Gen.Variant.Razy.43074_ca7cadf5e7

by malwarelabrobot on May 16th, 2017 in Malware Descriptions.

HEUR:Trojan.Win32.Generic (Kaspersky), Gen:Variant.Razy.43074 (B) (Emsisoft), Gen:Variant.Razy.43074 (AdAware), Trojan.NSIS.StartPage.FD, mzpefinder_pcap_file.YR (Lavasoft MAS)
Behaviour: Trojan

The description has been automatically generated by Lavasoft Malware Analysis System and it may contain incomplete or inaccurate information.

Summary

Dynamic Analysis

Static Analysis

Network Activity

Map

Strings from Dumps

Removals

MD5: ca7cadf5e7c508a5319d35295356cc28
SHA1: fa52802ec2a559f3fc37a7a50280c207df6192c4
SHA256: ed1b0b5a81c8a75cdf67b89ac011232c0bc797b430b503df5d18105a108fde51
SSDeep: 6144:UiIem/AXMlwNBAI7H8Hr2EQ bA2gDrgD6CbXwYRf0kCc4TNPa5WKZp4uGHy:UiI/A8SaHwN2w06Cd /NSsk u2y
Size: 459896 bytes
File type: EXE
Platform: WIN32
Entropy: Packed
PEID: UPolyXv05_v6
Company: Software production company.
Created at: 1971-07-14 14:59:20
Analyzed on: Windows7 SP1 32-bit

Summary:

Trojan. A program that appears to do one thing but actually does another (a.k.a. Trojan Horse).

Payload

No specific payload has been found.

Process activity

The Trojan creates the following process(es):

ca7cadf5e7c508a5319d35295356cc28 .exe:3496
%original file name%.exe:3436
ohvoca.exe:3804
ohvoca.exe:1876
ohvoca.exe:3060
ohvoca.exe:3736
ohvoca.exe:2800
ohvoca.exe:2940
ohvoca.exe:3028
ohvoca.exe:3184
ohvoca.exe:3872
ohvoca.exe:2648
ohvoca.exe:3916
ohvoca.exe:3768
ohvoca.exe:3480
ohvoca.exe:2628
ohvoca.exe:3932
ohvoca.exe:3136
ohvoca.exe:3172
ohvoca.exe:1848
ohvoca.exe:2040
ohvoca.exe:2896
ohvoca.exe:2996
ohvoca.exe:820
ohvoca.exe:3196
ohvoca.exe:808
ohvoca.exe:644
ohvoca.exe:2252

The Trojan injects its code into the following process(es):

ohvoca.exe:3296
ohvoca.exe:4044
ohvoca.exe:3348
ohvoca.exe:3792
raptrpatch.exe:3572

Mutexes

The following mutexes were created/opened:
No objects were found.

File activity

The process ca7cadf5e7c508a5319d35295356cc28 .exe:3496 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Raptr\bundle.dat (4 bytes)
%Program Files%\Raptr\resources\images\bundle\logo\spirittales_logo.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\raptrpatch.exe (4353058 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229D.tmp (13214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\amd_beta_splash.bmp (16288 bytes)
%Program Files%\Raptr\silent.dat (1 bytes)
%Program Files%\Raptr\uninstall.exe (1137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\FindProcDLL.dll (7 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229C.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp (0 bytes)

The process %original file name%.exe:3436 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2B24.tmp (32726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\ihodinfaa.ocx (756838 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fanoseoxt\fawoedwef.drv (65356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2BD2.tmp (22638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exe (652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\opmii.ocx (1029580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2BD3.tmp (24790 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\uvasfop.cat (2264286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\umos.dmp (3750836 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ome.dmp (1503944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exep (408 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\awabe.sys (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ecwa\aderkuma.ocx (1682428 bytes)
C:\ca7cadf5e7c508a5319d35295356cc28 .exe (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ecwa\aqx.cat (3407530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\viogiwvu.sys (3899734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fikadu\uwpuheegx.mui (506300 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2B35.tmp (38758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ecwa\ade.sys (2280830 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ecwa\ixsifoi.dat (4262806 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ehe.dmp (1680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fanoseoxt\uliwgi.drv (4374582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fanoseoxt\qeaghuamg.cat (1013268 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\beavnohoq.sys (3183810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2BE4.tmp (26526 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fanoseoxt\ifp.bin (306226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fikadu\kuloma.cat (1853816 bytes)

The process ohvoca.exe:3804 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\ProgramData\Haoruvevk\ohvoca.exe (389 bytes)

The process ohvoca.exe:3348 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1BB09BEEC155258835C193A7AA85AA5B_24063F956624883A5BA3ACEFF45EA084 (1488 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B6E683A7A45CC59BF035C9BA8C7AB9D (888 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 (688 bytes)
C:\Windows\Temp\Tar8B20.tmp (2712 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (1082 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 (5 bytes)
C:\Windows\Temp\Cab8B1F.tmp (48 bytes)
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F5BEJ4YJ\icanhazip_com[1].txt (15 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0060A9F9287878B15AB61E0E47645E5 (2 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1BB09BEEC155258835C193A7AA85AA5B_24063F956624883A5BA3ACEFF45EA084 (471 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0060A9F9287878B15AB61E0E47645E5 (392 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B6E683A7A45CC59BF035C9BA8C7AB9D (602 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CC42971B7939A9CA55C44CFC893D7C1D (812 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CC42971B7939A9CA55C44CFC893D7C1D (832 bytes)
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_88dcd395-b062-45b3-a6cd-79f37c0eba08 (47 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (10 bytes)

The Trojan deletes the following file(s):

C:\Windows\Temp\Cab8B1F.tmp (0 bytes)
C:\Windows\Temp\Tar8B20.tmp (0 bytes)
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F5BEJ4YJ\icanhazip_com[1].txt (0 bytes)

The process ohvoca.exe:3792 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (1082 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0060A9F9287878B15AB61E0E47645E5 (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CC42971B7939A9CA55C44CFC893D7C1D (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CC42971B7939A9CA55C44CFC893D7C1D (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1BB09BEEC155258835C193A7AA85AA5B_24063F956624883A5BA3ACEFF45EA084 (1488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar82E6.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1BB09BEEC155258835C193A7AA85AA5B_24063F956624883A5BA3ACEFF45EA084 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B6E683A7A45CC59BF035C9BA8C7AB9D (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0060A9F9287878B15AB61E0E47645E5 (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab82D5.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B6E683A7A45CC59BF035C9BA8C7AB9D (888 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\icanhazip_com[1].txt (15 bytes)

The Trojan deletes the following file(s):

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar82E6.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab82D5.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\icanhazip_com[1].txt (0 bytes)

The process raptrpatch.exe:3572 makes changes in the file system.
The Trojan creates and/or writes to the following file(s):

%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_sealonline.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_logo_small.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\nvidia_logo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_nobg.ico (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\tab_close.png (373 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_inactive_3.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_raptr_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_highfive.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\ssl.dll (16288 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_browser.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_util32-119906.dll (12024 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\optimize_ignore.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mbox_question.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_c.png (635 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\folder.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_youtube.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_twitter.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\bundle.dat (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\thumb_frame_link_norm.png (556 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\talesrunner_logo.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\3_marker.png (811 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\stop.png (760 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc16c.png (618 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\call_answer.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_player_hover.png (151 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn24c.png (911 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\back.png (291 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_progbar_bg.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Widget.ps (812 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_gmail.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_active_4.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_love.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\bg_pattern_red.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\gobject._gobject.pyd (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\joinable_game_sm.png (426 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\twitch_disabled.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\ijji_36_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl16.png (622 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\control_center\rewards_728x90.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\info_button.png (531 bytes)
%Program Files%\Raptr Inc\Raptr\win32com.shell.shell.pyd (9608 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_it_IT.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_mangafighter.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\vcredist_x86.exe (133421 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\collapse_default.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libi422_i420_plugin.dll (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\invisible.png (461 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\balloon_x_gray.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_poke.mp3 (11 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xblive_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_resize1.png (206 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_disable_icon.png (764 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_google.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\playstv_enabled.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_left.png (368 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_tag_link.png (505 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_active_2.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_replay_off.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\twitch_enabled.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\title_bar_logo.png (904 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\icq_gray.png (923 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_audio.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\scroll_down.png (353 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\drawer_arrow_open.png (235 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_j.png (357 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\aim_gray.png (718 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn64.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_folder.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\librv32_plugin.dll (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\pl_PL.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\bigfootnetworks_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_amd_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\joinable_game_lg.png (584 bytes)
%Program Files%\Raptr Inc\Raptr\pyexpat.pyd (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_krazyaces.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\resume.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\arrow_down.png (325 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libirc.dll (22192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\SimpleFC.dll (6540 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\back_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_add_arrow_hover.png (316 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\video_scissor2.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\love.png (890 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Entrust.net_Secure_Server_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn64c.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\info_icon_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qgif4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_dashboard.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\fr_FR.qm (8184 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libwaveout_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_default.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\tongue.gif (642 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\CAcert_Class3.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\libmfxsw32.dll (522454 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\header_opts_cog1.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_close.png (321 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\community_icon.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_trophy_bronze.png (604 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\raptr16c.png (612 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\qtwcodecs4.dll (5520 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Random.OSRNG.winrandom.pyd (10 bytes)
%Program Files%\Raptr Inc\Raptr\nssutil3.dll (4992 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libdirect2d_plugin.dll (1856 bytes)
%Program Files%\Raptr Inc\Raptr\libsasl.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_video_icon.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_highlight_off.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\driftcity_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\razer_logo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn16c.png (581 bytes)
%Program Files%\Raptr Inc\Raptr\msvcr90.dll (22552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_trash.png (906 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\voip_gray.png (518 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\prev.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_timeline_play.png (420 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\accept.png (781 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_poop.mp3 (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_topbar_m.png (125 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\msn_color.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Cipher.AES.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\iamyourfather.gif (1856 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libafile_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn32.png (687 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fb32c.png (461 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mbox_information.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\refresh.png (849 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\refresh.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_min_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\America_Online_Root_Certification_Authority_1.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\control_center\twitch_728x90_b.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\facebook_button_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_twitter.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\tab_close_hover.png (374 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn16c.png (714 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_hover_3.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\slap.png (726 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dvr_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\cta_dino.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\crop.png (541 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libglwin32_plugin.dll (3312 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libyuy2_i422_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gallery_camera_big.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_hifive.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_wait.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4.QtCore.pyd (47570 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam24c.png (623 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_prev.png (847 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\facebook_button_active.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\search_close.png (273 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\tr_TR.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\back_to_gallery_arrow.png (360 bytes)
%Program Files%\Raptr Inc\Raptr\library.zip (349926 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\surprised.gif (641 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_close_x.png (599 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\button_play.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\heal.png (349 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\phonon_backend\phonon_ds94.dll (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\reload_active.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_notices.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\ja_JP.qm (6360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\home.png (730 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\send_file.png (670 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\facebook_gray.png (560 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_raptr_on.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_nesw.cur (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\third_party\youtube_dialog_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn32.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\default_game_icon.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_red_ring.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_yahoo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\dragonica_logo.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc32.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\community_icon_active.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\zh_TW.qm (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_edit.png (702 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_download_error.png (418 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_shoryuken.mp3 (12 bytes)
%Program Files%\Raptr Inc\Raptr\QtGui4.dll (266044 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Thawte_Primary_Root_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\bz2.pyd (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\knob_hover.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_avail_lg.png (505 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_move.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_twitter_off.png (792 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_ingame_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gtalk_gray.png (932 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn24.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\facebook_hover.png (887 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_twitch_off.png (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\teaser_close.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_twitch_on.png (7192 bytes)
%Program Files%\Raptr Inc\Raptr\msvcm90.dll (8184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_ns.cur (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\ssl-nss.dll (20416 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\chat.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\arrow_down.png (261 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playing_icon.png (236 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_replay_logo_beta.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_eat2.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\available.png (513 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim64c.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\raptr_encoder_server64-119906.exe (67494 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_start_arrow.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\aim_color.png (797 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\doodle.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_inactive_3.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\lunia_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_full_screen.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\halo.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\heroesofnewerth.png (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_b.png (502 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_added.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gtalk_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\yelling-anim.gif (852 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\UtilRect.vs (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\cancel.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\undo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\typing.png (375 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_youtube_on.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libadummy_plugin.dll (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl24c.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\playstv_patch.exe (2429300 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\libmp3lame-ttv.dll (13584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_main.png (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\launch_button_arrow.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\groove_white.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_background.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_activity_hover.png (405 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\capsule_bg_m.png (160 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq24c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_amazon.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_record_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\incoming.mp3 (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_optimize_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinbox_down_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\heart.gif (982 bytes)
%Program Files%\Raptr Inc\Raptr\libgobject-2.0-0.dll (11048 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\unease.gif (635 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_hover_3.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_xfire_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\barrel.png (858 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_steam.png (995 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\twitter_button_default.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\tileview_clock.png (666 bytes)
%Program Files%\Raptr Inc\Raptr\nssckbi.dll (14184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_128x128.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\loading.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_timeline_pause.png (232 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_rp_avail.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libi420_rgb_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_avatar.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq32.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\phonon_backend\Microsoft.VC90.CRT.manifest (346 bytes)
%Program Files%\Raptr Inc\Raptr\liboscar.dll (34365 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\video_scissor.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\razer.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\logo_amd_gaming_evolved.png (9 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Verisign_RSA_Secure_Server_CA.pem (827 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fb64c.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_resize2.png (201 bytes)
%Program Files%\Raptr Inc\Raptr\msvc2010\vcredist_x86.exe (163934 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\optimize_check.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\convert_user_dino.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_mid.png (202 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\msvcp90.dll (19152 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_excel.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_lunia.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\simplejson._speedups.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_icon.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_championsonline.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\submenu_popout.png (263 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq24.png (804 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\upload_arrow.png (704 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_pwn.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_mid.png (193 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\joinable_game_icon.png (532 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_app_notices.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\freebl3.dll (10136 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\champions_logo.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_inactive_4.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\text_small.png (290 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_away_lg.png (502 bytes)
%Program Files%\Raptr Inc\Raptr\raptr_ep64.exe (12720 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libyuy2_i420_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl16c.png (622 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\close_btn_pressed.png (602 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\convert_user_raptr_logo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\sip.pyd (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top.png (177 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\qkrcodecs4.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl32.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_addgame_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fb16c.png (347 bytes)
%Program Files%\Raptr Inc\Raptr\amf-component-vce-windesktop32.dll (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\more_added.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\reload_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\knob_normal.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\ssl3.dll (8560 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_optimize.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_full_simple.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\button_normal_screen.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_away.png (419 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\refresh.png (425 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_trophy_plat.png (696 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\install.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_movedir1.png (301 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_active_2.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\arrow_down_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libyuv_plugin.dll (1552 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Microsoft_Internet_Authority.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\resume.png (791 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc24c.png (558 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_hover_left.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_app_redring.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_gamespot.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_prefs_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\libxml2-2.dll (34773 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_app_myprofile.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\cod.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mumble.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\nss3.dll (35784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_activity_btn.png (388 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\mario.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_goldring.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_logoicon_v2_32x32.ico (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\post_game\thief_raptr_600x600_buy_now.jpg (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_smallcog_norm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_fpsi64-119906.dll (15168 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mbox_warning.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\AddTrust_External_Root.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\icq_color.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_home_btn.png (737 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\info_icon_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libvlc.dll (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\main.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\forward_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_tl_pauseclip_norm.png (280 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\status_playing_offline.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\logo_panel_dino.png (979 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\more_default.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\win32pipe.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\nvidia_avatar.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\cancel_over.png (842 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\controller_icon_fill.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\katamari.png (908 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libdrawable_plugin.dll (14 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fbc24.png (268 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\twitter_32.png (601 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\ge_powerbyraptr_logo.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_google_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\msvc2010\vcredist_x64.exe (179646 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_alert_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_minimize.png (186 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_active_1.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\scroll_down.png (353 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\crying-anim.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ps3_bg.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\it_IT.qm (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\FindProcDLL.dll (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dlm_spinner_normal.gif (847 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_gameplay.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\ValiCert_Class_2_VA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\chat_icon.png (558 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_replay_logo.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinner.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\driver_outofdate.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_xfire.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\button_pause.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_pl_PL.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire24c.png (668 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_bigfootnetworks.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_pause_range.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\plays_logo_client_beta.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_International_Server_Class_3_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\qcncodecs4.dll (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\next.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\pause_active.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libvdummy_plugin.dll (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_close_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_help64-119906.dll (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_image.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\cancel_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_knob_hover.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\login_panel_logo_amd.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\tooltip_qmark.png (430 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\twitter_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\smime3.dll (8184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_next.png (905 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_hover_2.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\twitchsdk_32_raptr_release.dll (32824 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\control_base.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\wink.gif (655 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\roundhouse.png (839 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_options.png (552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_offline_lg.png (501 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\zergrush.png (764 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libi422_yuy2_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\ext_link.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\libpurple.dll (94878 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\intel_avatar.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\heroesofnewerth_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\resume_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_close_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\libmp3lame-ttv.dll (23424 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_eat.mp3 (2392 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qtiff4.dll (10136 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_egg.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_poop.gif (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_progbar_fg.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top_btndown.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Hash._SHA256.pyd (11 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_arrow_down.png (265 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_hover_1.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qjpeg4.dll (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\shoryuken.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\laughinghard-anim.gif (729 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_facebook.png (757 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_options_hover.png (312 bytes)
%Program Files%\Raptr Inc\Raptr\win32process.pyd (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_maximize_press.png (220 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\save.png (532 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\sealonline_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_d.png (527 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_video_start.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\brightshadow.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\plays_default_user.png (614 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\close_btn_hover.png (487 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_movepat2.png (145 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\pwn.png (434 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_bottom.png (563 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\install_press.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq64c.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ventrilo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_finger.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\AOL_Member_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\smile.gif (642 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_caption_2.png (9 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim24c.png (733 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\dashboard_plays_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\doodle_white.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libjabber.dll (46916 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_barrel.mp3 (12 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim32.png (897 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_a.png (619 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_svcs_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_icq_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\poke.png (894 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\icq_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gtalk_color.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\ext_link_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\lunia.png (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_twitter_off.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\drawer_arrow_close.png (249 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\over_tl_sizer_down.png (165 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_minimize_hover.png (191 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\save_disabled.png (520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_play_range.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\libplds4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\control_center\community_728x90.png (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_de_DE.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\scroll_grip_vert.png (197 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vertical_slider_knob.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_can_optimize.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\scroll_grip.png (197 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_active_4.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\krazyaces_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\color_disk_highlight.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\optimize_caution.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\guest_convert_logo.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\controller_icon_error.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4.QtNetwork.pyd (16944 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\brightshadow_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl64c.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\libymsg.dll (33391 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk32.png (734 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\arrow_down.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_facebook_off.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pause_over.png (561 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\refresh_press.png (798 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\play_game_icon.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_buttons_overlay.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_facebook_on.png (897 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_close_hover.png (580 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_bar_red_server_info.png (140 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\Microsoft.VC90.CRT.manifest (346 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dlm_error.png (243 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\radio_on.png (514 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_trophy_gold.png (602 bytes)
%Program Files%\Raptr Inc\Raptr\uninstall.exe (1475 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_pause.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_moreapps.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qico4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\thirdpartylicenses.txt (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\list_selected.png (11 bytes)
%Program Files%\Raptr Inc\Raptr\libsilc-1-1-2.dll (82435 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn16hc.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libamem_plugin.dll (15 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libxmpp.dll (19152 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_katamari.png (12 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\login_panel_logo_raptr.png (9 bytes)
%Program Files%\Raptr Inc\Raptr\win32api.pyd (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\raptr_logo.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\_socket.pyd (1552 bytes)
%Program Files%\Raptr Inc\Raptr\pythoncom26.dll (12088 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_katamari.mp3 (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_tabbar_info.png (493 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_can_optimize.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gallery_icon.png (883 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\power_icon.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\python26.dll (67969 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\tab_add_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_options_inert.png (633 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_video.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_raptr.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\pywintypes26.dll (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_rescan_down.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\ru_RU.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\barbtn_opts_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_close_press.png (363 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim16c.png (447 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_ja_JP.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\drawer_arrow_hover_close.png (175 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_added.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_gg.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_plays_logo.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam24.png (623 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Microsoft_Secure_Server_Authority_2010.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\plays_logo_client.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_full_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire16hc.png (640 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_doc.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\call_hold.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\access\libfilesystem_plugin.dll (1552 bytes)
%Program Files%\Raptr Inc\Raptr\SSLEAY32.dll (7192 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\swresample-ttv-0.dll (12536 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_trash.png (580 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\login_header.png (12 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_headshot.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_tl_playclip_inert.png (419 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_ko_KR.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\outgoing.mp3 (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\default_boxart.jpg (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_weather.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libi420_yuy2_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_inactive_1.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qsvg4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\warning.png (370 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_zh_TW.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_love.mp3 (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\scroll_up.png (351 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam16.png (398 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_background.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top_btnhover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libmsn.dll (36078 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mag_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_twitter.png (800 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\control_center\wot_rectangle_180x150.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\exchndl.dll (19592 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_help32-119906.dll (5064 bytes)
%Program Files%\Raptr Inc\Raptr\unicodedata.pyd (19592 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_shoryuken.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\download_arrow.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_prefs_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\toolbar_arrow_down.png (181 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire24.png (485 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_redfaction.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\progress_bar.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_msgcenter.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_kotaku.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_chat.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\qjpcodecs4.dll (6360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_bigcog_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\call_resume.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_addgame_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libtorrent.pyd (62035 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\text_medium.png (344 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_h.png (234 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\points.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_is_optimized.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\raptr24c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_myprofile.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_inactive_4.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\StartCom_Certification_Authority.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\arrow_left.png (292 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_addgame_down.png (536 bytes)
%Program Files%\Raptr Inc\Raptr\libnspr4.dll (12024 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn24.png (535 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\refresh.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\msn_gray.png (876 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinbox_down_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_bg.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_video_stop.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\anim-roundhouse.gif (6 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Microsoft_Secure_Server_Authority.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_alert_not_yet.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_xbox.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libsilcclient-1-1-2.dll (34561 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\resize_handle.png (182 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\arrow_down_open.png (186 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_default.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim32c.png (920 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Equifax_Secure_Global_eBusiness_CA-1.pem (964 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_close_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\f2p_ping.exe (1552 bytes)
%Program Files%\Raptr Inc\Raptr\amf-core-windesktop64.dll (26688 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\away.png (514 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\offline.png (455 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\arrow_up.png (320 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\playstv_disabled.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire32c.png (783 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_bg.png (402 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\header_opts_cog2.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\back_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libvlccore.dll (71262 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_options_press.png (332 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc24.png (558 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_0.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\title_bar_logo_inactive.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\twitter.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_level_star.png (637 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim24.png (624 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl24.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\settings_cog_active.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_Class3_Extended_Validation_CA.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\redfaction.png (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\online_jewel.png (507 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\2_marker.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\amf-component-vce-windesktop64.dll (8560 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\scroll_up.png (351 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\loading_animation.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_bigcog_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Webcam.ps (600 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_tl_pauseclip_inert.png (276 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn64c.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_bg.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mag_btn.png (642 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\yahoo_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_minimize_press.png (206 bytes)
%Program Files%\Raptr Inc\Raptr\QtNetwork4.dll (33263 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\color_disk_white.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\blush.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\dashboard_plays_beta_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\optimize_slider_knob.png (512 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl16hc.png (818 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\black.png (168 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\swresample-ttv-0.dll (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gallery_icon_active.png (918 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_eat.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\thq_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\intl.dll (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_bigcog_inert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Go_Daddy_Class_2_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\refresh_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_record_confdlg.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dlm_pause.png (186 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\scroll_grip_vert.png (122 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top_btn.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\UtilRect.ps (612 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\gold_ring.png (12 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\outgoing.wav (1856 bytes)
%Program Files%\Raptr Inc\Raptr\raptrstub.exe (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\pause.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam64.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\avutil-ttv-51.dll (9320 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\scroll_grip_horiz.png (237 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\message.png (541 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\facebook_32.png (970 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_trash_disabled.png (910 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_host_ex.dll (77843 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\search_pressed.png (505 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Shader.vs (860 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\ko_KR.qm (6360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\facebook_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_ps3.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\cancel.png (856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\away.png (514 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_facebook.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\bg_pattern.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\libgthread-2.0-0.dll (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\friends.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_right.png (370 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\bigsmile.gif (651 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_offline.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Cipher.DES3.pyd (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\refresh_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libcaca_plugin.dll (25112 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire16c.png (399 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_caption_3.png (11 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\more_hover.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_pdf.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Widget.vs (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_host.dll (27704 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_movepat1.png (144 bytes)
%Program Files%\Raptr Inc\Raptr\win32evtlog.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_slap.mp3 (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_twitch_logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc1EB7.tmp (4313763 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_empty_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_wowtalent.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libdirectsound_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_es_ES.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\offline.png (455 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libgrey_yuv_plugin.dll (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\radio_full.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\driver_out_of_date.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libaim.dll (16944 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vuze.ico (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_nvidia.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_download_paused.png (360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\dino_pwn_poke.gif (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\refresh_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_screenshot.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\de_DE.qm (8184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam16c.png (398 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim24c.png (777 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_gunbound.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire64c.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_specify_game.png (493 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\post_game_summary\lol_728x90.png (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\controller_icon_empty.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\barbtn_opts_norm.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\group_edit.png (431 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_hover_4.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\knob_down.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\zh_CN.qm (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk64c.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\driftcity.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4.QtWebKit.pyd (11344 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_player_blank.png (197 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_pkts32-119906.dll (12536 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\arrow_right.png (269 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire32.png (577 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\btn_nvidia_launcher.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_maximize.png (204 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dashboard_f2p.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\heliotrope._purple.pyd (82435 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_close_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_hover_1.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_inbox.png (773 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\info_grey.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_hover_right.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\teaser_close_hover.png (534 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\headshot.png (322 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_aim_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\away_jewel.png (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_pkts32-119906.dll (12536 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_min.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_2.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4.QtGui.pyd (186350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_help32-119906.dll (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_e.png (238 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\tab_close_pressed.png (373 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_mixer\libinteger_mixer_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_left.png (387 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\playstv_feed.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\twitter_button_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim24.png (465 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\knob_bg.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam16hc.png (796 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\highfive.png (985 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\aim_hover.png (927 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_caption_thief.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_cant_optimize.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_raptr_off.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\dino_poke.gif (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\checkbox_full_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_close.png (562 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\lock_hover.png (291 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qmng4.dll (8184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_added.png (2 bytes)
%Program Files%\Raptr Inc\PlaysTV\bundle.dat (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_full.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\sqlite3.dll (14184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_control_base.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\spinner128.gif (3 bytes)
%Program Files%\Raptr Inc\Raptr\amd_ags.dll (9608 bytes)
%Program Files%\Raptr Inc\Raptr\raptr_encoder_server-119906.exe (66590 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\search_hover.png (529 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top_btninert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_kick.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_close2.png (516 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\ro_RO.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_game64-119906.dll (68229 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\scroll_grip_horiz.png (154 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\nvidia.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshot_icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_fpsi32-119906.dll (13368 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\checkbox_empty_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_zergrush.png (9 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_check_icon.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_facebook_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\checkbox_empty.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\collapse_click.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_headshot.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\yahoo_color.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libmeanwhile-1.dll (6360 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_host.dll (27704 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_yahoo_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\beta_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_xbox_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\twitch_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_pointer.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\info_icon_inert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_slap.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\radio_off.png (458 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\pause_default.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\info_icon_blank.png (150 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\twitchsdk_64_raptr_release.dll (34365 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_facebook_on.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\QtWebKit4.dll (409711 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pause.png (594 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\refresh_over.png (827 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_hover_mid.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_raptr.png (350 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\toolbar_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_close.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_options.png (287 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\no_boxart.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam64c.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_pkts64-119906.dll (13584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\barbtn_opts_inert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dinos\dino_raptr.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\nl_NL.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_hover.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\sunglasses.gif (640 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_inactive_2.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libicq.dll (16424 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\poop.png (626 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_smallcog_inert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\capsule_bg_l.png (268 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_help64-119906.dll (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl64.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\search_normal.png (497 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_prev_disabled.png (839 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\en_US.qm (16 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ge.ico (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\exclamation.png (701 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\groove_black.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\slider_handle.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_min_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_highlight_on.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\email_32.png (629 bytes)
%Program Files%\Raptr Inc\Raptr\PIL._imaging.pyd (11344 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\driver_up_to_date.png (850 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\info_icon_tiny.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\check_mark.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\manga.png (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_steam_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fb24c.png (474 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\edit_image_icon.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_middle.png (129 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_facebook_off.png (660 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_caption_1.png (11 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5_2.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\button_full_screen.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_i.png (225 bytes)
%Program Files%\Raptr Inc\Raptr\win32wnet.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_rewards.png (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\undo_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_raptr_off.png (905 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_avail.png (667 bytes)
%Program Files%\Raptr Inc\Raptr\_hashlib.pyd (12088 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_download_started.png (360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim64c.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\videoplayer\raptr.jpg (784 bytes)
%Program Files%\Raptr Inc\Raptr\raptr.exe (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam32c.png (800 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_ew.cur (1 bytes)
%Program Files%\Raptr Inc\Raptr\easyhook64.dll (3312 bytes)
%Program Files%\Raptr Inc\Raptr\pidgin.dll (166378 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_chat_hover.png (885 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\souloftheultimatenation_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\dragonica.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\DigiCertHighAssuranceEVRootCA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\libgmodule-2.0-0.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\pt_BR.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_active_3.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamecontroller_large.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_active_3.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_knob_normal.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\stream_stop.wav (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_zh_CN.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\camera.wav (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\cancel_default.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Microsoft_Internet_Authority_2010.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_twitter_on.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_host_ex.dll (77843 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_download_finished.png (409 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\line_redglow.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_thief.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\goodgame.png (553 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\GTE_CyberTrust_Global_Root.pem (876 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam32.png (800 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\redfaction_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\user_group.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\win32file.pyd (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\forward_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\forward.png (289 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_separator.png (260 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Verisign_Class3_Primary_CA.pem (834 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_tag_gray.png (450 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_default.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\powered_by_raptr.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_add.png (222 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\search_close_btn.png (387 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\lock.png (272 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_app_moreapps.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\refresh_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\back_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\cancel_press.png (834 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libyahoo.dll (16944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_util32-119906.dll (12024 bytes)
%Program Files%\Raptr Inc\Raptr\win32gui.pyd (6360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dashboard_replay_videos.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libyahoojp.dll (16944 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\LIBEAY32.dll (33263 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\teamspeak.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_talesrunner.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\reload_default.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\chat_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\install.log (4341383 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_tabbar_hd.png (586 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\voice_icon.png (373 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn16.png (714 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\cod_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dashboard_media_gallery.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\stars.png (668 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\close_btn.png (491 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\raptr_logo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hover_close_button.png (494 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\sf3-ryu-shoryuken.gif (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_f.png (232 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libdirect3d_plugin.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\libplc4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\textpointer.png (753 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\control_overlay.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\avutil-ttv-51.dll (22192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\gamecampus_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_right.png (389 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_ignore_optimizer.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\bigfoot_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\capsule_bg_r.png (265 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_fpsi64-119906.dll (15168 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Util._counter.pyd (11 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pointer.png (173 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_achievement.png (461 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\twitter_button_active.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_bar_green_server_info.png (131 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\cancel_active.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_knob_down.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\forward_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\arrow_right.png (310 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\status_playing_away.png (419 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mbox_critical.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\points_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_add_arrow_btn.png (299 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\facebook_color.png (684 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\back.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\joinable_game_sm.png (376 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\over_tl_sizer_hovr.png (166 bytes)
%Program Files%\Raptr Inc\Raptr\resources\gmail.com (1 bytes)
%Program Files%\Raptr Inc\Raptr\select.pyd (10 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_mixer\libfloat_mixer_plugin.dll (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_bar_gray_server_info.png (137 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\alpha_logo.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_game64-119906.dll (68229 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\welcome_connect.png (14 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_text.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_fpsi32-119906.dll (13368 bytes)
%Program Files%\Raptr Inc\Raptr\zlib1.dll (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\es_ES.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\videoplayer\player.swf (3616 bytes)
%Program Files%\Raptr Inc\Raptr\_ctypes.pyd (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_dragdrop.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\game_page.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_souloftheultimatenation.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_gg.mp3 (14 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_joystiq.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pause_press.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\call_hangup.png (555 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr.ico (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_hover_2.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_rescan_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_close.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\QtCore4.dll (74461 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_added.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_facebook.png (779 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_fr_FR.qm (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\star_red.png (413 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\en.qm (16 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\tab_add.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_folder_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\over_tl_sizer_norm.png (169 bytes)
%Program Files%\Raptr Inc\Raptr\exclude_exe.reg (244 bytes)
%Program Files%\Raptr Inc\Raptr\win32event.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\driver_uptodate.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_bigfoot.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\videoplayer\jwplayer.js (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_en_US.qm (23 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_hover_4.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_dragonica.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\kiss-anim.gif (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\raptr16hc.png (565 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xblive_text.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_normal_screen.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\settings_cog.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\StartCom_Free_SSL_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_inactive_1.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\thumb_frame_link_hovr.png (559 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\status_playing_avail.png (667 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\1_marker.png (570 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_trophy_silver.png (586 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\angry.gif (654 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim32.png (558 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\text.png (620 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\refresh_server_info.png (317 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq16c.png (694 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_active_1.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libwingdi_plugin.dll (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gray.png (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Raptr\exclude_exe.reg (244 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_icq.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\gameid_title.dat (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\download_complete.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\bell_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\amd_logo.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\stream_start.wav (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_other.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\third_party\youtube_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\_sqlite3.pyd (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\user_generic.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\spinner.gif (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\System.dll (23 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim16c.png (499 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\resume_press.png (727 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Deutsche_Telekom_Root_CA_2.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Equifax_Secure_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_next_disabled.png (887 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\resume_over.png (748 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\barbtn_opts_down.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn24c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pip_badge.png (353 bytes)
%Program Files%\Raptr Inc\Raptr\upload_logs.exe (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\incoming.wav (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\welcome_raptr_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\facebook_button_default.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_avatar.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\Microsoft.VC90.CRT.manifest (346 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_bar_orange_server_info.png (159 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_driftcity.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bigwin_star.png (696 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\wideeye.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_close_hover.png (358 bytes)
%Program Files%\Raptr Inc\Raptr\version.txt (45 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\fail_mark.png (945 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinbox_up_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\bell.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_minimize_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\_ssl.pyd (27504 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\CAcert_Root.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\post_game_summary\freegames_728x90.png (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_inactive_2.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\msn_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\install_over.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_twitter_on.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_tl_playclip_norm.png (414 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fbc32.png (303 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\fyi_postgame_dvr.png (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\welcome_image.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_heal.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_play.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\pause_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_minimize_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_aim.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playing_icon_reversed.png (228 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_minimize.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_bottom_tab.png (599 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_inbox_hover.png (710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\NSISdl.dll (30 bytes)
%Program Files%\Raptr Inc\Raptr\_win32sysloader.pyd (9 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_optimize_down.png (967 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_arrow_right.png (273 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\yahoo_gray.png (935 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gvr_icon.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\available.png (513 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_nwse.cur (1 bytes)
%Program Files%\Raptr Inc\Raptr\easyhook32.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\link.gif (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_1.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\blue_dot.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_prefs.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Shader.ps (628 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\toolbar_arrow_up.png (184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\text_large.png (384 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\balloon_x_black.png (982 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_msn_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_optimize_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\eat.png (666 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_pt_BR.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\launch_button_arrow_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_pkts64-119906.dll (13584 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Cipher.DES.pyd (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_ps3_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\animated_donkey_kong.gif (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_smallcog_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\winsound.pyd (9 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\cancel_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\gunbound_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_replay_on.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_options_hover.png (565 bytes)
%Program Files%\Raptr Inc\Raptr\amf-core-windesktop32.dll (21216 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk16c.png (583 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\pause_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\icon_arrow_11x11.png (199 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\libmfxsw64.dll (644479 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_game32-119906.dll (58402 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\trash_can.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\DigiCertHighAssuranceCA-3.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\offline_jewel.png (494 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_rescan_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libglib-2.0-0.dll (33263 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\icon_play.png (906 bytes)
%Program Files%\Raptr Inc\Raptr\softokn3.dll (9320 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_g.png (660 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_up_to_date.png (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_twitch_logo_beta.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_bottom_tabhl.png (581 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Thawte_Premium_Server_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_knob_logo.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\gta_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_Class_3_Public_Primary_Certification_Authority_-_G2.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\twitchtv_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\gamespot_logo_top.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\hypno.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk24.png (552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\checkbox_checkmark.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\frown.gif (642 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\voip.png (537 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\arrow_down_default.png (186 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\screenshot_icon.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_game32-119906.dll (58402 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk24c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinbox_up_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_record_logo_beta.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_msn.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\radio_empty.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\collapse_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\qt.conf (38 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bigwin_gamepad.png (797 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\codec\libavcodec_plugin.dll (334142 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\arrow_down_hover.png (171 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\drawer_arrow_hover_open.png (191 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Util.strxor.pyd (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_facebook.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\linecolor.png (145 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\window_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_home_hover.png (750 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_maximize_hover.png (218 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libmmdevice_plugin.dll (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\manga_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\Microsoft.VC90.CRT.manifest (545 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libvmem_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_default.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libdirectdraw_plugin.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libxfire.dll (11048 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_empty.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_play_small.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_heal.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\forward.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\raptr_im.exe (1552 bytes)

The Trojan deletes the following file(s):

%Program Files%\Raptr\resources\images\bundle\logo\spirittales_logo.png (0 bytes)
%Program Files%\Raptr\resources\images\bundle (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp (0 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1AEF.tmp (0 bytes)
%Program Files%\Raptr\resources (0 bytes)
%Program Files%\Raptr\bundle.dat (0 bytes)
%Program Files%\Raptr\silent.dat (0 bytes)
%Program Files%\Raptr\uninstall.exe (0 bytes)
%Program Files%\Raptr\resources\images\bundle\logo (0 bytes)
%Program Files%\Raptr\resources\images (0 bytes)

Registry activity

The process ca7cadf5e7c508a5319d35295356cc28 .exe:3496 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"NoModify" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"UninstallString" = "%Program Files%\Raptr\uninstall.exe"
"DisplayName" = "Raptr"

[HKLM\SOFTWARE\Raptr]
"Install_Dir" = "%Program Files%\Raptr"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"NoRepair" = "1"

The Trojan deletes the following value(s) in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

The process ohvoca.exe:3348 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 03 00 00 00 09 00 00 00 00 00 00 00"

[HKU\.DEFAULT\Software\Classes\Okfoexibdiko\Ashailli]
"(Default)" = "25 66 38 25 61 65 25 61 34 25 66 38 25 61 65 25"

[HKU\.DEFAULT\Software\Classes\Okfoexibdiko\UfmoLeemuma]
"(Default)" = "Type: REG_NONE, Length: 0"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"DefaultConnectionSettings" = "46 00 00 00 03 00 00 00 09 00 00 00 00 00 00 00"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKU\.DEFAULT\SOFTWARE\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

Proxy settings are disabled:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

The Trojan deletes the following value(s) in system registry:

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"
"ProxyBypass"

[HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"
"ProxyServer"
"ProxyOverride"

The process ohvoca.exe:3792 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Tracing\ohvoca_RASMANCS]
"FileDirectory" = "%windir%\tracing"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"
"UNCAsIntranet" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\ohvoca_RASAPI32]
"EnableConsoleTracing" = "0"
"ConsoleTracingMask" = "4294901760"
"FileDirectory" = "%windir%\tracing"

[HKLM\SOFTWARE\Microsoft\Tracing\ohvoca_RASMANCS]
"MaxFileSize" = "1048576"

[HKCU\Software\Classes\Okfoexibdiko\UfmoLeemuma]
"(Default)" = "Type: REG_NONE, Length: 0"

[HKLM\SOFTWARE\Microsoft\Tracing\ohvoca_RASMANCS]
"EnableFileTracing" = "0"
"FileTracingMask" = "4294901760"

[HKCU\Software\Classes\Local Settings\MuiCache\2D\52C64B7E]
"LanguageList" = "en-US, en"

[HKLM\SOFTWARE\Microsoft\Tracing\ohvoca_RASAPI32]
"FileTracingMask" = "4294901760"

"EnableFileTracing" = "0"

[HKLM\SOFTWARE\Microsoft\Tracing\ohvoca_RASMANCS]
"EnableConsoleTracing" = "0"

[HKCU\Software\Classes\Okfoexibdiko\Ashailli]
"(Default)" = "25 66 38 25 61 65 25 61 34 25 66 38 25 61 65 25"

[HKLM\SOFTWARE\Microsoft\Tracing\ohvoca_RASMANCS]
"ConsoleTracingMask" = "4294901760"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Connections]
"SavedLegacySettings" = "46 00 00 00 3C 00 00 00 09 00 00 00 00 00 00 00"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD]
"Blob" = "0F 00 00 00 01 00 00 00 20 00 00 00 52 29 BA 15"

[HKLM\SOFTWARE\Microsoft\Tracing\ohvoca_RASAPI32]
"MaxFileSize" = "1048576"

Proxy settings are disabled:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyEnable" = "0"

To automatically run itself each time Windows is booted, the Trojan adds the following link to its file to the system registry autorun key:

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uximkeon" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exe /START C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exe"

The Trojan deletes the following value(s) in system registry:

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"ProxyBypass"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyOverride"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"IntranetName"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"ProxyServer"

[HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates]
"D69B561148F01C77C54578C10926DF5B856976AD"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings]
"AutoConfigURL"

The process raptrpatch.exe:3572 makes changes in the system registry.
The Trojan creates and/or sets the following values in system registry:

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"NoModify" = "1"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"AutoDetect" = "1"

[HKCR\raptr]
"(Default)" = "URL:raptr protocol"

[HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap]
"UNCAsIntranet" = "0"

[HKCR\raptr\Shell\Open]
"(Default)" = ""

[HKCU\Software\Raptr\Overlay\ExcludedProcesses]
"iexplore.exe" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"DisplayIcon" = "%Program Files%\Raptr Inc\Raptr\raptr.exe"

[HKCR\raptr\Shell\Open\Command]
"(Default)" = "%Program Files%\Raptr Inc\Raptr\raptrstub.exe %1"

[HKLM\SOFTWARE\Raptr]
"install_id" = "{E5405557-FCF8-4E27-8B05-DC581C489F6E}"

[HKCR\raptr]
"URL Protocol" = ""

[HKCR\raptr\DefaultIcon]
"(Default)" = "raptrstub.exe"

[HKCU\Software\Raptr\Overlay\ExcludedProcesses]
"Sup_SmartRAM.exe" = "1"

[HKCR\raptr\Shell]
"(Default)" = ""

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"Publisher" = "Raptr, Inc"
"NoRepair" = "1"

[HKCU\Software\Raptr\Overlay\ExcludedProcesses]
"Suo10_SmartRAM.exe" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"DisplayVersion" = "5.2.8-r120085-release"

[HKCU\Software\Raptr\Overlay\ExcludedProcesses]
"wlmail.exe" = "0"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"UninstallString" = "%Program Files%\Raptr Inc\Raptr\uninstall.exe"

[HKCU\Software\Raptr\Overlay\ExcludedProcesses]
"LiveComm.exe" = "1"

[HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Raptr]
"EstimatedSize" = "188703"
"DisplayName" = "Raptr"

[HKLM\SOFTWARE\Raptr]
"Install_Dir" = "%Program Files%\Raptr Inc\Raptr"

The Trojan deletes the following value(s) in system registry:

Dropped PE files

MD5	File path
056d01547926e0b248e090cea2c19df4	c:\ProgramData\Haoruvevk\ohvoca.exe
056d01547926e0b248e090cea2c19df4	c:\Users\All Users\Haoruvevk\ohvoca.exe
8614c450637267afacad1645e23ba24a	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\FindProcDLL.dll
a5f8399a743ab7f9c88c645c35b1ebb5	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\NSISdl.dll
4e86466820c4d649b19bb05bcfc0b3cb	c:\Users\"%CurrentUserName%"\AppData\Local\Temp\raptrpatch.exe
056d01547926e0b248e090cea2c19df4	c:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exe
222f76d913947f1991d2de68df526209	c:\ca7cadf5e7c508a5319d35295356cc28 .exe

HOSTS file anomalies

No changes have been detected.

Rootkit activity

No anomalies have been detected.

Propagation

VersionInfo

No information is available.

PE Sections

Name	Virtual Address	Virtual Size	Raw Size	Entropy	Section MD5
.text	4096	8032	8192	4.06723	020a9182e650916351f8925cb9e46804
.data	12288	82784	82944	5.53668	5e55fd527f0daef3022622aea72616e1
.rdata	98304	380	512	2.31583	c9e14337001ce06425565b05feed6c77
.bss	102400	12	0	0	d41d8cd98f00b204e9800998ecf8427e
.idata	106496	20	512	0	bf619eac0cdf3f68d496ea9344137e8b
.rsrc	110592	130248	130560	2.7993	4094b5c05f37ba2325c16fc7349530a3

Dropped from:

Downloaded by:

Similar by SSDeep:

Similar by Lavasoft Polymorphic Checker:

Total found: 1
c9c570891d0ea84bc300835ff179fe5e

URLs

URL	IP
hxxp://clientupdater.raptr.com/client/pc/get_patch.php?build=AMD	209.31.241.56
hxxp://e7291.d.akamaiedge.net/gaming_evolved/talon-5.2.8-r120085-release.exe
hxxp://icanhazip.com/	104.20.16.242
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI=	178.255.83.1
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69+Aj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc=	178.255.83.1
hxxp://crl.usertrust.com/AddTrustExternalCARoot.crl	178.255.83.2
hxxp://ocsp.usertrust.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy+emBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEHhAeV4jr1s1463s34v3X2I=	178.255.83.1
hxxp://crl.comodoca.com.cdn.cloudflare.net/COMODORSACertificationAuthority.crl	104.16.92.188
hxxp://crl.comodoca.com.cdn.cloudflare.net/COMODORSADomainValidationSecureServerCA.crl	104.16.92.188
hxxp://a1363.dscg.akamai.net/pki/crl/products/MicCodSigPCA_08-31-2010.crl
hxxp://crl.comodoca.com/COMODORSADomainValidationSecureServerCA.crl	104.16.92.188
hxxp://crl.comodoca.com/COMODORSACertificationAuthority.crl	104.16.92.188
hxxp://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69+Aj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc=	178.255.83.1
hxxp://crl.microsoft.com/pki/crl/products/MicCodSigPCA_08-31-2010.crl	62.140.236.147
hxxp://ocsp.comodoca.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy+emBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEHhAeV4jr1s1463s34v3X2I=	178.255.83.1
hxxp://download.amd.com/gaming_evolved/talon-5.2.8-r120085-release.exe	23.64.224.239
eqfuuxawonbienn.localtunnel.me	138.197.63.247
cukixico.localtunnel.me	138.197.63.247
aswirerikak.localtunnel.me	138.197.63.247
umabsitauwa.localtunnel.me	138.197.63.247
anaregduuc.localtunnel.me	138.197.63.247
alfenaaf.localtunnel.me	138.197.63.247
realwonoosofo.localtunnel.me	138.197.63.247
evebepevovlao.localtunnel.me	138.197.63.247
lemamegega.localtunnel.me	138.197.63.247
emserulet.localtunnel.me	138.197.63.247
duogsiivd.localtunnel.me	138.197.63.247
exguunopu.localtunnel.me	138.197.63.247
ogwaevanilrel.localtunnel.me	138.197.63.247
haiwqowuosawkie.localtunnel.me	138.197.63.247
rigaalxavifoeli.localtunnel.me	138.197.63.247
kuabuwqexeko.localtunnel.me	138.197.63.247
ixlupaedfaviabu.localtunnel.me	138.197.63.247
meudseacru.localtunnel.me	138.197.63.247
kufiobhea.localtunnel.me	138.197.63.247
vumeitbuun.localtunnel.me	138.197.63.247
veiftoubonomam.localtunnel.me	138.197.63.247
touvibcaolunar.localtunnel.me	138.197.63.247
laifduupq.localtunnel.me
vassg142.ocsp.omniroot.com

IDS verdicts (Suricata alerts: Emerging Threats ET ruleset)

ET POLICY Internal Host Retrieving External IP via icanhazip.com - Possible Infection
ET POLICY HTTP Request on Unusual Port Possibly Hostile
ET POLICY PE EXE or DLL Windows file download HTTP
ET TROJAN Suspicious User-Agent (MSIE)

Traffic

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:17 GMT

Server: Apache

X-OCSP-Reponder-ID: rmdccaocsp24

Content-Length: 5

Connection: close

Content-Type: application/ocsp-response

0......

GET /AddTrustExternalCARoot.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.usertrust.com


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 15 May 2017 01:12:36 GMT

Content-Type: application/x-pkcs7-crl

Content-Length: 602

Last-Modified: Sun, 14 May 2017 22:08:32 GMT

Connection: close

ETag: "5918d560-25a"

X-CCACDN-Mirror-ID: rmdccacrl5

Cache-Control: max-age=3600

Accept-Ranges: bytes
0..V0..>...0...*.H........0o1.0...U....SE1.0...U....AddTrust AB1&0$
..U....AddTrust External TTP Network1"0 ..U....AddTrust External CA Ro
ot..170514220832Z..170518220832Z0i0!..S{vVO)...iC.".,y..151214155830Z0
!..F....L...e.n.B.d..151214155830Z0!..:...u....t........151214155830Z.
00.0...U.#..0......z4.&...&T....$.T.0...U........0...*.H..............
....... 4{*..i...n.....e.... vr.....\[.7..,0...A.*... [.7.8...U.*O.:.|
.\/.]...?........(...x...x...}5.L|........<...q.....c8.....I....!..
?....O.7Yf.Q..'}.....%.<..}..`.z.H.....s...I.%U.Wl.~.!..=.N.....2..
..[..u......$m).j..=..uHz*...w.^......$....P.....<0..

POST / HTTP/1.1

Host: icanhazip.com

Content-Length: 0

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:14 GMT

Content-Type: text/plain; charset=UTF-8

Content-Length: 15

Connection: keep-alive

Set-Cookie: __cfduid=d7642db25a1d085c8ddebe2881fcea0301494810733; expires=Tue, 15-May-18 01:12:13 GMT; path=/; domain=.icanhazip.com; HttpOnly

X-SECURITY: This site doesn't distribute malware. Get the facts. hXXps://is.gd/1LWdFz

X-RTFM: Learn about this site at hXXp://bit.ly/icanhazip-faq and don't abuse the service.

X-BECOME-A-RACKER: If you're reading this, apply here: hXXps://VVV.rackspace.com/talent/

Access-Control-Allow-Origin: *

Access-Control-Allow-Methods: GET

Server: cloudflare-nginx

CF-RAY: 35f23a4dc19e4f3e-DME

194.242.96.218.HTTP/1.1 200 OK..Date: Mon, 15 May 2017 01:12:14 GMT..C
ontent-Type: text/plain; charset=UTF-8..Content-Length: 15..Connection
: keep-alive..Set-Cookie: __cfduid=d7642db25a1d085c8ddebe2881fcea03014
94810733; expires=Tue, 15-May-18 01:12:13 GMT; path=/; domain=.icanhaz
ip.com; HttpOnly..X-SECURITY: This site doesn't distribute malware. Ge
t the facts. hXXps://is.gd/1LWdFz..X-RTFM: Learn about this site at ht
tp://bit.ly/icanhazip-faq and don't abuse the service...X-BECOME-A-RAC
KER: If you're reading this, apply here: hXXps://VVV.rackspace.com/tal
ent/..Access-Control-Allow-Origin: *..Access-Control-Allow-Methods: GE
T..Server: cloudflare-nginx..CF-RAY: 35f23a4dc19e4f3e-DME..194.242.96.
218...

GET /AddTrustExternalCARoot.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.usertrust.com


HTTP/1.1 200 OK

Server: nginx

Date: Mon, 15 May 2017 01:12:35 GMT

Content-Type: application/x-pkcs7-crl

Content-Length: 602

Last-Modified: Sun, 14 May 2017 22:08:32 GMT

Connection: close

ETag: "5918d560-25a"

X-CCACDN-Mirror-ID: rmdccacrl5

Cache-Control: max-age=3600

Accept-Ranges: bytes
0..V0..>...0...*.H........0o1.0...U....SE1.0...U....AddTrust AB1&0$
..U....AddTrust External TTP Network1"0 ..U....AddTrust External CA Ro
ot..170514220832Z..170518220832Z0i0!..S{vVO)...iC.".,y..151214155830Z0
!..F....L...e.n.B.d..151214155830Z0!..:...u....t........151214155830Z.
00.0...U.#..0......z4.&...&T....$.T.0...U........0...*.H..............
....... 4{*..i...n.....e.... vr.....\[.7..,0...A.*... [.7.8...U.*O.:.|
.\/.]...?........(...x...x...}5.L|........<...q.....c8.....I....!..
?....O.7Yf.Q..'}.....%.<..}..`.z.H.....s...I.%U.Wl.~.!..=.N.....2..
..[..u......$m).j..=..uHz*...w.^......$....P.....<0..

GET /gaming_evolved/talon-5.2.8-r120085-release.exe HTTP/1.0

Host: download.amd.com

User-Agent: NSISDL/1.2 (Mozilla)

Accept: */*


HTTP/1.0 200 OK

Server: Apache

ETag: "4e86466820c4d649b19bb05bcfc0b3cb:1485976092"

Last-Modified: Wed, 01 Feb 2017 19:08:12 GMT

Accept-Ranges: bytes

Content-Length: 59432328

Content-Type: application/octet-stream

Date: Mon, 15 May 2017 01:12:10 GMT

Connection: close

MZ......................@.............................................
..!..L.!This program cannot be run in DOS mode....$.......1p.:u..iu..i
u..i...iw..iu..i...i...id..i!2.i...i...it..iRichu..i........PE..L...^.
.K.................b...........6............@.........................
........o...................................................PE........
......................................................................
.............................text....a.......b.................. ..`.r
data...............f..............@..@.data................x..........
....@....ndata.......p...........................rsrc...PE.......F....
..............@..@....................................................
......................................................................
......................................................................
......................................................................
......................................................................
............................................U....\.}..t .}.F.E.u..H...
..cB..H.P.u..u..u...T.@..B...SV.5.cB..E.WP.u...X.@..e...E..E.P.u...\.@
..}..e....D.@........FR..VV..U... M.......M....3.....FQ.....NUHTTP/1.0
 200 OK..Server: Apache..ETag: "4e86466820c4d649b19bb05bcfc0b3cb:14859
76092"..Last-Modified: Wed, 01 Feb 2017 19:08:12 GMT..Accept-Ranges: b
ytes..Content-Length: 59432328..Content-Type: application/octet-stream
..Date: Mon, 15 May 2017 01:12:10 GMT..Connection: close..MZ..........
............@...............................................!..L.!

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:19 GMT

Server: Apache

X-OCSP-Reponder-ID: rmdccaocsp24

Content-Length: 5

Connection: close

Content-Type: application/ocsp-response

0......

GET /COMODORSACertificationAuthority.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:36 GMT

Content-Type: application/x-pkcs7-crl

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d7af45b126e4eb8f599025d92fbc878e41494810756; expires=Tue, 15-May-18 01:12:36 GMT; path=/; domain=.comodoca.com; HttpOnly

Last-Modified: Sun, 14 May 2017 22:08:32 GMT

ETag: W/"5918d560-332"

X-CCACDN-Mirror-ID: rmdccacrl1

Cache-Control: public, max-age=14400

CF-Cache-Status: HIT

Expires: Mon, 15 May 2017 05:12:36 GMT

Server: cloudflare-nginx

CF-RAY: 35f23adc44ae4e30-DME
32c..0..(0......0...*.H........0..1.0...U....GB1.0...U....Greater Manc
hester1.0...U....Salford1.0...U....COMODO CA Limited1 0)..U..."COMODO 
RSA Certification Authority..170514220832Z..170518220832Z0$0".....bRfQ
H..S..D..i..170103163621Z.00.0...U.#..0.....~.=...<....8...22.0...U
........0...*.H.............{.r......~.](2ON%.6.i.v.. ...n..2...Z.G$..
\.<..s.x.......6...>.......a.J....%.v6=.-n.<Y.hx.#./Dk...Ee.I
...]...w..SF.........*...$...Q..lP.[..(.YJ..8%zj.$.C ..NGb.......Lr...
..t..@.A.`..o....j...b]8qQ.p..#..9O....C._.y.l._uw9b.G..D....F8F.~=...
........z......._..../o*.&.j.*.(........c........V..*....%...K....>
q.....M.)so...$iyG?Sb...!.........fZ..../..v.,]@/....^..,.P.yX...m...A
u...'n.x.&Le-..1..[.DX..>.[..`...5.:...,y......2...Ig5.<.....Y..
.M....z.....EM.=f&i.}sIg.Y' z...pZ..[\g.)1...x.....-.........e........
0..HTTP/1.1 200 OK..Date: Mon, 15 May 2017 01:12:36 GMT..Content-Type:
 application/x-pkcs7-crl..Transfer-Encoding: chunked..Connection: keep
-alive..Set-Cookie: __cfduid=d7af45b126e4eb8f599025d92fbc878e414948107
56; expires=Tue, 15-May-18 01:12:36 GMT; path=/; domain=.comodoca.com;
 HttpOnly..Last-Modified: Sun, 14 May 2017 22:08:32 GMT..ETag: W/"5918
d560-332"..X-CCACDN-Mirror-ID: rmdccacrl1..Cache-Control: public, max-
age=14400..CF-Cache-Status: HIT..Expires: Mon, 15 May 2017 05:12:36 GM
T..Server: cloudflare-nginx..CF-RAY: 35f23adc44ae4e30-DME..32c..0..(0.
.....0...*.H........0..1.0...U....GB1.0...U....Greater Manchester1.0..
.U....Salford1.0...U....COMODO CA Limited1 0)..U..."COMODO RSA Cer<<< skipped >>>

GET /COMODORSADomainValidationSecureServerCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:36 GMT

Content-Type: application/x-pkcs7-crl

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d7af45b126e4eb8f599025d92fbc878e41494810756; expires=Tue, 15-May-18 01:12:36 GMT; path=/; domain=.comodoca.com; HttpOnly

Last-Modified: Sun, 14 May 2017 08:27:29 GMT

ETag: W/"591814f1-1620a5"

X-CCACDN-Mirror-ID: rmdccacrl2

Cache-Control: public, max-age=14400

CF-Cache-Status: HIT

Expires: Mon, 15 May 2017 05:12:36 GMT

Server: cloudflare-nginx

CF-RAY: 35f23adea5614e30-DME

5c3f..0.$4F0.$3-...0...*.H........0..1.0...U....GB1.0...U....Greater M
anchester1.0...U....Salford1.0...U....COMODO CA Limited1604..U...-COMO
DO RSA Domain Validation Secure Server CA..170514082729Z..170518082729
Z0.$230!....w`.h.**..$.R.\..140220191049Z0!.......u,y".QU..A...1404101
54408Z0"........fU.%....}....140410172927Z0".....,.jc...Q..FV....14041
0185945Z0!...0...:.Km.~..V....140410214937Z0!..cE...2!D....,It...14041
0215014Z0"......*{u.....BZ.....140410223535Z0!.....(..7./.9..n....1404
10224524Z0!..].F.L.....|.O .,..140410224851Z0!..\...Y...N.........1404
10230501Z0"....P.#.~..>.U><.....140411065449Z0!..4...Y/X..f..
.cb...140411174902Z0"......xW {d...rW?.P..140412021032Z0".......#.8...
d.."L#..140412114042Z0"....x.{...!..........140412155740Z0!..M..\_L.3.
.5}.).5..140412171532Z0"......b/.m.../.Z.Y...140412175728Z0!..0.......
.....T.3..140412183108Z0".....dIk......b..C...140412200345Z0".........
._$.........140413022007Z0"............C..c.....140413104918Z0"......n
...xS.Y.E..J..140413123759Z0!..p..J.)vO.'...x.]..140413143438Z0!..4...
r..V..g.B.....140413190918Z0"......R.g.t.......R..140414052550Z0!...C.
.7Q`h....K.^...140414052610Z0".....*Ie? ........f..140414073608Z0"....
Q...i.A...Dr..P..140414115149Z0"............,........140414170043Z0"..
....GD.g..C..?.....140414180926Z0!..E..."v...C. @.....140415080708Z0!.
.4.w@g....km...N...140415163931Z0!..i..._.n...j.......140415172937Z0".
....8...1/k.2d.8....140415175434Z0"....]a~...6|.E...V...140415192736Z0
".....vqxC.3..U..t....140415230038Z0!........|...T.^)....140416202

<<< skipped >>>

GET /COMODORSACertificationAuthority.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:38 GMT

Content-Type: application/x-pkcs7-crl

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=d161b08bc352c0b3a07fbc4ddbbc5653c1494810758; expires=Tue, 15-May-18 01:12:38 GMT; path=/; domain=.comodoca.com; HttpOnly

Last-Modified: Sun, 14 May 2017 22:08:32 GMT

ETag: W/"5918d560-332"

X-CCACDN-Mirror-ID: rmdccacrl1

Cache-Control: public, max-age=14400

CF-Cache-Status: HIT

Expires: Mon, 15 May 2017 05:12:38 GMT

Server: cloudflare-nginx

CF-RAY: 35f23ae763cd4efc-DME
32c..0..(0......0...*.H........0..1.0...U....GB1.0...U....Greater Manc
hester1.0...U....Salford1.0...U....COMODO CA Limited1 0)..U..."COMODO 
RSA Certification Authority..170514220832Z..170518220832Z0$0".....bRfQ
H..S..D..i..170103163621Z.00.0...U.#..0.....~.=...<....8...22.0...U
........0...*.H.............{.r......~.](2ON%.6.i.v.. ...n..2...Z.G$..
\.<..s.x.......6...>.......a.J....%.v6=.-n.<Y.hx.#./Dk...Ee.I
...]...w..SF.........*...$...Q..lP.[..(.YJ..8%zj.$.C ..NGb.......Lr...
..t..@.A.`..o....j...b]8qQ.p..#..9O....C._.y.l._uw9b.G..D....F8F.~=...
........z......._..../o*.&.j.*.(........c........V..*....%...K....>
q.....M.)so...$iyG?Sb...!.........fZ..../..v.,]@/....^..,.P.yX...m...A
u...'n.x.&Le-..1..[.DX..>.[..`...5.:...,y......2...Ig5.<.....Y..
.M....z.....EM.=f&i.}sIg.Y' z...pZ..[\g.)1...x.....-.........e........
0..HTTP/1.1 200 OK..Date: Mon, 15 May 2017 01:12:38 GMT..Content-Type:
 application/x-pkcs7-crl..Transfer-Encoding: chunked..Connection: keep
-alive..Set-Cookie: __cfduid=d161b08bc352c0b3a07fbc4ddbbc5653c14948107
58; expires=Tue, 15-May-18 01:12:38 GMT; path=/; domain=.comodoca.com;
 HttpOnly..Last-Modified: Sun, 14 May 2017 22:08:32 GMT..ETag: W/"5918
d560-332"..X-CCACDN-Mirror-ID: rmdccacrl1..Cache-Control: public, max-
age=14400..CF-Cache-Status: HIT..Expires: Mon, 15 May 2017 05:12:38 GM
T..Server: cloudflare-nginx..CF-RAY: 35f23ae763cd4efc-DME..32c..0..(0.
.....0...*.H........0..1.0...U....GB1.0...U....Greater Manchester1.0..
.U....Salford1.0...U....COMODO CA Limited1 0)..U..."COMODO RSA Cer<<< skipped >>>

GET /COMODORSADomainValidationSecureServerCA.crl HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:39 GMT

Content-Type: application/x-pkcs7-crl

Transfer-Encoding: chunked

Connection: keep-alive

Set-Cookie: __cfduid=dff6089595d632f7cb7e83a20d0f224441494810759; expires=Tue, 15-May-18 01:12:39 GMT; path=/; domain=.comodoca.com; HttpOnly

Last-Modified: Sun, 14 May 2017 08:27:29 GMT

ETag: W/"591814f1-1620a5"

X-CCACDN-Mirror-ID: rmdccacrl2

Cache-Control: public, max-age=14400

CF-Cache-Status: HIT

Expires: Mon, 15 May 2017 05:12:39 GMT

Server: cloudflare-nginx

CF-RAY: 35f23aeca5574efc-DME

5c3f..0.$4F0.$3-...0...*.H........0..1.0...U....GB1.0...U....Greater M
anchester1.0...U....Salford1.0...U....COMODO CA Limited1604..U...-COMO
DO RSA Domain Validation Secure Server CA..170514082729Z..170518082729
Z0.$230!....w`.h.**..$.R.\..140220191049Z0!.......u,y".QU..A...1404101
54408Z0"........fU.%....}....140410172927Z0".....,.jc...Q..FV....14041
0185945Z0!...0...:.Km.~..V....140410214937Z0!..cE...2!D....,It...14041
0215014Z0"......*{u.....BZ.....140410223535Z0!.....(..7./.9..n....1404
10224524Z0!..].F.L.....|.O .,..140410224851Z0!..\...Y...N.........1404
10230501Z0"....P.#.~..>.U><.....140411065449Z0!..4...Y/X..f..
.cb...140411174902Z0"......xW {d...rW?.P..140412021032Z0".......#.8...
d.."L#..140412114042Z0"....x.{...!..........140412155740Z0!..M..\_L.3.
.5}.).5..140412171532Z0"......b/.m.../.Z.Y...140412175728Z0!..0.......
.....T.3..140412183108Z0".....dIk......b..C...140412200345Z0".........
._$.........140413022007Z0"............C..c.....140413104918Z0"......n
...xS.Y.E..J..140413123759Z0!..p..J.)vO.'...x.]..140413143438Z0!..4...
r..V..g.B.....140413190918Z0"......R.g.t.......R..140414052550Z0!...C.
.7Q`h....K.^...140414052610Z0".....*Ie? ........f..140414073608Z0"....
Q...i.A...Dr..P..140414115149Z0"............,........140414170043Z0"..
....GD.g..C..?.....140414180926Z0!..E..."v...C. @.....140415080708Z0!.
.4.w@g....km...N...140415163931Z0!..i..._.n...j.......140415172937Z0".
....8...1/k.2d.8....140415175434Z0"....]a~...6|.E...V...140415192736Z0
".....vqxC.3..U..t....140415230038Z0!........|...T.^)....140416202

<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69+Aj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:34 GMT

Server: Apache

X-OCSP-Reponder-ID: rmdccaocsp24

Content-Length: 5

Connection: close

Content-Type: application/ocsp-response

0......

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI= HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:33 GMT

Server: Apache

X-OCSP-Reponder-ID: rmdccaocsp24

Content-Length: 5

Connection: close

Content-Type: application/ocsp-response

0......

POST / HTTP/1.1

Host: icanhazip.com

Content-Length: 0

Cache-Control: no-cache


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:11 GMT

Content-Type: text/plain; charset=UTF-8

Content-Length: 15

Connection: keep-alive

Set-Cookie: __cfduid=d8d0f09ea075b78dcabd31d368dff1fdf1494810730; expires=Tue, 15-May-18 01:12:10 GMT; path=/; domain=.icanhazip.com; HttpOnly

X-SECURITY: This site doesn't distribute malware. Get the facts. hXXps://is.gd/1LWdFz

X-RTFM: Learn about this site at hXXp://bit.ly/icanhazip-faq and don't abuse the service.

X-BECOME-A-RACKER: If you're reading this, apply here: hXXps://VVV.rackspace.com/talent/

Access-Control-Allow-Origin: *

Access-Control-Allow-Methods: GET

Server: cloudflare-nginx

CF-RAY: 35f23a3a307b4e66-DME

194.242.96.218.HTTP/1.1 200 OK..Date: Mon, 15 May 2017 01:12:11 GMT..C
ontent-Type: text/plain; charset=UTF-8..Content-Length: 15..Connection
: keep-alive..Set-Cookie: __cfduid=d8d0f09ea075b78dcabd31d368dff1fdf14
94810730; expires=Tue, 15-May-18 01:12:10 GMT; path=/; domain=.icanhaz
ip.com; HttpOnly..X-SECURITY: This site doesn't distribute malware. Ge
t the facts. hXXps://is.gd/1LWdFz..X-RTFM: Learn about this site at ht
tp://bit.ly/icanhazip-faq and don't abuse the service...X-BECOME-A-RAC
KER: If you're reading this, apply here: hXXps://VVV.rackspace.com/tal
ent/..Access-Control-Allow-Origin: *..Access-Control-Allow-Methods: GE
T..Server: cloudflare-nginx..CF-RAY: 35f23a3a307b4e66-DME..194.242.96.
218...

GET /pki/crl/products/MicCodSigPCA_08-31-2010.crl HTTP/1.1

Cache-Control: max-age = 900

Connection: Keep-Alive

Accept: */*

If-Modified-Since: Tue, 29 Oct 2013 05:02:50 GMT

If-None-Match: "b8b5df1d64d4ce1:0"

User-Agent: Microsoft-CryptoAPI/6.1

Host: crl.microsoft.com


HTTP/1.1 200 OK

Content-Length: 554

Content-Type: application/pkix-crl

Content-MD5:  JCGHCVYwMgbPGWWiVwiZQ==

Last-Modified: Fri, 12 May 2017 20:19:14 GMT

ETag: 0x8D4997428DCBF97

Server: Windows-Azure-Blob/1.0 Microsoft-HTTPAPI/2.0

x-ms-request-id: 13b2062a-0001-00eb-0260-cbb98c000000

x-ms-version: 2009-09-19

x-ms-lease-status: unlocked

x-ms-blob-type: BlockBlob

Date: Mon, 15 May 2017 01:13:07 GMT

Connection: keep-alive
0..&0......0...*.H........0y1.0...U....US1.0...U....Washington1.0...U.
...Redmond1.0...U....Microsoft Corporation1#0!..U....Microsoft Code Si
gning PCA..170512163339Z..170811045339Z.a0_0...U.#..0..........X..7.3.
..L...0... .....7.........0...U......d0... .....7......170810164339Z0.
..*.H................."*....N...........D...........A..v.@?.H5...O{D".
-.B.......gO.{..O}.._.....M....A.mI.u.;sPS.....?jj.=.~]z.A.fJ...M*|..!
<......>....|.&...j.Z.T[/s...K0<.;...".2.)..X9.....$..O...Ot:
V.:..9.W...|...C.A.....,dy..].bg.&I.../U..B........rr.....*......P.t.^
..FHTTP/1.1 200 OK..Content-Length: 554..Content-Type: application/pki
x-crl..Content-MD5:  JCGHCVYwMgbPGWWiVwiZQ==..Last-Modified: Fri, 12 M
ay 2017 20:19:14 GMT..ETag: 0x8D4997428DCBF97..Server: Windows-Azure-B
lob/1.0 Microsoft-HTTPAPI/2.0..x-ms-request-id: 13b2062a-0001-00eb-026
0-cbb98c000000..x-ms-version: 2009-09-19..x-ms-lease-status: unlocked.
.x-ms-blob-type: BlockBlob..Date: Mon, 15 May 2017 01:13:07 GMT..Conne
ction: keep-alive..0..&0......0...*.H........0y1.0...U....US1.0...U...
.Washington1.0...U....Redmond1.0...U....Microsoft Corporation1#0!..U..
..Microsoft Code Signing PCA..170512163339Z..170811045339Z.a0_0...U.#.
.0..........X..7.3...L...0... .....7.........0...U......d0... .....7..
....170810164339Z0...*.H................."*....N...........D..........
.A..v.@?.H5...O{D".-.B.......gO.{..O}.._.....M....A.mI.u.;sPS.....?jj.
=.~]z.A.fJ...M*|..!<......>....|.&...j.Z.T[/s...K0<.;...".2.)
..X9.....$..O...Ot:V.:..9.W...|...C.A.....,dy..].bg.&I.../U..B....<<< skipped >>>

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBReAhtobFzTvhaRmVeJ38QUchY9AwQUu69+Aj36pvE8hI6t7jiY7NkyMtQCECsuburZdTZsFIpu26N8jAc= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:37 GMT

Server: Apache

X-OCSP-Reponder-ID: rmdccaocsp24

Content-Length: 5

Connection: close

Content-Type: application/ocsp-response

0......

GET /client/pc/get_patch.php?build=AMD HTTP/1.0

Host: clientupdater.raptr.com

User-Agent: NSISDL/1.2 (Mozilla)

Accept: */*


HTTP/1.1 302 Found

Date: Mon, 15 May 2017 01:12:10 GMT

Server: Apache

Location: hXXp://download.amd.com/gaming_evolved/talon-5.2.8-r120085-release.exe

Content-Length: 0

Connection: close

Content-Type: text/html; charset=UTF-8

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR8sWZUnKvbRO5iJhat9GV793rVlAQUrb2YejS0Jvf6xCZU7wO94CTLVBoCECdm7lbrSfOOq9dwovyE3iI= HTTP/1.1

Cache-Control: no-cache

Connection: Keep-Alive

Pragma: no-cache

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.usertrust.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:24 GMT

Server: Apache

X-OCSP-Reponder-ID: rmdccaocsp24

Content-Length: 5

Connection: close

Content-Type: application/ocsp-response

0......

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy+emBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEHhAeV4jr1s1463s34v3X2I= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:41 GMT

Server: Apache

Last-Modified: Sun, 14 May 2017 20:09:59 GMT

Expires: Sun, 21 May 2017 20:09:59 GMT

ETag: 9A0837A43DEEF8CB931677FCC628403953C03A48

Cache-Control: max-age=586037,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: rmdccaocsp24

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0........j:.Z.....Vs.C.:(....2017051
4200959Z0s0q0I0... ........z.>...*,.(....F.@.......j:.Z.....Vs.C.:(
....x@y^#.[5......_b....20170514200959Z....20170521200959Z0...*.H.....
........L...PO..S.H.../B.~.X*....P......>*..'....Y.......0..$.....[
d7.s............'..8.NK......YkG.....BO....K..^9..m.d5...|N..W..,b...a
5r=.|.xR).iv.B..&.../ .>...-.b.f... ^e.8z..^..c...@.2.E.N..z'.....=
W.<m..@..n..1.?Hq. .J.F^s..V..#q!.....y. ..=i.S!Zk.E.~`....,..

GET /MFEwTzBNMEswSTAJBgUrDgMCGgUABBR64T7ooMQqLLQoy+emBUYZQOKh6QQUkK9qOpRaC9iQ6hJWc99DtDoo2ucCEHhAeV4jr1s1463s34v3X2I= HTTP/1.1

Connection: Keep-Alive

Accept: */*

User-Agent: Microsoft-CryptoAPI/6.1

Host: ocsp.comodoca.com


HTTP/1.1 200 OK

Date: Mon, 15 May 2017 01:12:36 GMT

Server: Apache

Last-Modified: Sun, 14 May 2017 20:09:59 GMT

Expires: Sun, 21 May 2017 20:09:59 GMT

ETag: 9A0837A43DEEF8CB931677FCC628403953C03A48

Cache-Control: max-age=586042,public,no-transform,must-revalidate

X-OCSP-Reponder-ID: rmdccaocsp24

Content-Length: 471

Connection: close

Content-Type: application/ocsp-response
0..........0..... .....0......0...0........j:.Z.....Vs.C.:(....2017051
4200959Z0s0q0I0... ........z.>...*,.(....F.@.......j:.Z.....Vs.C.:(
....x@y^#.[5......_b....20170514200959Z....20170521200959Z0...*.H.....
........L...PO..S.H.../B.~.X*....P......>*..'....Y.......0..$.....[
d7.s............'..8.NK......YkG.....BO....K..^9..m.d5...|N..W..,b...a
5r=.|.xR).iv.B..&.../ .>...-.b.f... ^e.8z..^..c...@.2.E.N..z'.....=
W.<m..@..n..1.?Hq. .J.F^s..V..#q!.....y. ..=i.S!Zk.E.~`....,..

The Trojan connects to the servers at the folowing location(s):

ca7cadf5e7c508a5319d35295356cc28 .exe_3496:

.text

`.rdata

@.data

.ndata

.rsrc

uDSSh

<iu2.iu

.DEFAULT\Control Panel\International

Software\Microsoft\Windows\CurrentVersion

GetWindowsDirectoryA

KERNEL32.dll

ExitWindowsEx

GetAsyncKeyState

USER32.dll

GDI32.dll

SHFileOperationA

ShellExecuteA

SHELL32.dll

RegEnumKeyA

RegCreateKeyExA

RegCloseKey

RegDeleteKeyA

RegOpenKeyExA

ADVAPI32.dll

COMCTL32.dll

ole32.dll

VERSION.dll

logging set to %d

settings logging to %d

created uninstaller: %d, "%s"

WriteReg: error creating key "%s\%s"

WriteReg: error writing into "%s\%s" "%s"

WriteRegBin: "%s\%s" "%s"="%s"

WriteRegDWORD: "%s\%s" "%s"="0xx"

WriteRegExpandStr: "%s\%s" "%s"="%s"

WriteRegStr: "%s\%s" "%s"="%s"

DeleteRegKey: "%s\%s"

DeleteRegValue: "%s\%s" "%s"

WriteINIStr: wrote [%s] %s=%s in %s

CopyFiles "%s"->"%s"

CreateShortCut: out: "%s", in: "%s %s", icon: %s,%d, sw=%d, hk=%d

Error registering DLL: Could not load %s

Error registering DLL: %s not found in %s

Exec: failed createprocess ("%s")

Exec: success ("%s")

Exec: command="%s"

ExecShell: success ("%s": file:"%s" params:"%s")

ExecShell: warning: error ("%s": file:"%s" params:"%s")=%d

Exch: stack < %d elements

RMDir: "%s"

MessageBox: %d,"%s"

Delete: "%s"

File: wrote %d to "%s"

File: skipped: "%s" (overwriteflag=%d)

File: error creating "%s"

File: overwriteflag=%d, allowskipfilesflag=%d, name="%s"

Rename failed: %s

Rename on reboot: %s

Rename: %s

IfFileExists: file "%s" does not exist, jumping %d

IfFileExists: file "%s" exists, jumping %d

CreateDirectory: "%s" created

CreateDirectory: can't create "%s" - a file already exists

CreateDirectory: can't create "%s" (err=%d)

CreateDirectory: "%s" (%d)

SetFileAttributes: "%s":X

Sleep(%d)

detailprint: %s

Call: %d

Aborting: "%s"

Jump: %d

verifying installer: %d%%

unpacking data: %d%%

... %d%%

hXXp://nsis.sf.net/NSIS_Error

~nsu.tmp

install.log

%u.%u%s%s

Skipping section: "%s"

Section: "%s"

New install of "%s" to "%s"

RegDeleteKeyExA

RMDir: RemoveDirectory failed("%s")

RMDir: RemoveDirectory on Reboot("%s")

RMDir: RemoveDirectory("%s")

RMDir: RemoveDirectory invalid input("%s")

Delete: DeleteFile failed("%s")

Delete: DeleteFile on Reboot("%s")

Delete: DeleteFile("%s")

%s=%s

*?|<>/":

invalid registry key

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

x%c

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\raptrpatch.exe

Sdl.dll

rittales_logo.png

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\NSISdl.dll

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp

WS2_32.dll

NSISdl.dll

invalid URL

Host: %s

GET %s HTTP/1.0

User-Agent: NSISDL/1.2 (Mozilla)

http=

Software\Microsoft\Windows\CurrentVersion\Internet Settings

Unable to open %s

%skB (%d%%) of %skB at %u.ukB/s

(%u hours remaining)

(%u minutes remaining)

(%u seconds remaining)

Downloading %s

4 o%F

nsw229E.tmp

Exec: success ("C:\Users\"%CurrentUserName%"\AppData\Local\Temp\raptrpatch.exe")

l.dll" (overwriteflag=1)

.tmp\NSISdl.dll"

gram Files\Raptr\uninstall.exe""

:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp

"c:\ca7cadf5e7c508a5319d35295356cc28 .exe"

%Program Files%\Raptr

ca7cadf5e7c508a5319d35295356cc28 .exe

ers\"%CurrentUserName%"\AppData\Local\Temp\nsw229C.tmp

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\

c:\ca7cadf5e7c508a5319d35295356cc28 .exe

%Program Files%\Raptr\resources\images\bundle\logo

<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/></application></compatibility></assembly>

ohvoca.exe_3792:

.text

P`.data

.rdata

`@.bss

.idata

.rsrc

Ü~:

A:\~S

VJ.ae

.OBNb "

w*-.GEP

F.DuS

9J.LP(

%dowWNT\Cur

hXXps://c

e%.LI

.Rv94

i` z%SZ%

lB8*YKey

.iegM

KERNEL32.DLL

ADVAPI32.dll

CRYPT32.dll

GDI32.dll

gdiplus.dll

IPHLPAPI.DLL

MPR.dll

NETAPI32.dll

ole32.dll

OLEAUT32.dll

SHELL32.dll

SHLWAPI.dll

USER32.dll

USERENV.dll

WININET.dll

WINMM.dll

WS2_32.dll

WTSAPI32.dll

ShellExecuteA

client.dll

kernel32.dll

GetProcessHeap

CryptDestroyKey

CryptImportKey

advapi32.dll

CryptSetKeyParam

:\myapp.exe

GCC: (GNU) 4.8.1

<585585576

558558558558@

>585585556

**/**/)(

,****/**

ohvoca.exe_3792_rwx_10001000_00031000:

Ht.Ht

QSSSSSSh

hu2.iu

%s\%s

"%s" %s %u

%s\%s.%s

"%s" %s "%s"

%s%s\

%s.%s

%c:\%s

%s %s

\\.\%c:

Software\Microsoft\Windows NT\CurrentVersion

%s %s build %s

x%sx%sx%sx%sx%sx

hXXps://

hXXp://

HTTP/1.0

kernel32.dll

.Rv94

CreatePipe

GetProcessHeap

CryptDestroyKey

CryptImportKey

CryptSetKeyParam

RegCreateKeyExA

RegCloseKey

RegOpenKeyExA

RegEnumKeyA

GdiplusShutdown

ShellExecuteA

ShellExecuteExA

SHDeleteKeyA

EnumWindows

UnhookWindowsHookEx

SetWindowsHookExA

GetAsyncKeyState

GetKeyNameTextA

HttpSendRequestA

HttpOpenRequestA

InternetOpenUrlA

.text

`.rdata

@.data

.reloc

i` z%SZ%

lB8*YKey

.iegM

ohvoca.exe_3296:

.text

P`.data

.rdata

`@.bss

.idata

.rsrc

Ü~:

A:\~S

VJ.ae

.OBNb "

w*-.GEP

F.DuS

9J.LP(

%dowWNT\Cur

hXXps://c

e%.LI

.Rv94

i` z%SZ%

lB8*YKey

.iegM

KERNEL32.DLL

ADVAPI32.dll

CRYPT32.dll

GDI32.dll

gdiplus.dll

IPHLPAPI.DLL

MPR.dll

NETAPI32.dll

ole32.dll

OLEAUT32.dll

SHELL32.dll

SHLWAPI.dll

USER32.dll

USERENV.dll

WININET.dll

WINMM.dll

WS2_32.dll

WTSAPI32.dll

ShellExecuteA

client.dll

kernel32.dll

GetProcessHeap

CryptDestroyKey

CryptImportKey

advapi32.dll

CryptSetKeyParam

:\myapp.exe

GCC: (GNU) 4.8.1

<585585576

558558558558@

>585585556

**/**/)(

,****/**

ohvoca.exe_3348:

.text

P`.data

.rdata

`@.bss

.idata

.rsrc

Ü~:

A:\~S

VJ.ae

.OBNb "

w*-.GEP

F.DuS

9J.LP(

%dowWNT\Cur

hXXps://c

e%.LI

.Rv94

i` z%SZ%

lB8*YKey

.iegM

KERNEL32.DLL

ADVAPI32.dll

CRYPT32.dll

GDI32.dll

gdiplus.dll

IPHLPAPI.DLL

MPR.dll

NETAPI32.dll

ole32.dll

OLEAUT32.dll

SHELL32.dll

SHLWAPI.dll

USER32.dll

USERENV.dll

WININET.dll

WINMM.dll

WS2_32.dll

WTSAPI32.dll

ShellExecuteA

client.dll

kernel32.dll

GetProcessHeap

CryptDestroyKey

CryptImportKey

advapi32.dll

CryptSetKeyParam

:\myapp.exe

GCC: (GNU) 4.8.1

<585585576

558558558558@

>585585556

**/**/)(

,****/**

ohvoca.exe_3296_rwx_10001000_00031000:

Ht.Ht

QSSSSSSh

hu2.iu

%s\%s

"%s" %s %u

%s\%s.%s

"%s" %s "%s"

%s%s\

%s.%s

%c:\%s

%s %s

\\.\%c:

Software\Microsoft\Windows NT\CurrentVersion

%s %s build %s

x%sx%sx%sx%sx%sx

hXXps://

hXXp://

HTTP/1.0

kernel32.dll

.Rv94

CreatePipe

GetProcessHeap

CryptDestroyKey

CryptImportKey

CryptSetKeyParam

RegCreateKeyExA

RegCloseKey

RegOpenKeyExA

RegEnumKeyA

GdiplusShutdown

ShellExecuteA

ShellExecuteExA

SHDeleteKeyA

EnumWindows

UnhookWindowsHookEx

SetWindowsHookExA

GetAsyncKeyState

GetKeyNameTextA

HttpSendRequestA

HttpOpenRequestA

InternetOpenUrlA

.text

`.rdata

@.data

.reloc

i` z%SZ%

lB8*YKey

.iegM

ohvoca.exe_3348_rwx_10001000_00031000:

Ht.Ht

QSSSSSSh

hu2.iu

%s\%s

"%s" %s %u

%s\%s.%s

"%s" %s "%s"

%s%s\

%s.%s

%c:\%s

%s %s

\\.\%c:

Software\Microsoft\Windows NT\CurrentVersion

%s %s build %s

x%sx%sx%sx%sx%sx

hXXps://

hXXp://

HTTP/1.0

kernel32.dll

.Rv94

CreatePipe

GetProcessHeap

CryptDestroyKey

CryptImportKey

CryptSetKeyParam

RegCreateKeyExA

RegCloseKey

RegOpenKeyExA

RegEnumKeyA

GdiplusShutdown

ShellExecuteA

ShellExecuteExA

SHDeleteKeyA

EnumWindows

UnhookWindowsHookEx

SetWindowsHookExA

GetAsyncKeyState

GetKeyNameTextA

HttpSendRequestA

HttpOpenRequestA

InternetOpenUrlA

.text

`.rdata

@.data

.reloc

i` z%SZ%

lB8*YKey

.iegM

ohvoca.exe_4044:

.text

P`.data

.rdata

`@.bss

.idata

.rsrc

Ü~:

A:\~S

VJ.ae

.OBNb "

w*-.GEP

F.DuS

9J.LP(

%dowWNT\Cur

hXXps://c

e%.LI

.Rv94

i` z%SZ%

lB8*YKey

.iegM

KERNEL32.DLL

ADVAPI32.dll

CRYPT32.dll

GDI32.dll

gdiplus.dll

IPHLPAPI.DLL

MPR.dll

NETAPI32.dll

ole32.dll

OLEAUT32.dll

SHELL32.dll

SHLWAPI.dll

USER32.dll

USERENV.dll

WININET.dll

WINMM.dll

WS2_32.dll

WTSAPI32.dll

ShellExecuteA

client.dll

kernel32.dll

GetProcessHeap

CryptDestroyKey

CryptImportKey

advapi32.dll

CryptSetKeyParam

:\myapp.exe

GCC: (GNU) 4.8.1

<585585576

558558558558@

>585585556

**/**/)(

,****/**

ohvoca.exe_4044_rwx_10001000_00031000:

Ht.Ht

QSSSSSSh

hu2.iu

%s\%s

"%s" %s %u

%s\%s.%s

"%s" %s "%s"

%s%s\

%s.%s

%c:\%s

%s %s

\\.\%c:

Software\Microsoft\Windows NT\CurrentVersion

%s %s build %s

x%sx%sx%sx%sx%sx

hXXps://

hXXp://

HTTP/1.0

kernel32.dll

.Rv94

CreatePipe

GetProcessHeap

CryptDestroyKey

CryptImportKey

CryptSetKeyParam

RegCreateKeyExA

RegCloseKey

RegOpenKeyExA

RegEnumKeyA

GdiplusShutdown

ShellExecuteA

ShellExecuteExA

SHDeleteKeyA

EnumWindows

UnhookWindowsHookEx

SetWindowsHookExA

GetAsyncKeyState

GetKeyNameTextA

HttpSendRequestA

HttpOpenRequestA

InternetOpenUrlA

.text

`.rdata

@.data

.reloc

i` z%SZ%

lB8*YKey

.iegM

raptrpatch.exe_3572:

.text

`.rdata

@.data

.ndata

.rsrc

uDSSh

<iu2.iu

.DEFAULT\Control Panel\International

Software\Microsoft\Windows\CurrentVersion

GetWindowsDirectoryA

KERNEL32.dll

ExitWindowsEx

GetAsyncKeyState

USER32.dll

GDI32.dll

SHFileOperationA

ShellExecuteA

SHELL32.dll

RegEnumKeyA

RegCreateKeyExA

RegCloseKey

RegDeleteKeyA

RegOpenKeyExA

ADVAPI32.dll

COMCTL32.dll

ole32.dll

VERSION.dll

logging set to %d

settings logging to %d

created uninstaller: %d, "%s"

WriteReg: error creating key "%s\%s"

WriteReg: error writing into "%s\%s" "%s"

WriteRegBin: "%s\%s" "%s"="%s"

WriteRegDWORD: "%s\%s" "%s"="0xx"

WriteRegExpandStr: "%s\%s" "%s"="%s"

WriteRegStr: "%s\%s" "%s"="%s"

DeleteRegKey: "%s\%s"

DeleteRegValue: "%s\%s" "%s"

WriteINIStr: wrote [%s] %s=%s in %s

CopyFiles "%s"->"%s"

CreateShortCut: out: "%s", in: "%s %s", icon: %s,%d, sw=%d, hk=%d

Error registering DLL: Could not load %s

Error registering DLL: %s not found in %s

Exec: failed createprocess ("%s")

Exec: success ("%s")

Exec: command="%s"

ExecShell: success ("%s": file:"%s" params:"%s")

ExecShell: warning: error ("%s": file:"%s" params:"%s")=%d

Exch: stack < %d elements

RMDir: "%s"

MessageBox: %d,"%s"

Delete: "%s"

File: wrote %d to "%s"

File: skipped: "%s" (overwriteflag=%d)

File: error creating "%s"

File: overwriteflag=%d, allowskipfilesflag=%d, name="%s"

Rename failed: %s

Rename on reboot: %s

Rename: %s

IfFileExists: file "%s" does not exist, jumping %d

IfFileExists: file "%s" exists, jumping %d

CreateDirectory: "%s" created

CreateDirectory: can't create "%s" - a file already exists

CreateDirectory: can't create "%s" (err=%d)

CreateDirectory: "%s" (%d)

SetFileAttributes: "%s":X

Sleep(%d)

detailprint: %s

Call: %d

Aborting: "%s"

Jump: %d

verifying installer: %d%%

unpacking data: %d%%

... %d%%

hXXp://nsis.sf.net/NSIS_Error

~nsu.tmp

install.log

%u.%u%s%s

Skipping section: "%s"

Section: "%s"

New install of "%s" to "%s"

RegDeleteKeyExA

RMDir: RemoveDirectory failed("%s")

RMDir: RemoveDirectory on Reboot("%s")

RMDir: RemoveDirectory("%s")

RMDir: RemoveDirectory invalid input("%s")

Delete: DeleteFile failed("%s")

Delete: DeleteFile on Reboot("%s")

Delete: DeleteFile("%s")

%s=%s

*?|<>/":

invalid registry key

HKEY_DYN_DATA

HKEY_CURRENT_CONFIG

HKEY_PERFORMANCE_DATA

HKEY_USERS

HKEY_LOCAL_MACHINE

HKEY_CURRENT_USER

HKEY_CLASSES_ROOT

x%c

pData\Local\Temp\nsx1EE7.tmp\NSISdl.dll

taller: C:\Users\"%CurrentUserName%"\AppData\Local\Temp\playstv_patch.exe

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\NSISdl.dll

ure_Server_CA.pem

s_3_CA.pem

_Authority_-_G5_2.pem

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp

undle.dat

_G5_2.pem

ShellExecAsUser: FindWindowSW failed: %x

FExecShellAsUser: thread finished

ExecShellAsUser: process is not elevated, will fallback to ShellExecute

SHLWAPI.dll

OLEAUT32.dll

MSVCR100.dll

_malloc_crt

_amsg_exit

_crt_debugger_hook

ShellExecAsUser.dll

ShellExecAsUser

<requestedExecutionLevel level="asInvoker" uiAccess="false"></requestedExecutionLevel>

> ?'?6?=?[?

8 8$8(8,808

7%7/767~7

5!5%5)5-51555

KWindows

qzB .iO

.Xs'~

.FRMDQ

%Program Files%\Raptr Inc\Raptr\raptr_ep32.exe

ogo\*.*

raptr_ep32.exe

bundle.dat

906.dll

-%Program Files%\Raptr Inc\Raptr\install.log

\Users\"%CurrentUserName%"\AppData\Local\Temp\playstv_patch.exe

File: skipped: "C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\NSISdl.dll" (overwriteflag=1)

mp\NSISdl.dll"

\Users\"%CurrentUserName%"\AppData\Local\Temp\raptrpatch.exe

erisign_RSA_Secure_Server_CA.pem

:\Program Files\Raptr Inc\Raptr\ca-certs

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\raptrpatch.exe

%Program Files%\Raptr Inc\Raptr

C:\Users\"%CurrentUserName%"\AppData\Local\Temp

raptrpatch.exe

ers\"%CurrentUserName%"\AppData\Local\Temp\nsx1AEF.tmp

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\

%Program Files%\Raptr Inc\Raptr\msvc2010

C:\Users\"%CurrentUserName%"\AppData\Roaming

C:\Users\"%CurrentUserName%"\AppData\Local\Temp\playstv_patch.exe

{E5405557-FCF8-4E27-8B05-DC581C489F6E}

<?xml version="1.0" encoding="UTF-8" standalone="yes"?><assembly xmlns="urn:schemas-microsoft-com:asm.v1" manifestVersion="1.0"><assemblyIdentity version="1.0.0.0" processorArchitecture="X86" name="Nullsoft.NSIS.exehead" type="win32"/><description>Nullsoft Install System v2.46</description><dependency><dependentAssembly><assemblyIdentity type="win32" name="Microsoft.Windows.Common-Controls" version="6.0.0.0" processorArchitecture="X86" publicKeyToken="6595b64144ccf1df" language="*" /></dependentAssembly></dependency><trustInfo xmlns="urn:schemas-microsoft-com:asm.v3"><security><requestedPrivileges><requestedExecutionLevel level="requireAdministrator" uiAccess="false"/></requestedPrivileges></security></trustInfo><compatibility xmlns="urn:schemas-microsoft-com:compatibility.v1"><application><supportedOS Id="{35138b9a-5d96-4fbd-8e2d-a2440225f93a}"/><supportedOS Id="{e2011457-1546-43c5-a5fe-008deee3d3f0}"/></application></compatibility></assembly>

-Operation f

Eigenschaft %s existiert nicht.

OLE-Fehler %.8xBDie Methode '%s' wird vom Automatisierungsobjekt nicht unterst

ge ($0%x)3Komponente mit der Bezeichnung %s existiert bereits/In der Stringliste sind Duplikate nicht erlaubt#Datei %s kann nicht erstellt werden#Datei %s kann nicht ge

ffnet werden(''%s'' ist kein g

pft (%d)#Zu viele Eintr

ge in der Liste (%d)*Listenindex

berschreitet das Maximum (%d)BExpandieren des Speicher-Stream wegen Speichermangel nicht m

glich Fehler beim Lesen von %s%s%s: %s

%s.Seek nicht implementiert

r '%s' nicht gefunden&%s kann nicht zu %s zugewiesen werden

Klasse %s nicht gefunden

%s (%s, Zeile %d)

Abstrakter FehlerBZugriffsverletzung bei Adresse %p in Modul '%s'. %s von Adresse %p

Systemfehler. Code: %d.

%s:Ein Aufruf einer Betriebssystemfunktion ist fehlgeschlagen

ltige Variant-Operation#Ung

ltige Variant-Operation ($%.8x)

Variant ist kein ArrayBVariante des Typs (%s) konnte nicht in Typ (%s) konvertiert werdenF

berlauf bei der Konvertierung einer Variante vom Typ (%s) in Typ (%s)

ltiger Variant-Typ Operation wird nicht unterst

Externe Exception %x$Auswertung von assert fehlgeschlagen

ltige Zeigeroperation

ltige Typumwandlung4Zugriffsverletzung bei Adresse %p. %s von Adresse %p

Privilegierte Anweisung(Exception %s in Modul %s bei %p.

Anwendungsfehler7Format '%s' ung

r Format '%s'(Variant-Methodenaufruf nicht unterst

"'%s' ist kein g

ltiger Integerwert"'%s' ist kein g

E/A-Fehler %d

ltige Gleitkommaoperation

raptrpatch.exe_3572_rwx_10004000_00001000:

callback%d

Remove it with Ad-Aware

Click (here) to download and install Ad-Aware Free Antivirus.
Update the definition files.
Run a full scan of your computer.

Manual removal*

Terminate malicious process(es) (How to End a Process With the Task Manager):

ca7cadf5e7c508a5319d35295356cc28 .exe:3496
%original file name%.exe:3436
ohvoca.exe:3804
ohvoca.exe:1876
ohvoca.exe:3060
ohvoca.exe:3736
ohvoca.exe:2800
ohvoca.exe:2940
ohvoca.exe:3028
ohvoca.exe:3184
ohvoca.exe:3872
ohvoca.exe:2648
ohvoca.exe:3916
ohvoca.exe:3768
ohvoca.exe:3480
ohvoca.exe:2628
ohvoca.exe:3932
ohvoca.exe:3136
ohvoca.exe:3172
ohvoca.exe:1848
ohvoca.exe:2040
ohvoca.exe:2896
ohvoca.exe:2996
ohvoca.exe:820
ohvoca.exe:3196
ohvoca.exe:808
ohvoca.exe:644
ohvoca.exe:2252
Delete the original Trojan file.
Delete or disinfect the following files created/modified by the Trojan:

%Program Files%\Raptr\bundle.dat (4 bytes)
%Program Files%\Raptr\resources\images\bundle\logo\spirittales_logo.png (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\raptrpatch.exe (4353058 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229D.tmp (13214 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\NSISdl.dll (30 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\amd_beta_splash.bmp (16288 bytes)
%Program Files%\Raptr\silent.dat (1 bytes)
%Program Files%\Raptr\uninstall.exe (1137 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsw229E.tmp\FindProcDLL.dll (7 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2B24.tmp (32726 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\ihodinfaa.ocx (756838 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fanoseoxt\fawoedwef.drv (65356 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2BD2.tmp (22638 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exe (652 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\opmii.ocx (1029580 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2BD3.tmp (24790 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\uvasfop.cat (2264286 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\umos.dmp (3750836 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ome.dmp (1503944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exep (408 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ompo\awabe.sys (434 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ecwa\aderkuma.ocx (1682428 bytes)
C:\ca7cadf5e7c508a5319d35295356cc28 .exe (446 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ecwa\aqx.cat (3407530 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\viogiwvu.sys (3899734 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fikadu\uwpuheegx.mui (506300 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2B35.tmp (38758 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ecwa\ade.sys (2280830 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ecwa\ixsifoi.dat (4262806 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ehe.dmp (1680 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fanoseoxt\uliwgi.drv (4374582 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fanoseoxt\qeaghuamg.cat (1013268 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\beavnohoq.sys (3183810 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\RCX2BE4.tmp (26526 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fanoseoxt\ifp.bin (306226 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\fikadu\kuloma.cat (1853816 bytes)
C:\ProgramData\Haoruvevk\ohvoca.exe (389 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1BB09BEEC155258835C193A7AA85AA5B_24063F956624883A5BA3ACEFF45EA084 (1488 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B6E683A7A45CC59BF035C9BA8C7AB9D (888 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 (688 bytes)
C:\Windows\Temp\Tar8B20.tmp (2712 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (1082 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 (5 bytes)
C:\Windows\Temp\Cab8B1F.tmp (48 bytes)
C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\F5BEJ4YJ\icanhazip_com[1].txt (15 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0060A9F9287878B15AB61E0E47645E5 (2 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1BB09BEEC155258835C193A7AA85AA5B_24063F956624883A5BA3ACEFF45EA084 (471 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0060A9F9287878B15AB61E0E47645E5 (392 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B6E683A7A45CC59BF035C9BA8C7AB9D (602 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CC42971B7939A9CA55C44CFC893D7C1D (812 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CC42971B7939A9CA55C44CFC893D7C1D (832 bytes)
C:\ProgramData\Microsoft\Crypto\RSA\S-1-5-18\6d14e4b1d8ca773bab785d1be032546e_88dcd395-b062-45b3-a6cd-79f37c0eba08 (47 bytes)
C:\Windows\System32\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (1082 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\F0060A9F9287878B15AB61E0E47645E5 (2 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\CC42971B7939A9CA55C44CFC893D7C1D (832 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\CC42971B7939A9CA55C44CFC893D7C1D (812 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\1BB09BEEC155258835C193A7AA85AA5B_24063F956624883A5BA3ACEFF45EA084 (1488 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Tar82E6.tmp (2712 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5457A8CE4B2A7499F8299A013B6E1C7C_CE50F893881D43DC0C815E4D80FAF2B4 (10 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\1BB09BEEC155258835C193A7AA85AA5B_24063F956624883A5BA3ACEFF45EA084 (471 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\3B6E683A7A45CC59BF035C9BA8C7AB9D (602 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\F0060A9F9287878B15AB61E0E47645E5 (392 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\Cab82D5.tmp (51 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\5080DC7A65DB6A5960ECD874088F3328_6CBA2C06D5985DD95AE59AF8FC7C6220 (688 bytes)
C:\Users\"%CurrentUserName%"\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\3B6E683A7A45CC59BF035C9BA8C7AB9D (888 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\25FDO7QC\icanhazip_com[1].txt (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_sealonline.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_logo_small.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\nvidia_logo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_nobg.ico (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\tab_close.png (373 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_inactive_3.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_raptr_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_highfive.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\ssl.dll (16288 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_browser.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_util32-119906.dll (12024 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\optimize_ignore.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mbox_question.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_c.png (635 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\folder.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_youtube.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_twitter.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\bundle.dat (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\thumb_frame_link_norm.png (556 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\talesrunner_logo.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\3_marker.png (811 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\stop.png (760 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc16c.png (618 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\call_answer.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_player_hover.png (151 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn24c.png (911 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\back.png (291 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_progbar_bg.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Widget.ps (812 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_gmail.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_active_4.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_love.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\bg_pattern_red.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\gobject._gobject.pyd (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\joinable_game_sm.png (426 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\twitch_disabled.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\ijji_36_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl16.png (622 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\control_center\rewards_728x90.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\info_button.png (531 bytes)
%Program Files%\Raptr Inc\Raptr\win32com.shell.shell.pyd (9608 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_it_IT.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_mangafighter.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\vcredist_x86.exe (133421 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\collapse_default.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libi422_i420_plugin.dll (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\invisible.png (461 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\balloon_x_gray.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_poke.mp3 (11 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xblive_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_resize1.png (206 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_disable_icon.png (764 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_google.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\playstv_enabled.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_left.png (368 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_tag_link.png (505 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_active_2.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_replay_off.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\twitch_enabled.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\title_bar_logo.png (904 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\icq_gray.png (923 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_audio.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\scroll_down.png (353 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\drawer_arrow_open.png (235 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_j.png (357 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\aim_gray.png (718 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn64.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_folder.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\librv32_plugin.dll (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\pl_PL.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\bigfootnetworks_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_amd_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\joinable_game_lg.png (584 bytes)
%Program Files%\Raptr Inc\Raptr\pyexpat.pyd (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_krazyaces.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\resume.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\arrow_down.png (325 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libirc.dll (22192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\SimpleFC.dll (6540 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\back_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_add_arrow_hover.png (316 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\video_scissor2.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\love.png (890 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Entrust.net_Secure_Server_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn64c.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\info_icon_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qgif4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_dashboard.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\fr_FR.qm (8184 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libwaveout_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_default.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\tongue.gif (642 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\CAcert_Class3.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\libmfxsw32.dll (522454 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\header_opts_cog1.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_close.png (321 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\community_icon.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_trophy_bronze.png (604 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\raptr16c.png (612 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\qtwcodecs4.dll (5520 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Random.OSRNG.winrandom.pyd (10 bytes)
%Program Files%\Raptr Inc\Raptr\nssutil3.dll (4992 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libdirect2d_plugin.dll (1856 bytes)
%Program Files%\Raptr Inc\Raptr\libsasl.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_video_icon.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_highlight_off.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\driftcity_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\razer_logo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn16c.png (581 bytes)
%Program Files%\Raptr Inc\Raptr\msvcr90.dll (22552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_trash.png (906 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\voip_gray.png (518 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\prev.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_timeline_play.png (420 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\accept.png (781 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_poop.mp3 (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_topbar_m.png (125 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\msn_color.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Cipher.AES.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\iamyourfather.gif (1856 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libafile_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn32.png (687 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fb32c.png (461 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mbox_information.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\refresh.png (849 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\refresh.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_min_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\America_Online_Root_Certification_Authority_1.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\control_center\twitch_728x90_b.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\facebook_button_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_twitter.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\tab_close_hover.png (374 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn16c.png (714 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_hover_3.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\slap.png (726 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dvr_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\cta_dino.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\crop.png (541 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libglwin32_plugin.dll (3312 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libyuy2_i422_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gallery_camera_big.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_hifive.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_wait.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4.QtCore.pyd (47570 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam24c.png (623 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_prev.png (847 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\facebook_button_active.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\search_close.png (273 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\tr_TR.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\back_to_gallery_arrow.png (360 bytes)
%Program Files%\Raptr Inc\Raptr\library.zip (349926 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\surprised.gif (641 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_close_x.png (599 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\button_play.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\heal.png (349 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\phonon_backend\phonon_ds94.dll (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\reload_active.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_notices.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\ja_JP.qm (6360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\home.png (730 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\send_file.png (670 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\facebook_gray.png (560 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_raptr_on.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_nesw.cur (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\third_party\youtube_dialog_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn32.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\default_game_icon.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_red_ring.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_yahoo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\dragonica_logo.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc32.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\community_icon_active.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\zh_TW.qm (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_edit.png (702 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_download_error.png (418 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_shoryuken.mp3 (12 bytes)
%Program Files%\Raptr Inc\Raptr\QtGui4.dll (266044 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Thawte_Primary_Root_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\bz2.pyd (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\knob_hover.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_avail_lg.png (505 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_move.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_twitter_off.png (792 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_ingame_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gtalk_gray.png (932 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn24.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\facebook_hover.png (887 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_twitch_off.png (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\teaser_close.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_twitch_on.png (7192 bytes)
%Program Files%\Raptr Inc\Raptr\msvcm90.dll (8184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_ns.cur (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\ssl-nss.dll (20416 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\chat.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\arrow_down.png (261 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playing_icon.png (236 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_replay_logo_beta.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_eat2.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\available.png (513 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim64c.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\raptr_encoder_server64-119906.exe (67494 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_start_arrow.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\aim_color.png (797 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\doodle.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_inactive_3.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\lunia_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_full_screen.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\halo.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\heroesofnewerth.png (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_b.png (502 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_added.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gtalk_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\yelling-anim.gif (852 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\UtilRect.vs (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\cancel.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\undo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\typing.png (375 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_youtube_on.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libadummy_plugin.dll (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl24c.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\playstv_patch.exe (2429300 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\libmp3lame-ttv.dll (13584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_main.png (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\launch_button_arrow.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\groove_white.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_background.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_activity_hover.png (405 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\capsule_bg_m.png (160 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq24c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_amazon.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_record_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\incoming.mp3 (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_optimize_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinbox_down_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\heart.gif (982 bytes)
%Program Files%\Raptr Inc\Raptr\libgobject-2.0-0.dll (11048 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\unease.gif (635 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_hover_3.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_xfire_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\barrel.png (858 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_steam.png (995 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\twitter_button_default.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\tileview_clock.png (666 bytes)
%Program Files%\Raptr Inc\Raptr\nssckbi.dll (14184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_128x128.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\loading.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_timeline_pause.png (232 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_rp_avail.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libi420_rgb_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_avatar.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq32.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\phonon_backend\Microsoft.VC90.CRT.manifest (346 bytes)
%Program Files%\Raptr Inc\Raptr\liboscar.dll (34365 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\video_scissor.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\razer.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\logo_amd_gaming_evolved.png (9 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Verisign_RSA_Secure_Server_CA.pem (827 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fb64c.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_resize2.png (201 bytes)
%Program Files%\Raptr Inc\Raptr\msvc2010\vcredist_x86.exe (163934 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\optimize_check.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\convert_user_dino.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_mid.png (202 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\msvcp90.dll (19152 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_excel.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_lunia.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\simplejson._speedups.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_icon.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_championsonline.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\submenu_popout.png (263 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq24.png (804 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\upload_arrow.png (704 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_pwn.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_mid.png (193 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\joinable_game_icon.png (532 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_app_notices.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\freebl3.dll (10136 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\champions_logo.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_inactive_4.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\text_small.png (290 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_away_lg.png (502 bytes)
%Program Files%\Raptr Inc\Raptr\raptr_ep64.exe (12720 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libyuy2_i420_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl16c.png (622 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\close_btn_pressed.png (602 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\convert_user_raptr_logo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\sip.pyd (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top.png (177 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\qkrcodecs4.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl32.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_addgame_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fb16c.png (347 bytes)
%Program Files%\Raptr Inc\Raptr\amf-component-vce-windesktop32.dll (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\more_added.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\reload_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\knob_normal.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\ssl3.dll (8560 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_optimize.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_full_simple.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\button_normal_screen.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_away.png (419 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\refresh.png (425 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_trophy_plat.png (696 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\install.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_movedir1.png (301 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_active_2.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\arrow_down_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libyuv_plugin.dll (1552 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Microsoft_Internet_Authority.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\resume.png (791 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc24c.png (558 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_hover_left.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_app_redring.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_gamespot.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_prefs_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\libxml2-2.dll (34773 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_app_myprofile.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\cod.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mumble.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\nss3.dll (35784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_activity_btn.png (388 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\mario.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_goldring.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_logoicon_v2_32x32.ico (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\post_game\thief_raptr_600x600_buy_now.jpg (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_smallcog_norm.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_fpsi64-119906.dll (15168 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mbox_warning.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\AddTrust_External_Root.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\icq_color.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_home_btn.png (737 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\info_icon_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libvlc.dll (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\main.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\forward_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_tl_pauseclip_norm.png (280 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\status_playing_offline.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\logo_panel_dino.png (979 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\more_default.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\win32pipe.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\nvidia_avatar.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\cancel_over.png (842 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\controller_icon_fill.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\katamari.png (908 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libdrawable_plugin.dll (14 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fbc24.png (268 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\twitter_32.png (601 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\ge_powerbyraptr_logo.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_google_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\msvc2010\vcredist_x64.exe (179646 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_alert_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_minimize.png (186 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_active_1.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\scroll_down.png (353 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\crying-anim.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ps3_bg.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\it_IT.qm (7192 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\FindProcDLL.dll (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dlm_spinner_normal.gif (847 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_gameplay.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\ValiCert_Class_2_VA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\chat_icon.png (558 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_replay_logo.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinner.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\driver_outofdate.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_xfire.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\button_pause.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_pl_PL.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire24c.png (668 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_bigfootnetworks.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_pause_range.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\plays_logo_client_beta.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_International_Server_Class_3_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\qcncodecs4.dll (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\next.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\pause_active.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libvdummy_plugin.dll (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_close_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_help64-119906.dll (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_image.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\cancel_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_knob_hover.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\login_panel_logo_amd.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\tooltip_qmark.png (430 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\twitter_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\smime3.dll (8184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_next.png (905 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_hover_2.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\twitchsdk_32_raptr_release.dll (32824 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\control_base.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\wink.gif (655 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\roundhouse.png (839 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_options.png (552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_offline_lg.png (501 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\zergrush.png (764 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libi422_yuy2_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\ext_link.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\libpurple.dll (94878 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\intel_avatar.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\heroesofnewerth_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\resume_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_close_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\libmp3lame-ttv.dll (23424 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_eat.mp3 (2392 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qtiff4.dll (10136 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_egg.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_poop.gif (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_progbar_fg.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top_btndown.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Hash._SHA256.pyd (11 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_arrow_down.png (265 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_hover_1.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qjpeg4.dll (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\shoryuken.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\laughinghard-anim.gif (729 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_facebook.png (757 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_options_hover.png (312 bytes)
%Program Files%\Raptr Inc\Raptr\win32process.pyd (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_maximize_press.png (220 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\save.png (532 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\sealonline_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_d.png (527 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_video_start.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\brightshadow.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\plays_default_user.png (614 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\close_btn_hover.png (487 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_movepat2.png (145 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\pwn.png (434 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_bottom.png (563 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\install_press.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq64c.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ventrilo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_finger.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\AOL_Member_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\smile.gif (642 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_caption_2.png (9 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim24c.png (733 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\dashboard_plays_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\doodle_white.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libjabber.dll (46916 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_barrel.mp3 (12 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim32.png (897 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_a.png (619 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_svcs_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_icq_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\poke.png (894 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\icq_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gtalk_color.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\ext_link_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\lunia.png (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_twitter_off.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\drawer_arrow_close.png (249 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\over_tl_sizer_down.png (165 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_minimize_hover.png (191 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\save_disabled.png (520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_play_range.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\libplds4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\control_center\community_728x90.png (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_de_DE.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\scroll_grip_vert.png (197 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vertical_slider_knob.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_can_optimize.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\scroll_grip.png (197 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_active_4.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\krazyaces_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\color_disk_highlight.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\optimize_caution.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\guest_convert_logo.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\controller_icon_error.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4.QtNetwork.pyd (16944 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\brightshadow_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl64c.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\libymsg.dll (33391 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk32.png (734 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\arrow_down.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_facebook_off.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pause_over.png (561 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\refresh_press.png (798 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\play_game_icon.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_buttons_overlay.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_facebook_on.png (897 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_close_hover.png (580 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_bar_red_server_info.png (140 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\Microsoft.VC90.CRT.manifest (346 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dlm_error.png (243 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\radio_on.png (514 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_trophy_gold.png (602 bytes)
%Program Files%\Raptr Inc\Raptr\uninstall.exe (1475 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_pause.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_moreapps.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qico4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\thirdpartylicenses.txt (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\list_selected.png (11 bytes)
%Program Files%\Raptr Inc\Raptr\libsilc-1-1-2.dll (82435 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn16hc.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libamem_plugin.dll (15 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libxmpp.dll (19152 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_katamari.png (12 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\login_panel_logo_raptr.png (9 bytes)
%Program Files%\Raptr Inc\Raptr\win32api.pyd (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\raptr_logo.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\_socket.pyd (1552 bytes)
%Program Files%\Raptr Inc\Raptr\pythoncom26.dll (12088 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_katamari.mp3 (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_tabbar_info.png (493 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_can_optimize.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gallery_icon.png (883 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\power_icon.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\python26.dll (67969 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\tab_add_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_options_inert.png (633 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_video.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_raptr.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\pywintypes26.dll (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_rescan_down.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\ru_RU.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\barbtn_opts_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_close_press.png (363 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim16c.png (447 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_ja_JP.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\drawer_arrow_hover_close.png (175 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_added.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_gg.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_plays_logo.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam24.png (623 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Microsoft_Secure_Server_Authority_2010.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\plays_logo_client.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_full_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire16hc.png (640 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_doc.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\call_hold.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\access\libfilesystem_plugin.dll (1552 bytes)
%Program Files%\Raptr Inc\Raptr\SSLEAY32.dll (7192 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\swresample-ttv-0.dll (12536 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_trash.png (580 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\login_header.png (12 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_headshot.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_tl_playclip_inert.png (419 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_ko_KR.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\outgoing.mp3 (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\default_boxart.jpg (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_weather.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libi420_yuy2_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_inactive_1.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qsvg4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\warning.png (370 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_zh_TW.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_love.mp3 (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\scroll_up.png (351 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam16.png (398 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_background.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top_btnhover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libmsn.dll (36078 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mag_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_twitter.png (800 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\control_center\wot_rectangle_180x150.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\exchndl.dll (19592 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_help32-119906.dll (5064 bytes)
%Program Files%\Raptr Inc\Raptr\unicodedata.pyd (19592 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_shoryuken.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\download_arrow.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_prefs_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\toolbar_arrow_down.png (181 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire24.png (485 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_redfaction.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\progress_bar.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_msgcenter.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_kotaku.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_chat.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\qjpcodecs4.dll (6360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_bigcog_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\call_resume.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_addgame_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libtorrent.pyd (62035 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\text_medium.png (344 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_h.png (234 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\points.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_is_optimized.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\raptr24c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_myprofile.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_inactive_4.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\StartCom_Certification_Authority.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\arrow_left.png (292 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_addgame_down.png (536 bytes)
%Program Files%\Raptr Inc\Raptr\libnspr4.dll (12024 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn24.png (535 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\refresh.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\msn_gray.png (876 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinbox_down_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_bg.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_video_stop.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\anim-roundhouse.gif (6 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Microsoft_Secure_Server_Authority.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_alert_not_yet.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_xbox.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libsilcclient-1-1-2.dll (34561 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\resize_handle.png (182 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\arrow_down_open.png (186 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_default.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim32c.png (920 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Equifax_Secure_Global_eBusiness_CA-1.pem (964 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_close_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\f2p_ping.exe (1552 bytes)
%Program Files%\Raptr Inc\Raptr\amf-core-windesktop64.dll (26688 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\away.png (514 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\offline.png (455 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\arrow_up.png (320 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\playstv_disabled.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire32c.png (783 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_bg.png (402 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\header_opts_cog2.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\back_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libvlccore.dll (71262 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_options_press.png (332 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc24.png (558 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_0.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\title_bar_logo_inactive.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\twitter.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_level_star.png (637 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim24.png (624 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl24.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\settings_cog_active.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_Class3_Extended_Validation_CA.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\redfaction.png (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\online_jewel.png (507 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\2_marker.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\amf-component-vce-windesktop64.dll (8560 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\scroll_up.png (351 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\loading_animation.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_bigcog_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Webcam.ps (600 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_tl_pauseclip_inert.png (276 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn64c.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_bg.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mag_btn.png (642 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\yahoo_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_minimize_press.png (206 bytes)
%Program Files%\Raptr Inc\Raptr\QtNetwork4.dll (33263 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\color_disk_white.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\blush.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\dashboard_plays_beta_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\optimize_slider_knob.png (512 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl16hc.png (818 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\black.png (168 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\swresample-ttv-0.dll (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gallery_icon_active.png (918 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_eat.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\thq_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\intl.dll (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_bigcog_inert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Go_Daddy_Class_2_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\refresh_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_record_confdlg.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dlm_pause.png (186 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\scroll_grip_vert.png (122 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top_btn.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\UtilRect.ps (612 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\gold_ring.png (12 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\outgoing.wav (1856 bytes)
%Program Files%\Raptr Inc\Raptr\raptrstub.exe (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\pause.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam64.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\avutil-ttv-51.dll (9320 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\scroll_grip_horiz.png (237 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\message.png (541 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\facebook_32.png (970 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_trash_disabled.png (910 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_host_ex.dll (77843 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\search_pressed.png (505 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Shader.vs (860 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\ko_KR.qm (6360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\facebook_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_ps3.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\cancel.png (856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\away.png (514 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_facebook.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\bg_pattern.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\libgthread-2.0-0.dll (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\friends.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_right.png (370 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\bigsmile.gif (651 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_offline.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Cipher.DES3.pyd (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\refresh_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libcaca_plugin.dll (25112 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire16c.png (399 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_caption_3.png (11 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\more_hover.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_pdf.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Widget.vs (860 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_host.dll (27704 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\vedit_zbox_movepat1.png (144 bytes)
%Program Files%\Raptr Inc\Raptr\win32evtlog.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_slap.mp3 (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_twitch_logo.png (5 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsc1EB7.tmp (4313763 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_empty_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_wowtalent.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libdirectsound_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_es_ES.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\offline.png (455 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_chroma\libgrey_yuv_plugin.dll (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\radio_full.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\driver_out_of_date.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libaim.dll (16944 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vuze.ico (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_nvidia.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_download_paused.png (360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\dino_pwn_poke.gif (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\refresh_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_screenshot.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\de_DE.qm (8184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam16c.png (398 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim24c.png (777 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_gunbound.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire64c.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_specify_game.png (493 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\post_game_summary\lol_728x90.png (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\controller_icon_empty.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\barbtn_opts_norm.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\group_edit.png (431 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_hover_4.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\knob_down.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\zh_CN.qm (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk64c.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\driftcity.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4.QtWebKit.pyd (11344 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_player_blank.png (197 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_pkts32-119906.dll (12536 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\arrow_right.png (269 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xfire32.png (577 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\btn_nvidia_launcher.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_maximize.png (204 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dashboard_f2p.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\heliotrope._purple.pyd (82435 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_close_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_hover_1.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_inbox.png (773 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\info_grey.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_hover_right.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\teaser_close_hover.png (534 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\headshot.png (322 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_aim_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\away_jewel.png (512 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_pkts32-119906.dll (12536 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_min.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_2.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4.QtGui.pyd (186350 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_help32-119906.dll (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_e.png (238 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\tab_close_pressed.png (373 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_mixer\libinteger_mixer_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_left.png (387 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\irc32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\playstv_feed.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\twitter_button_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim24.png (465 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\knob_bg.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam16hc.png (796 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\highfive.png (985 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\aim_hover.png (927 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_caption_thief.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_cant_optimize.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_raptr_off.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\dino_poke.gif (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\checkbox_full_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_close.png (562 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\lock_hover.png (291 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\imageformats\qmng4.dll (8184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_added.png (2 bytes)
%Program Files%\Raptr Inc\PlaysTV\bundle.dat (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_full.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\sqlite3.dll (14184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_control_base.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\spinner128.gif (3 bytes)
%Program Files%\Raptr Inc\Raptr\amd_ags.dll (9608 bytes)
%Program Files%\Raptr Inc\Raptr\raptr_encoder_server-119906.exe (66590 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\search_hover.png (529 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_top_btninert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_kick.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_close2.png (516 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\ro_RO.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_game64-119906.dll (68229 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\scroll_grip_horiz.png (154 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\nvidia.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshot_icon.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_fpsi32-119906.dll (13368 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\checkbox_empty_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_zergrush.png (9 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_check_icon.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_facebook_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\checkbox_empty.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\collapse_click.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_headshot.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\yahoo_color.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libmeanwhile-1.dll (6360 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_host.dll (27704 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_yahoo_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\beta_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_xbox_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\twitch_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_pointer.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\info_icon_inert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_slap.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\radio_off.png (458 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\pause_default.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\info_icon_blank.png (150 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\twitchsdk_64_raptr_release.dll (34365 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_facebook_on.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\QtWebKit4.dll (409711 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pause.png (594 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\refresh_over.png (827 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hovercard_button_hover_mid.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_raptr.png (350 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\toolbar_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_close.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_options.png (287 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\no_boxart.png (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam64c.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_pkts64-119906.dll (13584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\barbtn_opts_inert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dinos\dino_raptr.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\nl_NL.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_hover.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\sunglasses.gif (640 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_inactive_2.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libicq.dll (16424 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\poop.png (626 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_smallcog_inert.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\capsule_bg_l.png (268 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_help64-119906.dll (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\xbl64.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\search_normal.png (497 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_prev_disabled.png (839 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\en_US.qm (16 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ge.ico (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\exclamation.png (701 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\groove_black.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\slider_handle.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_min_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_highlight_on.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\email_32.png (629 bytes)
%Program Files%\Raptr Inc\Raptr\PIL._imaging.pyd (11344 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\driver_up_to_date.png (850 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\info_icon_tiny.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\check_mark.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\manga.png (4992 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_steam_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fb24c.png (474 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\edit_image_icon.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\bar_middle.png (129 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_facebook_off.png (660 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_caption_1.png (11 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5_2.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\button_full_screen.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_i.png (225 bytes)
%Program Files%\Raptr Inc\Raptr\win32wnet.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_rewards.png (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\undo_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_raptr_off.png (905 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_playing_avail.png (667 bytes)
%Program Files%\Raptr Inc\Raptr\_hashlib.pyd (12088 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_download_started.png (360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\aim64c.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\videoplayer\raptr.jpg (784 bytes)
%Program Files%\Raptr Inc\Raptr\raptr.exe (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam32c.png (800 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_ew.cur (1 bytes)
%Program Files%\Raptr Inc\Raptr\easyhook64.dll (3312 bytes)
%Program Files%\Raptr Inc\Raptr\pidgin.dll (166378 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_chat_hover.png (885 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\souloftheultimatenation_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\fte_signup\dragonica.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\DigiCertHighAssuranceEVRootCA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\libgmodule-2.0-0.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\pt_BR.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_active_3.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamecontroller_large.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_active_3.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_knob_normal.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\stream_stop.wav (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_zh_CN.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\camera.wav (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\cancel_default.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Microsoft_Internet_Authority_2010.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_twitter_on.png (1 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_host_ex.dll (77843 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_download_finished.png (409 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\line_redglow.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_thief.png (5064 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\goodgame.png (553 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\GTE_CyberTrust_Global_Root.pem (876 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\steam32.png (800 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\redfaction_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\user_group.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\win32file.pyd (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\forward_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\forward.png (289 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_separator.png (260 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Verisign_Class3_Primary_CA.pem (834 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\screenshots_tag_gray.png (450 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_default.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\powered_by_raptr.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_add.png (222 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\search_close_btn.png (387 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\lock.png (272 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_app_moreapps.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webwidget\refresh_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\back_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\cancel_press.png (834 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libyahoo.dll (16944 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_util32-119906.dll (12024 bytes)
%Program Files%\Raptr Inc\Raptr\win32gui.pyd (6360 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dashboard_replay_videos.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_icon.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libyahoojp.dll (16944 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\LIBEAY32.dll (33263 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\teamspeak.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_talesrunner.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\reload_default.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\msn32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\chat_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\install.log (4341383 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_tabbar_hd.png (586 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\voice_icon.png (373 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn16.png (714 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\cod_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dashboard_media_gallery.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\stars.png (668 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\close_btn.png (491 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\raptr_logo.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\hover_close_button.png (494 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\sf3-ryu-shoryuken.gif (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_f.png (232 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libdirect3d_plugin.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\libplc4.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\textpointer.png (753 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\control_overlay.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\avutil-ttv-51.dll (22192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\gamecampus_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_right.png (389 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_ignore_optimizer.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\bigfoot_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\capsule_bg_r.png (265 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_fpsi64-119906.dll (15168 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Util._counter.pyd (11 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pointer.png (173 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_achievement.png (461 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\twitter_button_active.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_bar_green_server_info.png (131 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\cancel_active.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_knob_down.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\forward_disabled.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\arrow_right.png (310 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\status_playing_away.png (419 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\mbox_critical.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\points_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_add_arrow_btn.png (299 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\facebook_color.png (684 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\back.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\joinable_game_sm.png (376 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\over_tl_sizer_hovr.png (166 bytes)
%Program Files%\Raptr Inc\Raptr\resources\gmail.com (1 bytes)
%Program Files%\Raptr Inc\Raptr\select.pyd (10 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_mixer\libfloat_mixer_plugin.dll (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_bar_gray_server_info.png (137 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\alpha_logo.png (4 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_game64-119906.dll (68229 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\welcome_connect.png (14 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_text.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_fpsi32-119906.dll (13368 bytes)
%Program Files%\Raptr Inc\Raptr\zlib1.dll (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\es_ES.qm (7192 bytes)
%Program Files%\Raptr Inc\Raptr\resources\videoplayer\player.swf (3616 bytes)
%Program Files%\Raptr Inc\Raptr\_ctypes.pyd (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_dragdrop.cur (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\game_page.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_souloftheultimatenation.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_gg.mp3 (14 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\app_joystiq.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pause_press.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\call_hangup.png (555 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr.ico (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_hover_2.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_rescan_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_close.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\QtCore4.dll (74461 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\steam_added.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_facebook.png (779 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_fr_FR.qm (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\star_red.png (413 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\en.qm (16 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim32c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\webbrowser\tab_add.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\game_folder_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\over_tl_sizer_norm.png (169 bytes)
%Program Files%\Raptr Inc\Raptr\exclude_exe.reg (244 bytes)
%Program Files%\Raptr Inc\Raptr\win32event.pyd (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\driver_uptodate.png (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_bigfoot.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\videoplayer\jwplayer.js (5520 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_en_US.qm (23 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_hover_4.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_dragonica.png (3312 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\kiss-anim.gif (6 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\raptr16hc.png (565 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xblive_text.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_normal_screen.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\settings_cog.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\StartCom_Free_SSL_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_inactive_1.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\thumb_frame_link_hovr.png (559 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\status_playing_avail.png (667 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\1_marker.png (570 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\psn_trophy_silver.png (586 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\angry.gif (654 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim32.png (558 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\text.png (620 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\refresh_server_info.png (317 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\icq16c.png (694 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_volume_active_1.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libwingdi_plugin.dll (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gray.png (122 bytes)
C:\Users\"%CurrentUserName%"\AppData\Roaming\Raptr\exclude_exe.reg (244 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_icq.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\gameid_title.dat (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\download_complete.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\bell_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\amd_logo.png (10 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\stream_start.wav (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfer_other.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\third_party\youtube_logo.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\_sqlite3.pyd (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\user_generic.png (4 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\spinner.gif (3 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\System.dll (23 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\yim16c.png (499 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\resume_press.png (727 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Deutsche_Telekom_Root_CA_2.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Equifax_Secure_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\gallery_next_disabled.png (887 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\resume_over.png (748 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\barbtn_opts_down.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\psn24c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pip_badge.png (353 bytes)
%Program Files%\Raptr Inc\Raptr\upload_logs.exe (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\incoming.wav (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\welcome_raptr_logo.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\facebook_button_default.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\raptr_avatar.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\PyQt4\plugins\codecs\Microsoft.VC90.CRT.manifest (346 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\status_bar_orange_server_info.png (159 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\detect\gd_driftcity.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bigwin_star.png (696 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\wideeye.gif (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_close_hover.png (358 bytes)
%Program Files%\Raptr Inc\Raptr\version.txt (45 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\fail_mark.png (945 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinbox_up_pressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\bell.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_minimize_press.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\_ssl.pyd (27504 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\CAcert_Root.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ads\post_game_summary\freegames_728x90.png (3616 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\volume_inactive_2.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\msn_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\install_over.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\share_amd_twitter_on.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\vedit_tl_playclip_norm.png (414 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\fbc32.png (303 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\fyi_postgame_dvr.png (15 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\welcome_image.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\poke_emoticons_static_heal.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\edit_button_play.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\dl_mgr\pause_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_minimize_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_aim.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playing_icon_reversed.png (228 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\win_minimize.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_bottom_tab.png (599 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\footer_button_inbox_hover.png (710 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\NSISdl.dll (30 bytes)
%Program Files%\Raptr Inc\Raptr\_win32sysloader.pyd (9 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_optimize_down.png (967 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_arrow_right.png (273 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\yahoo_gray.png (935 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gvr_icon.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\available.png (513 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\cursor_nwse.cur (1 bytes)
%Program Files%\Raptr Inc\Raptr\easyhook32.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\link.gif (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd_scan_splash_1.png (2392 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\blue_dot.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_upload\win_prefs.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\shaders\Shader.ps (628 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\toolbar_arrow_up.png (184 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\text_large.png (384 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\balloon_x_black.png (982 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_msn_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_optimize_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\pokes\eat.png (666 bytes)
%Program Files%\Raptr Inc\Raptr\resources\locale\qt_pt_BR.qm (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\launch_button_arrow_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_pkts64-119906.dll (13584 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Cipher.DES.pyd (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_ps3_on.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_Class_3_Public_Primary_Certification_Authority_-_G5.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\animated_donkey_kong.gif (13 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_smallcog_hover.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xfire_hover.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\winsound.pyd (9 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\cancel_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\gunbound_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\capsule_replay_on.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\growl_options_hover.png (565 bytes)
%Program Files%\Raptr Inc\Raptr\amf-core-windesktop32.dll (21216 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk16c.png (583 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\pause_hover.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\icon_arrow_11x11.png (199 bytes)
%Program Files%\Raptr Inc\Raptr\twitch\x64\libmfxsw64.dll (644479 bytes)
C:\Users\"%CurrentUserName%"\AppData\Local\Temp\nsx1EE7.tmp\ltc\ltc_game32-119906.dll (58402 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\media_player\trash_can.png (784 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\DigiCertHighAssuranceCA-3.pem (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\offline_jewel.png (494 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\gamlst_rescan_norm.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\libglib-2.0-0.dll (33263 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\icon_play.png (906 bytes)
%Program Files%\Raptr Inc\Raptr\softokn3.dll (9320 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\_dummy_app_g.png (660 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\welcome_up_to_date.png (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_twitch_logo_beta.png (7 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\prog_bottom_tabhl.png (581 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\Thawte_Premium_Server_CA.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\amd_knob_logo.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\gta_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\ca-certs\VeriSign_Class_3_Public_Primary_Certification_Authority_-_G2.pem (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\twitchtv_small.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\gamespot_logo_top.png (5 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\navdock\hypno.png (1856 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk24.png (552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\checkbox_checkmark.png (551 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\emoticons\frown.gif (642 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\voip.png (537 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\arrow_down_default.png (186 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\screenshot_icon.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\ltc_game32-119906.dll (58402 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\gtalk24c.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\spinbox_up_unpressed.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\dash_record_logo_beta.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\im_icons\service_msn.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\radio_empty.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\collapse_hover.png (6584 bytes)
%Program Files%\Raptr Inc\Raptr\qt.conf (38 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bigwin_gamepad.png (797 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\codec\libavcodec_plugin.dll (334142 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\playstv\arrow_down_hover.png (171 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\drawer_arrow_hover_open.png (191 bytes)
%Program Files%\Raptr Inc\Raptr\Crypto.Util.strxor.pyd (8 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\share_facebook.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\linecolor.png (145 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ingame\window_logo.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\toolbar_home_hover.png (750 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\win_maximize_hover.png (218 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\audio_output\libmmdevice_plugin.dll (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\bundle\logo\manga_logo.png (3 bytes)
%Program Files%\Raptr Inc\Raptr\Microsoft.VC90.CRT.manifest (545 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libvmem_plugin.dll (784 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\xbox_default.png (2 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\video_output\libdirectdraw_plugin.dll (2392 bytes)
%Program Files%\Raptr Inc\Raptr\plugins\libxfire.dll (11048 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\amd\checkbox_empty.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\video_play_small.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\resources\sound\poke_heal.mp3 (1552 bytes)
%Program Files%\Raptr Inc\Raptr\resources\images\ctrl_ctr\forward.png (1 bytes)
%Program Files%\Raptr Inc\Raptr\raptr_im.exe (1552 bytes)
Delete the following value(s) in the autorun key (How to Work with System Registry):

[HKCU\Software\Microsoft\Windows\CurrentVersion\RunOnce]
"Uximkeon" = "C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exe /START C:\Users\"%CurrentUserName%"\AppData\Roaming\Haoruvevk\ohvoca.exe"
Clean the Temporary Internet Files folder, which may contain infected files (How to clean Temporary Internet Files folder).
Reboot the computer.

*Manual removal may cause unexpected system behaviour and should be performed at your own risk.

Permalink

Back to the blog

e-mail

Google+

Twitter

Facebook

Gen.Variant.Razy.43074_ca7cadf5e7

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet

Gen.Variant.Razy.43074_ca7cadf5e7

E-mail

Our best antivirus yet!

Fresh new look. Faster scanning. Better protection.

Discover the new adaware antivirus 12

Our best antivirus yet