Program.Unwanted.276

Technical Information

To ensure autorun and distribution

Sets the following service settings

[<HKLM>\System\CurrentControlSet\Services\StartMenuService] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\StartMenuService] 'ImagePath' = '%ProgramFiles(x86)%\IObit\Start Menu 8\StartMenuServices.exe'
[<HKLM>\System\CurrentControlSet\Services\LiveUpdateSvc] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\LiveUpdateSvc] 'ImagePath' = '%ProgramFiles(x86)%\IObit\LiveUpdate\LiveUpdate.exe'

Creates the following services

'StartMenuService' %ProgramFiles(x86)%\IObit\Start Menu 8\StartMenuServices.exe
'LiveUpdateSvc' %ProgramFiles(x86)%\IObit\LiveUpdate\LiveUpdate.exe

Malicious functions

Installs hooks to intercept notifications

on keystrokes:

Handler for all processes: %ProgramFiles(x86)%\IObit\Start Menu 8\winkey.dll

Modifies file system

Creates the following files

%TEMP%\7zipsfx.000\sm8-setup.exe
%LOCALAPPDATA%low\iobit\startmenu 8\userpinstartdata.dat
%ProgramFiles(x86)%\iobit\start menu 8\is-m6nh7.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-juic8.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-rd8qa.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-fpf3v.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-12125.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-dmn11.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-jmlq9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-5rldc.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-lqnhe.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-ofiv3.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-vpe5m.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-bvl2l.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-edc69.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-t41kl.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-vts5p.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-t3rc2.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-3vcrv.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-qmak0.tmp
%LOCALAPPDATA%low\iobit\startmenu 8\main.ini
%ProgramFiles(x86)%\iobit\start menu 8\is-rr427.tmp
%ProgramFiles(x86)%\iobit\start menu 8\freeware\is-ar8gi.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-703mf.tmp
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-t96ls.tmp
%ProgramFiles(x86)%\iobit\liveupdate\language\dutch.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\dinka.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\danish.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\czech.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\chinesetrad.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\chinesesimp.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\belarusian.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\arabic.lng
%ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-msvns.tmp
%ProgramFiles(x86)%\iobit\liveupdate\liveupdate.exe
%ProgramFiles(x86)%\iobit\liveupdate\language\english.lng
%LOCALAPPDATA%low\iobit\startmenu 8\smusnidx
%LOCALAPPDATA%low\iobit\startmenu 8\smindex.db
%ProgramFiles(x86)%\iobit\start menu 8\unins000.dat
%ProgramFiles(x86)%\iobit\start menu 8\unins000.msg
%LOCALAPPDATA%low\iobit\startmenu 8\sm_jump.ini
C:\users\public\desktop\start menu 8.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\start menu 8\uninstall start menu 8.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\start menu 8\start menu 8.lnk
%ProgramFiles(x86)%\iobit\start menu 8\liveupdate.log
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-slb41.tmp
%ProgramFiles(x86)%\iobit\start menu 8\rtsearch.ini
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-kk5c0.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-ibme1.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-m82ih.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-grnl9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-13349.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-8oacn.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-r9mof.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-2sd0l.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-q2c4o.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-fni8k.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-q2e11.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-ohn9c.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-eme1g.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-9sc6v.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-ma00g.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-h0j6l.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-1bpoo.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-klq10.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-a3bf4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-kii3p.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-vck5q.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-fhl3v.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-iruuv.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-dhhr9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-v4jjc.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-lu8gb.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-g1kqr.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-beicv.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-rbfar.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-b37fm.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-avgug.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-fruv4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-mj1a9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-s5u1o.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-9n1c5.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-pnod4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-158ol.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-ntd21.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-ur96i.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-bmnpu.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-q07n8.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-ndshi.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-du3tf.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-g50j3.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-8emo0.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-1f4cp.tmp
%ProgramFiles(x86)%\iobit\liveupdate\language\finnish.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\spanish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\turkish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\thai.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\swedish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\spanish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\slovenian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\slovak.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\serbian(latin).lng
%ProgramFiles(x86)%\iobit\start menu 8\language\serbian(cyrillic).lng
%ProgramFiles(x86)%\iobit\start menu 8\language\russian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\portuguese(pt-pt).lng
%ProgramFiles(x86)%\iobit\start menu 8\language\vietnamese.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\portuguese(pt-br).lng
%ProgramFiles(x86)%\iobit\start menu 8\language\polish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\norwegian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\lithuanian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\latvian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\kurdish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\korean.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\japanese.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\romanian.lng
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-npm00.tmp
%LOCALAPPDATA%low\iobit\startmenu 8\sm_cache_files_01
%ProgramFiles(x86)%\iobit\liveupdate\system.ini
%TEMP%\mq02u@gs2sv5j5g2.tmp.dat
%TEMP%\mq02u@gs2sv5j5g2.tmp
%ALLUSERSPROFILE%\iobit\ascdownloader\downloader.log
%ProgramFiles(x86)%\iobit\liveupdate\liveupdatesrvupt.log
%LOCALAPPDATA%low\iobit\startmenu 8\usnbuild
%LOCALAPPDATA%low\iobit\startmenu 8\sm_cache_info
%LOCALAPPDATA%low\iobit\startmenu 8\smindex.db-journal
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\ggs_em_32.png
%ProgramFiles(x86)%\iobit\start menu 8\language\italian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\ukrainian.lng
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\asc9_16.png
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\db3_32.png
%APPDATA%\iobit\startmenu 8\testbtn.log
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\db3_16.png
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\imf4_32.png
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\imf4_16.png
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\latestnews.ini
%LOCALAPPDATA%low\iobit\ac.ini
%LOCALAPPDATA%low\iobit\installinfo.ini
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\asc9_32.png
%ALLUSERSPROFILE%\iobit\install.ini
%ProgramFiles(x86)%\iobit\liveupdate\language\french.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\flemish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\hebrew.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\swedish.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\slovak.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\serbian (latin).lng
%ProgramFiles(x86)%\iobit\liveupdate\language\serbian (cyrillic).lng
%ProgramFiles(x86)%\iobit\liveupdate\language\russian.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\romanian.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\portuguese(pt-pt).lng
%ProgramFiles(x86)%\iobit\liveupdate\language\portuguese(pt-br).lng
%ProgramFiles(x86)%\iobit\liveupdate\language\polish.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\malayalam.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\latvian.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\korean.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\japanese.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\italian.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\indonesia.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\hungarian.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\hebrew.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\greek.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\german.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\turkish.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\ukrainian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\greek.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\chinesetrad.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\croatian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\german.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\georgian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\french.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\finnish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\english.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\dutch.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\danish.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\czech.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\indonesian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\hungarian.lng
%ProgramFiles(x86)%\iobit\liveupdate\language\slovenian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\catalan.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\bulgarian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\bosnian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\armenian.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\arabic.lng
%ProgramFiles(x86)%\iobit\liveupdate\liveupdate.log
%ProgramFiles(x86)%\iobit\liveupdate\productstatistics.dll
%ProgramFiles(x86)%\iobit\liveupdate\language\vietnamese.lng
%ProgramFiles(x86)%\iobit\start menu 8\language\chinesesimp.lng
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-mao94.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-iok00.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-7dp3q.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-s7btt.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-cn3kt.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-6594u.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-4j8pq.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-i6sje.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-84pvd.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-eb9nl.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-oqjlb.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-d6ir4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-jlmth.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-o2j4l.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-34865.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-iqba9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-14uji.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-r74j9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-qnnqf.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-6jea5.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-np49o.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-fqkpa.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-f3stp.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-kk5pc.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-msqth.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ka87f.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-qmod5.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-pkqsb.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-618vk.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-lt1d4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-bi2jm.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-seda8.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-rvdck.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-milkb.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-tcpun.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-0bca7.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-nl8ce.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-blpfa.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-bup24.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-punso.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-jmfea.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-knfk9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-196oh.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-64ptq.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-auolh.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ijr6a.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-3704i.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-93agu.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-hmcca.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-kh4nt.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-oafhj.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-70g0c.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-uc066.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-9vlm0.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-oa8qq.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-jnqqq.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-6vk4s.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-j8cj4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-5l0i1.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-sfqef.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-utui7.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-4gs9j.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-kkbhh.tmp
