Техническая информация
Вредоносные функции:
Запускает на исполнение:
- '%ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe'
- '<SYSTEM32>\taskkill.exe' /f /im DRWUI.exe
- '%ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRW.exe'
- '%CommonProgramFiles%\~xcxhpgm.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%TEMP%\is-HUFKU.tmp\~xcxhpgm.tmp' /SL5="$100E0,14282817,546816,%CommonProgramFiles%\~xcxhpgm.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Изменения в файловой системе:
Создает следующие файлы:
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ASI39.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0UM9P.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0RC9B.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-J0RL3.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-6DITN.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-3IEFB.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-S9MVE.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-N5RAI.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-IVUG6.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-MCN9T.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-R85VR.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-MMOBS.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-7LFFH.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-BMK69.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-4VE3J.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-FSBMR.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-HAOV1.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-2MSHK.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-072CA.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-MJ3TK.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-QGHSP.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-RMAEE.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-07412.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-AD6H2.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-EE3AE.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-NI9JJ.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-Q3T8I.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-7S56U.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-32T5N.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-8Q9OI.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-K0PFH.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-AMJRQ.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-EMCQI.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-E9EHJ.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-3UFUJ.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-S9D7E.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-GKURR.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\unins000.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\unins000.msg
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.ini
- %TEMP%\is-HUFKU.tmp\install_xx_.tmp
- %ALLUSERSPROFILE%\Desktop\EaseUS Data Recovery Wizard.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\EaseUS Data Recovery Wizard\EaseUS Data Recovery Wizard.lnk
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-E0OV6.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\EaseUS Data Recovery Wizard\ Visit EaseUS.url
- %ALLUSERSPROFILE%\Start Menu\Programs\EaseUS Data Recovery Wizard\Uninstall EaseUS Data Recovery Wizard.lnk
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWLog.log
- %TEMP%\~DFF335.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Upgrade.ini
- %HOMEPATH%\Local Settings\<INETFILES>\Content.IE5\KHMHGZ4F\drw[1].ini
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DefaultLog.txt
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\easeusue.log
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\__O_
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DrwUI.log
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Config.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-2P7MQ.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-4BR82.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-L8K8Q.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-A05RR.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-AQPSF.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-UERB7.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-IVJBO.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-HGSQQ.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-FH1VB.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-DJCVK.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-5P7ML.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-3GK8T.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-UA3H6.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-JEUCM.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-OOJFP.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-PBMLI.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-017MU.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-EMIBD.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0P630.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-VTJ52.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ONSEQ.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-OU7UN.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-5DS8F.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-6DAF1.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-N2N63.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-A7GC9.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-UJA8A.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-20AIE.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-SUIPT.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-T43AH.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-8CH8J.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-5OL3V.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-92MGA.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-731RG.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-9O18A.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-LB7E4.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-1NNBO.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-IGJ7I.tmp
- %TEMP%\is-1ELO5.tmp\BrowseWarning.bmp
- %TEMP%\is-1ELO5.tmp\libcurl.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-S9J30.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-TJ328.tmp
- %TEMP%\is-1ELO5.tmp\uexper.dll
- %CommonProgramFiles%\~xcxhpgm.tmp
- %TEMP%\aut1.tmp
- %TEMP%\is-1ELO5.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-HUFKU.tmp\~xcxhpgm.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-NIINO.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-UBK6F.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-3OA2S.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-IUMKC.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-DQS9L.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-N7N98.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-FIEE0.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-RP83U.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ABC6L.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-N0T11.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-2VKQV.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-LELKU.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-FK5GL.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-K1G9Q.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-VQLAS.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-7MFB6.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-NAQ0K.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-ABPTK.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-D00GQ.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-UNAU9.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-HLTPM.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-U27RO.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-VPLFK.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-UDITB.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-8KAPK.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-IVDEB.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-7GRD4.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-NK7MA.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-CUK22.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-BE99U.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-BTG6K.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-2DK4U.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-PSU9B.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-48CUN.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-D1OQT.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-6FOMS.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-I80R1.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-J0ORB.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-7SQUU.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-SKHBC.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-OFIKK.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-V346G.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-OP7RO.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-L0EF8.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-HUHNF.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-IGP0G.tmp
Присваивает атрибут 'скрытый' для следующих файлов:
- %CommonProgramFiles%\~xcxhpgm.tmp
Удаляет следующие файлы:
- %TEMP%\is-1ELO5.tmp\libcurl.dll
- %TEMP%\is-1ELO5.tmp\BrowseWarning.bmp
- %TEMP%\is-1ELO5.tmp\uexper.dll
- %TEMP%\is-HUFKU.tmp\~xcxhpgm.tmp
- %TEMP%\is-1ELO5.tmp\_isetup\_shfoldr.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\libcurl.dll
- %TEMP%\aut1.tmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\__O_
- %TEMP%\is-HUFKU.tmp\install_xx_.tmp
Перемещает следующие файлы:
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-EMCQI.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\slider_normal.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-8Q9OI.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\slider_press.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-32T5N.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\step_1_hover.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-S9D7E.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\slider_hover.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-3UFUJ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_type_32.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-E9EHJ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\LostFile.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-GKURR.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\preview.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-AMJRQ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\step_1_hover1.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-IVUG6.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\view_preview.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-N5RAI.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\view_row.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-6DITN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRW.exe
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-3IEFB.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\view_list.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-K0PFH.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\step_2_hover.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-072CA.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\step_2_hover1.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-S9MVE.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\tipBk.jpg
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-U27RO.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_recover_disable.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-HLTPM.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_recover_hover.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-NI9JJ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_recover_normal.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-D00GQ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_next_press.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-IVDEB.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_next_disable.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-VPLFK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_next_hover.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-UNAU9.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_next_normal.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-EE3AE.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_recover_press.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-MJ3TK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_time.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-07412.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_time_32.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-RMAEE.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_type.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-QGHSP.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_scan_press.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-7S56U.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_scan_disable.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-Q3T8I.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_scan_hover.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-AD6H2.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_scan_normal.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0UM9P.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWReport.exe
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-AQPSF.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\msvcm90.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-A05RR.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\msvcp90.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-017MU.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\msvcr90.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-4BR82.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\mfcm90u.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-FH1VB.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\mfc90.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-UERB7.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\mfc90u.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-L8K8Q.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\mfcm90.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-PBMLI.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\PubLog.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-5P7ML.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe.manifest
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-JEUCM.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Microsoft.VC90.CRT.manifest
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-UA3H6.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Microsoft.VC90.MFC.manifest
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-3GK8T.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWReport.exe.manifest
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0P630.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\ROBOEX32.DLL
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-EMIBD.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-OOJFP.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRW.exe.manifest
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-4VE3J.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\EUEXFATSearchDLL.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-2MSHK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\EUEXT2SearchDLL.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-HAOV1.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\EUFATSearchDLL.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-FSBMR.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\dbghelp.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ASI39.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWUI.exe
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-J0RL3.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\ureport.exe
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-0RC9B.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\AutoUpdate.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-BMK69.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\EUHFSSearchDLL.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-HGSQQ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\INETWH32.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-IVJBO.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Japanese.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-DJCVK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\libcurl.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-MMOBS.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\GDIPLUS.DLL
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-R85VR.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\EUNTFSSearchDLL.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-MCN9T.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\EURAWSearchDLL.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-7LFFH.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\gc.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-5DS8F.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Italian.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-OU7UN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Italian.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-9O18A.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Japanese.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-VTJ52.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\idfield
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-UJA8A.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\FileFilter.xml
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-6DAF1.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\French.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ONSEQ.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\French.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-731RG.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Japanese.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-SUIPT.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseDanish.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-5OL3V.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseDeutsch.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-8CH8J.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseDutch.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-T43AH.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseChineseTrad.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-1NNBO.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\license.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-LB7E4.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseBrazilianPortuguese.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-92MGA.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseChinese.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-ABC6L.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\ChineseTrad.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-RP83U.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Config.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-DQS9L.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Danish.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-N7N98.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\ChineseTrad.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-TJ328.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\unins000.exe
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-S9J30.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Chinese.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-FIEE0.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Chinese.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-UBK6F.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Danish.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-A7GC9.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Dutch.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-N2N63.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\English.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-20AIE.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\English.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-IGJ7I.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Dutch.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-NIINO.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Deutsch.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-IUMKC.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Deutsch.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-3OA2S.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\DRWReport.ini
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-D1OQT.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseFrench.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-VQLAS.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\FileSelCtrl.xml
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-ABPTK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\FileType.xml
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-NAQ0K.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\filter_bg.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-7MFB6.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\CheckState.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-OFIKK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\Arrange.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-SKHBC.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\bestfit.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-NK7MA.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\button-preview.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-K1G9Q.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_back_disable.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-8KAPK.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_deep_scan_hover.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-UDITB.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_deep_scan_normal.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-7GRD4.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_deep_scan_press.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-LELKU.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_deep_scan_disable.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-2VKQV.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_back_hover.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-N0T11.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_back_normal.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-FK5GL.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\icon_back_press.png
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-BE99U.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\OfficeViewer.exe
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-CUK22.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\OfficeViewer15.exe
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-2DK4U.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Portuguesa(Br).dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-PSU9B.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseSwedish.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-48CUN.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseItalian.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-I80R1.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseJapanese.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-6FOMS.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\licenseSpanish.rtf
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-BTG6K.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Portuguesa(Br).data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-V346G.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Svenska.data
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-7SQUU.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.ini
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\is-J0ORB.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource\actualsize.bmp
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-HUHNF.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Svenska.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-L0EF8.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Resource.xml
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-OP7RO.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Spanish.dat
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\is-IGP0G.tmp в %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\Spanish.data
Подменяет следующие файлы:
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\uexper.dll
- %ProgramFiles%\EaseUS\EaseUS Data Recovery Wizard\libcurl.dll
Сетевая активность:
Подключается к:
- 'www.ea##us.com':80
- 'localhost':1038
- 'tr###.easeus.com':80
TCP:
Запросы HTTP GET:
- http://www.ea##us.com/update/drw_eng/drw.ini?ti#####################
Запросы HTTP POST:
- http://tr###.easeus.com/product/index.php/?a=#############################
UDP:
- DNS ASK www.ea##us.com
- DNS ASK tr###.easeus.com
Другое:
Ищет следующие окна:
- ClassName: '' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
