%user_profile%\appdata\local\yandex\kraski\kraski.exe
%user_profile%\appdata\roaming\mozilla\firefox\profiles\nahd6ha2.default\extensions\{1a894269-562d-459e-b17e-efd8de428e41}\components\radiowmpcoregecko8.dll
%win_dir%\regedit.lnk