%TEMP%\is-11b0i.tmp\inno_english.lng
%TEMP%\is-11b0i.tmp\rdzone.dll
%TEMP%\is-11b0i.tmp\_isetup\_shfoldr.dll
%TEMP%\is-11b0i.tmp\_isetup\_setup64.tmp
%TEMP%\is-baqjj.tmp\sm8-setup.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-2ra5t.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-uandt.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-61005.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-ogien.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-im5m7.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-2isql.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-oob50.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-hpebg.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-g0at2.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-r0pn1.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-hn9mf.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-abmrj.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-djnaf.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-vqpnv.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-0mhka.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-l09kr.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-09t9n.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-b6vvi.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-trmvp.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-4a3jf.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-nodq2.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-ugjk7.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-d4u63.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-vqsnn.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-ang5l.tmp
%ProgramFiles(x86)%\iobit\start menu 8\is-g47eu.tmp
%ProgramFiles(x86)%\iobit\start menu 8\resources\is-4dg99.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-8e8k2.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-476ko.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-kh73q.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-f76b2.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-q6tki.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-pjjeh.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-3b3sc.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-rakp6.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-f8led.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-ghuum.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-1k686.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-j3g4u.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-ei44i.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-vumu4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-k3bdg.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-8s9ik.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-klhu9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-rp1r2.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-jrclf.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-f5had.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-nljmr.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-bjgqa.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-s42g2.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-126h7.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-v48ji.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-he8hv.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-9cpeo.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-o31eg.tmp
%ProgramFiles(x86)%\iobit\start menu 8\skin\is-27b84.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-19kts.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-kmf49.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-pu5mk.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-3087u.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-msaj8.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-b1o3c.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-g927p.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-5fooj.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-68hei.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-t6641.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-jk8ki.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-9g774.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-p1j13.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-umran.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-ttkst.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-qt8n0.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-r59lh.tmp
%ProgramFiles(x86)%\iobit\start menu 8\language\is-038td.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-u44tf.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-aphl1.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-sct94.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-e4gkm.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-sd0rr.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-5scv4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-8agr1.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-de4p9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-b7im5.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-silrd.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-u4kut.tmp
%ProgramFiles(x86)%\iobit\liveupdate\update\update.spt
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-1adqu.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-vrhj0.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-4ob50.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-jeb98.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-vjb8v.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-vrjt5.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-vofbl.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ckbj6.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-f1udu.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-t3l55.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-k2p91.tmp
%LOCALAPPDATA%low\iobit\startmenu 8\latestnews\ggs_em_16.png
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-bai9u.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-u3vvj.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-lg9a3.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-9c8qg.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-tlemi.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-hekde.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-bm1le.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-hj6dg.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ec665.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-sktt5.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-1s0m0.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-b37l4.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-kvtv0.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-m14v6.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-rgdac.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-slmh9.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-h471n.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-bm6i8.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ha1hq.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-v9dai.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-2tqs6.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-8d4k5.tmp
%ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-2qr5f.tmp
%APPDATA%\productdata\update.spt

Deletes the following files

%TEMP%\is-11b0i.tmp\inno_english.lng
%TEMP%\is-11b0i.tmp\rdzone.dll
%TEMP%\is-11b0i.tmp\_isetup\_setup64.tmp
%TEMP%\is-11b0i.tmp\_isetup\_shfoldr.dll
%TEMP%\is-baqjj.tmp\sm8-setup.tmp
%TEMP%\7zipsfx.000\sm8-setup.exe
%LOCALAPPDATA%low\iobit\startmenu 8\smindex.db-journal
%TEMP%\mq02u@gs2sv5j5g2.tmp
%TEMP%\mq02u@gs2sv5j5g2.tmp.dat

Moves the following files

from %ProgramFiles(x86)%\iobit\start menu 8\is-kkbhh.tmp to %ProgramFiles(x86)%\iobit\start menu 8\unins000.exe
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-ttkst.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\polish.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-umran.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\portuguese(pt-br).lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-p1j13.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\portuguese(pt-pt).lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-9g774.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\romanian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-jk8ki.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\russian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-t6641.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\serbian(cyrillic).lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-68hei.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\serbian(latin).lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-r59lh.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\slovak.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-v48ji.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\slovenian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-he8hv.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\spanish.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-msaj8.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\swedish.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-3087u.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\thai.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-8s9ik.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\czech.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-pu5mk.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\turkish.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-19kts.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\vietnamese.lng
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-27b84.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\bg_border.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-o31eg.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\bg_light.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-9cpeo.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\bg_more_detail.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-126h7.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\bg_more_detail_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-7dp3q.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\bg_profile_pic.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-iok00.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\bg_search_input.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-mao94.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_leftmenu_more_l_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-slb41.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_leftmenu_more_l_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-1f4cp.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_programs_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-kii3p.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_programs_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-a3bf4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_shutdown_more_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-s42g2.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\lithuanian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-qt8n0.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\norwegian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-bjgqa.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\latvian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-kh73q.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\kurdish.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-b1o3c.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\korean.lng
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-bm1le.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\winblue_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-hekde.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\winblue_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-tlemi.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\window_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-9c8qg.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\window_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-u44tf.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\window_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-5fooj.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\arabic.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-038td.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\armenian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-g927p.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\bosnian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-nljmr.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\bulgarian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-f5had.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\catalan.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-jrclf.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\chinesesimp.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-rp1r2.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\chinesetrad.lng
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-klq10.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_shutdown_more_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-kmf49.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\ukrainian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-klhu9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\croatian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-vumu4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\dutch.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-ei44i.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\english.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-j3g4u.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\finnish.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-1k686.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\french.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-ghuum.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\georgian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-f8led.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\german.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-rakp6.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\greek.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-3b3sc.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\hebrew.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-pjjeh.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\hungarian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-q6tki.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\indonesian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-f76b2.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\italian.lng
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-476ko.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\japanese.lng
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-hj6dg.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\winblue_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\language\is-k3bdg.tmp to %ProgramFiles(x86)%\iobit\start menu 8\language\danish.lng
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-1bpoo.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_shutdown_more_press.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-h0j6l.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_shutdown_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-ma00g.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_shutdown_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-rbfar.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_rightmenu_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-beicv.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_shutdown_more_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-g1kqr.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_shutdown_more_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-lu8gb.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_shutdown_more_press.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-pnod4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_shutdown_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-v4jjc.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_shutdown_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-s5u1o.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_shutdown_press.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-t96ls.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_addfolder16.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-msvns.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_addfolder32.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-qmak0.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_document16.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-3vcrv.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_document32.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-t3rc2.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_game16.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-vts5p.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_game32.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-edc69.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_movie32.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ec665.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win8_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-bvl2l.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_music16.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-vpe5m.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_music32.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-ofiv3.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_picture16.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-lqnhe.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_picture32.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-5rldc.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\screenshotlarge.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-jmlq9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\screenshotsmall.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-dmn11.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\swichtometrolarge.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-12125.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\swichtometrosmall.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-fpf3v.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\uninstallerlarge.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-rd8qa.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\uninstallersmall.png
from %ProgramFiles(x86)%\iobit\start menu 8\is-juic8.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startmenu8.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-m6nh7.tmp to %ProgramFiles(x86)%\iobit\start menu 8\check.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-rr427.tmp to %ProgramFiles(x86)%\iobit\start menu 8\fav.ico
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-b37fm.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_leftmenu_over_s.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-fhl3v.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_programs_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-avgug.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_devider_rightmenu.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-vck5q.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_programs_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-9sc6v.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_shutdown_press.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-eme1g.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_startmenu_left_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-ohn9c.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\btn_startmenu_right_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-q2e11.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\devider_rightmenu.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-fni8k.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_ad.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-q2c4o.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_arrow_left.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-2sd0l.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_arrow_right.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-r9mof.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_back_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-8oacn.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_back_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-13349.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_free.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-grnl9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_hot.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-m82ih.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_menu_more.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-ibme1.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\icon_new.png
from %ProgramFiles(x86)%\iobit\start menu 8\freeware\is-ar8gi.tmp to %ProgramFiles(x86)%\iobit\start menu 8\freeware\start_menu8_freesoftwaredownloader.exe
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-mj1a9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_btn_programs_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-iruuv.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\jumplist_more.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-dhhr9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\logoback.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-g50j3.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_bg_border.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-du3tf.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_bg_leftmenu.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-ndshi.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_bg_more_detail.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-q07n8.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_bg_profile_pic.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-bmnpu.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_bg_search_input.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-ur96i.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_btn_leftmenu_bottom.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-ntd21.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_btn_leftmenu_middle.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-158ol.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_btn_leftmenu_more_bottom.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-kk5c0.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_btn_leftmenu_more_middle.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-8emo0.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_btn_leftmenu_more_top.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-9n1c5.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_btn_leftmenu_top.png
from %ProgramFiles(x86)%\iobit\start menu 8\skin\is-fruv4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\skin\win7_btn_programs_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\is-t41kl.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitextension\icon_group_movie16.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-sktt5.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win8_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-1adqu.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\myselection_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\is-hpebg.tmp to %ProgramFiles(x86)%\iobit\start menu 8\installservices.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-oob50.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startmenudll.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-2isql.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitdownloader.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-im5m7.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startmenu_hook.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-hmcca.tmp to %ProgramFiles(x86)%\iobit\start menu 8\filesearch.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-vqpnv.tmp to %ProgramFiles(x86)%\iobit\start menu 8\buildindex.exe
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-3704i.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\administrativetools.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-tcpun.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\btn_starticon_current.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-np49o.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\btn_starticon_over.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-6jea5.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\computer.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-qnnqf.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\connectto.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-r74j9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\controlpanel.png
from %ProgramFiles(x86)%\iobit\start menu 8\is-uandt.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startmenu8_about.exe
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-14uji.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\defaultprograms.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-34865.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\documents.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-o2j4l.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\downloads.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-jlmth.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\favorites.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-d6ir4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\games.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-oqjlb.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\helpandsupport.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-eb9nl.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\homegroup.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-84pvd.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\metroapps.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-i6sje.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\music.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-4j8pq.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\network.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-6594u.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\pcsettings.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-cn3kt.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\personalfolder.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-s7btt.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\pictures.png
from %ProgramFiles(x86)%\iobit\start menu 8\is-r0pn1.tmp to %ProgramFiles(x86)%\iobit\start menu 8\aupdate.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-g0at2.tmp to %ProgramFiles(x86)%\iobit\start menu 8\iobitstartmenuextension.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-hn9mf.tmp to %ProgramFiles(x86)%\iobit\start menu 8\smindex.db
from %ProgramFiles(x86)%\iobit\start menu 8\is-abmrj.tmp to %ProgramFiles(x86)%\iobit\start menu 8\screenshot.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-djnaf.tmp to %ProgramFiles(x86)%\iobit\start menu 8\liveupdate.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-utui7.tmp to %ProgramFiles(x86)%\iobit\start menu 8\eula.rtf
from %ProgramFiles(x86)%\iobit\start menu 8\is-sfqef.tmp to %ProgramFiles(x86)%\iobit\start menu 8\rtsearch.ini
from %ProgramFiles(x86)%\iobit\start menu 8\is-5l0i1.tmp to %ProgramFiles(x86)%\iobit\start menu 8\update history.txt
from %ProgramFiles(x86)%\iobit\start menu 8\is-j8cj4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\madbasic_.bpl
from %ProgramFiles(x86)%\iobit\start menu 8\is-6vk4s.tmp to %ProgramFiles(x86)%\iobit\start menu 8\maddisasm_.bpl
from %ProgramFiles(x86)%\iobit\start menu 8\is-jnqqq.tmp to %ProgramFiles(x86)%\iobit\start menu 8\madexcept_.bpl
from %ProgramFiles(x86)%\iobit\start menu 8\is-oa8qq.tmp to %ProgramFiles(x86)%\iobit\start menu 8\rtl120.bpl
from %ProgramFiles(x86)%\iobit\start menu 8\is-9vlm0.tmp to %ProgramFiles(x86)%\iobit\start menu 8\vcl120.bpl
from %ProgramFiles(x86)%\iobit\start menu 8\is-uc066.tmp to %ProgramFiles(x86)%\iobit\start menu 8\vclx120.bpl
from %ProgramFiles(x86)%\iobit\start menu 8\is-70g0c.tmp to %ProgramFiles(x86)%\iobit\start menu 8\delstartmenuextension.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-oafhj.tmp to %ProgramFiles(x86)%\iobit\start menu 8\metroappstart.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-g47eu.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startmenusetting.exe
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-4dg99.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\recentitems.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-iqba9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\devicesandprinters.png
from %ProgramFiles(x86)%\iobit\start menu 8\is-2ra5t.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startmenu8_frmstartmenulibrary.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-ogien.tmp to %ProgramFiles(x86)%\iobit\start menu 8\taskmgr.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-vqsnn.tmp to %ProgramFiles(x86)%\iobit\start menu 8\sendbugreportnew.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-d4u63.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startmenuservices.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-ugjk7.tmp to %ProgramFiles(x86)%\iobit\start menu 8\toggledesktop.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-nodq2.tmp to %ProgramFiles(x86)%\iobit\start menu 8\autoshutdown.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-4a3jf.tmp to %ProgramFiles(x86)%\iobit\start menu 8\datastate.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-trmvp.tmp to %ProgramFiles(x86)%\iobit\start menu 8\winkey.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-b6vvi.tmp to %ProgramFiles(x86)%\iobit\start menu 8\pri.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-09t9n.tmp to %ProgramFiles(x86)%\iobit\start menu 8\sqlite3.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-l09kr.tmp to %ProgramFiles(x86)%\iobit\start menu 8\infohelp.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-ang5l.tmp to %ProgramFiles(x86)%\iobit\start menu 8\parseauto.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-kh4nt.tmp to %ProgramFiles(x86)%\iobit\start menu 8\productstatistics.dll
from %ProgramFiles(x86)%\iobit\start menu 8\is-4gs9j.tmp to %ProgramFiles(x86)%\iobit\start menu 8\killallstartmenu.exe
from %ProgramFiles(x86)%\iobit\start menu 8\is-61005.tmp to %ProgramFiles(x86)%\iobit\start menu 8\uninstallpromote.exe
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-fqkpa.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\recordedtv.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-f3stp.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\run.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-kk5pc.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\swichtometro.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-4ob50.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\lazy_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-vrhj0.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\lazy_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-sct94.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\love_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-k2p91.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\love_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-u4kut.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\love_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-silrd.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\metro_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-b7im5.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\metro_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-de4p9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\metro_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-8agr1.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\minimal_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-5scv4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\minimal_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-sd0rr.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\minimal_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-e4gkm.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\myselection_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-m14v6.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\myselection_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-bai9u.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\smile_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-1s0m0.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win8_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-lg9a3.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\smile_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-b37l4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\smile_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-u3vvj.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\thevword_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-8d4k5.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\thevword_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-2tqs6.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\thevword_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-v9dai.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\umbrella_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ha1hq.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\umbrella_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-bm6i8.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\umbrella_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-h471n.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win7_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-slmh9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win7_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-rgdac.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win7_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-npm00.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win8start_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-2qr5f.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win8start_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-jeb98.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\lazy_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-seda8.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\big hero_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-vjb8v.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\house_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-rvdck.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\big hero_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-msqth.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\videos.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-auolh.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win7_classic.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-64ptq.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win7_default.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-196oh.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win8faq.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-knfk9.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win8faq_old.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-jmfea.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win8_full.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-punso.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win8_large.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-bup24.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win8_small.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-blpfa.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win8_tall.png
from %ProgramFiles(x86)%\iobit\start menu 8\resources\is-nl8ce.tmp to %ProgramFiles(x86)%\iobit\start menu 8\resources\win8_wide.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ijr6a.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\acorn_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-93agu.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\acorn_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-milkb.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\acorn_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-kvtv0.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\win8start_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-vofbl.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\house_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-bi2jm.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\big hero_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-lt1d4.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\chrysanths_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-618vk.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\chrysanths_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-pkqsb.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\chrysanths_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-qmod5.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\classic_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ka87f.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\classic_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-0bca7.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\classic_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-0mhka.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\coffee_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-8e8k2.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\coffee_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-aphl1.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\coffee_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-t3l55.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\emot_click.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-f1udu.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\emot_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-ckbj6.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\emot_normal.png
from %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\is-vrjt5.tmp to %ProgramFiles(x86)%\iobit\start menu 8\startbuttonskin\house_hover.png
from %ProgramFiles(x86)%\iobit\start menu 8\is-703mf.tmp to %ProgramFiles(x86)%\iobit\start menu 8\start_menu8_freesoftwaredownloader.exe

Modifies the following files

%TEMP%\user.bmp

Substitutes the following files

%LOCALAPPDATA%low\iobit\startmenu 8\smindex.db-journal

Network activity

Connects to

'io##t.com':80
'do####ad.iobit.com':80
'as####ts.iobit.com':80
'fo###.#oogleapis.com':443
'co###.iobit.com':443
'ki#.##ntawesome.com':443
'go#####agmanager.com':443
'fo###.gstatic.com':443
'bat.bing.com':80
'go#####analytics.com':80
'bat.bing.com':443
'x.##2.us':80
'up####.iobit.com':80

TCP

HTTP GET requests

http://www.io##t.com/install/sm8/index.php
http://www.io##t.com/tpl/images/product-icons/db_96.png
http://www.io##t.com/tpl/images/rabbit/store-banner-en.png
http://www.io##t.com/tpl/images/rabbit/rabbit-nav.svg
http://www.io##t.com/tpl/images/navpop-bg.png
http://www.io##t.com/tpl/images/tags.png
http://www.io##t.com/tpl/images/comparison/clean/cl_basic.png
http://www.io##t.com/tpl/images/comparison/clean/cl_deep.png
http://www.io##t.com/tpl/images/comparison/clean/cl_registry.png
http://www.io##t.com/tpl/images/comparison/defrag/defrag_pc.png
http://www.io##t.com/tpl/images/comparison/clean/cl_ram.png
http://www.io##t.com/tpl/images/comparison/clean/cl_care.png
http://www.io##t.com/tpl/images/comparison/speedup/sp_startup.png
http://www.io##t.com/tpl/images/comparison/speedup/sp_internet.png
http://www.io##t.com/tpl/images/comparison/protect/pr_b_spy.png
http://www.io##t.com/tpl/images/comparison/protect/pr_infect.png
http://www.io##t.com/tpl/images/comparison/protect/pr_track.png
http://www.io##t.com/tpl/images/banner/comparepage-banner.jpg
http://www.io##t.com/tpl/images/product-icons/asc_96.png
http://x.##2.us/x.cer
http://bat.bing.com/bat.js
http://www.go#####analytics.com/analytics.js
http://www.io##t.com/en/install/sm8/
http://as####ts.iobit.com/install_v2.php?op################################################################################
http://do####ad.iobit.com/news/sm8/imf4_16.png
http://do####ad.iobit.com/news/sm8/imf4_32.png
http://do####ad.iobit.com/news/sm8/db3_16.png
http://do####ad.iobit.com/news/sm8/db3_32.png
http://do####ad.iobit.com/news/sm8/asc9_16.png
http://do####ad.iobit.com/news/sm8/asc9_32.png
http://www.io##t.com/tpl/styles/global.css
http://do####ad.iobit.com/news/sm8/GGS_EM_16.png
http://do####ad.iobit.com/news/sm8/GGS_EM_32.png
http://www.io##t.com/tpl/styles/mobile.css
http://www.io##t.com/tpl/js/base.js
http://www.io##t.com/tpl/js/ie8-only.js
http://www.io##t.com/tpl/js/lang/en.js
http://www.io##t.com/tpl/styles/rabbit.css
http://www.io##t.com/tpl/styles/ie8-only.css
http://www.io##t.com/tpl/images/logo.svg
http://up####.iobit.com/infofiles/liveupdate/update/update.ini

HTTP POST requests

http://do####ad.iobit.com/news/sm8/v2/news.upt

Other

'ki#.##ntawesome.com':443
'do####ad.iobit.com':443
'fo###.#oogleapis.com':443
'go#####agmanager.com':443
'fo###.gstatic.com':443
'bat.bing.com':443
'io##t.com':443

UDP

DNS ASK io##t.com
DNS ASK do####ad.iobit.com
DNS ASK as####ts.iobit.com
DNS ASK co###.iobit.com
DNS ASK fo###.#oogleapis.com
DNS ASK ki#.##ntawesome.com
DNS ASK go#####agmanager.com
DNS ASK fo###.gstatic.com
DNS ASK microsoft.com
DNS ASK bat.bing.com
DNS ASK go#####analytics.com
DNS ASK x.##2.us
DNS ASK up####.iobit.com

Miscellaneous

Searches for the following windows

ClassName: 'ImmersiveLauncher' WindowName: ''
ClassName: 'ReBarWindow32' WindowName: ''
ClassName: 'TfrmIObit_InstallServices' WindowName: 'IObit_StartMenu8_InstallServices'
ClassName: 'TIObit_frmStartMenuMain' WindowName: 'IObit_frmStartMenuMain'
ClassName: 'DDEMLMom' WindowName: ''
ClassName: 'IEFrame' WindowName: ''
ClassName: 'Progman' WindowName: 'Program Manager'
ClassName: 'SHELLDLL_DefView' WindowName: ''
ClassName: 'Progman' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'MS_WebCheckMonitor' WindowName: ''
ClassName: 'Static' WindowName: ''
ClassName: 'TfrmStartMenu' WindowName: 'IObit_StartMenu_Button'

Creates and executes the following

'%TEMP%\7zipsfx.000\sm8-setup.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles(x86)%\iobit\start menu 8\startmenu_hook.exe'
'%ProgramFiles(x86)%\iobit\start menu 8\check.exe' /openascurl
'%ProgramFiles(x86)%\iobit\liveupdate\liveupdate.exe' /srvupt
'%ProgramFiles(x86)%\iobit\start menu 8\uninstallpromote.exe' /Install startmenu2
'%ProgramFiles(x86)%\iobit\start menu 8\startmenu8.exe' Service
'%ProgramFiles(x86)%\iobit\start menu 8\startmenuservices.exe'
'%ProgramFiles(x86)%\iobit\start menu 8\buildindex.exe' /rebuild "%LOCALAPPDATA%Low\IObit\StartMenu 8\"
'%ProgramFiles(x86)%\iobit\start menu 8\startmenusetting.exe'
'%ProgramFiles(x86)%\iobit\liveupdate\liveupdate.exe'
'%ProgramFiles(x86)%\iobit\start menu 8\check.exe' /install
'%ProgramFiles(x86)%\iobit\start menu 8\installservices.exe' /HotCorners
'%ProgramFiles(x86)%\iobit\start menu 8\delstartmenuextension.exe' /DeleteDll
'%ProgramFiles(x86)%\iobit\start menu 8\killallstartmenu.exe'
'%ProgramFiles(x86)%\iobit\start menu 8\installservices.exe' /install
'%ProgramFiles(x86)%\iobit\start menu 8\liveupdate.exe' /install
'%TEMP%\is-baqjj.tmp\sm8-setup.tmp' /SL5="$13022A,8884137,139264,%TEMP%\7ZipSfx.000\sm8-setup.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles(x86)%\iobit\start menu 8\startmenu8.exe' Service' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\check.exe' /openascurl' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\uninstallpromote.exe' /Install startmenu2' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\buildindex.exe' /rebuild "%LOCALAPPDATA%Low\IObit\StartMenu 8\"' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\installservices.exe' /HotCorners' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\delstartmenuextension.exe' /DeleteDll' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\installservices.exe' /install' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\check.exe' /install' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\killallstartmenu.exe' ' (with hidden window)
'%ProgramFiles(x86)%\iobit\start menu 8\startmenusetting.exe' ' (with hidden window)
'%WINDIR%\syswow64\cmd.exe' /c SC description StartMenuService "StartMenu8 Service"' (with hidden window)
'%WINDIR%\syswow64\sc.exe' stop "LiveUpdateSvc"' (with hidden window)

Executes the following

'%WINDIR%\syswow64\cmd.exe' /c SC description StartMenuService "StartMenu8 Service"
'%WINDIR%\syswow64\sc.exe' description StartMenuService "StartMenu8 Service"
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\IObit\Start Menu 8\IObitStartMenuExtension.dll"
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\IObit\Start Menu 8\IObitStartMenuExtension.dll"
'%WINDIR%\syswow64\sc.exe' stop "LiveUpdateSvc"

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial