Trojan.PWS.Banker1.4064

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%HOMEPATH%\UpBackup\UpdateOffice.exe

Вредоносные функции:

Создает и запускает на исполнение:

%HOMEPATH%\PrintHood\UpdateOffice.exe
%HOMEPATH%\UpBackup\UpdateOffice.exe

Запускает на исполнение:

<SYSTEM32>\ping.exe 174.142.57.28
<SYSTEM32>\cmd.exe /c ""%HOMEPATH%\PrintHood\pangtip.bat" "
<SYSTEM32>\cmd.exe /c ""%HOMEPATH%\PrintHood\100.bat" "

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\PrintHood\0XaAv9tMKH.PRI
%HOMEPATH%\PrintHood\S3CK6ybmB5.PRI
%HOMEPATH%\PrintHood\iSGQTINpOX.PRI
%HOMEPATH%\PrintHood\p5hkc9XdMj.PRI
%HOMEPATH%\PrintHood\wbdid3dqTE.PRI
%HOMEPATH%\PrintHood\eovTJLz4Ry.PRI
%HOMEPATH%\PrintHood\RuFPBJC3Sn.PRI
%HOMEPATH%\PrintHood\Wbny4rkEaG.PRI
%HOMEPATH%\PrintHood\E6mOuOBhxH.PRI
%HOMEPATH%\PrintHood\~NXwqtfloRJiFSh56RNDS.TMP
%HOMEPATH%\PrintHood\~QKgN7FYPbn1cHdHGXeAy.TMP
%HOMEPATH%\PrintHood\~GR72q3DdDPur7ZK9lKnG.TMP
%HOMEPATH%\PrintHood\~tQ2yVgFu7gCtxJNjBZu1.TMP
%HOMEPATH%\PrintHood\~ynVFYSsw47DjPzIrb5nG.TMP
%HOMEPATH%\PrintHood\~89a9FqT5eoxohpLMdhJb.TMP
%HOMEPATH%\PrintHood\~mDO3UjHRX6AAhMfPMrZ9.TMP
%HOMEPATH%\PrintHood\~1mWLuZftJmsgXxO2CIqR.TMP
%HOMEPATH%\PrintHood\~FfhKRTFLhqkx6D5URqrL.TMP
%HOMEPATH%\PrintHood\~Lk3viyTOO3W6ombO07bu.TMP
%HOMEPATH%\PrintHood\lFqO7zrx4s.PRI
%HOMEPATH%\PrintHood\dMknAxO0wz.PRI
%HOMEPATH%\PrintHood\7pVzfc4pjQ.PRI
%HOMEPATH%\PrintHood\yGpiVyD89o.PRI
%HOMEPATH%\PrintHood\NhtGlfh3XM.PRI
%HOMEPATH%\PrintHood\5GiqN5NEZn.PRI
%HOMEPATH%\PrintHood\4cs0M91Cc5.PRI
%HOMEPATH%\PrintHood\P4eNjkZcM7.PRI
%HOMEPATH%\PrintHood\cqaUvDbay7.PRI
%HOMEPATH%\PrintHood\712OQzl3tb.PRI
%HOMEPATH%\PrintHood\qo71C7zIpN.PRI
%HOMEPATH%\PrintHood\X3TlAh1IFO.PRI
%HOMEPATH%\PrintHood\g5zOjfXzTA.PRI
%HOMEPATH%\PrintHood\UJRExpw27o.PRI
%HOMEPATH%\PrintHood\TahfwsecgT.PRI
%HOMEPATH%\PrintHood\XVs3qCektD.PRI
%HOMEPATH%\PrintHood\9gNcaYLHu3.PRI
%HOMEPATH%\PrintHood\C7kRT6Zh9s.PRI
%HOMEPATH%\PrintHood\EKZqWT1TbN.PRI
%HOMEPATH%\PrintHood\~3ze9IHRe2ZTBl3vihuTw.TMP
%HOMEPATH%\PrintHood\~IAJ2J21QvGmtacR94HBJ.TMP
%HOMEPATH%\PrintHood\~WVk99mEdkwUESPJq2Z3J.TMP
%HOMEPATH%\PrintHood\~OGXAAeMZyxgSg4B1GdqV.TMP
%HOMEPATH%\PrintHood\~zjCtBRZAHKlz9jAR0PMT.TMP
%HOMEPATH%\PrintHood\~zyOXKQu9woAZUepY44AH.TMP
%HOMEPATH%\PrintHood\~mCjP6CBLANuMIGu9Ro1b.TMP
%HOMEPATH%\PrintHood\~XSBA33w2VUH2TPOX8tdq.TMP
%HOMEPATH%\PrintHood\~mft6FmNnFwhyy4oLMPE0.TMP
%HOMEPATH%\PrintHood\~UYUbC02V4NzXtg0CrW20.TMP
%HOMEPATH%\PrintHood\~Sgse3c4FTNoOae5kXpHk.TMP
%HOMEPATH%\PrintHood\~pgcyYeznz7FjpkAC8BqN.TMP
%HOMEPATH%\PrintHood\~GZM02WJYuzdPfPmDA2xU.TMP
%HOMEPATH%\PrintHood\~VUOjxd3dg8PQnCnNr2t1.TMP
%HOMEPATH%\PrintHood\~LoM6IC8NusKnMg9NlIMm.TMP
%HOMEPATH%\PrintHood\~iQlAuGUknGBnR9eeq7LA.TMP
%HOMEPATH%\PrintHood\~z38UDAPyanjZ4YXBJkbs.TMP
%HOMEPATH%\PrintHood\~LrOcj2M0XQgd9rh0wGzM.TMP
%HOMEPATH%\PrintHood\~DvpWhuDpWR36s6AAMF38.TMP
%HOMEPATH%\PrintHood\~uPeB9EFCZhuwS4D3GPzZ.TMP
%HOMEPATH%\PrintHood\~yP7Cn4prA8HuyOxelnBV.TMP
%HOMEPATH%\PrintHood\~vKTOBK754Lr885Lj0ygs.TMP
%HOMEPATH%\PrintHood\~4OSwYfL5KD1jdsJ1J8mp.TMP
%HOMEPATH%\PrintHood\~ofSwMQYfib1xNbXqMX2X.TMP
%HOMEPATH%\PrintHood\~gidZjUYXH69XCrYEQ0QQ.TMP
%HOMEPATH%\PrintHood\~oN3VCJBZ4VkQwmJuiTfS.TMP
%HOMEPATH%\PrintHood\~tqHzfGVSmIqMOeOSGAk6.TMP
%HOMEPATH%\PrintHood\~mmIVIXFU8mwjA11J3MyB.TMP
%HOMEPATH%\PrintHood\~hQCKsIv0gZA9JUrFiV0q.TMP
%HOMEPATH%\PrintHood\~2zNvh12mBzPl4SDxZTP0.TMP
%HOMEPATH%\PrintHood\~AEANKKKpksq0nfLUGPLh.TMP
%HOMEPATH%\PrintHood\~IVglRxECXiwkVMXKxNYY.TMP
%HOMEPATH%\PrintHood\~30cfRpuXnt6NYoBIskIQ.TMP
%HOMEPATH%\PrintHood\~jTI4v3PphnLciDPBk2jN.TMP
%HOMEPATH%\PrintHood\~T6fWG0mBJ7lPg2geSUk5.TMP
%HOMEPATH%\PrintHood\~UzTrv0G1Rn96N6KthADn.TMP
%HOMEPATH%\PrintHood\~mfxKJUk25cPIMucV5M67.TMP
%HOMEPATH%\PrintHood\~jGQTXOvtIqlhGIqiMIns.TMP
%HOMEPATH%\PrintHood\~w8b9Lh58sMWh4Ew3y9Jc.TMP
%HOMEPATH%\PrintHood\N7DubyFgBg.dll
%HOMEPATH%\PrintHood\KWmZsx9wOe.dll
%HOMEPATH%\PrintHood\8URhuoVBVw.dll
%HOMEPATH%\PrintHood\mvWe51WFQy.dll
%HOMEPATH%\PrintHood\G5wWxDNc1R.dll
%HOMEPATH%\PrintHood\yfGdY3ddrY.dll
%HOMEPATH%\PrintHood\U2TYh3BFu1.dll
%HOMEPATH%\PrintHood\18C6b6FTW1.dll
%HOMEPATH%\PrintHood\JXaxCkAx4I.dll
%HOMEPATH%\PrintHood\ONstsuZJuM.dll
%HOMEPATH%\PrintHood\YSa4grqUmH.dll
%HOMEPATH%\PrintHood\0F1bYjgLMr.dll
%HOMEPATH%\PrintHood\BzKg5gYVVg.dll
%HOMEPATH%\PrintHood\8SCsQPetFG.dll
%HOMEPATH%\PrintHood\OYRJ1psBjL.dll
%HOMEPATH%\PrintHood\GOk7LoZH7q.dll
%HOMEPATH%\PrintHood\3eBY6gjQiJ.dll
%HOMEPATH%\PrintHood\tt5ZPGFUEm.dll
%HOMEPATH%\PrintHood\NlGyKll8iz.dll
%HOMEPATH%\PrintHood\wQW93w0uF3.dll
%HOMEPATH%\PrintHood\5J3MqOPQdJ.dll
%HOMEPATH%\PrintHood\wH5pSLKYAF.dll
%HOMEPATH%\PrintHood\4GW1M5VXzL.dll
%HOMEPATH%\PrintHood\PojCNEoI1f.dll
%HOMEPATH%\PrintHood\pangtip.bat
%HOMEPATH%\PrintHood\UPDATE~1.EXE.pkxm
%HOMEPATH%\PrintHood\wiRTrPFMiT.dll
%HOMEPATH%\Templates\nam.dll
%HOMEPATH%\PrintHood\ku9CVW360i.dll
%HOMEPATH%\PrintHood\0duOZVrp7M.dll
%HOMEPATH%\PrintHood\wbXjrnPwlR.dll
%HOMEPATH%\PrintHood\kpwg4KqYxT.dll
%HOMEPATH%\PrintHood\U5NvdWGwNJ.dll
%HOMEPATH%\PrintHood\RPltipqk8G.dll
%HOMEPATH%\PrintHood\NarxuuXf3Q.dll
%HOMEPATH%\PrintHood\E4Dg0AuQCc.dll
%HOMEPATH%\PrintHood\JlItEzSPj1.dll
%HOMEPATH%\PrintHood\skElyrB1mx.dll
%HOMEPATH%\PrintHood\poXU9Jdni1.dll
%HOMEPATH%\PrintHood\zMz1ilqdZE.PRI
%HOMEPATH%\PrintHood\7pxSdg7i5M.PRI
%HOMEPATH%\PrintHood\9qTW8ty9Ml.PRI
%HOMEPATH%\PrintHood\6yd3KQvREE.PRI
%HOMEPATH%\PrintHood\wRpVjlfkEs.PRI
%HOMEPATH%\PrintHood\dzOIfbI8nS.PRI
%HOMEPATH%\PrintHood\L2ElE0hd0Z.PRI
%HOMEPATH%\PrintHood\1ii61NJzbg.PRI
%HOMEPATH%\PrintHood\XuYfkxwt9s.PRI
%HOMEPATH%\PrintHood\7xGsJgPMB8.PRI
%HOMEPATH%\PrintHood\wpjHAFpzbv.PRI
%HOMEPATH%\PrintHood\7yH3kOW0TO.PRI
%HOMEPATH%\PrintHood\pagJiN2taH.PRI
%HOMEPATH%\PrintHood\X4r2HMfWS5.PRI
%HOMEPATH%\PrintHood\3kNwDTIwdl.PRI
%HOMEPATH%\PrintHood\toGVsmpVST.PRI
%HOMEPATH%\PrintHood\oCMSaJeLle.PRI
%HOMEPATH%\PrintHood\vzoqWeDjG1.PRI
%HOMEPATH%\PrintHood\3pnKjHPOBm.PRI
%HOMEPATH%\PrintHood\buJdwdoXZM.dll
%HOMEPATH%\PrintHood\IrZ7NdlQFz.dll
%HOMEPATH%\PrintHood\SJXmHK44G7.dll
%HOMEPATH%\PrintHood\87vq3ZRulE.dll
%HOMEPATH%\PrintHood\23UOBTxQ4n.dll
%HOMEPATH%\PrintHood\qutCJjflvi.dll
%HOMEPATH%\PrintHood\JE98YgXUTJ.dll
%HOMEPATH%\PrintHood\SQ8znADysJ.dll
%HOMEPATH%\PrintHood\01JipDsKu2.dll
%HOMEPATH%\PrintHood\wscyyqDYse.dll
%HOMEPATH%\PrintHood\Fhl1KF7xFz.PRI
%HOMEPATH%\PrintHood\OHjVGE3Y3V.PRI
%HOMEPATH%\PrintHood\bVPFJsH066.PRI
%HOMEPATH%\PrintHood\i7MOQYfHrY.PRI
%HOMEPATH%\PrintHood\z8jw8dyCvV.dll
%HOMEPATH%\PrintHood\UhrcDxBklA.dll
%HOMEPATH%\PrintHood\pCo1laIBqk.dll
%HOMEPATH%\PrintHood\AepkCEwqUP.dll
%HOMEPATH%\PrintHood\IGRtlos7nP.dll
%HOMEPATH%\PrintHood\~j7a6eXuqmYsNbyzDnTNM.TMP
%HOMEPATH%\PrintHood\~GH9X8gdV3ClUg91ojS6Y.TMP
%HOMEPATH%\PrintHood\~XQgB3KJMf96NWzaZBqAO.TMP
%HOMEPATH%\PrintHood\~utP0bMAHh0RjsqBi5Bg2.TMP
%HOMEPATH%\PrintHood\~ZAA8p0hPDV0V5Rrxeqqu.TMP
%HOMEPATH%\PrintHood\~B5CFv5IeJqPefoMpgf7X.TMP
%HOMEPATH%\PrintHood\~OXX4lZo2C0qvKDueyhmB.TMP
%HOMEPATH%\PrintHood\~LggD08CCPPObR9FAeaxl.TMP
%HOMEPATH%\PrintHood\~qE3i3QWirEIo3hdg1IF7.TMP
%HOMEPATH%\PrintHood\~dyIxJuSBi6peENr4OcR1.TMP
%HOMEPATH%\PrintHood\~9r0gdxUexRa7bWiuUVPG.TMP
%HOMEPATH%\PrintHood\~aHlaLEVfZQKmdYHph5qh.TMP
%HOMEPATH%\PrintHood\~hWvDyRHlg1wYIrbID0Pu.TMP
%HOMEPATH%\PrintHood\~hLl9vd8AY1Tq4Nbi4u8o.TMP
%HOMEPATH%\PrintHood\~EVQ7idh1KfMhsbTCDtJS.TMP
%HOMEPATH%\PrintHood\~6j60JDq7KXaWs7UEkepv.TMP
%HOMEPATH%\PrintHood\~b4DHxjMbvf24LfLVsm0z.TMP
%HOMEPATH%\PrintHood\~4R0xqTlzECd4a9845b77.TMP
%HOMEPATH%\PrintHood\~RqWPFAbDzw5J2fig2Luu.TMP
%HOMEPATH%\PrintHood\~HzdZAiochfwK7jYyDAWB.TMP
%HOMEPATH%\PrintHood\~XwE9ql6Tn07GAkdp3qaY.TMP
%HOMEPATH%\PrintHood\~24hCxHk1aiPFBTMizpbc.TMP
%HOMEPATH%\PrintHood\~IdFdSZFbz42Y1gBJYR6i.TMP
%HOMEPATH%\PrintHood\~XUjA0wadnnRjlUEdSVGl.TMP
%HOMEPATH%\PrintHood\~ngVjkXXJkPEbbqMEllx9.TMP
%HOMEPATH%\PrintHood\~xu79a6pUrY7xByyoYYgj.TMP
%HOMEPATH%\PrintHood\~gprvdseTusFXz6PM3set.TMP
%HOMEPATH%\PrintHood\~PjqFVoFtBoQNE7tBj1AA.TMP
%HOMEPATH%\PrintHood\~JI5CGHtmuRtUjmhKIlwi.TMP
%HOMEPATH%\PrintHood\~S30iyAxQpDOWWCrqZwRF.TMP
%HOMEPATH%\PrintHood\~bJQ127fsIZNpYaZlEso9.TMP
%HOMEPATH%\PrintHood\~cxA2YHaLERUrZxCt0TgE.TMP
%HOMEPATH%\PrintHood\~8IxG5sBXhWAnYLPOM4ft.TMP
%HOMEPATH%\PrintHood\~ag5r0q6406AUm05rNkZ6.TMP
%HOMEPATH%\PrintHood\~pphY2zAc9TZxbLr6q7TW.TMP
%HOMEPATH%\PrintHood\~P74wpJqIHEQXLD25aI80.TMP
%HOMEPATH%\PrintHood\~NCRjzkR15msH0imXX5tO.TMP
%HOMEPATH%\PrintHood\~TmRZYMTPrfuHqUSH4wTI.TMP
%HOMEPATH%\PrintHood\~2mwptO059UpazrfQ4oOK.TMP
%HOMEPATH%\PrintHood\~zv2GmZebwGdgZj2wz9JW.TMP
%HOMEPATH%\PrintHood\~oGzt878RQZayfh7K6QPI.TMP
%HOMEPATH%\PrintHood\~Bt745soPhIaLvphpinDv.TMP
%HOMEPATH%\PrintHood\~jjtwy7JbHKYh45wicPn1.TMP
%HOMEPATH%\PrintHood\~DvYMl4DfM0Pd7z7X9Ca9.TMP
%HOMEPATH%\PrintHood\~vyN8rgQxoqyPrEomT9bA.TMP
%HOMEPATH%\PrintHood\~P9zgvhGKSj5gdn41mt3p.TMP
%HOMEPATH%\PrintHood\~YNGd2WPu7QWRjBjCSJ4j.TMP
%HOMEPATH%\PrintHood\~2ZlD6vea3Z14jLJv06Tj.TMP
%HOMEPATH%\PrintHood\~OH9vWHKWyCo4FpvmfI4P.TMP
%HOMEPATH%\PrintHood\~8S3dBMjftIlQ5L8Jdhje.TMP
%HOMEPATH%\PrintHood\xdat.dll
%HOMEPATH%\PrintHood\~MEGbBbIRrmqrc0c1lLSu.TMP
%HOMEPATH%\PrintHood\UpdateOffice.exe
%HOMEPATH%\PrintHood\100.bat
%HOMEPATH%\PrintHood\~E1n941it99eGgDtFOvLh.TMP
%HOMEPATH%\PrintHood\~iJnh1U5Bs77osI5LdlqI.TMP
%HOMEPATH%\PrintHood\~rdlKCVjrMCXndmmGBMR4.TMP
%HOMEPATH%\PrintHood\~RrFAphuclncZ93dntoRw.TMP
%HOMEPATH%\PrintHood\~uASw7vIETXREaSOLm31h.TMP
%HOMEPATH%\PrintHood\~RXL2raVwbE8zh7vt5UJv.TMP
%HOMEPATH%\PrintHood\~zazWhRp6ArZ8FmrpruMZ.TMP
%HOMEPATH%\PrintHood\~nJN5sZ0IobI78YQMdZuP.TMP
%HOMEPATH%\PrintHood\~JdjoDgt10VUCrRLo9mec.TMP
%HOMEPATH%\PrintHood\~8fvzDWlEKaVnrSXMyIsf.TMP
%HOMEPATH%\PrintHood\~QJGpltgTqR5G5yPEL161.TMP
%HOMEPATH%\PrintHood\~9IyGCLthjs7IoxsgYw9c.TMP
%HOMEPATH%\PrintHood\~BKYTY1KHnFKyMjeoD0V3.TMP
%HOMEPATH%\PrintHood\~JWQMNoDMIlkKVg9tzGfT.TMP
%HOMEPATH%\PrintHood\~R3u1qyZonT2ov6RVcHCp.TMP
%HOMEPATH%\PrintHood\~6h5WGNAARAo4XDzXua5H.TMP
%HOMEPATH%\PrintHood\~1JminXoOdLVNbrabdnTP.TMP
%HOMEPATH%\PrintHood\~eFnaeeiZqix9pEU8sPH2.TMP
%HOMEPATH%\PrintHood\~tjJe5FzYrDKGvI6fcn3f.TMP
%HOMEPATH%\PrintHood\~xPV3LMu9EvXyWEvEovem.TMP
%HOMEPATH%\PrintHood\~jEEGOJPTh0ayF1ij00jm.TMP
%HOMEPATH%\PrintHood\~Y9gf2zp4WDv8eekMJBw7.TMP
%HOMEPATH%\PrintHood\~7S0Z7ROGgR0yTNnrVRUt.TMP
%HOMEPATH%\PrintHood\~6r58UWhR25VS9g6FOfXU.TMP
%HOMEPATH%\PrintHood\~AEcmd94VnTbelsCJ0HIf.TMP
%HOMEPATH%\PrintHood\~jLhrfBuPn46oFLAt8gX5.TMP
%HOMEPATH%\PrintHood\~iRS3XlvG5poiXMHuld2D.TMP
%HOMEPATH%\PrintHood\~Vz5rsZkE5z4eYQoQfGAe.TMP
%HOMEPATH%\PrintHood\~QOJ8hCQJsaf831pDyGtw.TMP
%HOMEPATH%\PrintHood\~XEo5dmcke0iK8op6PtEP.TMP
%HOMEPATH%\PrintHood\~GpdcnB3kx1rKWVhKPmER.TMP
%HOMEPATH%\PrintHood\~1Z1YOooF0Ix5Jndq6O0d.TMP
%HOMEPATH%\PrintHood\~wcJjoJ0XDtfO0qkUpgER.TMP
%HOMEPATH%\PrintHood\~Ea1sAYnwXTD4LZcJ2wnT.TMP
%HOMEPATH%\PrintHood\~5kUiaV4etHoocyWgRo7H.TMP
%HOMEPATH%\PrintHood\~NgYMetRAmxLwQejq49NM.TMP
%HOMEPATH%\PrintHood\~AwN99sYxrNwQaShUc1Pw.TMP
%HOMEPATH%\PrintHood\~RzylwQ4d4lYd6IJUDj7U.TMP
%HOMEPATH%\PrintHood\~E22ptm2NrORz5YNU1dpq.TMP
%HOMEPATH%\PrintHood\~oS9gcsSyfKBnZr8CGYmb.TMP
%HOMEPATH%\PrintHood\~xVTTrx1Bmt1wFNCF49qc.TMP
%HOMEPATH%\PrintHood\~H81VvEtp4XLk3iiq7pyk.TMP
%HOMEPATH%\PrintHood\~rlthWaA1MPxOEDTCJ8kY.TMP
%HOMEPATH%\PrintHood\~UCoVrvrLAWmyNAiYNuOA.TMP
%HOMEPATH%\PrintHood\~BJgOPvFlt7sVVTDKm8jk.TMP
%HOMEPATH%\PrintHood\~YX3LyssPFDgkCiGsAxav.TMP
%HOMEPATH%\PrintHood\~Q0aeW5O7TN178KBfr7ze.TMP
%HOMEPATH%\PrintHood\~PE8J3ghQ8IqxQx2DGVOn.TMP
%HOMEPATH%\PrintHood\~mL0IpgPLAKLiPRI5j4YQ.TMP
%HOMEPATH%\PrintHood\~tNh2ZPkdArTkiYqpDqo5.TMP
%HOMEPATH%\PrintHood\~aJ00qcVml6yVT1FSJaIF.TMP
%HOMEPATH%\PrintHood\~KpNLIWqgwV2IqneyipvP.TMP
%HOMEPATH%\PrintHood\~viqmfGWSbl4DR0tg6aJl.TMP
%HOMEPATH%\PrintHood\~0Dt5Q4FImRZn5dbC7gsD.TMP
%HOMEPATH%\PrintHood\~5oyfs5X2260Tdip6cO20.TMP
%HOMEPATH%\PrintHood\~Ku5Tbwxje4mC0T8kQGcH.TMP
%HOMEPATH%\PrintHood\~1HTwqJiZ1aQTAbWtEK4o.TMP
%HOMEPATH%\PrintHood\~dyu4Ce92QByyWJXTtEmw.TMP
%HOMEPATH%\PrintHood\~O5pGuMcApcARismlBomM.TMP
%HOMEPATH%\PrintHood\~6Oz5E34vAbFs2De2hwmO.TMP
%HOMEPATH%\PrintHood\~VVO0awvb07XySXOOCUtO.TMP
%HOMEPATH%\PrintHood\~3VtQ3auD3hu9arFk7n2q.TMP
%HOMEPATH%\PrintHood\~QvRYJIpJtlKD2DPgyDyj.TMP
%HOMEPATH%\PrintHood\~bjkKFDIBBqQe6NXDBewH.TMP
%HOMEPATH%\PrintHood\~5K9POQ6R1PEsQRqc3iwI.TMP
%HOMEPATH%\PrintHood\~d4BGsV98Z50EJ5g5sNVe.TMP
%HOMEPATH%\PrintHood\~k0VejlBkNLgPpV3WID5J.TMP
%HOMEPATH%\PrintHood\~ncayttrDpghPgq41qDu1.TMP
%HOMEPATH%\PrintHood\~llWYE9bd0yjU8pON1PB5.TMP
%HOMEPATH%\PrintHood\~ZOirmGOGFE7S49edshgQ.TMP
%HOMEPATH%\PrintHood\~ezOwu9XHCADrj0x6sBt0.TMP
%HOMEPATH%\PrintHood\~vnqNQXQWvWaUdKPxTVer.TMP
%HOMEPATH%\PrintHood\~ybJt9b97TDHvhHV69JTA.TMP
%HOMEPATH%\PrintHood\~ekFQ8Y3keYgel8Q9lbtx.TMP
%HOMEPATH%\PrintHood\~9nRMqbFMSf40Bsyqy3QX.TMP
%HOMEPATH%\PrintHood\~OOitkYCZwumELYTvsRLx.TMP
%HOMEPATH%\PrintHood\~RUYFksvR9GnQXEPPSlPl.TMP
%HOMEPATH%\PrintHood\~etZt7noPumwx6ahIEaL0.TMP
%HOMEPATH%\PrintHood\~N1nZH4O3hudUNdDy8RAf.TMP
%HOMEPATH%\PrintHood\~M8WeaRZhhMiO9S0GpRUr.TMP
%HOMEPATH%\PrintHood\~7brE5wN9htg5C6skTRbs.TMP
%HOMEPATH%\PrintHood\~3APCSxAwuqVARSRMBEXQ.TMP
%HOMEPATH%\PrintHood\~1Gf2dSzTaoCg2LtF6uGS.TMP
%HOMEPATH%\PrintHood\~1mdFk9JZ6waPj8XmuM8x.TMP
%HOMEPATH%\PrintHood\~KDZdYOzxkoupH9b9ur9A.TMP
%HOMEPATH%\PrintHood\~bc9RmZEuTjKs7F47wrBU.TMP
%HOMEPATH%\PrintHood\~jIBIZKVlCu957l6QhfIw.TMP
%HOMEPATH%\PrintHood\~JsctSfAsYQmYlvdB6oOo.TMP
%HOMEPATH%\PrintHood\~iCdb1L2nmp3jfKnc8lRa.TMP
%HOMEPATH%\PrintHood\~i91eEk6UIXnTIGlm98nQ.TMP
%HOMEPATH%\PrintHood\~0ahO5ukeBszxCiD7dCDl.TMP
%HOMEPATH%\PrintHood\~gKPoeOlQthas35d0b89a.TMP
%HOMEPATH%\PrintHood\~LZuz18sJB4EpejUD6TKG.TMP
%HOMEPATH%\PrintHood\~f9yUehrR9EBFw1OWghjO.TMP
%HOMEPATH%\PrintHood\~79H2nOXZCNyLObbYfIGs.TMP
%HOMEPATH%\PrintHood\~AgUAFxHMY3VP0vVVvsyl.TMP
%HOMEPATH%\PrintHood\~7ACgWI3Br7SiqqxOjIR1.TMP
%HOMEPATH%\PrintHood\~w4hZ0ifuLIuiMrpphuQw.TMP
%HOMEPATH%\PrintHood\~CvohJD703OV0A0KPyu5u.TMP
%HOMEPATH%\PrintHood\~LYi9psnutYPeH1uNil8s.TMP
%HOMEPATH%\PrintHood\~g7N7bO0wInC234DxfQCh.TMP

Удаляет следующие файлы:

%HOMEPATH%\PrintHood\pangtip.bat

Сетевая активность:

Подключается к:

'localhost':1038
'localhost':1039
'localhost':1040
'localhost':1035
'localhost':1036
'localhost':1037

Другое:

Ищет следующие окна:

ClassName: '' WindowName: 'http://174.142.57.28/ - 404 - File or directory not found. - Windows Internet Explorer'
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: '' WindowName: '404 - File or directory not found. - Microsoft Internet Explorer'
ClassName: '' WindowName: 'http://174.142.57.28/ - 404 - File or directory not found. - Microsoft Internet Explorer'
ClassName: '' WindowName: '404 - File or directory not found. - Windows Internet Explorer'
ClassName: '' WindowName: 'u!u!u!u! - Microsoft Internet Explorer'
ClassName: '' WindowName: 'http://174.142.57.28/ - u!u!u!u! - Windows Internet Explorer'
ClassName: '' WindowName: 'u!u!u!u! - Windows Internet Explorer'
ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: '' WindowName: ''
ClassName: '' WindowName: 'http://174.142.57.28/ - u!u!u!u! - Microsoft Internet Explorer'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней