Trojan.DownLoader24.38643

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '00AE8B982AA3' = '"%APPDATA%\8B982AA3.exe"'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '8B982AA3' = '"%APPDATA%\8B982AA3.exe"'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '00AE8B982AA3' = '"<Полный путь к файлу>"'

Создает или изменяет следующие файлы:

%HOMEPATH%\Start Menu\Programs\Startup\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT

Создает следующие файлы на съемном носителе:

<Имя диска съемного носителя>:\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT

Вредоносные функции:

Запускает на исполнение:

'%APPDATA%\8B982AA3.exe'

Изменения в файловой системе:

Создает следующие файлы:

<STUBS_DIR>\B9B55CB94B023F82D036D0714B15185E.MOLE
<STUBS_DIR>\A2A8FC460AA33234CBB5A96B0AB60B10.MOLE
<STUBS_DIR>\297FC9503D988D88466D7A943DAB6664.MOLE
<STUBS_DIR>\3F6DA3C51CB5B8705728DC731CC8914C.MOLE
<STUBS_DIR>\65AE19FD2B1C6333EE0740F12B2F3C0F.MOLE
<STUBS_DIR>\BAEB043025AE2232F751428825C0FB0E.MOLE
<STUBS_DIR>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\360tray\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ageofconan\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\7976EA6C38E03AB8A8279D4A38F31394.MOLE
<STUBS_DIR>\D3A25EC022EF0D005917C0562301E5DC.MOLE
<STUBS_DIR>\4F2243D40F45F414E7EFBCA60F58CCF0.MOLE
C:\Far2\PluginSDK\Headers.pas\0A0B50FE2E5E9ECDAAA8AB6A2E716A79.MOLE
C:\Far2\PluginSDK\Headers.pas\BEC9619627B42BD0B6A5724D27C6F77C.MOLE
C:\Far2\PluginSDK\Headers.pas\2D033DCC183A926C9D45B80E184D5E18.MOLE
C:\Far2\PluginSDK\Headers.c\A042520934282412A82DE267343AEFBE.MOLE
C:\Far2\PluginSDK\Headers.c\1A2A598005F94C45182FF080060C17F1.MOLE
C:\Far2\PluginSDK\Headers.c\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\RECYCLER\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\4D9EDACE211BDC175D3810E6212EB4F3.MOLE
C:\Far2\PluginSDK\Headers.pas\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Muldrop\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%ProgramFiles%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bc_loader\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bdagent\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bdss\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bankcl\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\BBClient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\cbank\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\cbmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\cbsmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bdsubmit\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bk\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\cabalmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ashAvSrv\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\avgcc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVGCC32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\aion\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ash\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ashAvast\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVPCC\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVPM\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVSYNMGR\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVGCTRL\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVP\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVP32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\FTP\lib\5DE98546401E8852CCCD5F0A40314D66.MOLE
C:\Far2\Plugins\FTP\lib\0326762E3B295120C1A96F3A3B3C1634.MOLE
C:\Far2\Plugins\FTP\lib\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\FTP\475F495C3E382CE12B5D39543E4AF88D.MOLE
C:\Far2\Plugins\FTP\C9AF7EF82AF53DD2B00DDEC42B08097E.MOLE
C:\Far2\Plugins\FTP\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\MacroView\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Network\F958E6062BE520F2BD1734A62BF7EC9E.MOLE
C:\Far2\Plugins\Network\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\HlfViewer\B265280732B3FCEFD6B6527D32C6C89B.MOLE
C:\Far2\Plugins\HlfViewer\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\MacroView\F9A98620243440403179442524470BEC.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\5193A9363FCF3A5C89FEE4493FE1F8D8.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\FarCmds\EB15126A1D1E64F2CB550B211D31309E.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\16927D0E3D7F972A1058949F3D9255A6.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\998928132118823A54BFA521212B40B6.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\396686741B7E60B0E6EEC00F1B911F2C.MOLE
C:\Far2\Plugins\FTP\C1C74D2C3554B874760B793335678420.MOLE
C:\Far2\Plugins\FTP\DA90E7E04217C0A85EA988DC422A8C54.MOLE
C:\Far2\Plugins\FTP\583B44692C24D4176219AA292C379FC3.MOLE
C:\Far2\Plugins\FarCmds\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\FileCase\07E5252605BDAB3C22BB4D3E05D076E8.MOLE
C:\Far2\Plugins\FileCase\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\packages\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\putty\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\putty\charset\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\filezilla\misc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\forms\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\lib\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\windows\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\PluginSDK\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\PluginSDK\Headers.c\298730961551CE642FDADC0515649A10.MOLE
C:\Far2\Plugins\WinSCP\putty\windows\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\release\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\resource\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\TmpPanel\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\components\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ProcList\E95584B91A841399C3630C1D1A96DF45.MOLE
C:\Far2\Plugins\ProcList\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\TmpPanel\8CA7D6D00A30C58830C9BD3E0A439134.MOLE
C:\Far2\Plugins\WinSCP\far\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\fari\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\filezilla\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\console\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\core\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\dragext\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\pidgin\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\putty\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\qip\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\oncbcli\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\opera\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\outpost\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\safari\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\sgbclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\skype\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Ragexe\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\RagFree\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\rclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\miranda32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\mpftray\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\msn6\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\maplestory\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\MCAGENT\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Mir3Game\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\nod\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\nod32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ntvdm\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\msnmsgr\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\NAVAPW32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\netxray\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\wsm\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\YahooMessenger\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ybclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\winbaram\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\woool\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\wow\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ZZ__cd75efb816b2cc__\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\__cd75efb816b2cc__\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%WINDIR%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\zapro\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\zlclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ZONEALARM\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\sro_client\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\startclient7\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\tiny\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\smc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\so3d\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\spidernt\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\UniStream\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\wclnt\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\webmoney\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\translink\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\trillian\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\TwelveSky2\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ecmd\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\egni\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ekrn\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\drweb386\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Drwebupw\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Drwebwcl\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\firefox\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\fsav\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\fsav32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\elbank\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\elementclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\el_cli\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\clbank\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\client7\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\clmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ccapp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\chrome\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ClamWin\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\dnf\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\drweb\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Drweb32w\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\clntw32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\contactNG\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\dekaron\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ISClient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\java\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\javaw\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\InphaseNXD\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\intpro\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\iscc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\loadmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\lotroclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\magent\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\kb_cli\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\l2\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\lin\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ge\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\googletalk\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\GUARD\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\fsavaui\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\fsavgui\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\gc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ICQ\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\iexplore\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\inbank-start-ff\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\GVOnline\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\gw\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\httplook\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%APPDATA%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Cookies\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\Temp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<LS_APPDATA>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\History\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Desktop\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Favorites\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Favorites\Links\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\Temp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\History\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\2D875D870A7E9FA91870C0C90A915E25.MOLE
C:\Documents and Settings\NetworkService\Local Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\History\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Cookies\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Start Menu\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Start Menu\Programs\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Start Menu\Programs\Accessories\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\PrintHood\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Recent\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\SendTo\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Templates\BC86407D041E4DD66BF157D704311982.MOLE
%HOMEPATH%\Templates\A5C5CD8E3FEDD924071CE5F54000A4D0.MOLE
%HOMEPATH%\Templates\48BAA31025604CEDFB6B4A5025731899.MOLE
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Templates\A9C8881B17D219275CD388F917E4E4D3.MOLE
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%TEMP%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\<INETFILES>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\History\History.IE5\C51451560BC07A5CC1EE7D020BD338D8.MOLE
%HOMEPATH%\Local Settings\History\History.IE5\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\E0B4E8D8190FFA64D38FFEAC1922B248.MOLE
%HOMEPATH%\My Documents\My Pictures\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\My Documents\My Received Files\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\NetHood\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\My Documents\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\My Documents\Downloads\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\My Documents\My Music\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\History\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Cookies\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Desktop\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Favorites\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\My Documents\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\NetHood\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\541F79803640B56080161C18365373DC.MOLE
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\Temp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\4788CD58344B3EA675E3CF78345E1E1A.MOLE
C:\8FFD2F44122C3F0E17C19BA2123F1E82.MOLE
C:\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%APPDATA%\26E14BA00B70A5D0AE4EBAD33D3416B0.MOLE
%APPDATA%\8B982AA3.exe
%APPDATA%\8B982AA3.exe:Zone.Identifier
C:\Documents and Settings\Default User\A41EDD712F076BF302BCE3012F1A3E37.MOLE
C:\Documents and Settings\Default User\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<Текущая директория>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%ALLUSERSPROFILE%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Templates\487C26E63E0FB3DAC2889A913E227F86.MOLE
C:\Documents and Settings\Default User\Templates\6BCF34C206B555BC22A20C0B06C82168.MOLE
C:\Documents and Settings\Default User\Templates\4489330127141C6CB0AA66712726E818.MOLE
C:\Documents and Settings\Default User\Templates\6FEA71A006BA731006952DBC06CD3EBC.MOLE
C:\Documents and Settings\Default User\Templates\766BB39330DC0F5C13E10C1330EEDB08.MOLE
C:\Documents and Settings\Default User\Templates\166629DE1E0BC346AB475F2F1E1E8EF2.MOLE
C:\Documents and Settings\LocalService\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Cookies\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Templates\1F37E7A138229299F58A8D4938355E45.MOLE
C:\Documents and Settings\Default User\Templates\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\PrintHood\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Recent\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\SendTo\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Templates\C2936ECC2A281926E0987C622A3AE4D2.MOLE
C:\Documents and Settings\Default User\Templates\0BAB0B8801D33AF0EF2820E601E6069C.MOLE
C:\Documents and Settings\Default User\Templates\CB33F6EA29021EEF66DB0FC22914EA9B.MOLE
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrd\CC641B6D0D6BEB74E36993830D7EB088.MOLE
C:\Far2\Plugins\Colorer\hrd\EDB205E0238EE0EA26ADAEB023A1A5FE.MOLE
C:\Far2\Plugins\Colorer\hrd\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrc\auto\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrc\auto\types\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrd\D4668197356A69479A7235CB357D2E5B.MOLE
C:\Far2\Plugins\Compare\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\DrawLine\196348870D11D10B85508CCD0D249CB7.MOLE
C:\Far2\Plugins\DrawLine\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrd\console\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrd\console\contrib\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Compare\69A266B82646FC4802072DFF2659C7F4.MOLE
C:\Far2\Plugins\AutoWrap\8ABDEB7A134FB09DD2D4EC3213627C49.MOLE
C:\Far2\Plugins\AutoWrap\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Brackets\7F2A100B3D9C30806CCA65173DAEFC2C.MOLE
C:\Far2\Plugins\Align\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\arclite\D536A0292617BF107DBEC0C7262A8ABC.MOLE
C:\Far2\Plugins\arclite\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\bin\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrc\EF9259C824815E1030FE423124942324.MOLE
C:\Far2\Plugins\Colorer\hrc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Brackets\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\77529DB8086FED30A9A094BD0882B8DC.MOLE
C:\Far2\Plugins\Colorer\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\sources\F8C6FE99390FE1CB104CAD173922A6DF.MOLE
C:\Far2\Plugins\ExtSearch\sources\18DB08580F82C170314C2E2D0F958684.MOLE
C:\Far2\Plugins\ExtSearch\sources\F07F70FB1A1310D4B4D6FF851A25D5E8.MOLE
C:\Far2\Plugins\ExtSearch\sources\4A84C26212A9E0A247CBEEF712BCA5B6.MOLE
C:\Far2\Plugins\ExtSearch\sources\E32A57421317B355782B7ACA132A7869.MOLE
C:\Far2\Plugins\ExtSearch\sources\08DB97DF3680825C26B67D0136934770.MOLE
C:\Far2\Plugins\ExtSearch\sources\E307DB4F2D57BF67EEC5E2DB2D6A847B.MOLE
C:\Far2\Plugins\ExtSearch\sources\A05DFD4046960200EF8E702446A8C714.MOLE
C:\Far2\Plugins\ExtSearch\sources\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\sources\2E36D64438AFD11099F7254938C29624.MOLE
C:\Far2\Plugins\ExtSearch\sources\788F86904889C41E42D5F930489C8932.MOLE
C:\Far2\Plugins\ExtSearch\sources\7926A1BC086D19806DA69036087FDE94.MOLE
C:\Far2\Plugins\EMenu\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\doc\B72C9B3E3F781FF0CAD716FB3F8AE504.MOLE
C:\Far2\Plugins\EditCase\268101D64081687DC9926F7640943429.MOLE
C:\Far2\Plugins\EditCase\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\EMenu\4EDEA10C38DA413CF567CFD138ED0CE8.MOLE
C:\Far2\Plugins\ExtSearch\doc\3CB14EDA295380724885A25A29664586.MOLE
C:\Far2\Plugins\ExtSearch\doc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\keys\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\doc\591724AD2F0476F4A892AA392F173C08.MOLE
C:\Far2\Plugins\ExtSearch\doc\D15121FA2268128AC47C57C7227AD79E.MOLE
C:\Far2\Plugins\ExtSearch\doc\E2BA6C7823736C502F62561223863164.MOLE
C:\Far2\Addons\Colors\928C2A6E35D76777E2937E8235EA3323.MOLE
C:\Far2\Addons\Colors\BC3C815611B0E9DCDBD09EA311C3B588.MOLE
C:\Far2\Addons\Colors\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\B35CD1EE47E413556AB84C9A47F6E599.MOLE
C:\Far2\Addons\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\Colors\Default Highlighting\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\Macros\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\SetUp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\Colors\Custom Highlighting\27972EB40E2A40A865C0B33C0E3D05BC.MOLE
C:\Far2\Addons\Colors\Custom Highlighting\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\Colors\Default Highlighting\8F19BF5A03250C7A74CCDDFA0337D18E.MOLE
%HOMEPATH%\Templates\3EB55DD02854F90EABD503882867C4BA.MOLE
%HOMEPATH%\Templates\4D6A20F84139C4C0BF28C2FF414C906C.MOLE
%HOMEPATH%\Templates\AA56358B409A5DF945E9F6B540AD29A5.MOLE
%HOMEPATH%\Templates\E60DCD883D32296717C235683D44F513.MOLE
%HOMEPATH%\Templates\0EB539F828808BB23EF6EE2C2893575E.MOLE
%HOMEPATH%\Templates\8159D086423A4B22165A5D51424D16CE.MOLE
C:\Far2\2A3F67644E5D638215CB903E4E703C5E.MOLE
C:\Far2\990CB45C075003F9DD7588840762DCD5.MOLE
C:\Far2\16FB1F4E3C2157C4152C52693C3430A0.MOLE
%HOMEPATH%\Templates\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\439CC8EB1840B0B4384962F718538990.MOLE
C:\Far2\9FD8D3003C98ECDCA8340B003CABC5B8.MOLE
C:\Far2\Documentation\rus\6DE1A0923C9FD5C6224F9ABD3CB2A172.MOLE
C:\Far2\Documentation\rus\F913B91A097B05D0A03217BA098DD17C.MOLE
C:\Far2\Documentation\rus\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\rus\DBC3E54C2A56ACC65D49C44C2A697872.MOLE
C:\Far2\Documentation\rus\2EC8E12D1676412378187AC516890CCF.MOLE
C:\Far2\Documentation\rus\2085F36C24C2053691BD888424D4D0E2.MOLE
C:\Far2\Plugins\7-Zip\53203E7A11046E7CF7B2632511173A28.MOLE
C:\Far2\Plugins\7-Zip\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Align\C77308D22CDE3D7BC4AA77322CF10927.MOLE
C:\Far2\Encyclopedia\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\FExcept\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\eng\DD821B400092FE28E7F7A2E000A5C9D4.MOLE
C:\Far2\Documentation\eng\D3C42DD82F6E8D44ADACEBD62F8158F0.MOLE
C:\Far2\Addons\Shell\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\XLat\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\XLat\Russian\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\eng\29D1BB880A06182C925CEA0E0A18E3D8.MOLE
C:\Far2\Documentation\eng\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\rus\4B4F11DA3E2328FE4388C0523E35F4AA.MOLE
C:\Far2\Documentation\eng\DF7B37661E04220A60BE91951E16EDB6.MOLE
C:\Far2\Documentation\eng\FA7193D60350677062B98FE70363331C.MOLE
C:\Far2\Documentation\eng\FDB846F025D8B9D49DD16B3C25EB8580.MOLE

Сетевая активность:

Подключается к:

'21#.#7.254.187':80

TCP:

Запросы HTTP POST:

http://21#.#7.254.187/scripts/superfish/js/supersubs.php

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней