfx.000\i386\ssef1256.FO_
  • %TEMP%\7ZipSfx.000\i386\vgafix.FO_
  • %TEMP%\7ZipSfx.000\Complex_Fonts.inf
  • %TEMP%\7ZipSfx.000\i386\agt040d.hl_
  • %TEMP%\7ZipSfx.000\Unicode_Fonts.inf
  • %TEMP%\7ZipSfx.000\i386\c_10005.NL_
  • %TEMP%\7ZipSfx.000\i386\c_10004.NL_
  • %TEMP%\7ZipSfx.000\i386\agt0401.hl_
  • %TEMP%\7ZipSfx.000\i386\vgas1255.FO_
  • %TEMP%\7ZipSfx.000\i386\vgaoem.FO_
  • %TEMP%\7ZipSfx.000\i386\vgas1256.FO_
  • %TEMP%\7ZipSfx.000\i386\vgasys.FO_
  • %TEMP%\7ZipSfx.000\i386\vgas874.FO_
  • %TEMP%\7ZipSfx.000\PADMMB__.TT_
  • %TEMP%\7ZipSfx.000\i386\KBDTH2.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDTH1.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDTH3.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDVNTC.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDURDU.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDTH0.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDINTAM.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDINPUN.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDINTEL.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDSYR2.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDSYR1.DLL
  • <SYSTEM32>\SET3.tmp
  • %WINDIR%\Fonts\SETB.tmp
  • %WINDIR%\Fonts\SETA.tmp
  • %WINDIR%\Fonts\SETC.tmp
  • %WINDIR%\Fonts\SETE.tmp
  • %WINDIR%\Fonts\SETD.tmp
  • %WINDIR%\Fonts\SET9.tmp
  • <SYSTEM32>\SET5.tmp
  • <SYSTEM32>\SET4.tmp
  • <SYSTEM32>\SET6.tmp
  • <SYSTEM32>\SET8.tmp
  • <SYSTEM32>\SET7.tmp
  • %TEMP%\7ZipSfx.000\i386\Vrinda.TT_
  • %TEMP%\7ZipSfx.000\vijayab.tt_
  • %TEMP%\7ZipSfx.000\i386\KBDA1.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDA3.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDA2.DLL
  • %TEMP%\7ZipSfx.000\vijaya.tt_
  • %TEMP%\7ZipSfx.000\i386\UPCLBI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCLB.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCLI.TT_
  • %TEMP%\7ZipSfx.000\utkalm.tt_
  • %TEMP%\7ZipSfx.000\i386\UPCLL.TT_
  • %TEMP%\7ZipSfx.000\i386\KBDARME.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDINGUJ.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDINDEV.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDINHIN.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDINMAR.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDINKAN.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDHEB.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDDIV1.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDARMW.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDDIV2.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDGEO.DLL
  • %TEMP%\7ZipSfx.000\i386\KBDFA.DLL
  • %WINDIR%\Fonts\SET2D.tmp
  • %WINDIR%\Fonts\SET2C.tmp
  • %WINDIR%\Fonts\SET2E.tmp
  • %WINDIR%\Fonts\SET30.tmp
  • %WINDIR%\Fonts\SET2F.tmp
  • %WINDIR%\Fonts\SET2B.tmp
  • %WINDIR%\Fonts\SET27.tmp
  • %WINDIR%\Fonts\SET26.tmp
  • %WINDIR%\Fonts\SET28.tmp
  • %WINDIR%\Fonts\SET2A.tmp
  • %WINDIR%\Fonts\SET29.tmp
  • %WINDIR%\Fonts\SET31.tmp
  • <SYSTEM32>\dllcache\kbdth2.dll.new
  • %WINDIR%\Fonts\SET34.tmp
  • <SYSTEM32>\dllcache\kbdth3.dll.new
  • %WINDIR%\Fonts\SET36.tmp
  • %WINDIR%\Fonts\SET35.tmp
  • <SYSTEM32>\dllcache\kbdth1.dll.new
  • <SYSTEM32>\dllcache\c_10021.nls.new
  • <SYSTEM32>\dllcache\ftlx041e.dll.new
  • %WINDIR%\Fonts\SET32.tmp
  • %WINDIR%\Fonts\SET33.tmp
  • <SYSTEM32>\dllcache\kbdth0.dll.new
  • %WINDIR%\Fonts\SET16.tmp
  • %WINDIR%\Fonts\SET15.tmp
  • %WINDIR%\Fonts\SET17.tmp
  • %WINDIR%\Fonts\SET19.tmp
  • %WINDIR%\Fonts\SET18.tmp
  • %WINDIR%\Fonts\SET14.tmp
  • %WINDIR%\Fonts\SET10.tmp
  • %WINDIR%\Fonts\SETF.tmp
  • %WINDIR%\Fonts\SET11.tmp
  • %WINDIR%\Fonts\SET13.tmp
  • %WINDIR%\Fonts\SET12.tmp
  • %WINDIR%\Fonts\SET1A.tmp
  • %WINDIR%\Fonts\SET22.tmp
  • %WINDIR%\Fonts\SET21.tmp
  • %WINDIR%\Fonts\SET23.tmp
  • %WINDIR%\Fonts\SET25.tmp
  • %WINDIR%\Fonts\SET24.tmp
  • %WINDIR%\Fonts\SET20.tmp
  • %WINDIR%\Fonts\SET1C.tmp
  • %WINDIR%\Fonts\SET1B.tmp
  • %WINDIR%\Fonts\SET1D.tmp
  • %WINDIR%\Fonts\SET1F.tmp
  • %WINDIR%\Fonts\SET1E.tmp
  • %TEMP%\7ZipSfx.000\segoeuil.tt_
  • %TEMP%\7ZipSfx.000\segoeuii.tt_
  • %TEMP%\7ZipSfx.000\segoeuiz.tt_
  • %TEMP%\7ZipSfx.000\seguisym.tt_
  • %TEMP%\7ZipSfx.000\seguisb.tt_
  • %TEMP%\7ZipSfx.000\segoeuib.tt_
  • %TEMP%\7ZipSfx.000\segoeprb.tt_
  • %TEMP%\7ZipSfx.000\segoepr.tt_
  • %TEMP%\7ZipSfx.000\segoesc.tt_
  • %TEMP%\7ZipSfx.000\segoeui.tt_
  • %TEMP%\7ZipSfx.000\segoescb.tt_
  • %TEMP%\7ZipSfx.000\Shonar.tt_
  • %TEMP%\7ZipSfx.000\SolaimanLipi Italic.tt_
  • %TEMP%\7ZipSfx.000\Siyamrupali.tt_
  • %TEMP%\7ZipSfx.000\SolaimanLipi.tt_
  • %TEMP%\7ZipSfx.000\Sulekha.tt_
  • %TEMP%\7ZipSfx.000\SolaimanLipiB.tt_
  • %TEMP%\7ZipSfx.000\Siyam Rupali ANSI.tt_
  • %TEMP%\7ZipSfx.000\i386\Shruti.TT_
  • %TEMP%\7ZipSfx.000\Shonarb.tt_
  • %TEMP%\7ZipSfx.000\i386\simpbdo.TT_
  • %TEMP%\7ZipSfx.000\i386\simpo.TT_
  • %TEMP%\7ZipSfx.000\i386\simpfxo.TT_
  • %TEMP%\7ZipSfx.000\RINKCI__.TT_
  • %TEMP%\7ZipSfx.000\RINKCB__.TT_
  • %TEMP%\7ZipSfx.000\RINKC___.TT_
  • %TEMP%\7ZipSfx.000\RINKEB__.TT_
  • %TEMP%\7ZipSfx.000\RINKEBI_.TT_
  • %TEMP%\7ZipSfx.000\RINKCBI_.TT_
  • %TEMP%\7ZipSfx.000\prothoma.tt_
  • %TEMP%\7ZipSfx.000\PADMMI__.TT_
  • %TEMP%\7ZipSfx.000\Puja.tt_
  • %TEMP%\7ZipSfx.000\i386\Raavi.TT_
  • %TEMP%\7ZipSfx.000\Punarbhaba.tt_
  • %TEMP%\7ZipSfx.000\RINKEI__.TT_
  • %TEMP%\7ZipSfx.000\i386\rodtr.TT_
  • %TEMP%\7ZipSfx.000\i386\rod.TT_
  • %TEMP%\7ZipSfx.000\Rupali.tt_
  • %TEMP%\7ZipSfx.000\SAMAKAL_.TT_
  • %TEMP%\7ZipSfx.000\sagarnormal.tt_
  • %TEMP%\7ZipSfx.000\RINKM___.TT_
  • %TEMP%\7ZipSfx.000\RINKIYMJ.TT_
  • %TEMP%\7ZipSfx.000\RINKE___.TT_
  • %TEMP%\7ZipSfx.000\RINKMBI_.TT_
  • %TEMP%\7ZipSfx.000\RINKMI__.TT_
  • %TEMP%\7ZipSfx.000\RINKMB__.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCFB.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCEL.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCFBI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCFL.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCFI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCEI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCDI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCDBI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCDL.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCEBI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCEB.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCIB.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCKB.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCJL.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCKBI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCKL.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCKI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCJI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCII.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCIBI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCIL.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCJBI.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCJB.TT_
  • %TEMP%\7ZipSfx.000\SUSHEI__.TT_
  • %TEMP%\7ZipSfx.000\SUSHEB__.TT_
  • %TEMP%\7ZipSfx.000\SUSHE___.TT_
  • %TEMP%\7ZipSfx.000\SUSHMB__.TT_
  • %TEMP%\7ZipSfx.000\SUSHMBI_.TT_
  • %TEMP%\7ZipSfx.000\SUSHEBI_.TT_
  • %TEMP%\7ZipSfx.000\SUSHCBI_.TT_
  • %TEMP%\7ZipSfx.000\Sumit.tt_
  • %TEMP%\7ZipSfx.000\SUSHCB__.TT_
  • %TEMP%\7ZipSfx.000\SUSHC___.TT_
  • %TEMP%\7ZipSfx.000\SUSHCI__.TT_
  • %TEMP%\7ZipSfx.000\SUSHMI__.TT_
  • %TEMP%\7ZipSfx.000\i386\tradbdo.TT_
  • %TEMP%\7ZipSfx.000\TONNBM__.tt_
  • %TEMP%\7ZipSfx.000\i386\trado.TT_
  • %TEMP%\7ZipSfx.000\i386\UPCDB.TT_
  • %TEMP%\7ZipSfx.000\i386\Tunga.TT_
  • %TEMP%\7ZipSfx.000\i386\sylfaen.TT_
  • %TEMP%\7ZipSfx.000\SUTOC___.TT_
  • %TEMP%\7ZipSfx.000\SUSHM___.TT_
  • %TEMP%\7ZipSfx.000\SUTOE___.TT_
  • %TEMP%\7ZipSfx.000\SutonnyBanglaOMJ.tt_
  • %TEMP%\7ZipSfx.000\sutom.tt_
Deletes the following files:
  • %WINDIR%\Temp\OLDD8.tmp
  • %WINDIR%\Temp\OLDCC.tmp
  • %WINDIR%\Temp\OLDDE.tmp
  • %WINDIR%\Temp\OLDDB.tmp
  • %WINDIR%\Temp\OLDC3.tmp
  • %WINDIR%\Temp\OLDC0.tmp
  • %WINDIR%\Temp\OLDC9.tmp
  • %WINDIR%\Temp\OLDC6.tmp
  • %WINDIR%\Temp\OLDE1.tmp
  • %WINDIR%\Temp\OLDF6.tmp
  • %WINDIR%\Temp\OLDF3.tmp
  • %WINDIR%\Temp\OLDFC.tmp
  • %WINDIR%\Temp\OLDF9.tmp
  • %WINDIR%\Temp\OLDE7.tmp
  • %WINDIR%\Temp\OLDE4.tmp
  • %WINDIR%\Temp\OLDF1.tmp
  • %WINDIR%\Temp\OLDEB.tmp
  • %WINDIR%\Temp\OLDBD.tmp
  • %WINDIR%\Temp\OLD50.tmp
  • %WINDIR%\Temp\OLD4D.tmp
  • %WINDIR%\Temp\OLD56.tmp
  • %WINDIR%\Temp\OLD53.tmp
  • %WINDIR%\Temp\OLD44.tmp
  • %WINDIR%\Temp\OLD3F.tmp
  • %WINDIR%\Temp\OLD4A.tmp
  • %WINDIR%\Temp\OLD47.tmp
  • %WINDIR%\Temp\OLD59.tmp
  • %WINDIR%\Temp\OLD71.tmp
  • %WINDIR%\Temp\OLD6A.tmp
  • %WINDIR%\Temp\OLDAB.tmp
  • %WINDIR%\Temp\OLD87.tmp
  • %WINDIR%\Temp\OLD5F.tmp
  • %WINDIR%\Temp\OLD5C.tmp
  • %WINDIR%\Temp\OLD65.tmp
  • %WINDIR%\Temp\OLD62.tmp
  • %WINDIR%\Temp\OLDFF.tmp
  • %WINDIR%\Fonts\smalle.fon
  • %WINDIR%\Fonts\smallf.fon
  • %WINDIR%\Fonts\serife.fon
  • %WINDIR%\Fonts\seriff.fon
  • %WINDIR%\Fonts\dosapp.fon
  • %WINDIR%\Fonts\estre.ttf
  • %WINDIR%\Fonts\vga850.fon
  • <SYSTEM32>\c_28598.nls
  • %WINDIR%\Fonts\MSDLG874.FON
  • %WINDIR%\Fonts\cga40850.fon
  • %WINDIR%\Fonts\cga80850.fon
  • %WINDIR%\Fonts\8514oem.fon
  • %WINDIR%\Fonts\app850.fon
  • %WINDIR%\Fonts\ega40850.fon
  • %WINDIR%\Fonts\ega80850.fon
  • %WINDIR%\Fonts\coure.fon
  • %WINDIR%\Fonts\courf.fon
  • %WINDIR%\Fonts\8514fix.fon
  • %WINDIR%\Fonts\sylfaen.ttf
  • <SYSTEM32>\kbdinbe1.dll
  • %WINDIR%\Fonts\shruti.ttf
  • %WINDIR%\Fonts\tunga.ttf
  • %WINDIR%\Fonts\kartika.ttf
  • %WINDIR%\Fonts\vrinda.ttf
  • <SYSTEM32>\kbdinben.dll
  • <SYSTEM32>\kbdinmal.dll
  • %WINDIR%\Fonts\raavi.ttf
  • %WINDIR%\Fonts\sseriff.fon
  • %WINDIR%\Fonts\vgafix.fon
  • %WINDIR%\Fonts\8514sys.fon
  • %WINDIR%\Fonts\sserife.fon
  • %WINDIR%\Fonts\latha.ttf
  • %WINDIR%\Fonts\gautami.ttf
  • %WINDIR%\Fonts\vgasys.fon
  • %WINDIR%\Fonts\mangal.ttf
Moves the following files:
  • from %WINDIR%\Fonts\SET116.tmp to %WINDIR%\Fonts\DHANM___.TTF
  • from %WINDIR%\Fonts\SET117.tmp to %WINDIR%\Fonts\Durga.ttf
  • from %WINDIR%\Fonts\SET114.tmp to %WINDIR%\Fonts\DHANMB__.TTF
  • from %WINDIR%\Fonts\SET115.tmp to %WINDIR%\Fonts\DHANMI__.TTF
  • from %WINDIR%\Fonts\SET118.tmp to %WINDIR%\Fonts\Godhuli.ttf
  • from %WINDIR%\Fonts\SET11B.tmp to %WINDIR%\Fonts\KARNCBI_.TTF
  • from %WINDIR%\Fonts\SET11C.tmp to %WINDIR%\Fonts\KARNCB__.TTF
  • from %WINDIR%\Fonts\SET119.tmp to %WINDIR%\Fonts\kalpurush.ttf
  • from %WINDIR%\Fonts\SET11A.tmp to %WINDIR%\Fonts\kalpurush ANSI.ttf
  • from %WINDIR%\Fonts\SET113.tmp to %WINDIR%\Fonts\DHANMBI_.TTF
  • from %WINDIR%\Fonts\SET10C.tmp to %WINDIR%\Fonts\bngsalpn.ttf
  • from %WINDIR%\Fonts\SET10D.tmp to %WINDIR%\Fonts\Boishkhi.ttf
  • from %WINDIR%\Fonts\SET10A.tmp to %WINDIR%\Fonts\BenSen.ttf
  • from %WINDIR%\Fonts\SET10B.tmp to %WINDIR%\Fonts\BenSenHandwriting.ttf
  • from %WINDIR%\Fonts\SET10E.tmp to %WINDIR%\Fonts\BOISKUNI.TTF
  • from %WINDIR%\Fonts\SET111.tmp to %WINDIR%\Fonts\DHANEI__.TTF
  • from %WINDIR%\Fonts\SET112.tmp to %WINDIR%\Fonts\DHANE___.TTF
  • from %WINDIR%\Fonts\SET10F.tmp to %WINDIR%\Fonts\DHANEBI_.TTF
  • from %WINDIR%\Fonts\SET110.tmp to %WINDIR%\Fonts\DHANEB__.TTF
  • from %WINDIR%\Fonts\SET129.tmp to %WINDIR%\Fonts\LIPI_C.TTf
  • from %WINDIR%\Fonts\SET12A.tmp to %WINDIR%\Fonts\LIPI_E.TTF
  • from %WINDIR%\Fonts\SET127.tmp to %WINDIR%\Fonts\LikhanNormal.otf
  • from %WINDIR%\Fonts\SET128.tmp to %WINDIR%\Fonts\LikhanNormal.ttf
  • from %WINDIR%\Fonts\SET12B.tmp to %WINDIR%\Fonts\LIPI_NO.TTF
  • from %WINDIR%\Fonts\SET12E.tmp to %WINDIR%\Fonts\MAHOUAMJ.TTF
  • from %WINDIR%\Fonts\SET12F.tmp to %WINDIR%\Fonts\MAHOC___.TTF
  • from %WINDIR%\Fonts\SET12C.tmp to %WINDIR%\Fonts\Lohit.ttf
  • from %WINDIR%\Fonts\SET12D.tmp to %WINDIR%\Fonts\mitra.ttf
  • from %WINDIR%\Fonts\SET126.tmp to %WINDIR%\Fonts\KARNM___.TTF
  • from %WINDIR%\Fonts\SET11F.tmp to %WINDIR%\Fonts\KARNEBI_.TTF
  • from %WINDIR%\Fonts\SET120.tmp to %WINDIR%\Fonts\KARNEB__.TTF
  • from %WINDIR%\Fonts\SET11D.tmp to %WINDIR%\Fonts\KARNCI__.TTF
  • from %WINDIR%\Fonts\SET11E.tmp to %WINDIR%\Fonts\KARNC___.TTF
  • from %WINDIR%\Fonts\SET121.tmp to %WINDIR%\Fonts\KARNEI__.TTF
  • from %WINDIR%\Fonts\SET124.tmp to %WINDIR%\Fonts\KARNMB__.TTF
  • from %WINDIR%\Fonts\SET125.tmp to %WINDIR%\Fonts\KARNMI__.TTF
  • from %WINDIR%\Fonts\SET122.tmp to %WINDIR%\Fonts\KARNE___.TTF
  • from %WINDIR%\Fonts\SET123.tmp to %WINDIR%\Fonts\KARNMBI_.TTF
  • from %WINDIR%\LastGood\TMPD7.tmp to %WINDIR%\LastGood\fonts\mangal.ttf
  • from %WINDIR%\LastGood\TMPDA.tmp to %WINDIR%\LastGood\fonts\latha.ttf
  • from <SYSTEM32>\SETD5.tmp to <SYSTEM32>\kbdintel.dll
  • from <SYSTEM32>\SETD6.tmp to <SYSTEM32>\kbdinkan.dll
  • from %WINDIR%\LastGood\TMPDD.tmp to %WINDIR%\LastGood\fonts\Gautami.ttf
  • from %WINDIR%\LastGood\TMPE6.tmp to %WINDIR%\LastGood\fonts\Tunga.ttf
  • from <SYSTEM32>\SETE9.tmp to <SYSTEM32>\kbdgeo.dll
  • from %WINDIR%\LastGood\TMPE0.tmp to %WINDIR%\LastGood\fonts\Raavi.ttf
  • from %WINDIR%\LastGood\TMPE3.tmp to %WINDIR%\LastGood\fonts\Shruti.ttf
  • from <SYSTEM32>\SETD4.tmp to <SYSTEM32>\kbdinguj.dll
  • from %WINDIR%\LastGood\TMPCB.tmp to %WINDIR%\LastGood\fonts\vgasys.fon
  • from <SYSTEM32>\SETCE.tmp to <SYSTEM32>\c_iscii.dll
  • from %WINDIR%\LastGood\TMPC5.tmp to %WINDIR%\LastGood\fonts\sseriff.fon
  • from %WINDIR%\LastGood\TMPC8.tmp to %WINDIR%\LastGood\fonts\vgafix.fon
  • from <SYSTEM32>\SETCF.tmp to <SYSTEM32>\kbdindev.dll
  • from <SYSTEM32>\SETD2.tmp to <SYSTEM32>\kbdinhin.dll
  • from <SYSTEM32>\SETD3.tmp to <SYSTEM32>\kbdinpun.dll
  • from <SYSTEM32>\SETD0.tmp to <SYSTEM32>\kbdintam.dll
  • from <SYSTEM32>\SETD1.tmp to <SYSTEM32>\kbdinmar.dll
  • from %WINDIR%\Fonts\SET103.tmp to %WINDIR%\Fonts\akaashnormal.ttf
  • from %WINDIR%\Fonts\SET104.tmp to %WINDIR%\Fonts\alipi_co.TTF
  • from %WINDIR%\Fonts\SET101.tmp to %WINDIR%\Fonts\AdarshaBangla.ttf
  • from %WINDIR%\Fonts\SET102.tmp to %WINDIR%\Fonts\AdorshoLipi.ttf
  • from %WINDIR%\Fonts\SET105.tmp to %WINDIR%\Fonts\alipi_ex.TTF
  • from %WINDIR%\Fonts\SET108.tmp to %WINDIR%\Fonts\Azad.ttf
  • from %WINDIR%\Fonts\SET109.tmp to %WINDIR%\Fonts\Bangla.ttf
  • from %WINDIR%\Fonts\SET106.tmp to %WINDIR%\Fonts\alipi_no.TTF
  • from %WINDIR%\Fonts\SET107.tmp to %WINDIR%\Fonts\AponaLohit.ttf
  • from %WINDIR%\LastGood\TMPFE.tmp to %WINDIR%\LastGood\fonts\Vrinda.ttf
  • from <SYSTEM32>\SETEE.tmp to <SYSTEM32>\kbdarmw.dll
  • from <SYSTEM32>\SETEF.tmp to <SYSTEM32>\Thawbrkr.dll
  • from %WINDIR%\LastGood\TMPEA.tmp to %WINDIR%\LastGood\fonts\sylfaen.ttf
  • from <SYSTEM32>\SETED.tmp to <SYSTEM32>\kbdarme.dll
  • from %WINDIR%\LastGood\TMPF0.tmp to %WINDIR%\LastGood\system32\noise.Tha
  • from %WINDIR%\LastGood\TMPF8.tmp to %WINDIR%\LastGood\system32\kbdinmal.dll
  • from %WINDIR%\LastGood\TMPFB.tmp to %WINDIR%\LastGood\fonts\Kartika.ttf
  • from %WINDIR%\LastGood\TMPF2.tmp to %WINDIR%\LastGood\system32\kbdinbe1.dll
  • from %WINDIR%\LastGood\TMPF5.tmp to %WINDIR%\LastGood\system32\kbdinben.dll
  • from %WINDIR%\Fonts\SET130.tmp to %WINDIR%\Fonts\MAHOE___.TTF
  • from %WINDIR%\Fonts\SET163.tmp to %WINDIR%\Fonts\Siyam Rupali ANSI.ttf
  • from %WINDIR%\Fonts\SET164.tmp to %WINDIR%\Fonts\SolaimanLipi.ttf
  • from %WINDIR%\Fonts\SET161.tmp to %WINDIR%\Fonts\Shonarb.ttf
  • from %WINDIR%\Fonts\SET162.tmp to %WINDIR%\Fonts\Siyamrupali.ttf
  • from %WINDIR%\Fonts\SET165.tmp to %WINDIR%\Fonts\SolaimanLipiB.ttf
  • from %WINDIR%\Fonts\SET168.tmp to %WINDIR%\Fonts\Sumit.ttf
  • from %WINDIR%\Fonts\SET169.tmp to %WINDIR%\Fonts\SUSHCBI_.TTF
  • from %WINDIR%\Fonts\SET166.tmp to %WINDIR%\Fonts\SolaimanLipi Italic.ttf
  • from %WINDIR%\Fonts\SET167.tmp to %WINDIR%\Fonts\Sulekha.ttf
  • from %WINDIR%\Fonts\SET160.tmp to %WINDIR%\Fonts\Shonar.ttf
  • from %WINDIR%\Fonts\SET159.tmp to %WINDIR%\Fonts\segoeui.ttf
  • from %WINDIR%\Fonts\SET15A.tmp to %WINDIR%\Fonts\segoeuib.ttf
  • from %WINDIR%\Fonts\SET157.tmp to %WINDIR%\Fonts\segoesc.ttf
  • from %WINDIR%\Fonts\SET158.tmp to %WINDIR%\Fonts\segoescb.ttf
  • from %WINDIR%\Fonts\SET15B.tmp to %WINDIR%\Fonts\segoeuii.ttf
  • from %WINDIR%\Fonts\SET15E.tmp to %WINDIR%\Fonts\seguisb.ttf
  • from %WINDIR%\Fonts\SET15F.tmp to %WINDIR%\Fonts\seguisym.ttf
  • from %WINDIR%\Fonts\SET15C.tmp to %WINDIR%\Fonts\segoeuil.ttf
  • from %WINDIR%\Fonts\SET15D.tmp to %WINDIR%\Fonts\segoeuiz.ttf
  • from %WINDIR%\Fonts\SET176.tmp to %WINDIR%\Fonts\SUTOE___.TTF
  • from %WINDIR%\Fonts\SET177.tmp to %WINDIR%\Fonts\sutom.ttf
  • from %WINDIR%\Fonts\SET174.tmp to %WINDIR%\Fonts\SUSHM___.TTF
  • from %WINDIR%\Fonts\SET175.tmp to %WINDIR%\Fonts\SUTOC___.TTF
  • from %WINDIR%\Fonts\SET178.tmp to %WINDIR%\Fonts\SutonnyBanglaOMJ.ttf
  • from %WINDIR%\Fonts\SET17B.tmp to %WINDIR%\Fonts\vijaya.ttf
  • from %WINDIR%\Fonts\SET17C.tmp to %WINDIR%\Fonts\vijayab.ttf
  • from %WINDIR%\Fonts\SET179.tmp to %WINDIR%\Fonts\TONNBM__.ttf
  • from %WINDIR%\Fonts\SET17A.tmp to %WINDIR%\Fonts\utkalm.ttf
  • from %WINDIR%\Fonts\SET173.tmp to %WINDIR%\Fonts\SUSHMI__.TTF
  • from %WINDIR%\Fonts\SET16C.tmp to %WINDIR%\Fonts\SUSHC___.TTF
  • from %WINDIR%\Fonts\SET16D.tmp to %WINDIR%\Fonts\SUSHEBI_.TTF
  • from %WINDIR%\Fonts\SET16A.tmp to %WINDIR%\Fonts\SUSHCB__.TTF
  • from %WINDIR%\Fonts\SET16B.tmp to %WINDIR%\Fonts\SUSHCI__.TTF
  • from %WINDIR%\Fonts\SET16E.tmp to %WINDIR%\Fonts\SUSHEB__.TTF
  • from %WINDIR%\Fonts\SET171.tmp to %WINDIR%\Fonts\SUSHMBI_.TTF
  • from %WINDIR%\Fonts\SET172.tmp to %WINDIR%\Fonts\SUSHMB__.TTF
  • from %WINDIR%\Fonts\SET16F.tmp to %WINDIR%\Fonts\SUSHEI__.TTF
  • from %WINDIR%\Fonts\SET170.tmp to %WINDIR%\Fonts\SUSHE___.TTF
  • from %WINDIR%\Fonts\SET13D.tmp to %WINDIR%\Fonts\PADMCB__.TTF
  • from %WINDIR%\Fonts\SET13E.tmp to %WINDIR%\Fonts\PADMCI__.TTF
  • from %WINDIR%\Fonts\SET13B.tmp to %WINDIR%\Fonts\PADMAMJ_.TTF
  • from %WINDIR%\Fonts\SET13C.tmp to %WINDIR%\Fonts\PADMCBI_.TTF
  • from %WINDIR%\Fonts\SET13F.tmp to %WINDIR%\Fonts\PADMMBI_.TTF
  • from %WINDIR%\Fonts\SET142.tmp to %WINDIR%\Fonts\prothoma.ttf
  • from %WINDIR%\Fonts\SET143.tmp to %WINDIR%\Fonts\Puja.ttf
  • from %WINDIR%\Fonts\SET140.tmp to %WINDIR%\Fonts\PADMMB__.TTF
  • from %WINDIR%\Fonts\SET141.tmp to %WINDIR%\Fonts\PADMMI__.TTF
  • from %WINDIR%\Fonts\SET13A.tmp to %WINDIR%\Fonts\PADMAEMJ.TTF
  • from %WINDIR%\Fonts\SET133.tmp to %WINDIR%\Fonts\muktinarrow.ttf
  • from %WINDIR%\Fonts\SET134.tmp to %WINDIR%\Fonts\Nikosh.ttf
  • from %WINDIR%\Fonts\SET131.tmp to %WINDIR%\Fonts\Mohua.ttf
  • from %WINDIR%\Fonts\SET132.tmp to %WINDIR%\Fonts\Mukti.ttf
  • from %WINDIR%\Fonts\SET135.tmp to %WINDIR%\Fonts\NikoshBAN.ttf
  • from %WINDIR%\Fonts\SET138.tmp to %WINDIR%\Fonts\NikoshLightBan.ttf
  • from %WINDIR%\Fonts\SET139.tmp to %WINDIR%\Fonts\PADMACMJ.TTF
  • from %WINDIR%\Fonts\SET136.tmp to %WINDIR%\Fonts\NikoshGrameen.ttf
  • from %WINDIR%\Fonts\SET137.tmp to %WINDIR%\Fonts\NikoshLight.ttf
  • from %WINDIR%\Fonts\SET150.tmp to %WINDIR%\Fonts\RINKMI__.TTF
  • from %WINDIR%\Fonts\SET151.tmp to %WINDIR%\Fonts\RINKM___.TTF
  • from %WINDIR%\Fonts\SET14E.tmp to %WINDIR%\Fonts\RINKMBI_.TTF
  • from %WINDIR%\Fonts\SET14F.tmp to %WINDIR%\Fonts\RINKMB__.TTF
  • from %WINDIR%\Fonts\SET152.tmp to %WINDIR%\Fonts\Rupali.ttf
  • from %WINDIR%\Fonts\SET155.tmp to %WINDIR%\Fonts\segoepr.ttf
  • from %WINDIR%\Fonts\SET156.tmp to %WINDIR%\Fonts\segoeprb.ttf
  • from %WINDIR%\Fonts\SET153.tmp to %WINDIR%\Fonts\sagarnormal.ttf
  • from %WINDIR%\Fonts\SET154.tmp to %WINDIR%\Fonts\SAMAKAL_.TTF
  • from %WINDIR%\Fonts\SET14D.tmp to %WINDIR%\Fonts\RINKIYMJ.TTF
  • from %WINDIR%\Fonts\SET146.tmp to %WINDIR%\Fonts\RINKCB__.TTF
  • from %WINDIR%\Fonts\SET147.tmp to %WINDIR%\Fonts\RINKCI__.TTF
  • from %WINDIR%\Fonts\SET144.tmp to %WINDIR%\Fonts\Punarbhaba.ttf
  • from %WINDIR%\Fonts\SET145.tmp to %WINDIR%\Fonts\RINKCBI_.TTF
  • from %WINDIR%\Fonts\SET148.tmp to %WINDIR%\Fonts\RINKC___.TTF
  • from %WINDIR%\Fonts\SET14B.tmp to %WINDIR%\Fonts\RINKEI__.TTF
  • from %WINDIR%\Fonts\SET14C.tmp to %WINDIR%\Fonts\RINKE___.TTF
  • from %WINDIR%\Fonts\SET149.tmp to %WINDIR%\Fonts\RINKEBI_.TTF
  • from %WINDIR%\Fonts\SET14A.tmp to %WINDIR%\Fonts\RINKEB__.TTF
  • from %WINDIR%\LastGood\TMPC2.tmp to %WINDIR%\LastGood\fonts\sserife.fon
  • from %WINDIR%\Fonts\SET35.tmp to %WINDIR%\Fonts\UPCJL.TTF
  • from %WINDIR%\Fonts\SET36.tmp to %WINDIR%\Fonts\UPCKB.TTF
  • from %WINDIR%\Fonts\SET33.tmp to %WINDIR%\Fonts\UPCJBI.TTF
  • from %WINDIR%\Fonts\SET34.tmp to %WINDIR%\Fonts\UPCJI.TTF
  • from %WINDIR%\Fonts\SET37.tmp to %WINDIR%\Fonts\UPCKBI.TTF
  • from %WINDIR%\Fonts\SET3A.tmp to %WINDIR%\Fonts\UPCLB.TTF
  • from %WINDIR%\Fonts\SET3B.tmp to %WINDIR%\Fonts\UPCLBI.TTF
  • from %WINDIR%\Fonts\SET38.tmp to %WINDIR%\Fonts\UPCKI.TTF
  • from %WINDIR%\Fonts\SET39.tmp to %WINDIR%\Fonts\UPCKL.TTF
  • from %WINDIR%\Fonts\SET32.tmp to %WINDIR%\Fonts\UPCJB.TTF
  • from %WINDIR%\Fonts\SET2B.tmp to %WINDIR%\Fonts\UPCFBI.TTF
  • from %WINDIR%\Fonts\SET2C.tmp to %WINDIR%\Fonts\UPCFI.TTF
  • from %WINDIR%\Fonts\SET29.tmp to %WINDIR%\Fonts\UPCEL.TTF
  • from %WINDIR%\Fonts\SET2A.tmp to %WINDIR%\Fonts\UPCFB.TTF
  • from %WINDIR%\Fonts\SET2D.tmp to %WINDIR%\Fonts\UPCFL.TTF
  • from %WINDIR%\Fonts\SET30.tmp to %WINDIR%\Fonts\UPCII.TTF
  • from %WINDIR%\Fonts\SET31.tmp to %WINDIR%\Fonts\UPCIL.TTF
  • from %WINDIR%\Fonts\SET2E.tmp to %WINDIR%\Fonts\UPCIB.TTF
  • from %WINDIR%\Fonts\SET2F.tmp to %WINDIR%\Fonts\UPCIBI.TTF
  • from %WINDIR%\LastGood\TMP58.tmp to %WINDIR%\LastGood\fonts\msdlg874.fon
  • from %WINDIR%\LastGood\TMP5B.tmp to %WINDIR%\LastGood\fonts\serife.fon
  • from %WINDIR%\LastGood\TMP52.tmp to %WINDIR%\LastGood\fonts\ega40850.fon
  • from %WINDIR%\LastGood\TMP55.tmp to %WINDIR%\LastGood\fonts\ega80850.fon
  • from %WINDIR%\LastGood\TMP5E.tmp to %WINDIR%\LastGood\fonts\seriff.fon
  • from %WINDIR%\Fonts\SET67.tmp to %WINDIR%\Fonts\ssee874.fon
  • from %WINDIR%\Fonts\SET68.tmp to %WINDIR%\Fonts\ssef874.fon
  • from %WINDIR%\LastGood\TMP61.tmp to %WINDIR%\LastGood\fonts\smalle.fon
  • from %WINDIR%\LastGood\TMP64.tmp to %WINDIR%\LastGood\fonts\smallf.fon
  • from %WINDIR%\LastGood\TMP4F.tmp to %WINDIR%\LastGood\fonts\courf.fon
  • from %WINDIR%\LastGood\TMP3E.tmp to %WINDIR%\LastGood\fonts\8514oem.fon
  • from %WINDIR%\Fonts\SET41.tmp to %WINDIR%\Fonts\85f874.fon
  • from %WINDIR%\Fonts\SET3C.tmp to %WINDIR%\Fonts\UPCLI.TTF
  • from %WINDIR%\Fonts\SET3D.tmp to %WINDIR%\Fonts\UPCLL.TTF
  • from %WINDIR%\Fonts\SET42.tmp to %WINDIR%\Fonts\85s874.fon
  • from %WINDIR%\LastGood\TMP49.tmp to %WINDIR%\LastGood\fonts\cga80850.fon
  • from %WINDIR%\LastGood\TMP4C.tmp to %WINDIR%\LastGood\fonts\coure.fon
  • from %WINDIR%\LastGood\TMP43.tmp to %WINDIR%\LastGood\fonts\app850.fon
  • from %WINDIR%\LastGood\TMP46.tmp to %WINDIR%\LastGood\fonts\cga40850.fon
  • from %WINDIR%\Fonts\SETF.tmp to %WINDIR%\Fonts\ANGSAB.TTF
  • from %WINDIR%\Fonts\SET10.tmp to %WINDIR%\Fonts\ANGSAI.TTF
  • from %WINDIR%\Fonts\SETD.tmp to %WINDIR%\Fonts\ANGSAUZ.TTF
  • from %WINDIR%\Fonts\SETE.tmp to %WINDIR%\Fonts\ANGSA.TTF
  • from %WINDIR%\Fonts\SET11.tmp to %WINDIR%\Fonts\ANGSAZ.TTF
  • from %WINDIR%\Fonts\SET14.tmp to %WINDIR%\Fonts\BROWAUI.TTF
  • from %WINDIR%\Fonts\SET15.tmp to %WINDIR%\Fonts\BROWAUZ.TTF
  • from %WINDIR%\Fonts\SET12.tmp to %WINDIR%\Fonts\BROWAU.TTF
  • from %WINDIR%\Fonts\SET13.tmp to %WINDIR%\Fonts\BROWAUB.TTF
  • from %WINDIR%\Fonts\SETC.tmp to %WINDIR%\Fonts\ANGSAUI.TTF
  • from <SYSTEM32>\SET5.tmp to <SYSTEM32>\kbdth0.dll
  • from <SYSTEM32>\SET6.tmp to <SYSTEM32>\kbdth1.dll
  • from <SYSTEM32>\SET3.tmp to <SYSTEM32>\ftlx041e.dll
  • from <SYSTEM32>\SET4.tmp to <SYSTEM32>\c_10021.nls
  • from <SYSTEM32>\SET7.tmp to <SYSTEM32>\kbdth2.dll
  • from %WINDIR%\Fonts\SETA.tmp to %WINDIR%\Fonts\ANGSAU.TTF
  • from %WINDIR%\Fonts\SETB.tmp to %WINDIR%\Fonts\ANGSAUB.TTF
  • from <SYSTEM32>\SET8.tmp to <SYSTEM32>\kbdth3.dll
  • from %WINDIR%\Fonts\SET9.tmp to %WINDIR%\Fonts\MSDLG874.FON
  • from %WINDIR%\Fonts\SET22.tmp to %WINDIR%\Fonts\UPCDB.TTF
  • from %WINDIR%\Fonts\SET23.tmp to %WINDIR%\Fonts\UPCDBI.TTF
  • from %WINDIR%\Fonts\SET20.tmp to %WINDIR%\Fonts\CORDIAI.TTF
  • from %WINDIR%\Fonts\SET21.tmp to %WINDIR%\Fonts\CORDIAZ.TTF
  • from %WINDIR%\Fonts\SET24.tmp to %WINDIR%\Fonts\UPCDI.TTF
  • from %WINDIR%\Fonts\SET27.tmp to %WINDIR%\Fonts\UPCEBI.TTF
  • from %WINDIR%\Fonts\SET28.tmp to %WINDIR%\Fonts\UPCEI.TTF
  • from %WINDIR%\Fonts\SET25.tmp to %WINDIR%\Fonts\UPCDL.TTF
  • from %WINDIR%\Fonts\SET26.tmp to %WINDIR%\Fonts\UPCEB.TTF
  • from %WINDIR%\Fonts\SET1F.tmp to %WINDIR%\Fonts\CORDIAB.TTF
  • from %WINDIR%\Fonts\SET18.tmp to %WINDIR%\Fonts\BROWAI.TTF
  • from %WINDIR%\Fonts\SET19.tmp to %WINDIR%\Fonts\BROWAZ.TTF
  • from %WINDIR%\Fonts\SET16.tmp to %WINDIR%\Fonts\BROWA.TTF
  • from %WINDIR%\Fonts\SET17.tmp to %WINDIR%\Fonts\BROWAB.TTF
  • from %WINDIR%\Fonts\SET1A.tmp to %WINDIR%\Fonts\CORDIAU.TTF
  • from %WINDIR%\Fonts\SET1D.tmp to %WINDIR%\Fonts\CORDIAUZ.TTF
  • from %WINDIR%\Fonts\SET1E.tmp to %WINDIR%\Fonts\CORDIA.TTF
  • from %WINDIR%\Fonts\SET1B.tmp to %WINDIR%\Fonts\CORDIAUB.TTF
  • from %WINDIR%\Fonts\SET1C.tmp to %WINDIR%\Fonts\CORDIAUI.TTF
  • from %WINDIR%\LastGood\TMP69.tmp to %WINDIR%\LastGood\fonts\vga850.fon
  • from %WINDIR%\Fonts\SETA2.tmp to %WINDIR%\Fonts\andlso.ttf
  • from %WINDIR%\Fonts\SETA3.tmp to %WINDIR%\Fonts\artrbdo.ttf
  • from <SYSTEM32>\SETA0.tmp to <SYSTEM32>\kbdsyr1.dll
  • from <SYSTEM32>\SETA1.tmp to <SYSTEM32>\kbdsyr2.dll
  • from %WINDIR%\Fonts\SETA4.tmp to %WINDIR%\Fonts\artro.ttf
  • from %WINDIR%\Fonts\SETA7.tmp to %WINDIR%\Fonts\simpo.ttf
  • from %WINDIR%\Fonts\SETA8.tmp to %WINDIR%\Fonts\tradbdo.ttf
  • from %WINDIR%\Fonts\SETA5.tmp to %WINDIR%\Fonts\simpbdo.ttf
  • from %WINDIR%\Fonts\SETA6.tmp to %WINDIR%\Fonts\simpfxo.ttf
  • from <SYSTEM32>\SET9F.tmp to <SYSTEM32>\kbddiv2.dll
  • from <SYSTEM32>\SET98.tmp to <SYSTEM32>\kbda1.dll
  • from <SYSTEM32>\SET99.tmp to <SYSTEM32>\kbda2.dll
  • from <SYSTEM32>\SET96.tmp to <SYSTEM32>\c_10004.nls
  • from <SYSTEM32>\SET97.tmp to <SYSTEM32>\C_28596.NLS
  • from <SYSTEM32>\SET9A.tmp to <SYSTEM32>\kbda3.dll
  • from <SYSTEM32>\SET9D.tmp to <SYSTEM32>\kbdurdu.dll
  • from <SYSTEM32>\SET9E.tmp to <SYSTEM32>\kbddiv1.dll
  • from <SYSTEM32>\SET9B.tmp to <SYSTEM32>\kbdusa.dll
  • from <SYSTEM32>\SET9C.tmp to <SYSTEM32>\kbdfa.dll
  • from %WINDIR%\Fonts\SETB7.tmp to %WINDIR%\Fonts\vgaf1256.fon
  • from %WINDIR%\Fonts\SETB8.tmp to %WINDIR%\Fonts\vgas1256.fon
  • from %WINDIR%\Fonts\SETB5.tmp to %WINDIR%\Fonts\ssee1256.fon
  • from %WINDIR%\Fonts\SETB6.tmp to %WINDIR%\Fonts\ssef1256.fon
  • from %WINDIR%\msagent\intl\SETB9.tmp to %WINDIR%\msagent\intl\agt0401.dll
  • from %WINDIR%\LastGood\TMPBC.tmp to %WINDIR%\LastGood\fonts\8514fix.fon
  • from %WINDIR%\LastGood\TMPBF.tmp to %WINDIR%\LastGood\fonts\8514sys.fon
  • from %WINDIR%\Help\SETBA.tmp to %WINDIR%\Help\agt0401.hlp
  • from <SYSTEM32>\SETBB.tmp to <SYSTEM32>\kbdvntc.dll
  • from %WINDIR%\Fonts\SETB4.tmp to %WINDIR%\Fonts\smaf1256.fon
  • from %WINDIR%\Fonts\SETAD.tmp to %WINDIR%\Fonts\85f1256.fon
  • from %WINDIR%\Fonts\SETAE.tmp to %WINDIR%\Fonts\85s1256.fon
  • from %WINDIR%\Fonts\SETA9.tmp to %WINDIR%\Fonts\trado.ttf
  • from %WINDIR%\LastGood\TMPAA.tmp to %WINDIR%\LastGood\fonts\estre.ttf
  • from %WINDIR%\Fonts\SETAF.tmp to %WINDIR%\Fonts\coue1256.fon
  • from %WINDIR%\Fonts\SETB2.tmp to %WINDIR%\Fonts\serf1256.fon
  • from %WINDIR%\Fonts\SETB3.tmp to %WINDIR%\Fonts\smae1256.fon
  • from %WINDIR%\Fonts\SETB0.tmp to %WINDIR%\Fonts\couf1256.fon
  • from %WINDIR%\Fonts\SETB1.tmp to %WINDIR%\Fonts\sere1256.fon
  • from %WINDIR%\Fonts\SET7A.tmp to %WINDIR%\Fonts\lvnmbd.ttf
  • from %WINDIR%\Fonts\SET7B.tmp to %WINDIR%\Fonts\mriam.ttf
  • from %WINDIR%\Fonts\SET78.tmp to %WINDIR%\Fonts\frank.ttf
  • from %WINDIR%\Fonts\SET79.tmp to %WINDIR%\Fonts\lvnm.ttf
  • from %WINDIR%\Fonts\SET7C.tmp to %WINDIR%\Fonts\mriamc.ttf
  • from %WINDIR%\Fonts\SET7F.tmp to %WINDIR%\Fonts\nrkis.ttf
  • from %WINDIR%\Fonts\SET80.tmp to %WINDIR%\Fonts\rod.ttf
  • from %WINDIR%\Fonts\SET7D.tmp to %WINDIR%\Fonts\mriamfx.ttf
  • from %WINDIR%\Fonts\SET7E.tmp to %WINDIR%\Fonts\mriamtr.ttf
  • from %WINDIR%\Fonts\SET77.tmp to %WINDIR%\Fonts\davidtr.ttf
  • from <SYSTEM32>\SET6E.tmp to <SYSTEM32>\c_862.nls
  • from <SYSTEM32>\SET6F.tmp to <SYSTEM32>\c_10005.nls
  • from %WINDIR%\Fonts\SET6C.tmp to %WINDIR%\Fonts\vgaf874.fon
  • from %WINDIR%\Fonts\SET6D.tmp to %WINDIR%\Fonts\vgas874.fon
  • from %WINDIR%\LastGood\TMP70.tmp to %WINDIR%\LastGood\system32\c_28598.nls
  • from %WINDIR%\Fonts\SET75.tmp to %WINDIR%\Fonts\david.ttf
  • from %WINDIR%\Fonts\SET76.tmp to %WINDIR%\Fonts\davidbd.ttf
  • from <SYSTEM32>\SET73.tmp to <SYSTEM32>\kbdheb.dll
  • from %WINDIR%\Fonts\SET74.tmp to %WINDIR%\Fonts\ahronbd.ttf
  • from %WINDIR%\Fonts\SET8F.tmp to %WINDIR%\Fonts\vgaf1255.fon
  • from %WINDIR%\Fonts\SET90.tmp to %WINDIR%\Fonts\vgas1255.fon
  • from %WINDIR%\Fonts\SET8D.tmp to %WINDIR%\Fonts\ssee1255.fon
  • from %WINDIR%\Fonts\SET8E.tmp to %WINDIR%\Fonts\ssef1255.fon
  • from %WINDIR%\msagent\intl\SET91.tmp to %WINDIR%\msagent\intl\agt040d.dll
  • from <SYSTEM32>\SET94.tmp to <SYSTEM32>\c_708.nls
  • from <SYSTEM32>\SET95.tmp to <SYSTEM32>\c_864.nls
  • from %WINDIR%\Help\SET92.tmp to %WINDIR%\Help\agt040d.hlp
  • from <SYSTEM32>\SET93.tmp to <SYSTEM32>\c_720.nls
  • from %WINDIR%\Fonts\SET8C.tmp to %WINDIR%\Fonts\smaf1255.fon
  • from %WINDIR%\Fonts\SET83.tmp to %WINDIR%\Fonts\85s1255.fon
  • from %WINDIR%\Fonts\SET84.tmp to %WINDIR%\Fonts\coue1255.fon
  • from %WINDIR%\Fonts\SET81.tmp to %WINDIR%\Fonts\rodtr.ttf
  • from %WINDIR%\Fonts\SET82.tmp to %WINDIR%\Fonts\85f1255.fon
  • from %WINDIR%\Fonts\SET85.tmp to %WINDIR%\Fonts\couf1255.fon
  • from %WINDIR%\Fonts\SET8A.tmp to %WINDIR%\Fonts\serf1255.fon
  • from %WINDIR%\Fonts\SET8B.tmp to %WINDIR%\Fonts\smae1255.fon
  • from %WINDIR%\LastGood\TMP86.tmp to %WINDIR%\LastGood\fonts\dosapp.fon
  • from %WINDIR%\Fonts\SET89.tmp to %WINDIR%\Fonts\sere1255.fon
Miscellaneous:
Searches for the following windows:
  • ClassName: 'RegEdit_RegEdit' WindowName: ''
  • ClassName: 'Shell_TrayWnd' WindowName: ''

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android