Защити созданное

Другие наши ресурсы

  • free.drweb.kz — бесплатные утилиты, плагины, информеры
  • av-desk.com — интернет-сервис для поставщиков услуг Dr.Web AV-Desk
  • curenet.drweb.kz — сетевая лечащая утилита Dr.Web CureNet!
Закрыть

Библиотека
Моя библиотека

Чтобы добавить ресурс в библиотеку, войдите в аккаунт.

+ Добавить в библиотеку

Ресурсов: -

Последний: -

Моя библиотека

Поддержка
Круглосуточная поддержка | Правила обращения

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Глобальная поддержка:
+7 (495) 789-45-86

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.MulDrop11.16301

Добавлен в вирусную базу Dr.Web: 2019-09-21

Описание добавлено:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '00FF0EBCF2F2' = '"<Full path to file>"'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'BC0EBCF2F2' = '"%ALLUSERSPROFILE%\Application Data\BC0EBCF2F2.exe"'
Modifies file system
Creates the following files
  • %ALLUSERSPROFILE%\application data\bc0ebcf2f2.exe
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\1ccb230031ac144c28ccad0038f4f82c.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\86baf7b615eb73346adf38931d345714.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\be3781e84ef01538bd5566585638f918.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\502dccf03f6e0a1010acf76346b6edf0.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\3dafc32823a5cdb46081b5142aeeb194.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\adae468c15dac5088fffc3dd1d23a8e8.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\6fb8021502c04a6c997744bf0a092e4c.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\d91e91bc28138a943b9c2ff22f5c6e74.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\2b6eb56c3e117054cc836123455a5434.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\aa951fe83e1621f823a2e924455f05d8.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\c4cd095b449b9068682f72234be47448.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\c0dd8dcd40fb2148f195c6cd48440528.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\crypto\publickey\2f94a8700371e418ddb957fe0abac7f8.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\5b0bb6801b524ac016b9c05c229b2ea0.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\c9b60ff60e221be9af8ac7b6156affc9.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\79e16012296d81f8abe054b230b665d8.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\c75732ef391980552705f47f40626435.sys
  • %TEMP%\pyl1.tmp\lib\crypto\util\d3cc20a51509b8fa4c1d2b091c529cda.sys
  • %TEMP%\pyl1.tmp\lib\crypto\util\410b797d2891d803b900b0672fdabbe3.sys
  • %TEMP%\pyl1.tmp\lib\crypto\util\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\ctypes\a151c92f1d403e636a00dc5b24892243.sys
  • %TEMP%\pyl1.tmp\lib\ctypes\3b7b1ddc3831097418aa316f3f79ed54.sys
  • %TEMP%\pyl1.tmp\lib\logging\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\bd3911b01fc8eac047672e792711cea0.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\f41616c2222a3b20e2ff3e8729731f00.sys
  • %TEMP%\pyl1.tmp\lib\encodings\92fc77c0395a83085942a88840a366e8.sys
  • %TEMP%\pyl1.tmp\lib\encodings\85cf76103b00c5c2d4188d704249a9a2.sys
  • %TEMP%\pyl1.tmp\lib\encodings\683e42cb04f7d22b75a7c9750c40b60b.sys
  • %TEMP%\pyl1.tmp\lib\encodings\14b676ad20a91522e690004d27f1f902.sys
  • %TEMP%\pyl1.tmp\lib\encodings\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\logging\0eac5b6421b166f64c93daec28fa4ad6.sys
  • %TEMP%\pyl1.tmp\lib\ctypes\477c9a103e713ad4e7bf043445ba1eb4.sys
  • %TEMP%\pyl1.tmp\lib\ctypes\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\encodings\3131145426e8e6f478d06b8e2e31cad4.sys
  • %TEMP%\pyl1.tmp\lib\crypto\util\759d50bd0fd817399b94cff31720fb19.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\588527c033ae1704196258603af6fae4.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\8dc10f7a031387205b92378f0a5c6b00.sys
  • %TEMP%\pyl1.tmp\lib\urlgrabber\e40079c81fb7fb60b520a37b2740df40.sys
  • %TEMP%\pyl1.tmp\lib\urlgrabber\e2318000271985605d0b34002e626940.sys
  • %TEMP%\pyl1.tmp\lib\urlgrabber\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\winui\2cf4d8e62f0891d0a80af8b5369175b0.sys
  • %TEMP%\pyl1.tmp\lib\winui\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\urlgrabber\2b6c7087208a4fc67ceaefb527d333a6.sys
  • %TEMP%\pyl1.tmp\lib\winui\235c194002c92b60870bc1a40a420f40.sys
  • %TEMP%\pyl1.tmp\lib\urlgrabber\45d7d86e10d07167fa0a7ab618495547.sys
  • %TEMP%\pyl1.tmp\lib\wubi\7ce6d1001e26bb00605b6629256f9ee0.sys
  • %TEMP%\pyl1.tmp\lib\wubi\b0173c200667d212a9e17d500db0b5f2.sys
  • %TEMP%\pyl1.tmp\lib\wubi\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\wubi\backends\251a1c4c2c596e24734ae65233a25204.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\56ad7df621492f4256b6595128921322.sys
  • %TEMP%\pyl1.tmp\lib\winui\4fb8f63832e549de51f0e2383a2e2dbe.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\b797272018b3ea064cf59770202ccde6.sys
  • %TEMP%\pyl1.tmp\lib\wubi\93778fe02f8af6e0d6e3d99936d3dac0.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\6ec31edd191f22d8339ac911206806b8.sys
  • %TEMP%\pyl1.tmp\lib\urlgrabber\fbf9de403346d1000e461bf23a8fb4e0.sys
  • %TEMP%\pyl1.tmp\lib\urlgrabber\407dff280438e4f6128f7cc40b81c8d6.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\4dcc8896005463de54436039079d47be.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\784c2db019bf13f0115aadbc2107f7d0.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\7e2023800cebbdd4ea86a7e01434a1b4.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\273d65a23da2c7d01c599a6744ebabb0.sys
  • %TEMP%\pyl1.tmp\lib\sets\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\f2246b7e1b5b9ea2d329282722a48282.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\f7bd57303a12bd4059ee269b415ba120.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\676c7a661acfa120c02be87a22188500.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\util\c76747340e1497e05e4001f3155d7bc0.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\util\4705b7d22da09b72721352c134e97f52.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\util\0736e2703faa9625db1f839047237a05.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\util\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\sets\67e511420a5981540776edfd11d26534.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\fa797c3614fc7879d0e5a0161c455c59.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\sets\fcfb1d17425c0c46677ff4bd49a4f026.sys
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\util\2c0ab50c4485a628f316a9ce4bce8a08.sys
  • %TEMP%\pyl1.tmp\lib\crypto\publickey\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\crypto\publickey\7e399dd540338cea98e1120b477c70ca.sys
  • %TEMP%\pyl1.tmp\lib\crypto\publickey\79915c80058deba6d36043800cd6cf86.sys
  • %TEMP%\pyl1.tmp\lib\a0d356672fa363631cacb35536ec4743.sys
  • %TEMP%\pyl1.tmp\lib\855ce7833c215c0294a30bf7436a3fe2.sys
  • %TEMP%\pyl1.tmp\lib\df39a6be1b5334b2ce889467229c1892.sys
  • %TEMP%\pyl1.tmp\lib\921c19d5053d03166797335f0c85e6f6.sys
  • %TEMP%\pyl1.tmp\lib\8df01c143559db89e552c4943ca2bf69.sys
  • %TEMP%\pyl1.tmp\lib\136b4ee8174250b0535f209d1e8b3490.sys
  • %TEMP%\pyl1.tmp\lib\6a864e2727436c47ae2a42652e8c5027.sys
  • %TEMP%\pyl1.tmp\lib\d6d807542b9df4903334590432e6d870.sys
  • %TEMP%\pyl1.tmp\lib\e31be8cc455f04a83c8ddd9e4ca7e888.sys
  • %TEMP%\pyl1.tmp\lib\8a95b7361e87d3aca9be33e225d0b78c.sys
  • %TEMP%\pyl1.tmp\lib\2ffd2b002236f2da01b45180297fd6ba.sys
  • %TEMP%\pyl1.tmp\lib\381c4d1136187ed69861dac93d6162b6.sys
  • %TEMP%\pyl1.tmp\lib\f34549ba39e1b0fc276cda11412a94dc.sys
  • %TEMP%\pyl1.tmp\lib\0162111e34692b2685c8e5b33bb20f06.sys
  • %TEMP%\pyl1.tmp\lib\2abf9ec60b044c98646920bb124d3078.sys
  • %TEMP%\pyl1.tmp\lib\308b2cc32fc422f7b1b1f5a7370d06d7.sys
  • %TEMP%\pyl1.tmp\lib\7c4652b20444514bb49b0a6e0b8d352b.sys
  • %TEMP%\pyl1.tmp\lib\4371a924003f35585d317f9307881938.sys
  • %TEMP%\pyl1.tmp\lib\830312a9118bbb44e106106d18d49f24.sys
  • %TEMP%\pyl1.tmp\lib\cedbf001292f284543446b0130780c25.sys
  • %TEMP%\pyl1.tmp\lib\11d5184534463cb71f1ea9813b8f2097.sys
  • %TEMP%\pyl1.tmp\lib\5bc8a251441e491a22dd81b54bb72cfa.sys
  • %TEMP%\pyl1.tmp\lib\34cd54113a1fbc4e1b066c754198a02e.sys
  • %TEMP%\pyl1.tmp\lib\3c9a5a841f679ce65692f3c226f080c6.sys
  • %TEMP%\pyl1.tmp\lib\710dd9700d1230b0ff027d5c147b1490.sys
  • %TEMP%\pyl1.tmp\lib\07c44b840f177cb4f18387ca16606094.sys
  • %TEMP%\pyl1.tmp\lib\44f49a5a2a1b72eaaa05cffb316456ca.sys
  • %TEMP%\pyl1.tmp\lib\8266cc2e1bf46d55ff7ea6ba233d5135.sys
  • %TEMP%\pyl1.tmp\lib\9e22d91931740404edead04b391ce7e4.sys
  • %TEMP%\pyl1.tmp\lib\e59a691c3a35cbe4aee5aed7417eafc4.sys
  • %TEMP%\pyl1.tmp\lib\192e688b03f4225eb0922aa90b3d063e.sys
  • %TEMP%\pyl1.tmp\lib\c2e9d9802d1c2540caa7084834650920.sys
  • %TEMP%\pyl1.tmp\lib\d81b88dc3f2d8c4c0bfadd574676702c.sys
  • %TEMP%\pyl1.tmp\lib\f8918ba707ebe79dad1a2f350f34cb7d.sys
  • %TEMP%\pyl1.tmp\lib\8c49bd044045cdba9fadf80e478eb19a.sys
  • %TEMP%\pyl1.tmp\lib\c228ac4445ac54480d5be3b44cf53828.sys
  • %TEMP%\pyl1.tmp\lib\9a6389bc1f2cc5b88ee67f562675a998.sys
  • %TEMP%\pyl1.tmp\lib\d9688b30100917669ae720981751fb46.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\d940ee802ce9247d7e00de803432085d.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\859a6e6e33a08fdb3db6cce63ae973bb.sys
  • %TEMP%\pyl1.tmp\lib\crypto\c0d552783bcb10fa95dbde084313f4da.sys
  • %TEMP%\pyl1.tmp\lib\crypto\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\crypto\cipher\7c03b1c021b14fe0be853a5028fa33c0.sys
  • %TEMP%\pyl1.tmp\lib\crypto\cipher\cb9f6fec3ae63a325d736942422f1e12.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\2d9469632bf8d1b90d001c853341b599.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\8870249c0ea0d4cc2a65650215e9b8ac.sys
  • %TEMP%\pyl1.tmp\lib\crypto\cipher\9b465fa01122b4e042a5e51b186b98c0.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\crypto\cipher\9653fa2c329ef55c0186c76939e7d93c.sys
  • %TEMP%\pyl1.tmp\lib\crypto\hash\3d83872e206ec1dbbdfbaa2a27b7a5bb.sys
  • %TEMP%\pyl1.tmp\lib\crypto\hash\0fa580e81f7f8b484b4e825526c86f28.sys
  • %TEMP%\pyl1.tmp\lib\crypto\hash\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\crypto\publickey\f5bb30a53ed38c12048ac25d461c6ff2.sys
  • %TEMP%\pyl1.tmp\lib\crypto\cipher\13933a3c19288dbe34d9aa842071719e.sys
  • %TEMP%\pyl1.tmp\lib\crypto\cipher\a47405c0270315c04216f7ce2e4bf9a0.sys
  • %TEMP%\pyl1.tmp\lib\crypto\publickey\292e307417812a9238d43daa1eca0e72.sys
  • %TEMP%\pyl1.tmp\lib\crypto\cipher\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\bittorrent\28dd84da0791cf283f8c35920edab308.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\65e51cc02ff673f0976cd46c373f57d0.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\f6527ea642ae11d26cb996aa49f6f5b2.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\c1d35feb0aba1aba3debd0251202fe9a.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\16d227632f5f912643080c7936a87506.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\b581e7540036f2fa6af44fb2077fd6da.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\b9c2211006dc1008ab2c06460e24f3e8.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\c8c5fbcc1be64b585a8fd7b3232f2f38.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\5dc703a0220706e0fbf95cfb294feac0.sys
  • %TEMP%\pyl1.tmp\lib\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\bittorrent\0dc3e8d02342c539c64b20b02a8ba919.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\d0f7fa9202e7c613e2148f720a30a9f3.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\5447c6d0152f69a08e263f361c784d80.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\99d286920677ce269b128a3b0dc0b206.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\c53cac91346b9bd63c2af9b13bb47fb6.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\48a5c60045f57900ba64384c4d3e5ce0.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\f050fee005a205f5c5fbcc200ceae9d5.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\4d599c4428f5f4ba23869444303ed89a.sys
  • %TEMP%\pyl1.tmp\lib\bittorrent\f26d9a342edf3f0cd2b7d457362822ec.sys
  • %TEMP%\pyl1.tmp\lib\4cfd7d582756ef99309a05382e9fd379.sys
  • %TEMP%\pyl1.tmp\lib\0b3ce0720a45f5907753551a118ed970.sys
  • %TEMP%\pyl1.tmp\lib\77de45d0123852905193483e19913670.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\2bef0f96305ecdf7d39fa14e37a7b1d7.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\0ed24c0a33ace9a6f66fb69d3af5cd86.sys
  • %TEMP%\pyl1.tmp\translations\en_gb\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\eo\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\eo\lc_messages\c04cc94c2a9f027048ed956f31e7e650.sys
  • %TEMP%\pyl1.tmp\translations\eo\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\es\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\es\lc_messages\ce642b60017bc8270b3c5ba008c4ac07.sys
  • %TEMP%\pyl1.tmp\translations\fa\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\en_gb\lc_messages\f026a74c05055b4c3aad27650c4e3f2c.sys
  • %TEMP%\pyl1.tmp\translations\en_gb\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\et\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\eu\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\eu\lc_messages\2a46d2030512d38cd04f70450c5bb76c.sys
  • %TEMP%\pyl1.tmp\translations\eu\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fa\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fa\lc_messages\28e71d203e0871c01fc8639d455155a0.sys
  • %TEMP%\pyl1.tmp\translations\es\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\et\lc_messages\5f48d3743453d5fcc56281543b9cb9dc.sys
  • %TEMP%\pyl1.tmp\translations\cy\lc_messages\34efbea1221eacac119d30bd2967908c.sys
  • %TEMP%\pyl1.tmp\translations\et\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\el\lc_messages\b2728c6642e098c24d3be26b4a297ca2.sys
  • %TEMP%\pyl1.tmp\translations\da\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\da\lc_messages\00b8721c1464187c96a17f941bacfc5c.sys
  • %TEMP%\pyl1.tmp\translations\da\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\de\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\de\lc_messages\69e2cbde005cc0e2328ac7c707a5a4c2.sys
  • %TEMP%\pyl1.tmp\translations\de\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\en_ca\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\en_ca\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\en_ca\lc_messages\41a7df222d9b0280938b630534e3e660.sys
  • %TEMP%\pyl1.tmp\translations\en\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\en\lc_messages\c158525f0ed8af1eeae26cb1162192fe.sys
  • %TEMP%\pyl1.tmp\translations\en\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\en_au\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\en_au\lc_messages\5e3677ee227c6850194a70eb29c54c30.sys
  • %TEMP%\pyl1.tmp\translations\en_au\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\el\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\el\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\cy\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fi\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fr\lc_messages\4b2e30f8424549d46ecb9916498e2db4.sys
  • %TEMP%\pyl1.tmp\translations\hu\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\hu\lc_messages\6ac7ef7d0fd27cdd80ff1de3171b60bd.sys
  • %TEMP%\pyl1.tmp\translations\hu\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\id\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\id\lc_messages\98bf3a001335dda0b73685501a7ec180.sys
  • %TEMP%\pyl1.tmp\translations\id\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\hr\lc_messages\85e4b8002d3f000043076c223487e3e0.sys
  • %TEMP%\pyl1.tmp\translations\hr\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\is\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\it\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\it\lc_messages\45e7f2762e259d0f04d2c4d6356e80ef.sys
  • %TEMP%\pyl1.tmp\translations\it\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ja\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ja\lc_messages\e54583fb0d8632be7b1e332d14cf169e.sys
  • %TEMP%\pyl1.tmp\translations\ja\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\is\lc_messages\b97ffaa812a96278659fb96e19f24658.sys
  • %TEMP%\pyl1.tmp\translations\is\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fi\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fi\lc_messages\bf3bf9a8297fcc8029c0485930c8b060.sys
  • %TEMP%\pyl1.tmp\translations\hi\lc_messages\68abf5ce0441a6268e2006970b8a8a06.sys
  • %TEMP%\pyl1.tmp\translations\fr\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fy\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fy\lc_messages\377ae6013218a10f4a1e974b396184ef.sys
  • %TEMP%\pyl1.tmp\translations\fy\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\gl\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\hi\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\fr\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\hr\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\gl\lc_messages\f0c4728601d7503d9165a65e0920341d.sys
  • %TEMP%\pyl1.tmp\translations\gu\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\he\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\he\lc_messages\fdbd0e49387dea87018c17893fc6ce67.sys
  • %TEMP%\pyl1.tmp\translations\he\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\hi\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\gl\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\gu\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\gu\lc_messages\5350099117234c14e78ea5e51e6c2ff4.sys
  • %TEMP%\pyl1.tmp\translations\csb\lc_messages\1dc1ceae11da68bea8e8c88e19534c9e.sys
  • %TEMP%\pyl1.tmp\translations\cs\lc_messages\890dd8a43c1526ecc0f789de435e0acc.sys
  • %TEMP%\pyl1.tmp\data\3c0ea9fd3ccaad26e9267bed44139106.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\22fd0e0610ece39a869da78e1835c77a.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\9f2d69591f3f486ce9d0e13b26882c4c.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\6ac653f020969b18add7d2f827df7ef8.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\fb090f722e73a591aa0f170a35ec8971.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\42cd9b74356f98fa8f4fbcf43cb87cda.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\6ef7e5702726c7d828a010fc2e6fabb8.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\caae5a8b129865cb748b6e7919e149ab.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\a30f431e22f90e165abcd7572a41f1f6.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\66340a9b16c641179f488ceb1e3f24f7.sys
  • %TEMP%\pyl1.tmp\lib\xml\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\xml\parsers\cbcbd50014730f0058f5105f1bbbf2e0.sys
  • %TEMP%\pyl1.tmp\lib\xml\parsers\96f5a4b018bfdc14258ed0442008bff4.sys
  • %TEMP%\pyl1.tmp\lib\xml\parsers\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\xml\sax\82571950340a29e0dd3ce4fc3b530dc0.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\052cbf3421e59320f5fc14b6292e7700.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\xml\f1339e604b40ab9cdeeec22852898f7c.sys
  • %TEMP%\pyl1.tmp\lib\xml\sax\6a84806018d7036c2b2649a8201fe74c.sys
  • %TEMP%\pyl1.tmp\lib\xml\sax\e4a923bc0c925fa43149c92f13db4384.sys
  • %TEMP%\pyl1.tmp\lib\xml\sax\02e3bac02ad47da2b9d650e0321d6182.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\92375d1026c1256c04bc9a642e0a094c.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\53e040b8197b48789a3a3baf20c42c58.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\24e0439326c6259b0d3a4e652e3f097b.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\5045317c20de968035d1f7fd28677a60.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\27bea7b81d25490854ac137d246e2ce8.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\79a9eab828c536dc153b5f1a300e1abc.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\82fd7df80c8e1dde52fbd56813d701be.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\f2cbfacc15622ec3204177341cdb12a3.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\715a56a234f7f913e40a321a3c80dcf3.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\01693be741228d5a3c643e71486b713a.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\ce1f78940d52b3234547be8414eb9703.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\b0e0df60187f637cd7099d901ff8475c.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\f5f2cc0816c946c0d9530b3b1e122aa0.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\cb50e41f01f0bf9f4f3d3ba10939a37f.sys
  • %TEMP%\pyl1.tmp\lib\xml\sax\ea667a9427acbb11abb304642ef59ef1.sys
  • %TEMP%\pyl1.tmp\translations\br\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\bs\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\bs\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ca\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ca\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\bo\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\bs\lc_messages\1e63ab9305775f3a9331be5d0cc0431a.sys
  • %TEMP%\pyl1.tmp\translations\crh\lc_messages\bf60bdbf3141474e900a0669388a2b2e.sys
  • %TEMP%\pyl1.tmp\translations\br\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ca\lc_messages\3ee472c526e3cedf6208ea672e5cb2bf.sys
  • %TEMP%\pyl1.tmp\translations\cs\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\cs\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\csb\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\csb\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\crh\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\bo\lc_messages\5a1ce1e00dd3ee287048f660151cd208.sys
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\aa89fa40083b77ae47d91e200f845b8e.sys
  • %TEMP%\pyl1.tmp\translations\crh\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\br\lc_messages\be00c6f0415be840a6f1b13848a4cc20.sys
  • %TEMP%\pyl1.tmp\translations\bo\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\bg\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\af\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\af\lc_messages\73d4be2605e84608a2aa76c60d3129e8.sys
  • %TEMP%\pyl1.tmp\translations\af\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ar\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ar\lc_messages\102c23203e2ddd84c66958a04576c164.sys
  • %TEMP%\pyl1.tmp\translations\ar\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\xml\sax\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\as\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\as\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ast\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\ast\lc_messages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\bg\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\bg\lc_messages\bc37b6ba02078cd07e5afcbe098070b0.sys
  • %TEMP%\pyl1.tmp\translations\ast\lc_messages\dbb3634640a0ad3e284b571f47e9911e.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\a55a0bd734ae94c57367b3013c2778a5.sys
  • %TEMP%\pyl1.tmp\translations\as\lc_messages\4ab172d60038db30c4b64c5d0781bf10.sys
  • %TEMP%\pyl1.tmp\lib\xml\sax\d261bc2e497fb2cec9f03eff50c896ae.sys
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\4d4e28500b9a127075b25fbb12e2f650.sys
  • %TEMP%\pyl1.tmp\lib\606fb57201a814200ef57f270910f800.sys
  • %TEMP%\pyl1.tmp\lib\ab13fc9e05519c1db9c2a69a0caa7ffd.sys
  • %TEMP%\pyl1.tmp\lib\ffac722a3136d90f2606de26388fbcef.sys
  • %HOMEPATH%\favorites\links\f7d1e1381bab50e8dd97ebbb22f434c8.sys
  • %HOMEPATH%\favorites\links\408dc625133687b621b6c0d31a7f6b96.sys
  • %HOMEPATH%\favorites\links\498538381543dbf58538ac781c8cbfd5.sys
  • %HOMEPATH%\favorites\links\98bd7d2f07b5499cbf4c507b0efe2d7c.sys
  • %HOMEPATH%\favorites\links\a153ed092332ffcb6c36bd632a7be3ab.sys
  • %HOMEPATH%\favorites\11d2435243331e77d99e7c224a7c0257.sys
  • %HOMEPATH%\favorites\49e538000022ff90753b3080076be370.sys
  • %HOMEPATH%\favorites\_help_instruction.txt
  • %HOMEPATH%\favorites\links\c6f50523226ed729864f563529b7bb09.sys
  • %HOMEPATH%\local settings\_help_instruction.txt
  • <LS_APPDATA>\_help_instruction.txt
  • %HOMEPATH%\local settings\history\38dc6c403fe690006f3d8975472f73e0.sys
  • %HOMEPATH%\local settings\history\_help_instruction.txt
  • %HOMEPATH%\local settings\history\history.ie5\115658eb2b7cbd5e936df6e132c5a13e.sys
  • %HOMEPATH%\favorites\links\1d33a0774b229b9f247116d9526b7f7f.sys
  • %HOMEPATH%\favorites\links\_help_instruction.txt
  • %HOMEPATH%\local settings\9ac25bae326419a1fbeca81239acfd81.sys
  • %HOMEPATH%\local settings\history\history.ie5\_help_instruction.txt
  • %HOMEPATH%\local settings\history\history.ie5\fee54b7a3dbfd55a6be5108e4508b93a.sys
  • C:\documents and settings\networkservice\_help_instruction.txt
  • C:\documents and settings\networkservice\local settings\e891dca639e2f840c92e57cf412bdc20.sys
  • C:\documents and settings\networkservice\local settings\_help_instruction.txt
  • C:\documents and settings\networkservice\local settings\application data\_help_instruction.txt
  • C:\documents and settings\networkservice\local settings\history\b33aaa24073742765ffb08360e802656.sys
  • C:\documents and settings\networkservice\local settings\history\_help_instruction.txt
  • %HOMEPATH%\cookies\_help_instruction.txt
  • C:\documents and settings\networkservice\application data\_help_instruction.txt
  • %APPDATA%\_help_instruction.txt
  • C:\documents and settings\networkservice\local settings\history\history.ie5\9472ba402ebc38807017297d36051c60.sys
  • %HOMEPATH%\b43096e036350660cd68d1e03d7dea40.sys
  • %HOMEPATH%\2e27a46320780c25abffde0f27c0f005.sys
  • %HOMEPATH%\_help_instruction.txt
  • %HOMEPATH%\.oracle_jre_usage\6d6f71b836a8251a2625342c3df108fa.sys
  • %HOMEPATH%\.oracle_jre_usage\_help_instruction.txt
  • C:\documents and settings\networkservice\local settings\history\history.ie5\_help_instruction.txt
  • C:\documents and settings\networkservice\local settings\temp\_help_instruction.txt
  • C:\documents and settings\networkservice\local settings\<INETFILES>\_help_instruction.txt
  • C:\documents and settings\networkservice\cookies\_help_instruction.txt
  • %HOMEPATH%\local settings\history\history.ie5\mshist012017042620170427\_help_instruction.txt
  • %TEMP%\23158e6b1049d2ddf556f1e71792b6bd.sys
  • %TEMP%\7d21e1e63feec296df6c182347d9a676.sys
  • %TEMP%\bd2df4300ecac57075a7d6fd168fa950.sys
  • %TEMP%\74ff7c4343f6f5b0354ffe694b3fd990.sys
  • %TEMP%\98ea0f081029377ac466503c17721b5a.sys
  • %TEMP%\1c9606001cda6600e38c2bc6242349e0.sys
  • %TEMP%\47adf70009abeaa88b5d97401196ce88.sys
  • %TEMP%\9be0a1b621bc3be8cc99208129151fc8.sys
  • %TEMP%\706b3fa215fdc428ee7520911dc2a808.sys
  • %TEMP%\6886bb460b345e9a4d89f14d127d427a.sys
  • %TEMP%\8f29e08326148f86b4e977a92ddd7366.sys
  • %TEMP%\15955e9e1aa093f029a2c927225977d0.sys
  • %TEMP%\9145a62022c70a8c9c1720e02a5fee6c.sys
  • %TEMP%\67eb94e014f9a4af6c6f63201c72888f.sys
  • %TEMP%\346601b117c0d4ec8f4efc631f99b8cc.sys
  • %TEMP%\8cebc4601adc01a099d466242244e580.sys
  • %HOMEPATH%\local settings\history\history.ie5\mshist012017042620170427\912c76f60003ddd8aef0e3ed074cc1b8.sys
  • %TEMP%\dd812a2e3e32312ec211fb2f458b150e.sys
  • %TEMP%\efaca75a2c531657cd4668c2343dfa37.sys
  • %TEMP%\d72612b0282198902342be04301c7c70.sys
  • %TEMP%\70f0ad8812af880c103997ec19f86bec.sys
  • %TEMP%\9ad9932e2a1e53c43b55b633316737a4.sys
  • %TEMP%\1fe560de1774d8fade4221121ebdbcda.sys
  • %TEMP%\3a690cee3e2da05a86d4b66f4576843a.sys
  • %TEMP%\f88a74ba1b3e6b248ff0c6fe22874f04.sys
  • %TEMP%\dfd1e9ab191a2a77480ac97521050e57.sys
  • %TEMP%\becc8574150747751686d1741c502b55.sys
  • %TEMP%\5fbc64a516de64d5772fcd2d1e2748b5.sys
  • %TEMP%\082903e81108783514353ca818f35c15.sys
  • %TEMP%\85ba729847546d3016041a3c4e9d5110.sys
  • %TEMP%\e1c3d6b80ec6ac18ea09cffc160f8ff8.sys
  • %TEMP%\b8fdef6a0fc5fba4421f1afe170edf84.sys
  • %TEMP%\a6ca8ce034d5b3ab264ee7e03c1e978b.sys
  • %TEMP%\550a7e3b4084369c4143c06747cd1a7c.sys
  • %TEMP%\0b05eb3003fca140d1240e130b458520.sys
  • C:\documents and settings\networkservice\d8f4778b09f1bdb9b685970d113aa199.sys
  • %TEMP%\9bf2d5f60cf773a5f942da6e14405785.sys
  • %TEMP%\78c641582a917538d0bf8b3531da5918.sys
  • C:\documents and settings\localservice\local settings\<INETFILES>\_help_instruction.txt
  • C:\documents and settings\localservice\local settings\temp\_help_instruction.txt
  • C:\documents and settings\default user\local settings\<INETFILES>\_help_instruction.txt
  • C:\documents and settings\default user\nethood\_help_instruction.txt
  • C:\documents and settings\default user\printhood\_help_instruction.txt
  • C:\documents and settings\default user\recent\_help_instruction.txt
  • C:\documents and settings\default user\sendto\11634ed40e3d4b847baa53dd15862f64.sys
  • C:\documents and settings\default user\sendto\_help_instruction.txt
  • C:\documents and settings\default user\local settings\temp\_help_instruction.txt
  • C:\documents and settings\default user\start menu\8ae5882c2de04516b34de8ba352928f6.sys
  • C:\documents and settings\default user\local settings\history\history.ie5\_help_instruction.txt
  • C:\documents and settings\default user\local settings\history\history.ie5\a8a8ff0218c0c49e048156d12009a87e.sys
  • C:\documents and settings\default user\start menu\programs\330c5cf6446cd26a8410b27d4bb5b64a.sys
  • C:\documents and settings\default user\start menu\programs\_help_instruction.txt
  • C:\documents and settings\default user\start menu\programs\accessories\ae7d09552e4836cbd0a11ba935911aab.sys
  • C:\documents and settings\default user\start menu\programs\accessories\315d2a0a24ab19ae847607f62bf3fd8e.sys
  • C:\documents and settings\default user\start menu\programs\accessories\1ce9efc00882db18c8a68eb00fcbbef8.sys
  • C:\documents and settings\default user\start menu\_help_instruction.txt
  • C:\documents and settings\default user\start menu\programs\accessories\9a255e60099ddb054df6266010e6bee5.sys
  • C:\documents and settings\default user\start menu\programs\c641e424166641097f82529c1daf24e9.sys
  • C:\documents and settings\default user\start menu\programs\21dadac71e2c7b564b4f41d325755f36.sys
  • %ALLUSERSPROFILE%\application data\f06c3c509054x0b7d28zcddbb17087b9c3e.sys
  • C:\documents and settings\default user\favorites\_help_instruction.txt
  • C:\_help_instruction.txt
  • C:\documents and settings\_help_instruction.txt
  • %ALLUSERSPROFILE%\_help_instruction.txt
  • C:\documents and settings\default user\812fdc172dbe0278502c084b3506e658.sys
  • C:\documents and settings\default user\176006983aee7bc8a8987d6e42375fa8.sys
  • C:\documents and settings\default user\local settings\history\history.ie5\8e1288002776c80036bc53c82ebfabe0.sys
  • C:\documents and settings\default user\_help_instruction.txt
  • C:\documents and settings\default user\start menu\programs\accessories\c3ae555d4bd0aff20e73e05d531993d2.sys
  • C:\f6ca763803d36287b5f655580b1c4667.sys
  • C:\documents and settings\default user\local settings\75925dc0013bfd05a71741c00884e0e5.sys
  • C:\documents and settings\default user\local settings\_help_instruction.txt
  • C:\documents and settings\default user\local settings\application data\_help_instruction.txt
  • C:\documents and settings\default user\local settings\history\3326c29d18983469fd90a4951fe11849.sys
  • C:\documents and settings\default user\local settings\history\_help_instruction.txt
  • C:\documents and settings\default user\application data\_help_instruction.txt
  • C:\documents and settings\default user\start menu\programs\accessories\dd2e67994d59aeaac83c79ed54a2928a.sys
  • C:\documents and settings\default user\cookies\_help_instruction.txt
  • C:\documents and settings\default user\my documents\_help_instruction.txt
  • C:\documents and settings\default user\start menu\programs\accessories\ef0487ba1fcd58fcc24e70fa27163cdc.sys
  • C:\documents and settings\default user\templates\fe365d3e0497b9aa1f1f05990be09d8a.sys
  • C:\documents and settings\default user\templates\_help_instruction.txt
  • C:\documents and settings\localservice\814d86f042263a90d2e5262e496f1e70.sys
  • C:\documents and settings\localservice\_help_instruction.txt
  • C:\documents and settings\localservice\application data\_help_instruction.txt
  • C:\documents and settings\default user\templates\77f6fa1e22da1072177945d22a22f452.sys
  • C:\documents and settings\localservice\cookies\_help_instruction.txt
  • C:\documents and settings\default user\templates\434c8cf433f488e2ce4c67243b3d6cc2.sys
  • C:\documents and settings\default user\templates\12c008de1651d208cda082d51d9ab5e8.sys
  • C:\documents and settings\localservice\local settings\_help_instruction.txt
  • C:\documents and settings\localservice\local settings\history\_help_instruction.txt
  • C:\documents and settings\localservice\local settings\history\history.ie5\c73311a641bcb62b08d7601e49059a0b.sys
  • C:\documents and settings\localservice\local settings\history\history.ie5\aedab9ec0fc4269098be75c6170d0a70.sys
  • C:\documents and settings\localservice\local settings\history\history.ie5\_help_instruction.txt
  • C:\documents and settings\localservice\local settings\0d8089c81a0bfce99853b6882154e0c9.sys
  • C:\documents and settings\default user\templates\d43763a4384b574cfa6ff7bd3f943b2c.sys
  • C:\documents and settings\localservice\local settings\application data\_help_instruction.txt
  • C:\documents and settings\localservice\local settings\history\7e1bbbe043381260370c30544a80f640.sys
  • C:\documents and settings\default user\templates\09663fec0812958c266f0b470f5b796c.sys
  • C:\documents and settings\default user\start menu\programs\accessories\_help_instruction.txt
  • C:\documents and settings\default user\templates\993e94a82a005c6cf4ad27743149404c.sys
  • C:\documents and settings\default user\start menu\programs\accessories\accessibility\1c9f3fe72b1b6c6e297a277d3264504e.sys
  • C:\documents and settings\default user\start menu\programs\accessories\accessibility\429835d63f2a2233755e799e46730613.sys
  • C:\documents and settings\default user\start menu\programs\accessories\accessibility\77928e9c0ae6cb166cedeeb2122faef6.sys
  • C:\documents and settings\default user\start menu\programs\accessories\accessibility\cd9862912691405f6c1a789b2dda243f.sys
  • C:\documents and settings\default user\start menu\programs\accessories\accessibility\_help_instruction.txt
  • C:\documents and settings\default user\start menu\programs\accessories\entertainment\dde0000a1e9ecf23f99c02ae25e7b303.sys
  • C:\documents and settings\default user\start menu\programs\accessories\entertainment\b836833805c91ec420a25f6e0d1202a4.sys
  • C:\documents and settings\default user\start menu\programs\accessories\accessibility\c240dd180862c12e7d4c7dd80faba50e.sys
  • C:\documents and settings\default user\start menu\programs\accessories\entertainment\_help_instruction.txt
  • C:\documents and settings\default user\start menu\programs\startup\_help_instruction.txt
  • C:\documents and settings\default user\templates\76915fd0125b5eb8673844da19a44298.sys
  • C:\documents and settings\default user\templates\f255358416bd6362db8f6ad41e064742.sys
  • C:\documents and settings\default user\templates\c975fc971259b02c96a2c76f19a2940c.sys
  • C:\documents and settings\default user\templates\548d9a94286afac6429bc7c42fb3dea6.sys
  • C:\documents and settings\default user\templates\dac659000f18b3e080a91280166197c0.sys
  • %TEMP%\793231c2263972b212dec58a2de25692.sys
  • C:\documents and settings\default user\start menu\programs\startup\8be1f4201d3dca30c70d7b5c2486ae10.sys
  • %TEMP%\739a73301dce45e941e3e810261529c9.sys
  • %HOMEPATH%\favorites\b27b33fc1c0727fac527a6e623500bda.sys
  • %TEMP%\e87a9f8012436e006bf546c41ac951e0.sys
  • %TEMP%\pyl1.tmp\data\images\6f249d1c18d603a05eb92079201ee780.sys
  • %TEMP%\pyl1.tmp\data\images\5e20a66a43d446b0b38ba5f54b1d2a90.sys
  • %TEMP%\pyl1.tmp\data\images\0a453d932542a44e2dbf67352c9b882e.sys
  • %TEMP%\pyl1.tmp\data\images\8676a52c0f38e1259fd6670c1681c505.sys
  • %TEMP%\pyl1.tmp\data\images\f869d871433bf987d49af3974a84dd67.sys
  • %TEMP%\pyl1.tmp\data\images\ecbf17a43a43592c4b5c19a3418c3d0c.sys
  • %TEMP%\pyl1.tmp\data\images\22ef83ed4684abdac07d58234dcd8fba.sys
  • %TEMP%\pyl1.tmp\data\images\760e07e80c9acf3814ea520813e3b318.sys
  • %TEMP%\pyl1.tmp\data\images\d37c103c14a990e41007b9b51bf274c4.sys
  • %TEMP%\pyl1.tmp\data\images\5d9df458279ebe603c71a34f2ee7a240.sys
  • %TEMP%\pyl1.tmp\data\images\e12654b13e86a1e200e37e5545cf85c2.sys
  • %TEMP%\pyl1.tmp\data\images\23cfab6f0ea6e97785f59ad715efcd57.sys
  • %TEMP%\pyl1.tmp\data\images\4421688737a86dcf4a5014f73ef151af.sys
  • %TEMP%\pyl1.tmp\data\images\24ae4320000f5ab892f0d37c07583e98.sys
  • %TEMP%\pyl1.tmp\data\images\b09041ad14208fe2b56a7f911b6973c2.sys
  • %TEMP%\pyl1.tmp\data\images\1a5192cd226139de0fc08b1529aa1dbe.sys
  • %TEMP%\pyl1.tmp\data\images\2d6f1508319ca7f6b7b273fc38e58bd6.sys
  • %TEMP%\pyl1.tmp\data\images\f6663492029c72f0150461b909e556d0.sys
  • %TEMP%\pyl1.tmp\lib\26e34c803c80b500d41362c543c998e0.sys
  • %TEMP%\pyl1.tmp\data\images\1b598a982a77ec088e12fe1631c0cfe8.sys
  • %TEMP%\pyl1.tmp\data\images\_help_instruction.txt
  • %TEMP%\pyl1.tmp\data\344f355903811ba0b3d264e70ac9ff80.sys
  • %TEMP%\pyl1.tmp\data\_help_instruction.txt
  • %TEMP%\pyl1.tmp\data\custom-installation\_help_instruction.txt
  • %TEMP%\pyl1.tmp\data\custom-installation\hooks\56c5f41813e24ee428583fb61b2b32c4.sys
  • %TEMP%\pyl1.tmp\data\custom-installation\hooks\f975d6c5158d5ab6a195c5dd1cd63e96.sys
  • %TEMP%\pyl1.tmp\data\images\99c1a2e103107334250046430a595714.sys
  • %TEMP%\pyl1.tmp\data\62e7ebac05fb4604f8c663eb0d4429e4.sys
  • %TEMP%\pyl1.tmp\data\images\2186a40b285d177b63a0e2ff2fa5fb5b.sys
  • %TEMP%\pyl1.tmp\data\custom-installation\hooks\8ab99e1147ea0a033d546abb4f32ede3.sys
  • %TEMP%\pyl1.tmp\data\images\13be592e0573da020e1d78e90cbcbde2.sys
  • %TEMP%\pyl1.tmp\data\images\aa5bfe10060d54134d97c8100d5637f3.sys
  • %TEMP%\pyl1.tmp\data\images\57063a38097407a867256ca710bceb88.sys
  • %TEMP%\pyl1.tmp\data\images\8e14e5ff12db2c931c3ed3271a241073.sys
  • %TEMP%\pyl1.tmp\data\images\f67c3aa235e6d2ec2e7fd85e3d2fb6cc.sys
  • %TEMP%\pyl1.tmp\data\custom-installation\hooks\a74b0c081cea7234499f753624335614.sys
  • %TEMP%\pyl1.tmp\data\custom-installation\hooks\_help_instruction.txt
  • %TEMP%\pyl1.tmp\data\custom-installation\packages\_help_instruction.txt
  • %TEMP%\pyl1.tmp\lib\a06d5e3f1ed9ef689ea9d1b52622d348.sys
  • %TEMP%\pyl1.tmp\lib\2df177d410e7255c293fbfba1830093c.sys
  • %TEMP%\pyl1.tmp\lib\8c5eb08420371480ee3c4175277ff860.sys
  • %TEMP%\pyl1.tmp\lib\1b5b9e28250ebd0ab292b5e82c57a0ea.sys
  • %TEMP%\pyl1.tmp\lib\169f46c01d9616c056930d9a24defaa0.sys
  • %TEMP%\pyl1.tmp\lib\0350d61c3f3e652048c0c0ab46874900.sys
  • %TEMP%\pyl1.tmp\lib\dd8b04b945b484b1a61c572b4cfd6891.sys
  • %TEMP%\pyl1.tmp\lib\66b9f2ea0f3c1f3f2773836a1685031f.sys
  • %TEMP%\pyl1.tmp\lib\eaff37a8077b1a90b1de4f2f0ec3fe70.sys
  • %TEMP%\pyl1.tmp\lib\834bfc6a1b62faaa8306ab0d22abde8a.sys
  • %TEMP%\pyl1.tmp\lib\5a2914243c1c32a78369691443651687.sys
  • %TEMP%\pyl1.tmp\lib\00234d622e55650b7de3c18e359e48eb.sys
  • %TEMP%\pyl1.tmp\lib\caa6dd2814eb992ed52db0a41c347d0e.sys
  • %TEMP%\pyl1.tmp\lib\7f5cda5e2fef9354bf37677f37387734.sys
  • %TEMP%\pyl1.tmp\lib\6ad3b02a4869866a83acc41e4fb26a4a.sys
  • %TEMP%\pyl1.tmp\lib\218d90c01fd8d12a7e8529e02721b50a.sys
  • %TEMP%\pyl1.tmp\lib\1171df483ff226aa89fb08e8473b0a8a.sys
  • %TEMP%\pyl1.tmp\lib\908023be2bd107952f3686823319eb75.sys
  • %TEMP%\980392000ee21d45eaacee00162b0125.sys
  • %TEMP%\pyl1.tmp\lib\146b784c3ed8a4da67bfe1a4462188ba.sys
  • %TEMP%\pyl1.tmp\lib\0d39cb4f33d58c7eb468a32d3b1e705e.sys
  • %TEMP%\pyl1.tmp\lib\591b56f81a4836f4bf4b1ad421911ad4.sys
  • %TEMP%\pyl1.tmp\lib\f369d9b63ab15276b599562e41fa3656.sys
  • %TEMP%\pyl1.tmp\lib\1902faf019cc2f503dc49c8721151330.sys
  • %TEMP%\pyl1.tmp\lib\c2e6284412c20c50079539d51a0af030.sys
  • %TEMP%\pyl1.tmp\lib\3508d2d02c101bccf29dae883358ffac.sys
  • %TEMP%\pyl1.tmp\lib\2c37d184281b4cc0af1062922f6430a0.sys
  • %TEMP%\pyl1.tmp\lib\bc8ba7b4086547884eb4d6510fae2b68.sys
  • %TEMP%\pyl1.tmp\lib\19d4495c2ec483589227aff6360d6738.sys
  • %TEMP%\pyl1.tmp\lib\5f1fb13017ac8b24f5f3bad41ef56f04.sys
  • %TEMP%\pyl1.tmp\lib\1d95c0c514733f207ee38fcd1bbc2300.sys
  • %TEMP%\pyl1.tmp\lib\a22122e8072a2d30d8538b790e731110.sys
  • %TEMP%\pyl1.tmp\lib\8c8e4e4512021cc5ced18aff194b00a5.sys
  • %TEMP%\pyl1.tmp\lib\01c2959f2406d26ce07fc04b2b4fb64c.sys
  • %TEMP%\pyl1.tmp\lib\ecd6ae582cd4b97cbb7253da341d9d5c.sys
  • %TEMP%\pyl1.tmp\lib\240853ec3909a851608428c440528c31.sys
  • %TEMP%\pyl1.tmp\lib\35619f560d0b97682daf9b3a14547b48.sys
  • %TEMP%\pyl1.tmp\data\c88084de2b97185ea84323dd32dffc3e.sys
  • %TEMP%\pyl1.tmp\lib\d629d6e1272cdab2236daea12e75be92.sys
  • %TEMP%\pyl1.tmp\lib\b408b49027d01103ad0dc5902f18f4e3.sys
  • %TEMP%\pyl1.tmp\data\4f7fa734388e74ece028debc3fd758cc.sys
  • %TEMP%\pyl1.tmp\translations\cy\_help_instruction.txt
  • %TEMP%\pyl1.tmp\translations\jv\_help_instruction.txt
  • %TEMP%\pyl1.tmp\data\71d401ee1e6151281f74c75b25aa3508.sys
  • %TEMP%\2.9.0.1467 (partner)\b1201dda0f2f8d1783e7bf82167870f7.sys
  • %TEMP%\2.9.0.1467 (partner)\5d7e59a617c7cddcd56e942a1f10b1bc.sys
  • %TEMP%\2.9.0.1467 (partner)\f00c779819f4012e2aecbd1c214ce50e.sys
  • %TEMP%\2.9.0.1467 (partner)\73cfa8103650cfa04c726f813d99b380.sys
  • %TEMP%\2.9.0.1467 (partner)\_help_instruction.txt
  • %TEMP%\2.9.0.1467 (partner)\chrome\_help_instruction.txt
  • %TEMP%\2.9.0.1467 (partner)\7d97259937ce21216d8eaff93f170501.sys
  • %TEMP%\adobe_admlogs\_help_instruction.txt
  • %TEMP%\2.9.0.1467 (partner)\8134c17e3b28d2ee137890ca4271b6ce.sys
  • %TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\browser-region\a7b32e1c3b1c7e1d0ab538fc426561fd.sys
  • %TEMP%\7f4987fb1a6e43d69e3e94b29eb75926\14df96982221b462b2f602a8296a9842.sys
  • %TEMP%\7f4987fb1a6e43d69e3e94b29eb75926\714f1a8f3b151894dd0da39b425dfc74.sys
  • %TEMP%\7f4987fb1a6e43d69e3e94b29eb75926\_help_instruction.txt
  • %TEMP%\adobe_admlogs\30a9bf0421beeeccc5bf3aad2942d2ac.sys
  • %TEMP%\adobe_admlogs\ce0ac9b21f6fd3791637f25e26f3b759.sys
  • %TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\_help_instruction.txt
  • %TEMP%\2.9.0.1467 (partner)\chrome\en-gb\_help_instruction.txt
  • %TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\branding\4766ae96439d1394340b44d34ae5f774.sys
  • %TEMP%\2.9.0.1467 (partner)\a9ac30aa21fb9b32c4175a1229447f12.sys
  • %TEMP%\_help_instruction.txt
  • %TEMP%\4d5170a42d2e5be822412d8634773fc8.sys
  • %TEMP%\4f00f0750c7a6f4386eab8c713c35323.sys
  • %TEMP%\b41292041de314f98123f3e4254bf8d9.sys
  • %TEMP%\a00092642c0a8e14fb52993a33a971f4.sys
  • %TEMP%\fba10e7036dc75ec3a9f43ec3e9b59cc.sys
  • %TEMP%\05d43a7414fe21983bf31e0a1cad0578.sys
  • %TEMP%\2.9.0.1467 (partner)\eeef932b32647034eb80420b39ad5414.sys
  • %TEMP%\cookies\_help_instruction.txt
  • %TEMP%\2300ee58015931f8121908e908e215d8.sys
  • %TEMP%\2.9.0.1467 (partner)\245f646338b033f79c5fc5b9400917d7.sys
  • %TEMP%\2.9.0.1467 (partner)\af03722808276214b7bf32be0f8045f4.sys
  • %TEMP%\d86110d62b65c7f244db59b632aeabd2.sys
  • %TEMP%\e3248f2215f7eea455b375b21de0d284.sys
  • %TEMP%\2.9.0.1467 (partner)\781d6ccb0d3365c3c36e767d147c49a3.sys
  • %TEMP%\2.9.0.1467 (partner)\b6eb1d5b131c061ec1c5a75b1a64e9fe.sys
  • %TEMP%\8b63ede03a744d401c26f44941dd3120.sys
  • %TEMP%\435d2c330cd98ff6153c71b9143273d6.sys
  • %TEMP%\2.9.0.1467 (partner)\b08cbaf1456ff7fe799c68e54cb8dbde.sys
  • %TEMP%\7f4987fb1a6e43d69e3e94b29eb75926\8281365425885e9c4a2edba22cd1427c.sys
  • %TEMP%\pyl1.tmp\1292105614196db68cf69a631b625196.sys
  • %TEMP%\pyl1.tmp\_help_instruction.txt
  • %TEMP%\pyl1.tmp\bin\18c65d2818ab40b037db44c11ff42490.sys
  • %TEMP%\pyl1.tmp\bin\9fa757d8172883e2d959e2f81e7167c2.sys
  • %TEMP%\pyl1.tmp\bin\858b65eb341dbca1951ea33b3b66a081.sys
  • %TEMP%\pyl1.tmp\bin\6bbece14198f16c8cccb23c720d7faa8.sys
  • %TEMP%\pyl1.tmp\7a0f485d3d4c6970cba6ac2744954d50.sys
  • %TEMP%\pyl1.tmp\65006cfc3c26cbba2a3cfe96436faf9a.sys
  • %TEMP%\pyl1.tmp\d2aaff74280b99aa5bb38f022f547d8a.sys
  • %TEMP%\pyl1.tmp\bin\76cc19f02f89f592ee76b22836d2d972.sys
  • %TEMP%\pyl1.tmp\data\7703c3603706f392320a5b703e4fd772.sys
  • %TEMP%\pyl1.tmp\data\154baea444f94ce6994cda164c4230c6.sys
  • %TEMP%\pyl1.tmp\data\9da7bbc909973cadb674993f10e0208d.sys
  • %TEMP%\pyl1.tmp\data\e8953f68114e44148456b036189727f4.sys
  • %TEMP%\pyl1.tmp\data\ca4f8f6012422a86525db5e0198b0e66.sys
  • %TEMP%\pyl1.tmp\bin\_help_instruction.txt
  • %TEMP%\pyl1.tmp\bin\formats\0037a9d8348ea3ee26a37e183bd787ce.sys
  • %TEMP%\pyl1.tmp\bin\formats\_help_instruction.txt
  • %TEMP%\pyl1.tmp\7066b4c2347d16bf8997b69a3bc5fa9f.sys
  • %TEMP%\outlook logging\_help_instruction.txt
  • %TEMP%\cprogram filesopera\_help_instruction.txt
  • %TEMP%\history\history.ie5\a2f03c973050349308ebacb937991873.sys
  • %TEMP%\history\history.ie5\431dc93b0422f8c2a602e9650b6bdca2.sys
  • %TEMP%\history\history.ie5\_help_instruction.txt
  • %TEMP%\hsperfdata_user\_help_instruction.txt
  • %TEMP%\lilo.1120\_help_instruction.txt
  • %TEMP%\microsoft .net framework 4 setup_4.0.30319\_help_instruction.txt
  • %TEMP%\opera installer\4a3e0f18301c0854b80324be3764ec34.sys
  • %TEMP%\history\_help_instruction.txt
  • %TEMP%\opera installer\b2552e462950975416b0cc5730be7b34.sys
  • %TEMP%\opera installer\7e6b46452ba842cc2a4b1cb132f126ac.sys
  • %TEMP%\opera installer\4e3516d83fb928488bc2f63647020c28.sys
  • %TEMP%\opera installer\5d55ae5c0c06e41c91be2531134fc7fc.sys
  • %TEMP%\opera installer\c6b85e472f2bdd40c9908be93674c120.sys
  • %TEMP%\opera installer\_help_instruction.txt
  • %TEMP%\outlook logging\5ac236e202a1b4be4f7e90d70a05989e.sys
  • %TEMP%\opera installer\ce8e7d341a89c0202f7471d121d2a400.sys
  • %TEMP%\opera installer\5c4072ff3cfdabc7ff485ac344468fa7.sys
  • %TEMP%\pyl1.tmp\data\864e254e2804bf544b6cbd212f4da334.sys
  • %TEMP%\pyl1.tmp\translations\jv\lc_messages\062cae742a1dd7cede2c165c3166bbae.sys
Moves the following files
  • from %TEMP%\dd_net_framework20_setup74f9.txt to %TEMP%\b670df7e141a27ce857af2261b630bae.sys
  • from %TEMP%\dd_net_framework30_setup7762.txt to %TEMP%\9f669a7c1b2e54c841ba7bb422b538a8.sys
  • from %TEMP%\omni.ja_20150820130017.zip to %TEMP%\91cc83b00955cf40a3c509ba1170b320.sys
  • from %TEMP%\omni.ja_20150820125829.zip to %TEMP%\0e42c3d1137645e0d9a03bfd1b6f29c0.sys
Miscellaneous
Uses NTFS alternate data streams

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке