Trojan.DownLoader10.41162

Техническая информация

Вредоносные функции:

Для затруднения выявления своего присутствия в системе

блокирует:

Средство контроля пользовательских учетных записей (UAC)

Создает и запускает на исполнение:

'%HOMEPATH%\K92F\update.exe'
'%TEMP%\install_flashplayer11x32.exe' {RemoveFile:%CommonProgramFiles%\Services\install_flashplayer11x32.exe}
'%CommonProgramFiles%\Services\flash_player_ax.exe'
'%CommonProgramFiles%\Services\install_flashplayer11x32.exe'

Запускает на исполнение:

'<SYSTEM32>\reg.exe' add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System" /v EnableLUA /t REG_DWORD /d 0 /f
'<SYSTEM32>\reg.exe' add "HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer" /v HideSCAHealth /t REG_DWORD /d 0x1 /f
'<SYSTEM32>\cmd.exe' /c ""%CommonProgramFiles%\Services\flash_check.bat" "

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\K92F\L30791.LAS
%HOMEPATH%\K92F\A63614.XYE
%HOMEPATH%\K92F\T17542.HMP
%HOMEPATH%\K92F\A34201.QKE
%HOMEPATH%\K92F\O32722.RYB
%HOMEPATH%\K92F\F86503.ZGI
%HOMEPATH%\K92F\N37421.PHL
%HOMEPATH%\K92F\85012.DSE
%HOMEPATH%\K92F\17842.OHY
%HOMEPATH%\K92F\A77270.HXB
%HOMEPATH%\K92F\61522.ZNU
%HOMEPATH%\K92F\X17700.MIK
%HOMEPATH%\K92F\N12991.DUJ
%HOMEPATH%\K92F\60817.OJU
%HOMEPATH%\K92F\D74482.IXP
%HOMEPATH%\K92F\13300.EBE
%HOMEPATH%\K92F\81420.EZX
%HOMEPATH%\K92F\62013.NPP
%HOMEPATH%\K92F\D20789.GLQ
%HOMEPATH%\K92F\51536.XVC
%HOMEPATH%\K92F\R52299.JUM
%HOMEPATH%\K92F\J13768.ZMR
%HOMEPATH%\K92F\51946.VCU
%HOMEPATH%\K92F\S28285.FZY
%HOMEPATH%\K92F\K27923.IWY
%HOMEPATH%\K92F\Y33497.GVH
%HOMEPATH%\K92F\D84311.BWF
%HOMEPATH%\K92F\20659.KJF
%HOMEPATH%\K92F\T29103.TTJ
%HOMEPATH%\K92F\65546.XSM
%HOMEPATH%\K92F\I81783.WJM
%HOMEPATH%\K92F\80266.UAD
%HOMEPATH%\K92F\Z5032.DGS
%HOMEPATH%\K92F\E32165.QQZ
%HOMEPATH%\K92F\N53850.LSU
%HOMEPATH%\K92F\54079.XQF
%HOMEPATH%\K92F\I32188.PRC
%HOMEPATH%\K92F\26607.ASZ
%HOMEPATH%\K92F\Q81142.AIJ
%HOMEPATH%\K92F\83081.ANF
%HOMEPATH%\K92F\72238.FKD
%HOMEPATH%\K92F\74424.QDJ
%HOMEPATH%\K92F\I19506.WZP
%HOMEPATH%\K92F\M21887.UEY
%HOMEPATH%\K92F\U11836.JWM
%HOMEPATH%\K92F\X30676.SFB
%HOMEPATH%\K92F\X44789.MGL
%HOMEPATH%\K92F\79698.BLL
%HOMEPATH%\K92F\60040.XBP
%HOMEPATH%\K92F\N35849.YPP
%HOMEPATH%\K92F\C93998.NFF
%HOMEPATH%\K92F\Q27470.QTL
%HOMEPATH%\K92F\S51995.QCB
%HOMEPATH%\K92F\W10566.MSD
%HOMEPATH%\K92F\W54084.IHF
%HOMEPATH%\K92F\76421.ODM
%HOMEPATH%\K92F\77106.GHK
%HOMEPATH%\K92F\N37027.ZRM
%HOMEPATH%\K92F\59793.JTM
%HOMEPATH%\K92F\68464.UKK
%HOMEPATH%\K92F\P99645.TUG
%HOMEPATH%\K92F\55848.CPD
%HOMEPATH%\K92F\V22515.ZHR
%HOMEPATH%\K92F\28414.WHL
%HOMEPATH%\K92F\40598.EAF
%HOMEPATH%\K92F\E20839.OVM
%HOMEPATH%\K92F\52083.YRQ
%HOMEPATH%\K92F\O17454.VTD
%HOMEPATH%\K92F\J45238.MKC
%HOMEPATH%\K92F\26992.NQY
%HOMEPATH%\K92F\P72927.BNQ
%HOMEPATH%\K92F\73587.ICL
%HOMEPATH%\K92F\20600.VKV
%HOMEPATH%\K92F\D80668.HQF
%HOMEPATH%\K92F\K72581.HOK
%HOMEPATH%\K92F\U59288.OBH
%HOMEPATH%\K92F\S31474.PWC
%HOMEPATH%\K92F\N87204.AXZ
%HOMEPATH%\K92F\69286.AHU
%HOMEPATH%\K92F\R37418.DSA
%HOMEPATH%\K92F\9201.AQD
%HOMEPATH%\K92F\J77680.JHQ
%HOMEPATH%\K92F\D9393.IQY
%HOMEPATH%\K92F\G52983.CEJ
%HOMEPATH%\K92F\R25103.JPA
%HOMEPATH%\K92F\78061.JAO
%HOMEPATH%\K92F\Q62693.EGP
%HOMEPATH%\K92F\Q68426.RNN
%HOMEPATH%\K92F\R52311.CUK
%HOMEPATH%\K92F\T28099.VFE
%HOMEPATH%\K92F\B44615.EEY
%HOMEPATH%\K92F\9038.NVR
%HOMEPATH%\K92F\E51055.LVD
%HOMEPATH%\K92F\L41586.DVP
%HOMEPATH%\K92F\U72319.YVZ
%HOMEPATH%\K92F\55318.NQP
%HOMEPATH%\K92F\28843.GFG
%HOMEPATH%\K92F\25413.TUU
%HOMEPATH%\K92F\A58428.FBF
%HOMEPATH%\K92F\72930.XJQ
%HOMEPATH%\K92F\74995.LJA
%HOMEPATH%\K92F\L84327.MSR
%HOMEPATH%\K92F\C21308.URH
%HOMEPATH%\K92F\C34086.HPW
%HOMEPATH%\K92F\L98830.FEX
%HOMEPATH%\K92F\37340.MRW
%HOMEPATH%\K92F\2835.PDK
%HOMEPATH%\K92F\M92750.WIF
%HOMEPATH%\K92F\8803.YZQ
%HOMEPATH%\K92F\83068.XYO
%HOMEPATH%\K92F\55706.HAO
%HOMEPATH%\K92F\G87325.VHU
%HOMEPATH%\K92F\R89049.NAW
%HOMEPATH%\K92F\82706.JYX
%HOMEPATH%\K92F\W1915.HYF
%HOMEPATH%\K92F\10471.ZND
%HOMEPATH%\K92F\38987.GLA
%HOMEPATH%\K92F\15054.APV
%HOMEPATH%\K92F\14356.GGQ
%HOMEPATH%\K92F\N12885.BJV
%HOMEPATH%\K92F\A75234.OUG
%HOMEPATH%\K92F\6368.TBN
%HOMEPATH%\K92F\72102.AMZ
%HOMEPATH%\K92F\93444.XVW
%HOMEPATH%\K92F\66844.DYE
%HOMEPATH%\K92F\U76155.OUH
%HOMEPATH%\K92F\9230.YVM
%HOMEPATH%\K92F\63059.GMC
%HOMEPATH%\K92F\62575.FOG
%HOMEPATH%\K92F\29357.CYL
%HOMEPATH%\K92F\N75423.SWG
%HOMEPATH%\K92F\Q54570.QKY
%HOMEPATH%\K92F\M11418.OJX
%HOMEPATH%\K92F\69001.LAY
%HOMEPATH%\K92F\86955.YHP
%HOMEPATH%\K92F\87702.ATI
%HOMEPATH%\K92F\A39100.XCN
%HOMEPATH%\K92F\Q27097.WJN
%HOMEPATH%\K92F\A65870.BPY
%HOMEPATH%\K92F\E64796.HSK
%HOMEPATH%\K92F\L9976.BBH
%HOMEPATH%\K92F\83297.JQC
%HOMEPATH%\K92F\70461.GKC
%HOMEPATH%\K92F\15756.ISG
%HOMEPATH%\K92F\54374.XTD
%HOMEPATH%\K92F\63654.VLE
%HOMEPATH%\K92F\74715.RVP
%HOMEPATH%\K92F\Z92198.PFF
%HOMEPATH%\K92F\N81669.BOQ
%HOMEPATH%\K92F\G59030.PHG
%HOMEPATH%\K92F\G42849.YUE
%HOMEPATH%\K92F\L61270.AUQ
%HOMEPATH%\K92F\67827.SQD
%HOMEPATH%\K92F\D28583.ZVJ
%HOMEPATH%\K92F\X52530.CZZ
%HOMEPATH%\K92F\H23247.CUH
%HOMEPATH%\K92F\N85675.BIG
%HOMEPATH%\K92F\L86470.MRX
%HOMEPATH%\K92F\T83561.MCK
%HOMEPATH%\K92F\B44083.DWU
%HOMEPATH%\K92F\D58310.XCE
%HOMEPATH%\K92F\A39007.WWU
%HOMEPATH%\K92F\14367.CBH
%HOMEPATH%\K92F\17998.EAB
%HOMEPATH%\K92F\M58912.AHL
%HOMEPATH%\K92F\P53077.JYQ
%HOMEPATH%\K92F\L40627.TZZ
%HOMEPATH%\K92F\D82325.XSS
%HOMEPATH%\K92F\N57579.ZBM
%HOMEPATH%\K92F\G91133.PRK
%HOMEPATH%\K92F\I7530.XWQ
%HOMEPATH%\K92F\8992.YGA
%HOMEPATH%\K92F\Z91140.VWR
%HOMEPATH%\K92F\J1721.KLI
%HOMEPATH%\K92F\T53556.WGE
%HOMEPATH%\K92F\M77876.GOD
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\buttonCenter[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\buttonLeftHighlight[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\buttonCenter[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\buttonRight[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\bgDownloadBarFull[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\language-en[1].js
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\buttonRightHighlight[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\buttonCenterHighlight[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\buttonLeft[1].png
<LS_APPDATA>\Adobe\AIH.250fc648e0afe36479f0787889de54882e80130d\launcher.bundle.partial
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\iconError[1].gif
%APPDATA%\Microsoft\CryptnetUrlCache\Content\2BF68F4714092295550497DD56F57004
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\2BF68F4714092295550497DD56F57004
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\buttonLeft[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\buttonRight[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\buttonLeft[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\buttonLeft[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\bgDownloadBarEmpty[1].png
%APPDATA%\Microsoft\CryptnetUrlCache\Content\398EE64D66758B5715368AA94044B13A
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\398EE64D66758B5715368AA94044B13A
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\index[1].htm
%TEMP%\install_flashplayer11x32.exe
%HOMEPATH%\K92F\P16836.GFM
%HOMEPATH%\K92F\D22063.GGF
%APPDATA%\Microsoft\CryptnetUrlCache\Content\8DFDF057024880D7A081AFBF6D26B92F
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\8DFDF057024880D7A081AFBF6D26B92F
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\default[1].css
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\main-merge[1].js
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\logoAdobe[1].gif
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\language-en[1].js
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\iconComplete[1].gif
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\iconBlank[1].gif
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\bgHeaderError[1].gif
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\iconCompleteError[1].gif
%HOMEPATH%\K92F\25795.GRS
%HOMEPATH%\K92F\23220.RQH
%HOMEPATH%\K92F\25779.RKI
%HOMEPATH%\K92F\J58455.MSS
%HOMEPATH%\K92F\82503.DZM
%HOMEPATH%\K92F\T3435.TZK
%HOMEPATH%\K92F\R89908.EJF
%HOMEPATH%\K92F\F48475.IAJ
%HOMEPATH%\K92F\Y81752.OCV
%HOMEPATH%\K92F\38345.URH
%HOMEPATH%\K92F\85507.FDZ
%HOMEPATH%\K92F\87200.KSM
%HOMEPATH%\K92F\72733.IWS
%HOMEPATH%\K92F\C54475.OFY
%HOMEPATH%\K92F\10728.IDK
%HOMEPATH%\K92F\34058.TZQ
%HOMEPATH%\K92F\48412.VAW
%HOMEPATH%\K92F\G81817.YWA
%HOMEPATH%\K92F\Q15192.QVK
%HOMEPATH%\K92F\52382.WPM
%HOMEPATH%\K92F\R37510.RHJ
%HOMEPATH%\K92F\X75716.IBQ
%HOMEPATH%\K92F\U32102.TXY
%HOMEPATH%\K92F\37036.KOI
%HOMEPATH%\K92F\7933.MFI
%HOMEPATH%\K92F\18883.OHX
%HOMEPATH%\K92F\86863.CBQ
%HOMEPATH%\K92F\S54631.QWO
%HOMEPATH%\K92F\P18513.EDZ
%HOMEPATH%\K92F\44286.ARZ
%HOMEPATH%\K92F\87463.HPS
%HOMEPATH%\K92F\82376.TBY
%HOMEPATH%\K92F\56191.VQY
%HOMEPATH%\K92F\R70803.PWF
%HOMEPATH%\K92F\S89611.BGI
%HOMEPATH%\K92F\1315.MBW
%HOMEPATH%\K92F\33125.DOR
%HOMEPATH%\K92F\I4051.BDK
%HOMEPATH%\K92F\M29836.XQT
%HOMEPATH%\K92F\S17746.FTN
%HOMEPATH%\K92F\S62012.ZDR
%HOMEPATH%\K92F\12737.KON
%HOMEPATH%\K92F\W96757.NCL
%HOMEPATH%\K92F\92514.DXU
%HOMEPATH%\K92F\63458.UTU
%HOMEPATH%\K92F\H46447.YQC
%HOMEPATH%\K92F\Q28135.WXD
%HOMEPATH%\K92F\M70114.QXC
%HOMEPATH%\K92F\15777.ATQ
%HOMEPATH%\K92F\91681.RXE
%HOMEPATH%\K92F\16620.OWL
%HOMEPATH%\K92F\61314.JCS
%HOMEPATH%\K92F\1706.TEP
%HOMEPATH%\K92F\81191.OYC
%HOMEPATH%\K92F\L91855.CJT
%HOMEPATH%\K92F\S56524.GWG
%HOMEPATH%\K92F\57773.KGP
%HOMEPATH%\K92F\W18024.XUW
%HOMEPATH%\K92F\63575.RYY
%HOMEPATH%\K92F\94110.FWY
%HOMEPATH%\K92F\M92825.QHW
%HOMEPATH%\K92F\92042.DWX
%HOMEPATH%\K92F\90339.WHN
%HOMEPATH%\K92F\29053.MVH
%APPDATA%\Microsoft\CryptnetUrlCache\Content\60E31627FDA0A46932B0E5948949F2A5
%APPDATA%\Microsoft\CryptnetUrlCache\MetaData\60E31627FDA0A46932B0E5948949F2A5
%HOMEPATH%\K92F\A78365.CHQ
%HOMEPATH%\K92F\17417.IDB
%HOMEPATH%\K92F\2481.SPT
%HOMEPATH%\K92F\A78043.NQO
%HOMEPATH%\K92F\99372.BOS
%HOMEPATH%\K92F\Z37318.ONM
%HOMEPATH%\K92F\98859.BRI
%HOMEPATH%\K92F\F7189.OKV
%HOMEPATH%\K92F\J64147.UJP
%HOMEPATH%\K92F\96279.MLL
%HOMEPATH%\K92F\M20440.YZQ
%HOMEPATH%\K92F\94350.DXQ
%HOMEPATH%\K92F\L98883.XSM
%HOMEPATH%\K92F\56455.BNC
%HOMEPATH%\K92F\55637.LPX
%HOMEPATH%\K92F\99004.TQD
%HOMEPATH%\K92F\X55644.PUC
%HOMEPATH%\K92F\R17223.CVF
%HOMEPATH%\K92F\Y79320.NZW
%HOMEPATH%\K92F\G40173.DZP
%HOMEPATH%\K92F\79572.GVY
%HOMEPATH%\K92F\Q27326.QKN
%HOMEPATH%\K92F\J65399.SEL
%HOMEPATH%\K92F\13027.BPW
%HOMEPATH%\K92F\I8224.CKA
%HOMEPATH%\K92F\C6363.DKX
%HOMEPATH%\K92F\V38956.GJF
%HOMEPATH%\K92F\X77923.LRM
%HOMEPATH%\K92F\17639.QQT
%HOMEPATH%\K92F\13355.ZIH
%HOMEPATH%\K92F\99935.MUI
%HOMEPATH%\K92F\66516.VQE
%HOMEPATH%\K92F\Q77993.LDK
%HOMEPATH%\K92F\H89072.CTA
%HOMEPATH%\K92F\55839.HXU
%HOMEPATH%\K92F\39731.MOE
%HOMEPATH%\K92F\F6164.DNS
%HOMEPATH%\K92F\31405.PXB
%HOMEPATH%\K92F\92287.FEL
%HOMEPATH%\K92F\T21759.WWS
%HOMEPATH%\K92F\96704.NKC
%HOMEPATH%\K92F\73507.BWH
%HOMEPATH%\K92F\F4447.ZXZ
%HOMEPATH%\K92F\Q33263.BAC
%HOMEPATH%\K92F\R5037.LTK
%HOMEPATH%\K92F\N63753.IXH
%HOMEPATH%\K92F\R21261.SGN
%HOMEPATH%\K92F\B35895.RES
%HOMEPATH%\K92F\V18675.GSN
%HOMEPATH%\K92F\5302.BQQ
%HOMEPATH%\K92F\41969.USA
%HOMEPATH%\K92F\84800.JBB
%HOMEPATH%\K92F\N5079.SRS
%HOMEPATH%\K92F\K24573.QJO
%HOMEPATH%\K92F\R73000.LQG
%HOMEPATH%\K92F\T69543.YLI
%HOMEPATH%\K92F\H34252.RIB
%HOMEPATH%\K92F\70521.MBD
%HOMEPATH%\K92F\G35804.CJF
%HOMEPATH%\K92F\F71569.TAB
%HOMEPATH%\K92F\V83002.SCY
%HOMEPATH%\K92F\2684.NBD
%HOMEPATH%\K92F\B32370.TTW
%HOMEPATH%\K92F\85023.AAS
%HOMEPATH%\K92F\D11875.SQD
%HOMEPATH%\K92F\2323.LMA
%HOMEPATH%\K92F\44068.JFJ
%HOMEPATH%\K92F\T59081.TZW
%HOMEPATH%\K92F\M86656.DQG
%HOMEPATH%\K92F\67459.SST
%HOMEPATH%\K92F\19176.UTF
%HOMEPATH%\K92F\B73941.XXG
%HOMEPATH%\K92F\J38963.CRJ
%HOMEPATH%\K92F\75609.WXN
%HOMEPATH%\K92F\50866.OKF
%HOMEPATH%\K92F\S58839.HHB
%HOMEPATH%\K92F\R54059.YIT
%HOMEPATH%\K92F\23479.HIJ
%HOMEPATH%\K92F\D56365.PME
%HOMEPATH%\K92F\8079.BAJ
%HOMEPATH%\K92F\12705.YNN
%HOMEPATH%\K92F\97454.DSO
%HOMEPATH%\K92F\73536.FKV
%HOMEPATH%\K92F\92249.NVT
%HOMEPATH%\K92F\26704.KTO
%HOMEPATH%\K92F\Q22505.NOD
%HOMEPATH%\K92F\B81126.JPP
%HOMEPATH%\K92F\M74482.UZM
%HOMEPATH%\K92F\9988.KRY
%HOMEPATH%\K92F\I6669.RON
%HOMEPATH%\K92F\A91960.LJN
%HOMEPATH%\K92F\K16187.UUX
%HOMEPATH%\K92F\N3808.LTS
%HOMEPATH%\K92F\70579.VER
%HOMEPATH%\K92F\93652.PWP
%HOMEPATH%\K92F\K88277.GYV
%CommonProgramFiles%\Services\install_flashplayer11x32.exe
%CommonProgramFiles%\Services\flash_check.bat
%HOMEPATH%\K92F\update.exe
%CommonProgramFiles%\Services\flash_player_ax.exe
%HOMEPATH%\K92F\31652.AYV
%HOMEPATH%\K92F\34963.CMZ
%HOMEPATH%\K92F\W81767.EOA
%HOMEPATH%\K92F\O36646.KTF
%HOMEPATH%\K92F\44114.BMY
%HOMEPATH%\K92F\K99508.KLA
%HOMEPATH%\K92F\54940.UZJ
%HOMEPATH%\K92F\1630.UHR
%HOMEPATH%\K92F\S16765.XPO
%HOMEPATH%\K92F\11675.TIL
%HOMEPATH%\K92F\Z85398.ZTX
%HOMEPATH%\K92F\K43551.YBH
%HOMEPATH%\K92F\H91457.FCS
%HOMEPATH%\K92F\C26821.NCR
%HOMEPATH%\K92F\52931.MCN
%HOMEPATH%\K92F\P54114.ZXK
%HOMEPATH%\K92F\N76536.BQB
%HOMEPATH%\K92F\75002.TGN
%HOMEPATH%\K92F\75820.GYA
%HOMEPATH%\K92F\X82489.KDX
%HOMEPATH%\K92F\D63039.BFF
%HOMEPATH%\K92F\25589.PTP
%HOMEPATH%\K92F\22447.ZIW
%HOMEPATH%\K92F\91175.ZSW
%HOMEPATH%\K92F\42137.RKY
%HOMEPATH%\K92F\89021.JSM
%HOMEPATH%\K92F\63823.YWS
%HOMEPATH%\K92F\11828.DCH
%HOMEPATH%\K92F\X29919.ZZF
%HOMEPATH%\K92F\O35071.RIL
%HOMEPATH%\K92F\97446.ABE
%HOMEPATH%\K92F\75708.ZCR
%HOMEPATH%\K92F\G44025.USR
%HOMEPATH%\K92F\M48915.BHC
%HOMEPATH%\K92F\55583.DZC
%HOMEPATH%\K92F\Q71811.HWF
%HOMEPATH%\K92F\78319.GKI
%HOMEPATH%\K92F\84791.OUC
%HOMEPATH%\K92F\42525.ZRB
%HOMEPATH%\K92F\B24542.KLS
%HOMEPATH%\K92F\E49168.UPN
%HOMEPATH%\K92F\53059.PSG
%HOMEPATH%\K92F\Z55816.VPJ
%HOMEPATH%\K92F\64065.YBH
%HOMEPATH%\K92F\11524.KJQ
%HOMEPATH%\K92F\Y27811.KPJ
%HOMEPATH%\K92F\50681.CEL
%HOMEPATH%\K92F\83402.UZH
%HOMEPATH%\K92F\E55505.WDO
%HOMEPATH%\K92F\R64851.IHL
%HOMEPATH%\K92F\E58440.SZR
%HOMEPATH%\K92F\52704.PXA
%HOMEPATH%\K92F\10760.YUC
%HOMEPATH%\K92F\G24014.XKD
%HOMEPATH%\K92F\14329.ECE
%HOMEPATH%\K92F\V10613.DUM
%HOMEPATH%\K92F\96934.IWS
%HOMEPATH%\K92F\B15660.GPH
%HOMEPATH%\K92F\R84418.DRO
%HOMEPATH%\K92F\92383.KQK
%HOMEPATH%\K92F\A87536.IPG
%HOMEPATH%\K92F\E89052.WSM
%HOMEPATH%\K92F\I42398.OYJ
%HOMEPATH%\K92F\D10968.ZGR
%HOMEPATH%\K92F\J54586.ZNL
%HOMEPATH%\K92F\Q93066.XRX
%HOMEPATH%\K92F\C22228.AET
%HOMEPATH%\K92F\J28678.HBX
%HOMEPATH%\K92F\W42239.HXL
%HOMEPATH%\K92F\15339.OPD
%HOMEPATH%\K92F\V5364.ZXL
%HOMEPATH%\K92F\J77579.XCI
%HOMEPATH%\K92F\S31139.XJY
%HOMEPATH%\K92F\65874.OPX
%HOMEPATH%\K92F\96962.UZF
%HOMEPATH%\K92F\94018.GJI
%HOMEPATH%\K92F\31205.WII
%HOMEPATH%\K92F\58123.UME
%HOMEPATH%\K92F\58986.ONK
%HOMEPATH%\K92F\5081.TOY
%HOMEPATH%\K92F\97663.PQE
%HOMEPATH%\K92F\58633.DOS
%HOMEPATH%\K92F\24362.LPD
%HOMEPATH%\K92F\A40316.QHX
%HOMEPATH%\K92F\24059.SVS
%HOMEPATH%\K92F\T81499.KWP
%HOMEPATH%\K92F\M52589.MAM
%HOMEPATH%\K92F\H42105.ADI
%HOMEPATH%\K92F\U94600.FLZ
%HOMEPATH%\K92F\X10270.LZC
%HOMEPATH%\K92F\R41650.LVD
%HOMEPATH%\K92F\C38687.CRI
%HOMEPATH%\K92F\U25724.ENM
%HOMEPATH%\K92F\30683.XUK
%HOMEPATH%\K92F\W68348.YVN
%HOMEPATH%\K92F\K36973.AOE
%HOMEPATH%\K92F\A50713.RQK
%HOMEPATH%\K92F\I17894.YDT
%HOMEPATH%\K92F\P90638.AEW
%HOMEPATH%\K92F\C84431.RZB
%HOMEPATH%\K92F\F9516.LEB
%HOMEPATH%\K92F\96930.AMW
%HOMEPATH%\K92F\18023.NYU
%HOMEPATH%\K92F\33175.JFP
%HOMEPATH%\K92F\Y54283.JXL
%HOMEPATH%\K92F\T91409.HCQ
%HOMEPATH%\K92F\49593.PCP
%HOMEPATH%\K92F\F39495.GSY
%HOMEPATH%\K92F\63924.FME
%HOMEPATH%\K92F\P17102.WXP
%HOMEPATH%\K92F\59035.TBW
%HOMEPATH%\K92F\X17733.HVP
%HOMEPATH%\K92F\E99221.CTG
%HOMEPATH%\K92F\77030.IUF
%HOMEPATH%\K92F\A61888.IXE
%HOMEPATH%\K92F\93941.THZ
%HOMEPATH%\K92F\30185.RFV
%HOMEPATH%\K92F\I63375.DJF
%HOMEPATH%\K92F\49503.TMX
%HOMEPATH%\K92F\46071.JNI
%HOMEPATH%\K92F\94046.PNY
%HOMEPATH%\K92F\U88677.JJZ
%HOMEPATH%\K92F\14778.NIX
%HOMEPATH%\K92F\45965.CUY
%HOMEPATH%\K92F\26313.SQC
%HOMEPATH%\K92F\F78640.ZTD
%HOMEPATH%\K92F\44917.KIZ
%HOMEPATH%\K92F\D51173.AIN
%HOMEPATH%\K92F\A62348.SVZ
%HOMEPATH%\K92F\D6326.UGJ
%HOMEPATH%\K92F\Z55088.DCI
%HOMEPATH%\K92F\55727.HWJ
%HOMEPATH%\K92F\L45114.GBX
%HOMEPATH%\K92F\67536.UCG
%HOMEPATH%\K92F\76362.RCM
%HOMEPATH%\K92F\55135.LNA
%HOMEPATH%\K92F\F80571.YNB
%HOMEPATH%\K92F\G70614.HMX
%HOMEPATH%\K92F\50664.WKQ
%HOMEPATH%\K92F\R23510.VJC
%HOMEPATH%\K92F\S78016.KCJ
%HOMEPATH%\K92F\30644.XKD
%HOMEPATH%\K92F\11144.UUU
%HOMEPATH%\K92F\36668.TZW
%HOMEPATH%\K92F\75133.GUF
%HOMEPATH%\K92F\G84538.POU
%HOMEPATH%\K92F\17327.GUO
%HOMEPATH%\K92F\70557.YFT
%HOMEPATH%\K92F\17310.GIQ
%HOMEPATH%\K92F\T35178.XNJ
%HOMEPATH%\K92F\18551.RDQ
%HOMEPATH%\K92F\64874.TIM
%HOMEPATH%\K92F\H75003.DDI
%HOMEPATH%\K92F\7631.GZD
%HOMEPATH%\K92F\L59345.XPK
%HOMEPATH%\K92F\37277.SSJ
%HOMEPATH%\K92F\A96258.WHI
%HOMEPATH%\K92F\55100.EIM
%HOMEPATH%\K92F\K60289.GIG
%HOMEPATH%\K92F\E89631.FRR
%HOMEPATH%\K92F\U83065.YIO
%HOMEPATH%\K92F\A60789.DAD
%HOMEPATH%\K92F\58194.BQV
%HOMEPATH%\K92F\5107.MXT
%HOMEPATH%\K92F\W32077.JCU
%HOMEPATH%\K92F\G82641.LXV
%HOMEPATH%\K92F\72023.UAV
%HOMEPATH%\K92F\50817.CTF
%HOMEPATH%\K92F\I81678.MSU
%HOMEPATH%\K92F\90215.DHW
%HOMEPATH%\K92F\A66683.PBN
%HOMEPATH%\K92F\51358.EGC
%HOMEPATH%\K92F\14670.WCS
%HOMEPATH%\K92F\8589.IKJ
%HOMEPATH%\K92F\57308.DNQ
%HOMEPATH%\K92F\Y50073.QRD
%HOMEPATH%\K92F\H37551.KUJ
%HOMEPATH%\K92F\86758.WOY
%HOMEPATH%\K92F\K93402.UNH
%HOMEPATH%\K92F\47594.GSP
%HOMEPATH%\K92F\H31292.BHX
%HOMEPATH%\K92F\Y16666.CWK
%HOMEPATH%\K92F\43030.XUJ
%HOMEPATH%\K92F\K92774.HUF
%HOMEPATH%\K92F\50956.EYP

Удаляет следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\buttonRight[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\buttonLeft[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\buttonLeft[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\buttonRight[1].png
%CommonProgramFiles%\Services\install_flashplayer11x32.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\buttonCenter[1].png
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\buttonLeft[1].png

Перемещает следующие файлы:

<LS_APPDATA>\Adobe\AIH.250fc648e0afe36479f0787889de54882e80130d\launcher.bundle.partial в <LS_APPDATA>\Adobe\AIH.250fc648e0afe36479f0787889de54882e80130d\launcher.bundle

Сетевая активность:

Подключается к:

'localhost':1048
'localhost':1049
'www.download.windowsupdate.com':80
'localhost':1053
'localhost':1042
'crl.verisign.com':80
'wp#d':80
'localhost':1043
'ev######.ws.symantec.com':80

TCP:

Запросы HTTP GET:

ev######.ws.symantec.com/evcs.crl
www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab
wp#d/wpad.dat
crl.verisign.com/pca3.crl
crl.verisign.com/pca3-g5.crl

UDP:

DNS ASK ev######.ws.symantec.com
DNS ASK www.download.windowsupdate.com
DNS ASK wp#d
DNS ASK crl.verisign.com

Другое:

Ищет следующие окна:

ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'
ClassName: 'Shell_TrayWnd' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней