Техническая информация
- '<SYSTEM32>\regsvr32.exe' /n /s /i:"" hmKbeRQa.dll
- iexplore.exe
- firefox.exe
- chrome.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\qatsabdzs@ogdmagkoo.edu\bootstrap.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\qatsabdzs@ogdmagkoo.edu\chrome.manifest
- %TEMP%\7zS1.tmp\qatsabdzs@ogdmagkoo.edu\install.rdf
- %TEMP%\7zS1.tmp\a2vMqPZ6.tlb
- %TEMP%\7zS1.tmp\eboponadjkgalagfngohgieoidedpmng\manifest.json
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\qatsabdzs@ogdmagkoo.edu\content\bg.js
- %ALLUSERSPROFILE%\Application Data\CostMin\a2vMqPZ6.tlb
- %ALLUSERSPROFILE%\Application Data\CostMin\hmKbeRQa.dll
- %ALLUSERSPROFILE%\Application Data\CostMin\settings.ini
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\qatsabdzs@ogdmagkoo.edu\install.rdf
- %ALLUSERSPROFILE%\Application Data\CostMin\a2vMqPZ6.dll
- %TEMP%\7zS1.tmp\qatsabdzs@ogdmagkoo.edu\bootstrap.js
- %TEMP%\7zS1.tmp\eboponadjkgalagfngohgieoidedpmng\content.js
- %TEMP%\7zS1.tmp\qatsabdzs@ogdmagkoo.edu\content\bg.js
- %TEMP%\7zS1.tmp\qatsabdzs@ogdmagkoo.edu\chrome.manifest
- %TEMP%\7zS1.tmp\eboponadjkgalagfngohgieoidedpmng\background.html
- %TEMP%\7zS1.tmp\eboponadjkgalagfngohgieoidedpmng\IgFMRDQZl.js
- %TEMP%\7zS1.tmp\a2vMqPZ6.dll
- %TEMP%\7zS1.tmp\hmKbeRQa.dll
- %TEMP%\7zS1.tmp\settings.ini
- %TEMP%\7zS1.tmp\eboponadjkgalagfngohgieoidedpmng\lsdb.js
- %TEMP%\7zS1.tmp\eboponadjkgalagfngohgieoidedpmng\sqlite.js