Защити созданное

Другие наши ресурсы

  • free.drweb.kz — бесплатные утилиты, плагины, информеры
  • av-desk.com — интернет-сервис для поставщиков услуг Dr.Web AV-Desk
  • curenet.drweb.kz — сетевая лечащая утилита Dr.Web CureNet!
Закрыть

Библиотека
Моя библиотека

Чтобы добавить ресурс в библиотеку, войдите в аккаунт.

+ Добавить в библиотеку

Ресурсов: -

Последний: -

Моя библиотека

Поддержка
Круглосуточная поддержка | Правила обращения

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.Siggen9.11861

Добавлен в вирусную базу Dr.Web: 2020-02-15

Описание добавлено:

Technical Information

Malicious functions
Executes the following
  • '%WINDIR%\syswow64\taskkill.exe' /F /IM IDMan.exe
  • '%WINDIR%\syswow64\taskkill.exe' /F /IM IDMGrHlp.exe
  • '%WINDIR%\syswow64\taskkill.exe' /F /IM IEMonitor.exe
  • '%WINDIR%\syswow64\taskkill.exe' /IM firefox.exe /F
  • '%WINDIR%\syswow64\taskkill.exe' /IM iexplore.exe /F
  • '%WINDIR%\syswow64\taskkill.exe' /IM MicrosoftEdge.exe /F
  • '%WINDIR%\syswow64\taskkill.exe' /IM chrome.exe /F
  • '<SYSTEM32>\taskkill.exe' /F /IM IDMan.exe
  • '<SYSTEM32>\taskkill.exe' /F /IM IDMGrHlp.exe
  • '<SYSTEM32>\taskkill.exe' /F /IM IEMonitor.exe
Terminates or attempts to terminate
the following user processes:
  • firefox.exe
  • iexplore.exe
Modifies file system
Creates the following files
  • %TEMP%\7zipsfx.000\idm.exe
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\202.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\203.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\210.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\211.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\212.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\213.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\214.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\215.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\216.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\217.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\219.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\251.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\220.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\221.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\222.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\223.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\224.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\225.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\247.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\248.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\249.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\250.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\201.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\218.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\200.bmp
  • %TEMP%\d66.tmp\tool\toolbar\primo_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\metro.tbi
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_1.tbi
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_largehot_1.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_large_1.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_smallhot_1.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_small_1.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi_modern_xp.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi_modern_xp.tbi
  • %TEMP%\d66.tmp\tool\toolbar\mosi_modern_xphot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\primo.tbi
  • %TEMP%\d66.tmp\tool\toolbar\primo_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat.tbi
  • %TEMP%\d66.tmp\tool\toolbar\pt light\pt_lh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pt light\pt_ln.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pt light\pt_sh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pt light\pt_sn.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pt light.tbi
  • %TEMP%\d66.tmp\tool\toolbar\pureflat\pureflat_larg.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat\pureflat_larg_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat\pureflat_small.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat\pureflat_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\199.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\252.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\311.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\315.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\blue_arrow_disable.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\blue_arrow_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\blue_arrow_mini_disable.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\blue_arrow_mini_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\blue_arrow_mini_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\blue_arrow_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\flat2015-over.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\flat2015.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\black.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\blue_arrow.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\flat2015.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\gant3_small_3_pkuwyc.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\gant3_small_hot_3_pkuwyc.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\gant3_style_by_pkuwyc_3.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\gd.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\gh.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\gl.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\glyfz 2016.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\guimagination.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bluesky_shapes.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\gant3_large_3_pkuwyc.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\gant3_large_hot_3_pkuwyc.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\black.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\black-over.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\bilsorbit.tbi
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\323.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\325.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\readme!.txt
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013.tbi
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\317.bmp
  • %TEMP%\d66.tmp\tool\toolbar\round.bmp
  • %TEMP%\d66.tmp\tool\toolbar\roundhot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\thl-toolbar.tbi
  • %TEMP%\d66.tmp\tool\toolbar\thl-toolbar_bmps\thl-hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\thl-toolbar_bmps\thl-normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\windows 8.bmp
  • %TEMP%\d66.tmp\tool\toolbar\windows 8_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\windows10.bmp
  • %TEMP%\d66.tmp\tool\toolbar\windows10.tbi
  • %TEMP%\d66.tmp\tool\toolbar\windows7.tbi
  • %TEMP%\d66.tmp\tool\toolbar\windows8.tbi
  • %TEMP%\d66.tmp\tool\toolbar\round.tbi
  • %TEMP%\d66.tmp\tool\toolbar\metro\metro-idmhot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bronze_shapes.tbi
  • %TEMP%\d66.tmp\tool\toolbar\metro\metro-idm.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mac\machot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons_toolbar\h3m_buttons_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons_toolbar\h3m_buttons_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons_toolbar\h3m_buttons_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons_toolbar\h3m_buttons_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes_toolbar\h3m_os_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy_toolbar\h3m_glossy_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy_toolbar\h3m_glossy_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy_toolbar\h3m_glossy_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy_toolbar\h3m_glossy_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes_toolbar\h3m_os_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes_toolbar\h3m_os_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_toolbars.zip
  • %TEMP%\d66.tmp\tool\toolbar\gl.bmp
  • %TEMP%\d66.tmp\tool\toolbar\flat2015-over.bmp
  • %TEMP%\d66.tmp\tool\toolbar\flat2015.bmp
  • %TEMP%\d66.tmp\tool\toolbar\flat2015.tbi
  • %TEMP%\d66.tmp\tool\toolbar\gant3_large_3_pkuwyc.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gant3_large_hot_3_pkuwyc.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gant3_small_3_pkuwyc.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gant3_small_hot_3_pkuwyc.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gant3_style_by_pkuwyc_3.tbi
  • %TEMP%\d66.tmp\tool\toolbar\gd.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz 2016.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\guimagination.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes_toolbar\h3m_os_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers_toolbar\h3m_ps_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\kavian\kavian_larg_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\kavian.tbi
  • %TEMP%\d66.tmp\tool\toolbar\koushik halder.tbi
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder.tbi
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_large_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_small_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ios7_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\kavian\kavian_larg.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_small_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ls_largehot_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ls_large_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ls_style_2.tbi
  • %TEMP%\d66.tmp\tool\toolbar\mac\mac.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder.tbi
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_large_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ios7.tbi
  • %TEMP%\d66.tmp\tool\toolbar\ios7.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers_toolbar\h3m_ps_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers_toolbar\h3m_ps_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color.tbi
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers_toolbar\h3m_ps_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark.tbi
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mac.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bluesky_shapes_toolbar\h3m_toolbars.zip
  • %ProgramFiles(x86)%\internet download manager\toolbar\thl-toolbar_bmps\thl-normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_glossy.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_color\helvet_3d_color-small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_color\helvet_3d_color-small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_dark\helvet_3d_dark-large_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_dark\helvet_3d_dark-large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_dark\helvet_3d_dark-large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_dark\helvet_3d_dark-small_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_dark\helvet_3d_dark-small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_dark\helvet_3d_dark-small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_light\helvet_3d_light-large_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_light\helvet_3d_light-large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_light\helvet_3d_light-small_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_tb\koushik_halder_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_light\helvet_3d_light-small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_light\helvet_3d_light-small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\kavian\kavian_larg.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\kavian\kavian_larg_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_tb\koushik_halder.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_tb\koushik_halder_large_disable.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_tb\koushik_halder_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_tb\koushik_halder_large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_tb\koushik_halder_small_disable.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_tb\koushik_halder_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_color\helvet_3d_color-small_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_light\helvet_3d_light-large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_color\helvet_3d_color-large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_glossy_toolbar\h3m_glossy_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_buttons_toolbar\h3m_buttons_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_buttons_toolbar\h3m_buttons_large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_buttons_toolbar\h3m_buttons_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_buttons_toolbar\h3m_buttons_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_glossy_toolbar\h3m_glossy_large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_color\helvet_3d_color-large_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_glossy_toolbar\h3m_glossy_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_glossy_toolbar\h3m_glossy_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_olive_shapes_toolbar\h3m_os_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_olive_shapes_toolbar\h3m_os_large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_olive_shapes_toolbar\h3m_os_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_olive_shapes_toolbar\h3m_os_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_painted_stickers_toolbar\h3m_ps_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_painted_stickers_toolbar\h3m_ps_large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_painted_stickers_toolbar\h3m_ps_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_painted_stickers_toolbar\h3m_ps_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_color\helvet_3d_color-large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\mac\mac.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\mac\machot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\metro\metro-idm.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\217.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\218.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\219.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\220.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\221.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\222.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\223.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\224.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\225.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\215.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\216.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\247.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\250.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\251.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\252.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\311.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\315.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\317.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\323.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\325.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\thl-toolbar_bmps\thl-hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\248.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\249.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\214.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\213.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\212.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pt light\pt_lh.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pt light\pt_ln.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pt light\pt_sh.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pt light\pt_sn.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pureflat\pureflat_larg.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pureflat\pureflat_larg_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pureflat\pureflat_small.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pureflat\pureflat_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\pure_flat_2013-large_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\pure_flat_2013-large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\metro\metro-idmhot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\pure_flat_2013-large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\pure_flat_2013-small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\pure_flat_2013-small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\readme!.txt
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\199.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\200.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\201.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\202.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\203.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\210.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\bitmap\211.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013\pure_flat_2013-small_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\mosi3d_small_1.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\mosi_modern_xp.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\mosi_modern_xp.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\mosi_modern_xphot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\primo.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\primo_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\primo_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pt light.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\pureflat.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pureflat.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\round.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\7_idm\7-idmhot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\round.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\roundhot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\thl-toolbar.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\windows 8.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\windows 8_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\windows10.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\windows10.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\windows7.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\windows8.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\7_idm\7-idm.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\mosi3d_smallhot_1.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\pure_flat_2013.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\mosi3d_large_1.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_halder.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_olive_shapes.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_painted_stickers.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_color.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_dark.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\helvet_3d_light.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\ios7.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\ios7.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\ios7_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\kavian.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik halder.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_halder_large_disable.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\mosi3d_1.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_halder_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_halder_large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_halder_small_disable.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_halder_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\koushik_halder_small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\ls_largehot_3.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\ls_large_3.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\ls_style_2.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\mac.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\metro.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\mosi3d_largehot_1.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\bilsorbit\bilsorbit_lh.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\bilsorbit\bilsorbit_ln.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\bilsorbit\bilsorbit_sh.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\225.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\247.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\248.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\249.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\250.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\251.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\252.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\311.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\315.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\223.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\224.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\317.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\glyfz_2016\glyfz_2016-large_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\glyfz_2016\glyfz_2016-large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\glyfz_2016\glyfz_2016-large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\glyfz_2016\glyfz_2016-small_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\glyfz_2016\glyfz_2016-small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\glyfz_2016\glyfz_2016-small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\323.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\325.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\222.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\221.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\220.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\dtu_style-large_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\dtu_style-large_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\dtu_style-large_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\dtu_style-small_disabled.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\dtu_style-small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\dtu_style-small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\readme!.txt
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\199.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\200.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\201.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\bilsorbit\bilsorbit_sn.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\202.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\210.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\211.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\212.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\213.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\214.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\215.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\216.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\217.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\218.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\219.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\dtu_style\bitmap\203.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_buttons.tbi
  • %ProgramFiles(x86)%\internet download manager\toolbar\h3m_cubic3d.tbi
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\readme!.txt
  • %ProgramFiles(x86)%\internet download manager\idmbrbtn.dll
  • %TEMP%\idm_setup_temp\idm119.tmp
  • %TEMP%\idm_setup_temp\idm120.tmp
  • %TEMP%\idm_setup_temp\idm121.tmp
  • %TEMP%\idm_setup_temp\idm122.tmp
  • %TEMP%\idm_setup_temp\idm123.tmp
  • %TEMP%\idm_setup_temp\idm124.tmp
  • %TEMP%\idm_setup_temp\idm125.tmp
  • %TEMP%\idm_setup_temp\idm126.tmp
  • %TEMP%\idm_setup_temp\idm127.tmp
  • %TEMP%\idm_setup_temp\idm128.tmp
  • %TEMP%\idm_setup_temp\idm130.tmp
  • %TEMP%\idm_setup_temp\idm141.tmp
  • %TEMP%\idm_setup_temp\idm131.tmp
  • %TEMP%\idm_setup_temp\idm132.tmp
  • %TEMP%\idm_setup_temp\idm133.tmp
  • %TEMP%\idm_setup_temp\idm134.tmp
  • %TEMP%\idm_setup_temp\idm135.tmp
  • %TEMP%\idm_setup_temp\idm136.tmp
  • %TEMP%\idm_setup_temp\idm137.tmp
  • %TEMP%\idm_setup_temp\idm138.tmp
  • %TEMP%\idm_setup_temp\idm139.tmp
  • %TEMP%\idm_setup_temp\idm140.tmp
  • %TEMP%\idm_setup_temp\idm118.tmp
  • %TEMP%\idm_setup_temp\idm129.tmp
  • %TEMP%\idm_setup_temp\idm117.tmp
  • %TEMP%\idm_setup_temp\idm103.tmp
  • %TEMP%\idm_setup_temp\idm93.tmp
  • %TEMP%\idm_setup_temp\idm94.tmp
  • %TEMP%\idm_setup_temp\idm95.tmp
  • %TEMP%\idm_setup_temp\idm96.tmp
  • %TEMP%\idm_setup_temp\idm97.tmp
  • %TEMP%\idm_setup_temp\idm98.tmp
  • %TEMP%\idm_setup_temp\idm99.tmp
  • %TEMP%\idm_setup_temp\idm100.tmp
  • %TEMP%\idm_setup_temp\idm101.tmp
  • %TEMP%\idm_setup_temp\idm102.tmp
  • %TEMP%\idm_setup_temp\idm104.tmp
  • %TEMP%\idm_setup_temp\idm115.tmp
  • %TEMP%\idm_setup_temp\idm105.tmp
  • %TEMP%\idm_setup_temp\idm106.tmp
  • %TEMP%\idm_setup_temp\idm107.tmp
  • %TEMP%\idm_setup_temp\idm108.tmp
  • %TEMP%\idm_setup_temp\idm109.tmp
  • %TEMP%\idm_setup_temp\idm110.tmp
  • %TEMP%\idm_setup_temp\idm111.tmp
  • %TEMP%\idm_setup_temp\idm112.tmp
  • %TEMP%\idm_setup_temp\idm113.tmp
  • %TEMP%\idm_setup_temp\idm114.tmp
  • %TEMP%\idm_setup_temp\idm116.tmp
  • %TEMP%\idm_setup_temp\idm142.tmp
  • %TEMP%\idm_setup_temp\idm143.tmp
  • %TEMP%\idm_setup_temp\idm144.tmp
  • %ProgramFiles(x86)%\internet download manager\languages\template.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_ar.txt
  • %ProgramFiles(x86)%\internet download manager\languages\tips_de.txt
  • %ProgramFiles(x86)%\internet download manager\languages\tips_es.txt
  • %ProgramFiles(x86)%\internet download manager\languages\tips_fr.txt
  • %ProgramFiles(x86)%\internet download manager\languages\tips_it.txt
  • %ProgramFiles(x86)%\internet download manager\languages\tips_ptbr.txt
  • %ProgramFiles(x86)%\internet download manager\languages\tips_nl.txt
  • %ProgramFiles(x86)%\internet download manager\toolbar\3d_style_3.tbi
  • %ProgramFiles(x86)%\internet download manager\languages\idm_ptbr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\idm_nl.lng
  • %ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\3d_smallhot_3.bmp
  • %ProgramFiles(x86)%\internet download manager\downlwithidm.dll
  • %ProgramFiles(x86)%\internet download manager\idmgrhlp.exe
  • %ProgramFiles(x86)%\internet download manager\grabber.chm
  • %ProgramFiles(x86)%\internet download manager\idmmzcc.xpi
  • %ProgramFiles(x86)%\internet download manager\idmfsa.dll
  • %ProgramFiles(x86)%\internet download manager\iemonitor.exe
  • %ProgramFiles(x86)%\internet download manager\scheduler.chm
  • %ProgramFiles(x86)%\internet download manager\iegetvl.htm
  • %ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3.bmp
  • %ProgramFiles(x86)%\internet download manager\toolbar\3d_small_3.bmp
  • %ProgramFiles(x86)%\internet download manager\languages\idm_it.lng
  • %ProgramFiles(x86)%\internet download manager\languages\idm_fr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\idm_es.lng
  • %TEMP%\idm_setup_temp\idm146.tmp
  • %TEMP%\idm_setup_temp\idm147.tmp
  • %TEMP%\idm_setup_temp\idm148.tmp
  • %TEMP%\idm_setup_temp\idm149.tmp
  • %TEMP%\idm_setup_temp\idm150.tmp
  • %TEMP%\idm_setup_temp\idmsetup2.log
  • %ProgramFiles(x86)%\internet download manager\uninstall.exe
  • %ProgramFiles(x86)%\internet download manager\license.txt
  • %ProgramFiles(x86)%\internet download manager\idmiecc.dll
  • %ProgramFiles(x86)%\internet download manager\idman.chm
  • %TEMP%\idm_setup_temp\idm145.tmp
  • %ProgramFiles(x86)%\internet download manager\idman.exe
  • %ProgramFiles(x86)%\internet download manager\idmgetall.dll
  • %ProgramFiles(x86)%\internet download manager\idmmkb.dll
  • %ProgramFiles(x86)%\internet download manager\ieext.htm
  • %ProgramFiles(x86)%\internet download manager\iegetall.htm
  • %ProgramFiles(x86)%\internet download manager\languages\idm_fa.lng
  • %ProgramFiles(x86)%\internet download manager\idmtdi.cat
  • %ProgramFiles(x86)%\internet download manager\tips.txt
  • %ProgramFiles(x86)%\internet download manager\tutor.chm
  • %ProgramFiles(x86)%\internet download manager\languages\idm_ar.lng
  • %ProgramFiles(x86)%\internet download manager\languages\idm_de.lng
  • %ProgramFiles(x86)%\internet download manager\idmantypeinfo.tlb
  • %TEMP%\idm_setup_temp\idm92.tmp
  • %ProgramFiles(x86)%\internet download manager\iegetvl2.htm
  • %TEMP%\idm_setup_temp\idm91.tmp
  • %TEMP%\idm_setup_temp\idm89.tmp
  • %TEMP%\idm_setup_temp\idm14.tmp
  • %TEMP%\idm_setup_temp\idm15.tmp
  • %TEMP%\idm_setup_temp\idm16.tmp
  • %TEMP%\idm_setup_temp\idm17.tmp
  • %TEMP%\idm_setup_temp\idm18.tmp
  • %TEMP%\idm_setup_temp\idm19.tmp
  • %TEMP%\idm_setup_temp\idm20.tmp
  • %TEMP%\idm_setup_temp\idm21.tmp
  • %TEMP%\idm_setup_temp\idm22.tmp
  • %TEMP%\idm_setup_temp\idm23.tmp
  • %TEMP%\idm_setup_temp\idm25.tmp
  • %TEMP%\idm_setup_temp\idm36.tmp
  • %TEMP%\idm_setup_temp\idm26.tmp
  • %TEMP%\idm_setup_temp\idm27.tmp
  • %TEMP%\idm_setup_temp\idm28.tmp
  • %TEMP%\idm_setup_temp\idm29.tmp
  • %TEMP%\idm_setup_temp\idm30.tmp
  • %TEMP%\idm_setup_temp\idm31.tmp
  • %TEMP%\idm_setup_temp\idm32.tmp
  • %TEMP%\idm_setup_temp\idm33.tmp
  • %TEMP%\idm_setup_temp\idm34.tmp
  • %TEMP%\idm_setup_temp\idm35.tmp
  • %TEMP%\idm_setup_temp\idm13.tmp
  • %TEMP%\idm_setup_temp\idm24.tmp
  • %TEMP%\idm_setup_temp\idm12.tmp
  • %TEMP%\7zipsfx.002\cleanup.cmd
  • %TEMP%\rarsfx0\idm.exe
  • %TEMP%\7zipsfx.001\‎\desktop.ini
  • %TEMP%\7zipsfx.001\$.cmd
  • %TEMP%\7zipsfx.001\.....exe
  • %TEMP%\7zipsfx.001\....exe
  • %TEMP%\7zipsfx.001\...exe
  • %TEMP%\7zipsfx.001\..exe
  • %TEMP%\7zipsfx.001\idm.exe
  • %TEMP%\7zipsfx.001\‎\idman.exe
  • nul
  • %TEMP%\7zipsfx.002\permdel.txt
  • %TEMP%\idm_setup_temp\idm10.tmp
  • %TEMP%\idm_setup_temp\idm0.tmp
  • %TEMP%\idm_setup_temp\idm1.tmp
  • %TEMP%\idm_setup_temp\idm2.tmp
  • %TEMP%\idm_setup_temp\idm3.tmp
  • %TEMP%\idm_setup_temp\idm4.tmp
  • %TEMP%\idm_setup_temp\idm5.tmp
  • %TEMP%\idm_setup_temp\idm6.tmp
  • %TEMP%\idm_setup_temp\idm7.tmp
  • %TEMP%\idm_setup_temp\idm8.tmp
  • %TEMP%\idm_setup_temp\idm9.tmp
  • %TEMP%\idm_setup_temp\idm11.tmp
  • %TEMP%\idm_setup_temp\idm37.tmp
  • %TEMP%\idm_setup_temp\idm38.tmp
  • %TEMP%\idm_setup_temp\idm39.tmp
  • %TEMP%\idm_setup_temp\idm68.tmp
  • %TEMP%\idm_setup_temp\idm69.tmp
  • %TEMP%\idm_setup_temp\idm70.tmp
  • %TEMP%\idm_setup_temp\idm71.tmp
  • %TEMP%\idm_setup_temp\idm72.tmp
  • %TEMP%\idm_setup_temp\idm73.tmp
  • %TEMP%\idm_setup_temp\idm74.tmp
  • %TEMP%\idm_setup_temp\idm75.tmp
  • %TEMP%\idm_setup_temp\idm76.tmp
  • %TEMP%\idm_setup_temp\idm66.tmp
  • %TEMP%\idm_setup_temp\idm67.tmp
  • %TEMP%\idm_setup_temp\idm77.tmp
  • %TEMP%\idm_setup_temp\idm80.tmp
  • %TEMP%\idm_setup_temp\idm81.tmp
  • %TEMP%\idm_setup_temp\idm82.tmp
  • %TEMP%\idm_setup_temp\idm83.tmp
  • %TEMP%\idm_setup_temp\idm84.tmp
  • %TEMP%\idm_setup_temp\idm85.tmp
  • %TEMP%\idm_setup_temp\idm86.tmp
  • %TEMP%\idm_setup_temp\idm87.tmp
  • %TEMP%\idm_setup_temp\idm88.tmp
  • %TEMP%\idm_setup_temp\idm78.tmp
  • %TEMP%\idm_setup_temp\idm79.tmp
  • %TEMP%\idm_setup_temp\idm65.tmp
  • %TEMP%\idm_setup_temp\idm64.tmp
  • %TEMP%\idm_setup_temp\idm63.tmp
  • %TEMP%\idm_setup_temp\idm41.tmp
  • %TEMP%\idm_setup_temp\idm42.tmp
  • %TEMP%\idm_setup_temp\idm43.tmp
  • %TEMP%\idm_setup_temp\idm44.tmp
  • %TEMP%\idm_setup_temp\idm45.tmp
  • %TEMP%\idm_setup_temp\idm46.tmp
  • %TEMP%\idm_setup_temp\idm47.tmp
  • %TEMP%\idm_setup_temp\idm48.tmp
  • %TEMP%\idm_setup_temp\idm49.tmp
  • %TEMP%\idm_setup_temp\idm50.tmp
  • %TEMP%\idm_setup_temp\idm40.tmp
  • %TEMP%\idm_setup_temp\idm51.tmp
  • %TEMP%\idm_setup_temp\idm53.tmp
  • %TEMP%\idm_setup_temp\idm54.tmp
  • %TEMP%\idm_setup_temp\idm55.tmp
  • %TEMP%\idm_setup_temp\idm56.tmp
  • %TEMP%\idm_setup_temp\idm57.tmp
  • %TEMP%\idm_setup_temp\idm58.tmp
  • %TEMP%\idm_setup_temp\idm59.tmp
  • %TEMP%\idm_setup_temp\idm60.tmp
  • %TEMP%\idm_setup_temp\idm61.tmp
  • %TEMP%\idm_setup_temp\idm62.tmp
  • %TEMP%\idm_setup_temp\idm52.tmp
  • %TEMP%\idm_setup_temp\idm90.tmp
  • %ProgramFiles(x86)%\internet download manager\idmvmprs.dll
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-small_hot.bmp
  • %ProgramFiles(x86)%\internet download manager\idmftype.dll
  • %APPDATA%\idm\idmmzcc5\components12\idmmzcc.dll
  • %APPDATA%\idm\idmmzcc5\components12\idmmzcc64.dll
  • %APPDATA%\idm\idmmzcc5\components2\idmhelper.js
  • %APPDATA%\idm\idmmzcc5\components2\idmmzcc.dll
  • %APPDATA%\idm\idmmzcc5\components2\idmmzcc64.dll
  • %APPDATA%\idm\idmmzcc5\components2\iidmhelper.xpt
  • %APPDATA%\idm\idmmzcc5\components2\iidmmzcc.xpt
  • %APPDATA%\idm\idmmzcc5\components2\idmcchandler2.dll
  • %ProgramFiles(x86)%\internet download manager\idmcchandler2.dll
  • %APPDATA%\idm\idmmzcc5\components2\idmcchandler2_64.dll
  • %APPDATA%\idm\idmmzcc5\meta-inf\manifest.mf
  • %TEMP%\d66.tmp\tool\toolbar\7_idm\7-idm.bmp
  • %APPDATA%\idm\idmmzcc5\meta-inf\zigbert.sf
  • %TEMP%\~sfx00335c713c\idm.toolbar.exe
  • %TEMP%\d66.tmp\d76.bat
  • %TEMP%\d66.tmp\tool\toolbar\3d_largehot_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_largehot_3_hdpi15.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_large_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_large_3_hdpi15.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_smallhot_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_small_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_style_3.tbi
  • %APPDATA%\idm\idmmzcc5\components\iidmmzcc.xpt
  • %ProgramFiles(x86)%\internet download manager\idmcchandler2_64.dll
  • %APPDATA%\idm\idmmzcc5\components\iidmhelper5.xpt
  • %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\grabber help.lnk
  • %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\uninstall idm.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\internet download manager\license.lnk
  • %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\license.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\internet download manager\idm help.lnk
  • %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\idm help.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\internet download manager\internet download manager.lnk
  • %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\internet download manager.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\internet download manager\tutorials.lnk
  • %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\tutorials.lnk
  • %APPDATA%\microsoft\windows\start menu\programs\internet download manager\grabber help.lnk
  • %HOMEPATH%\desktop\internet download manager.lnk
  • %APPDATA%\idm\idmmzcc5\components\idmhelper5.js
  • %ProgramFiles(x86)%\internet download manager\idmsetup2.log
  • %APPDATA%\idm\defextmap.dat
  • %APPDATA%\idm\urlexclist.dat
  • %APPDATA%\idm\idmfc.dat
  • %APPDATA%\idm\idmmzcc5\meta-inf\zigbert.rsa
  • %APPDATA%\idm\idmmzcc5\chrome.manifest
  • %APPDATA%\idm\idmmzcc5\icon.png
  • %APPDATA%\idm\idmmzcc5\install.js
  • %APPDATA%\idm\idmmzcc5\install.rdf
  • %APPDATA%\idm\idmmzcc5\chrome\idmmzcc.jar
  • %APPDATA%\idm\idmmzcc5\components\idmmzcc.dll
  • %TEMP%\d66.tmp\tool\toolbar\7_idm\7-idmhot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit\bilsorbit_lh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit\bilsorbit_ln.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\220.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\221.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\222.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\223.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\224.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\225.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\247.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\248.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\249.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\218.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\219.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\250.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\311.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\315.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\317.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\323.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\325.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\251.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\252.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\217.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\216.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\215.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit\bilsorbit_sn.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit.tbi
  • %TEMP%\d66.tmp\tool\toolbar\black-over.bmp
  • %TEMP%\d66.tmp\tool\toolbar\black.bmp
  • %TEMP%\d66.tmp\tool\toolbar\black.tbi
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow.tbi
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_mini_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_mini_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit\bilsorbit_sh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_mini_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\199.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\200.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\201.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\202.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\203.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\210.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\211.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\212.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\213.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\214.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_normal.bmp
  • %APPDATA%\microsoft\windows\start menu\programs\internet download manager\uninstall idm.lnk
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-small_normal.bmp
  • %ProgramFiles(x86)%\internet download manager\idmvmprs64.dll
  • %ProgramFiles(x86)%\internet download manager\languages\tips_cz.txt
  • %ProgramFiles(x86)%\internet download manager\idmnetmon64.dll
  • %ProgramFiles(x86)%\internet download manager\languages\template_inst.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_ru.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_fr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_src.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_ar.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_ptbr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_it.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_kr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_de.lng
  • %ProgramFiles(x86)%\internet download manager\idmgcext.crx
  • %ProgramFiles(x86)%\internet download manager\languages\inst_tr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_chn.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_th.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_ua.lng
  • %ProgramFiles(x86)%\internet download manager\idmvs.dll
  • %ProgramFiles(x86)%\internet download manager\languages\inst_dk.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_id.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_cz.lng
  • %ProgramFiles(x86)%\internet download manager\idmbroker.exe
  • %ProgramFiles(x86)%\internet download manager\languages\inst_iw.lng
  • %ProgramFiles(x86)%\internet download manager\mediumilstart.exe
  • %ProgramFiles(x86)%\internet download manager\idmnetmon.dll
  • %ProgramFiles(x86)%\internet download manager\languages\inst_fa.lng
  • %ProgramFiles(x86)%\internet download manager\idmftype64.dll
  • %ProgramFiles(x86)%\internet download manager\idmtdi64.sys
  • %ProgramFiles(x86)%\internet download manager\languages\idm_tr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_tr.txt
  • %ProgramFiles(x86)%\internet download manager\idmshellext.dll
  • %ProgramFiles(x86)%\internet download manager\idmwfp.inf
  • %ProgramFiles(x86)%\internet download manager\idmtdi.inf
  • %ProgramFiles(x86)%\internet download manager\idmwfp32.sys
  • %ProgramFiles(x86)%\internet download manager\idmtdi32.sys
  • %ProgramFiles(x86)%\internet download manager\idmshellext64.dll
  • %ProgramFiles(x86)%\internet download manager\idmbrbtn64.dll
  • %ProgramFiles(x86)%\internet download manager\idmwfp64.sys
  • %ProgramFiles(x86)%\internet download manager\idmwfp.cat
  • %ProgramFiles(x86)%\internet download manager\idmintegrator64.exe
  • %ProgramFiles(x86)%\internet download manager\languages\idm_ru.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_ru.txt
  • %ProgramFiles(x86)%\internet download manager\languages\idm_th.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_th.txt
  • %ProgramFiles(x86)%\internet download manager\languages\idm_pl.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_pl.txt
  • %ProgramFiles(x86)%\internet download manager\languages\tips_fa.txt
  • %ProgramFiles(x86)%\internet download manager\idmiecc64.dll
  • %ProgramFiles(x86)%\internet download manager\idmgetall64.dll
  • %ProgramFiles(x86)%\internet download manager\downlwithidm64.dll
  • %ProgramFiles(x86)%\internet download manager\idmftype.dat
  • %ProgramFiles(x86)%\internet download manager\languages\inst_sk.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_pl.lng
  • %ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3_hdpi15.bmp
  • %ProgramFiles(x86)%\internet download manager\idmmsghost.json
  • %ProgramFiles(x86)%\internet download manager\idmmsghostmoz.json
  • %ProgramFiles(x86)%\internet download manager\languages\idm_id.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_id.txt
  • %ProgramFiles(x86)%\internet download manager\languages\idm_vn.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_vn.txt
  • %ProgramFiles(x86)%\internet download manager\languages\idm_sk.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_sk.txt
  • %ProgramFiles(x86)%\internet download manager\languages\idm_hu.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_kr.txt
  • %ProgramFiles(x86)%\internet download manager\idmmsghost.exe
  • %ProgramFiles(x86)%\internet download manager\languages\tips_hu.txt
  • %ProgramFiles(x86)%\internet download manager\languages\idm_iw.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_lao.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_hi.lng
  • %ProgramFiles(x86)%\internet download manager\idmopext.nex
  • %ProgramFiles(x86)%\internet download manager\idmgcext59.crx
  • %ProgramFiles(x86)%\internet download manager\idmfc.dat
  • %ProgramFiles(x86)%\internet download manager\languages\tips_chn.txt
  • %ProgramFiles(x86)%\internet download manager\languages\tips_cht.txt
  • %ProgramFiles(x86)%\internet download manager\languages\idm_cz.lng
  • %ProgramFiles(x86)%\internet download manager\languages\idm_jp.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_jp.txt
  • %ProgramFiles(x86)%\internet download manager\languages\idm_kr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_am.lng
  • %ProgramFiles(x86)%\internet download manager\languages\tips_gr.txt
  • %ProgramFiles(x86)%\internet download manager\idmindex.dll
  • %ProgramFiles(x86)%\internet download manager\languages\inst_cht.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_hu.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_es.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_pt.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_bg.lng
  • %ProgramFiles(x86)%\internet download manager\idmvconv.dll
  • %ProgramFiles(x86)%\internet download manager\languages\inst_gr.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_al.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_my.lng
  • %ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3_hdpi15.bmp
  • %ProgramFiles(x86)%\internet download manager\idmmzcc7.dll
  • %ProgramFiles(x86)%\internet download manager\idmcchandler7.dll
  • %ProgramFiles(x86)%\internet download manager\idmcchandler7_64.dll
  • %ProgramFiles(x86)%\internet download manager\idmmzcc2.xpi
  • %ProgramFiles(x86)%\internet download manager\languages\inst_uz.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_vn.lng
  • %ProgramFiles(x86)%\internet download manager\idmmzcc3.xpi
  • %ProgramFiles(x86)%\internet download manager\languages\idm_chn2.lng
  • %ProgramFiles(x86)%\internet download manager\languages\idm_cht.lng
  • %ProgramFiles(x86)%\internet download manager\languages\inst_ge.lng
  • %ProgramFiles(x86)%\internet download manager\languages\idm_gr.lng
  • %ProgramFiles(x86)%\internet download manager\idmmzcc7_64.dll
  • %ProgramFiles(x86)%\internet download manager\defexclist.txt
  • %TEMP%\1968jhtm.cmd
Sets the 'hidden' attribute to the following files
  • %TEMP%\7zipsfx.001\‎\desktop.ini
  • %TEMP%\1968jhtm.cmd
Deletes the following files
  • %TEMP%\7zipsfx.002\permdel.txt
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\251.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\250.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\249.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\248.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\247.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\225.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\224.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\223.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\222.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\221.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\220.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\219.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\218.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\217.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\252.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\216.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\214.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\213.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\212.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\211.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\210.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\203.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\202.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\201.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\200.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\199.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat.tbi
  • %TEMP%\d66.tmp\tool\toolbar\pureflat.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat\pureflat_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat\pureflat_small.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\215.bmp
  • %TEMP%\d66.tmp\tool\toolbar\thl-toolbar_bmps\thl-hot.bmp
  • %WINDIR%\prefetch\agglfgapphistory.db
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\317.bmp
  • %WINDIR%\prefetch\agglfaulthistory.db
  • %WINDIR%\prefetch\agcx_sc4.db
  • %WINDIR%\prefetch\agapplaunch.db
  • %WINDIR%\prefetch\addinutil.exe-fef23417.pf
  • %WINDIR%\prefetch\acrord32.exe-acf2947d.pf
  • %WINDIR%\prefetch\1.exe-bf9d2cef.pf
  • %TEMP%\~sfx00335c713c\idm.toolbar.exe
  • %TEMP%\d66.tmp\d76.bat
  • %TEMP%\d66.tmp\tool\toolbar\windows8.tbi
  • %TEMP%\d66.tmp\tool\toolbar\windows7.tbi
  • %TEMP%\d66.tmp\tool\toolbar\windows10.tbi
  • %TEMP%\d66.tmp\tool\toolbar\windows10.bmp
  • %TEMP%\d66.tmp\tool\toolbar\windows 8_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\windows 8.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat\pureflat_larg_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\thl-toolbar_bmps\thl-normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\thl-toolbar.tbi
  • %TEMP%\d66.tmp\tool\toolbar\roundhot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\round.tbi
  • %TEMP%\d66.tmp\tool\toolbar\round.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013.tbi
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\readme!.txt
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\pure_flat_2013-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\325.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\323.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\311.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pure_flat_2013\bitmap\315.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pureflat\pureflat_larg.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_large_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder.tbi
  • %TEMP%\d66.tmp\tool\toolbar\koushik halder.tbi
  • %TEMP%\d66.tmp\tool\toolbar\kavian.tbi
  • %TEMP%\d66.tmp\tool\toolbar\kavian\kavian_larg_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\kavian\kavian_larg.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ios7_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ios7.tbi
  • %TEMP%\d66.tmp\tool\toolbar\ios7.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light.tbi
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark.tbi
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_dark\helvet_3d_dark-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color.tbi
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_light\helvet_3d_light-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\metro\metro-idmhot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pt light\pt_sn.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pt light\pt_sh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pt light\pt_ln.bmp
  • %TEMP%\d66.tmp\tool\toolbar\pt light\pt_lh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\primo_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\primo_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\primo.tbi
  • %TEMP%\d66.tmp\tool\toolbar\mosi_modern_xphot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi_modern_xp.tbi
  • %TEMP%\d66.tmp\tool\toolbar\mosi_modern_xp.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_small_1.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_smallhot_1.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_large_1.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_largehot_1.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mosi3d_1.tbi
  • %TEMP%\d66.tmp\tool\toolbar\pt light.tbi
  • %TEMP%\d66.tmp\tool\toolbar\metro.tbi
  • %TEMP%\d66.tmp\tool\toolbar\metro\metro-idm.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mac.tbi
  • %TEMP%\d66.tmp\tool\toolbar\mac\machot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\mac\mac.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ls_style_2.tbi
  • %TEMP%\d66.tmp\tool\toolbar\ls_large_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\ls_largehot_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_small_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder_large_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\koushik_tb\koushik_halder.tbi
  • %TEMP%\d66.tmp\tool\toolbar\koushik_halder_small_disable.bmp
  • %WINDIR%\prefetch\agglglobalhistory.db
  • %WINDIR%\prefetch\aggluad_p_s-1-5-21-1960123792-2022915161-3775307078-1001.db
  • %WINDIR%\prefetch\aggluad_s-1-5-21-1960123792-2022915161-3775307078-1001.db
  • %WINDIR%\prefetch\test_msvcp120.exe-5e9c35c1.pf
  • %WINDIR%\prefetch\test_msvcp110_x64.exe-600927fb.pf
  • %WINDIR%\prefetch\test_msvcp110d_x64.exe-6afaa41f.pf
  • %WINDIR%\prefetch\test_msvcp110d.exe-dd6c4bd2.pf
  • %WINDIR%\prefetch\test_msvcp110d.exe-6c7e6cb8.pf
  • %WINDIR%\prefetch\test_msvcp110.exe-f929c484.pf
  • %WINDIR%\prefetch\test_msvcp110.exe-39f2672e.pf
  • %WINDIR%\prefetch\test_msvcp100_x64.exe-6e02575e.pf
  • %WINDIR%\prefetch\test_msvcp100d_x64.exe-24890c8a.pf
  • %WINDIR%\prefetch\test_msvcp100.exe-d47ff5f1.pf
  • %WINDIR%\prefetch\test_msvcp100.exe-93b75347.pf
  • %WINDIR%\prefetch\taskhost.exe-7238f31d.pf
  • %WINDIR%\prefetch\taskeng.exe-48d4e289.pf
  • %WINDIR%\prefetch\systempropertiesadvanced.exe-68c7c4f0.pf
  • %WINDIR%\prefetch\osppsvc.exe-e53d3cc0.pf
  • %WINDIR%\prefetch\svchost.exe-80f4a784.pf
  • %WINDIR%\prefetch\steamwebhelper.exe-93613764.pf
  • %WINDIR%\prefetch\sppsvc.exe-b0f8131b.pf
  • %WINDIR%\prefetch\setup_wm.exe-d33fd27d.pf
  • %WINDIR%\prefetch\setup.exe-f034c93c.pf
  • %WINDIR%\prefetch\setup.exe-d0f6149e.pf
  • %WINDIR%\prefetch\setup.exe-7c026c7f.pf
  • %WINDIR%\prefetch\schtasks.exe-5ca45734.pf
  • %WINDIR%\prefetch\sc.exe-945d79ae.pf
  • %WINDIR%\prefetch\regtlib.exe-e21980a2.pf
  • %WINDIR%\prefetch\regsvcs.exe-a54ad617.pf
  • %WINDIR%\prefetch\regedit.exe-90feea06.pf
  • %WINDIR%\prefetch\rdrcef.exe-5852a8de.pf
  • %WINDIR%\prefetch\powerpnt.exe-158b76a4.pf
  • %WINDIR%\prefetch\pfsvperfstats.bin
  • %WINDIR%\prefetch\svchost.exe-7ac6742a.pf
  • %WINDIR%\prefetch\pcaui.exe-3e82c312.pf
  • %WINDIR%\prefetch\test_msvcp120.exe-9f64d86b.pf
  • %WINDIR%\prefetch\vssvc.exe-b8afc319.pf
  • %WINDIR%\prefetch\wermgr.exe-0f2ac88c.pf
  • %WINDIR%\prefetch\wevtutil.exe-400d93e8.pf
  • %WINDIR%\prefetch\wevtutil.exe-ef5861c4.pf
  • %WINDIR%\prefetch\winword.exe-778f7c2b.pf
  • %WINDIR%\prefetch\wmiadap.exe-f8dfdfa2.pf
  • %WINDIR%\prefetch\wmiprvse.exe-1628051c.pf
  • %WINDIR%\prefetch\wmplayer.exe-26c72a86.pf
  • %TEMP%\7zipsfx.001\.....exe
  • %WINDIR%\prefetch\wmpnscfg.exe-fc0d39bf.pf
  • %WINDIR%\prefetch\_iu14d2n.tmp-74616ced.pf
  • %TEMP%\1968jhtm.cmd
  • %TEMP%\7zipsfx.000\idm.exe
  • %TEMP%\7zipsfx.001\$.cmd
  • %TEMP%\7zipsfx.001\idm.exe
  • %WINDIR%\prefetch\test_msvcp120d.exe-ed7dfbed.pf
  • %WINDIR%\prefetch\test_msvcp120d.exe-5e6bdb07.pf
  • %WINDIR%\prefetch\vs7jit.exe-aef49c84.pf
  • %WINDIR%\prefetch\unins000.exe-53663602.pf
  • %WINDIR%\prefetch\trustedinstaller.exe-3cc531e5.pf
  • %WINDIR%\prefetch\triggerkms.exe-7e8edfdc.pf
  • %WINDIR%\prefetch\test_msvcp90_x64.exe-cf1ecfbe.pf
  • %WINDIR%\prefetch\test_msvcp90.exe-29c5da51.pf
  • %WINDIR%\prefetch\test_msvcp140_x64.exe-361d99d2.pf
  • %WINDIR%\prefetch\test_msvcp140xp.exe-6d280b1d.pf
  • %WINDIR%\prefetch\test_msvcp140d_xp.exe-b04bc36c.pf
  • %WINDIR%\prefetch\test_msvcp140d_x64.exe-3e4f6ade.pf
  • %WINDIR%\prefetch\test_msvcp140d.exe-606af971.pf
  • %WINDIR%\prefetch\test_msvcp140.exe-6a49bae5.pf
  • %WINDIR%\prefetch\test_msvcp120xp.exe-d7d05439.pf
  • %WINDIR%\prefetch\test_msvcp120d_x64.exe-b16c3bb4.pf
  • %WINDIR%\prefetch\werfault.exe-e69f695a.pf
  • %WINDIR%\prefetch\ose00001.exe-3da4b844.pf
  • %WINDIR%\prefetch\ose.exe-533d8ac9.pf
  • %WINDIR%\prefetch\ose.exe-51c16f0e.pf
  • %WINDIR%\prefetch\kmsnano_setup.exe-631a87c6.pf
  • %WINDIR%\prefetch\javaw.exe-dccf0ab8.pf
  • %WINDIR%\prefetch\ipconfig.exe-912f3d5b.pf
  • %WINDIR%\prefetch\install.exe-455f2d9b.pf
  • %WINDIR%\prefetch\iexplore.exe-4b6c9213.pf
  • %WINDIR%\prefetch\flashplayerupdateservice.exe-216d9c35.pf
  • %WINDIR%\prefetch\firefox.exe-18acfcff.pf
  • %WINDIR%\prefetch\explorer.exe-a80e4f97.pf
  • %WINDIR%\prefetch\excel.exe-53a22446.pf
  • %WINDIR%\prefetch\drvinst.exe-4cb4314a.pf
  • %WINDIR%\prefetch\dotnetfx.exe-fe16be11.pf
  • %WINDIR%\prefetch\dllhost.exe-ecb71776.pf
  • %WINDIR%\prefetch\dllhost.exe-d58da3a6.pf
  • %WINDIR%\prefetch\launcher.exe-e41e51ee.pf
  • %WINDIR%\prefetch\dllhost.exe-b2eb1806.pf
  • %WINDIR%\prefetch\dllhost.exe-7faa2e4c.pf
  • %WINDIR%\prefetch\dllhost.exe-766398d2.pf
  • %WINDIR%\prefetch\dllhost.exe-5e46fa0d.pf
  • %WINDIR%\prefetch\dexplore.exe-1749d792.pf
  • %WINDIR%\prefetch\defrag.exe-588f90ad.pf
  • %WINDIR%\prefetch\dbgclr.exe-ad18e06e.pf
  • %WINDIR%\prefetch\control.exe-817f8f1d.pf
  • %WINDIR%\prefetch\conhost.exe-1f3e9d7e.pf
  • %WINDIR%\prefetch\cmd.exe-4a81b364.pf
  • %WINDIR%\prefetch\bcssync.exe-3f6c64a2.pf
  • %WINDIR%\prefetch\audiodg.exe-bdfd3029.pf
  • %WINDIR%\prefetch\aspnet_regiis.exe-b76f1ad7.pf
  • %WINDIR%\prefetch\arh.exe-f07e6c2c.pf
  • %WINDIR%\prefetch\agrobust.db
  • %WINDIR%\prefetch\dllhost.exe-861f96f8.pf
  • %WINDIR%\prefetch\layout.ini
  • %WINDIR%\prefetch\kmsnano_setup.tmp-11a1562c.pf
  • %WINDIR%\prefetch\logonui.exe-09140401.pf
  • %WINDIR%\prefetch\opera_crashreporter.exe-e30ebed0.pf
  • %WINDIR%\prefetch\msieb32.tmp-a0d60608.pf
  • %WINDIR%\prefetch\opera.exe-9dd4e019.pf
  • %WINDIR%\prefetch\ntosboot-b00dfaad.pf
  • %WINDIR%\prefetch\ngen.exe-ec3f9239.pf
  • %WINDIR%\prefetch\ngen.exe-ae594a6b.pf
  • %WINDIR%\prefetch\ngen.exe-7900743e.pf
  • %WINDIR%\prefetch\netsh.exe-f1b6da12.pf
  • %WINDIR%\prefetch\mstsc.exe-76a46e8a.pf
  • %WINDIR%\prefetch\mstsc.exe-5283258e.pf
  • %WINDIR%\prefetch\msoxmled.exe-e473a01d.pf
  • %WINDIR%\prefetch\msohtmed.exe-68e5ab1e.pf
  • %WINDIR%\prefetch\msohtmed.exe-35a8ca79.pf
  • %WINDIR%\prefetch\msif1a9.tmp-fa1ca0e9.pf
  • %WINDIR%\prefetch\msiexec.exe-e09a077a.pf
  • %WINDIR%\prefetch\msiexec.exe-a2d55cb6.pf
  • %WINDIR%\prefetch\msidf38.tmp-4231cf8d.pf
  • %WINDIR%\prefetch\manageddbgca.exe-6ea1439b.pf
  • %WINDIR%\prefetch\msi6837.tmp-63debe2c.pf
  • %WINDIR%\prefetch\msi419f.tmp-b24cc418.pf
  • %WINDIR%\prefetch\msdtc.exe-cc1dec77.pf
  • %WINDIR%\prefetch\mscorsvw.exe-c3c515bd.pf
  • %WINDIR%\prefetch\mscorsvw.exe-57d17daf.pf
  • %WINDIR%\prefetch\msconfig.exe-3a52734e.pf
  • %WINDIR%\prefetch\mofcomp.exe-fde76efc.pf
  • %WINDIR%\prefetch\mofcomp.exe-8fe3d558.pf
  • %WINDIR%\prefetch\mmc.exe-f5dc4f82.pf
  • %WINDIR%\prefetch\mmc.exe-f39cded6.pf
  • %WINDIR%\prefetch\mmc.exe-53159585.pf
  • %WINDIR%\prefetch\migpolwin.exe-79e606fc.pf
  • %WINDIR%\prefetch\microsoft toolkit.exe-9dae6a40.pf
  • %WINDIR%\prefetch\mdm.exe-ea9906df.pf
  • %TEMP%\d66.tmp\tool\toolbar\helvet_3d_color\helvet_3d_color-large_disabled.bmp
  • %WINDIR%\prefetch\wmiprvse.exe-6768a320.pf
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers_toolbar\h3m_ps_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy_toolbar\h3m_glossy_small_normal.bmp
  • %TEMP%\idm_setup_temp\idm5.tmp
  • %TEMP%\idm_setup_temp\idm49.tmp
  • %TEMP%\idm_setup_temp\idm48.tmp
  • %TEMP%\idm_setup_temp\idm47.tmp
  • %TEMP%\idm_setup_temp\idm46.tmp
  • %TEMP%\idm_setup_temp\idm45.tmp
  • %TEMP%\idm_setup_temp\idm44.tmp
  • %TEMP%\idm_setup_temp\idm43.tmp
  • %TEMP%\idm_setup_temp\idm42.tmp
  • %TEMP%\idm_setup_temp\idm41.tmp
  • %TEMP%\idm_setup_temp\idm40.tmp
  • %TEMP%\idm_setup_temp\idm4.tmp
  • %TEMP%\idm_setup_temp\idm39.tmp
  • %TEMP%\idm_setup_temp\idm38.tmp
  • %TEMP%\idm_setup_temp\idm50.tmp
  • %TEMP%\idm_setup_temp\idm37.tmp
  • %TEMP%\idm_setup_temp\idm35.tmp
  • %TEMP%\idm_setup_temp\idm34.tmp
  • %TEMP%\idm_setup_temp\idm33.tmp
  • %TEMP%\idm_setup_temp\idm32.tmp
  • %TEMP%\idm_setup_temp\idm31.tmp
  • %TEMP%\idm_setup_temp\idm30.tmp
  • %TEMP%\idm_setup_temp\idm3.tmp
  • %TEMP%\idm_setup_temp\idm29.tmp
  • %TEMP%\idm_setup_temp\idm28.tmp
  • %TEMP%\idm_setup_temp\idm27.tmp
  • %TEMP%\idm_setup_temp\idm26.tmp
  • %TEMP%\idm_setup_temp\idm25.tmp
  • %TEMP%\idm_setup_temp\idm24.tmp
  • %TEMP%\idm_setup_temp\idm23.tmp
  • %TEMP%\idm_setup_temp\idm36.tmp
  • %TEMP%\idm_setup_temp\idm67.tmp
  • %TEMP%\idm_setup_temp\idm81.tmp
  • %TEMP%\idm_setup_temp\idm53.tmp
  • %TEMP%\idm_setup_temp\idm80.tmp
  • %TEMP%\idm_setup_temp\idm8.tmp
  • %TEMP%\idm_setup_temp\idm79.tmp
  • %TEMP%\idm_setup_temp\idm78.tmp
  • %TEMP%\idm_setup_temp\idm77.tmp
  • %TEMP%\idm_setup_temp\idm76.tmp
  • %TEMP%\idm_setup_temp\idm75.tmp
  • %TEMP%\idm_setup_temp\idm74.tmp
  • %TEMP%\idm_setup_temp\idm73.tmp
  • %TEMP%\idm_setup_temp\idm72.tmp
  • %TEMP%\idm_setup_temp\idm71.tmp
  • %TEMP%\idm_setup_temp\idm70.tmp
  • %TEMP%\idm_setup_temp\idm7.tmp
  • %TEMP%\idm_setup_temp\idm69.tmp
  • %TEMP%\idm_setup_temp\idm22.tmp
  • %TEMP%\idm_setup_temp\idm68.tmp
  • %TEMP%\idm_setup_temp\idm66.tmp
  • %TEMP%\idm_setup_temp\idm65.tmp
  • %TEMP%\idm_setup_temp\idm64.tmp
  • %TEMP%\idm_setup_temp\idm63.tmp
  • %TEMP%\idm_setup_temp\idm62.tmp
  • %TEMP%\idm_setup_temp\idm61.tmp
  • %TEMP%\idm_setup_temp\idm60.tmp
  • %TEMP%\idm_setup_temp\idm6.tmp
  • %TEMP%\idm_setup_temp\idm59.tmp
  • %TEMP%\idm_setup_temp\idm58.tmp
  • %TEMP%\idm_setup_temp\idm57.tmp
  • %TEMP%\idm_setup_temp\idm56.tmp
  • %TEMP%\idm_setup_temp\idm55.tmp
  • %TEMP%\idm_setup_temp\idm54.tmp
  • %TEMP%\idm_setup_temp\idm51.tmp
  • %TEMP%\idm_setup_temp\idm52.tmp
  • %TEMP%\idm_setup_temp\idm21.tmp
  • %TEMP%\idm_setup_temp\idm126.tmp
  • %TEMP%\idm_setup_temp\idm123.tmp
  • %TEMP%\idm_setup_temp\idm122.tmp
  • %TEMP%\idm_setup_temp\idm121.tmp
  • %TEMP%\idm_setup_temp\idm120.tmp
  • %TEMP%\idm_setup_temp\idm12.tmp
  • %TEMP%\idm_setup_temp\idm119.tmp
  • %TEMP%\idm_setup_temp\idm118.tmp
  • %TEMP%\idm_setup_temp\idm117.tmp
  • %TEMP%\idm_setup_temp\idm116.tmp
  • %TEMP%\idm_setup_temp\idm115.tmp
  • %TEMP%\idm_setup_temp\idm114.tmp
  • %TEMP%\idm_setup_temp\idm113.tmp
  • %TEMP%\idm_setup_temp\idm112.tmp
  • %TEMP%\idm_setup_temp\idm111.tmp
  • %TEMP%\idm_setup_temp\idm124.tmp
  • %TEMP%\idm_setup_temp\idm110.tmp
  • %TEMP%\idm_setup_temp\idm109.tmp
  • %TEMP%\idm_setup_temp\idm108.tmp
  • %TEMP%\idm_setup_temp\idm107.tmp
  • %TEMP%\idm_setup_temp\idm106.tmp
  • %TEMP%\idm_setup_temp\idm105.tmp
  • %TEMP%\idm_setup_temp\idm104.tmp
  • %TEMP%\idm_setup_temp\idm103.tmp
  • %TEMP%\idm_setup_temp\idm102.tmp
  • %TEMP%\idm_setup_temp\idm101.tmp
  • %TEMP%\idm_setup_temp\idm100.tmp
  • %TEMP%\idm_setup_temp\idm10.tmp
  • %TEMP%\idm_setup_temp\idm1.tmp
  • %TEMP%\idm_setup_temp\idm0.tmp
  • %TEMP%\7zipsfx.002\cleanup.cmd
  • %TEMP%\idm_setup_temp\idm11.tmp
  • %TEMP%\idm_setup_temp\idm140.tmp
  • %TEMP%\idm_setup_temp\idm2.tmp
  • %TEMP%\idm_setup_temp\idm127.tmp
  • %TEMP%\idm_setup_temp\idm19.tmp
  • %TEMP%\idm_setup_temp\idm18.tmp
  • %TEMP%\idm_setup_temp\idm17.tmp
  • %TEMP%\idm_setup_temp\idm16.tmp
  • %TEMP%\idm_setup_temp\idm150.tmp
  • %TEMP%\idm_setup_temp\idm15.tmp
  • %TEMP%\idm_setup_temp\idm149.tmp
  • %TEMP%\idm_setup_temp\idm148.tmp
  • %TEMP%\idm_setup_temp\idm147.tmp
  • %TEMP%\idm_setup_temp\idm146.tmp
  • %TEMP%\idm_setup_temp\idm145.tmp
  • %TEMP%\idm_setup_temp\idm144.tmp
  • %TEMP%\idm_setup_temp\idm143.tmp
  • %TEMP%\idm_setup_temp\idm142.tmp
  • %TEMP%\idm_setup_temp\idm20.tmp
  • %TEMP%\idm_setup_temp\idm141.tmp
  • %TEMP%\idm_setup_temp\idm14.tmp
  • %TEMP%\idm_setup_temp\idm139.tmp
  • %TEMP%\idm_setup_temp\idm138.tmp
  • %TEMP%\idm_setup_temp\idm137.tmp
  • %TEMP%\idm_setup_temp\idm136.tmp
  • %TEMP%\idm_setup_temp\idm135.tmp
  • %TEMP%\idm_setup_temp\idm134.tmp
  • %TEMP%\idm_setup_temp\idm133.tmp
  • %TEMP%\idm_setup_temp\idm132.tmp
  • %TEMP%\idm_setup_temp\idm131.tmp
  • %TEMP%\idm_setup_temp\idm130.tmp
  • %TEMP%\idm_setup_temp\idm13.tmp
  • %TEMP%\idm_setup_temp\idm129.tmp
  • %TEMP%\idm_setup_temp\idm128.tmp
  • %TEMP%\idm_setup_temp\idm125.tmp
  • %TEMP%\idm_setup_temp\idm82.tmp
  • %TEMP%\idm_setup_temp\idm83.tmp
  • %TEMP%\idm_setup_temp\idm84.tmp
  • %TEMP%\d66.tmp\tool\toolbar\guimagination.tbi
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz_2016\glyfz_2016-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\glyfz 2016.tbi
  • %TEMP%\d66.tmp\tool\toolbar\gl.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gd.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gant3_style_by_pkuwyc_3.tbi
  • %TEMP%\d66.tmp\tool\toolbar\gant3_small_hot_3_pkuwyc.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gant3_small_3_pkuwyc.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\311.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gant3_large_hot_3_pkuwyc.bmp
  • %TEMP%\d66.tmp\tool\toolbar\flat2015.tbi
  • %TEMP%\d66.tmp\tool\toolbar\flat2015.bmp
  • %TEMP%\d66.tmp\tool\toolbar\flat2015-over.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style.tbi
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\readme!.txt
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-small_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\dtu_style-large_disabled.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\325.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\323.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\317.bmp
  • %TEMP%\d66.tmp\tool\toolbar\gant3_large_3_pkuwyc.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\315.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy_toolbar\h3m_glossy_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy_toolbar\h3m_glossy_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_glossy_toolbar\h3m_glossy_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers_toolbar\h3m_ps_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes_toolbar\h3m_os_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes_toolbar\h3m_os_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes_toolbar\h3m_os_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_olive_shapes_toolbar\h3m_os_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers_toolbar\h3m_ps_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons_toolbar\h3m_buttons_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons_toolbar\h3m_buttons_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons_toolbar\h3m_buttons_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons_toolbar\h3m_buttons_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_buttons.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes_toolbar\h3m_bs_large_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bronze_shapes.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_toolbars.zip
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_small_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_bluesky_shapes_toolbar\h3m_bss_small_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\h3m_cubic3d_toolbar\h3m_cubic3d_large_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\252.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\251.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\250.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit\bilsorbit_sh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit\bilsorbit_ln.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit\bilsorbit_lh.bmp
  • %TEMP%\d66.tmp\tool\toolbar\7_idm\7-idmhot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\7_idm\7-idm.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_style_3.tbi
  • %TEMP%\d66.tmp\tool\toolbar\3d_small_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_smallhot_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_large_3_hdpi15.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_large_3.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_largehot_3_hdpi15.bmp
  • %TEMP%\d66.tmp\tool\toolbar\3d_largehot_3.bmp
  • %TEMP%\idm_setup_temp\idmsetup2.log
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit.tbi
  • %TEMP%\idm_setup_temp\idm99.tmp
  • %TEMP%\idm_setup_temp\idm97.tmp
  • %TEMP%\idm_setup_temp\idm96.tmp
  • %TEMP%\idm_setup_temp\idm95.tmp
  • %TEMP%\idm_setup_temp\idm94.tmp
  • %TEMP%\idm_setup_temp\idm93.tmp
  • %TEMP%\idm_setup_temp\idm92.tmp
  • %TEMP%\idm_setup_temp\idm91.tmp
  • %TEMP%\idm_setup_temp\idm90.tmp
  • %TEMP%\idm_setup_temp\idm9.tmp
  • %TEMP%\idm_setup_temp\idm89.tmp
  • %TEMP%\idm_setup_temp\idm88.tmp
  • %TEMP%\idm_setup_temp\idm87.tmp
  • %TEMP%\idm_setup_temp\idm86.tmp
  • %TEMP%\idm_setup_temp\idm85.tmp
  • %TEMP%\idm_setup_temp\idm98.tmp
  • %TEMP%\d66.tmp\tool\toolbar\black-over.bmp
  • %TEMP%\d66.tmp\tool\toolbar\bilsorbit\bilsorbit_sn.bmp
  • %TEMP%\d66.tmp\tool\toolbar\black.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\249.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\213.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\248.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\247.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\225.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\224.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\223.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\222.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\221.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\220.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\219.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\218.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\217.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\216.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\215.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\214.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\212.bmp
  • %TEMP%\d66.tmp\tool\toolbar\black.tbi
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\211.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\210.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\203.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\202.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\201.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\200.bmp
  • %TEMP%\d66.tmp\tool\toolbar\dtu_style\bitmap\199.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_mini_normal.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_mini_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_mini_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_hot.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow_disable.bmp
  • %TEMP%\d66.tmp\tool\toolbar\blue_arrow.tbi
  • %TEMP%\d66.tmp\tool\toolbar\h3m_painted_stickers_toolbar\h3m_ps_small_hot.bmp
  • %TEMP%\rarsfx0\idm.exe
Miscellaneous
Searches for the following windows
  • ClassName: 'EDIT' WindowName: ''
  • ClassName: '' WindowName: ''
  • ClassName: '' WindowName: 'IDM agent for click monitoring in IE-based browsers'
Creates and executes the following
  • '%TEMP%\7zipsfx.000\idm.exe' /PWINDOWS\Logs\CBS
  • '%TEMP%\rarsfx0\idm.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
  • '%TEMP%\7zipsfx.001\....exe'
  • '%TEMP%\7zipsfx.001\idm.exe' /skipdlgs
  • '%TEMP%\idm_setup_temp\idm1.tmp' -d "%TEMP%\IDM_Setup_Temp\" -skdlgs
  • '%ProgramFiles(x86)%\internet download manager\idmbroker.exe' -RegServer
  • '%ProgramFiles(x86)%\internet download manager\idman.exe' /rtr /onsilentsetup
  • '%TEMP%\7zipsfx.001\...exe'
  • '%TEMP%\~sfx00335c713c\idm.toolbar.exe'
  • '%TEMP%\7zipsfx.001\.....exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\7ZipSfx.001\$.cmd" /S/VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-"' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\7ZipSfx.002\Cleanup.cmd" "' (with hidden window)
  • '<SYSTEM32>\cmd.exe' /c "%TEMP%\D66.tmp\D76.bat %TEMP%\~sfx00335C713C\IDM.Toolbar.exe"' (with hidden window)
  • '%TEMP%\7zipsfx.001\.....exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-' (with hidden window)
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\1968JHTM.cmd" "%TEMP%\7ZipSfx.001\.....exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-"' (with hidden window)
Executes the following
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\7ZipSfx.001\$.cmd" /S/VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-"
  • '%WINDIR%\syswow64\ping.exe' -n 5 127.0.0.1
  • '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMIECC64.dll"
  • '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMGetAll64.dll"
  • '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMIECC64.dll"
  • '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\downlWithIDM64.dll"
  • '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMGetAll64.dll"
  • '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\downlWithIDM64.dll"
  • '%WINDIR%\syswow64\xcopy.exe' /s /e /i /y /h /r /k "LRM" "%ProgramFiles(x86)%\Internet Download Manager"
  • '<SYSTEM32>\cmd.exe' /c "%TEMP%\D66.tmp\D76.bat %TEMP%\~sfx00335C713C\IDM.Toolbar.exe"
  • '<SYSTEM32>\xcopy.exe' /s /e /i /y /h /r /k "Tool" "%ProgramFiles(x86)%\Internet Download Manager"
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\DownloadManager /v tvfrdt /f
  • '%WINDIR%\syswow64\reg.exe' query "HKU\S-1-5-19\Environment"
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "TipTimeStamp" /t REG_SZ /d "Tue Jan 21 17:15:57 2020" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "TipStartUp" /t REG_DWORD /d "1" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "TipFilePos" /t REG_DWORD /d "188" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "ToolbarStyle" /t REG_SZ /d "Koushik Halder" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "windowPlacementV6" /t REG_NONE /d "," /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "FName" /t REG_SZ /d "IDM" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "LName" /t REG_SZ /d "Registered" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "Email" /t REG_SZ /d "info@tonec.com" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "Serial" /t REG_SZ /d "9QNBL-L2641-Y7WVE-QEN3I" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager\Passwords\http://*.##xa.net" /v "User" /t REG_NONE /d "??s" /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKEY_USERS\S-1-5-21-2754736582-2265559669-3571272114-1001\Software\DownloadManager /v Email /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKEY_USERS\S-1-5-21-2754736582-2265559669-3571272114-1001\Software\DownloadManager /v Serial /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKEY_USERS\S-1-5-21-2754736582-2265559669-3571272114-1001\Software\DownloadManager /v LName /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKEY_USERS\S-1-5-21-2754736582-2265559669-3571272114-1001\Software\DownloadManager /v FName /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKEY_CURRENT_USER\Software\DownloadManager /v Serial /f
  • '%WINDIR%\syswow64\regini.exe' permdel.txt
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\Classes\Wow6432Node\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKLM\Software\Classes\Wow6432Node\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKLM\Software\Classes\Wow6432Node\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKLM\Software\Classes\CLSID\{7B8E9164-324D-4A2E-A46D-0165FB2000EC} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKLM\Software\Classes\CLSID\{5ED60779-4DE2-4E07-B862-974CA4FF2E9C} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\DownloadManager /v CheckUpdtVM /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager\Passwords\http://*.##xa.net" /v "EncPassword" /t REG_NONE /d "??|" /f
  • '%WINDIR%\syswow64\reg.exe' add "HKCU\Software\DownloadManager" /v "vCOUFP" /t REG_SZ /d "636b03" /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\DownloadManager /v scansk /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\Classes\CLSID\{6DDF00DB-1234-46EC-8356-27E7B2051192} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\Classes\CLSID\{D5B91409-A8CA-4973-9A0B-59F713D25671} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKLM\Software\Classes\CLSID\{07999AC3-058B-40BF-984F-69EB1E554CA7} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKLM\Software\Classes\CLSID\{6DDF00DB-1234-46EC-8356-27E7B2051192} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKLM\Software\Classes\CLSID\{D5B91409-A8CA-4973-9A0B-59F713D25671} /f
  • '%WINDIR%\syswow64\reg.exe' DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Internet Download Manager" /f
  • '%WINDIR%\syswow64\reg.exe' DELETE "HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Internet Download Manager" /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKEY_CURRENT_USER\Software\DownloadManager /v FName /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKEY_CURRENT_USER\Software\DownloadManager /v LName /f
  • '%WINDIR%\syswow64\reg.exe' DELETE HKEY_CURRENT_USER\Software\DownloadManager /v Email /f
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\7ZipSfx.002\Cleanup.cmd" "
  • '%WINDIR%\syswow64\reg.exe' DELETE HKCU\Software\Classes\CLSID\{07999AC3-058B-40BF-984F-69EB1E554CA7} /f
  • '%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\1968JHTM.cmd" "%TEMP%\7ZipSfx.001\.....exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-"

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке