Trojan.DownLoader24.40005

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '00AE8B982AA3' = '"%APPDATA%\8B982AA3.exe"'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '8B982AA3' = '"%APPDATA%\8B982AA3.exe"'
[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] '00AE8B982AA3' = '"<Полный путь к файлу>"'

Создает или изменяет следующие файлы:

%HOMEPATH%\Start Menu\Programs\Startup\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT

Создает следующие файлы на съемном носителе:

<Имя диска съемного носителя>:\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT

Вредоносные функции:

Запускает на исполнение:

'%APPDATA%\8B982AA3.exe'

Изменения в файловой системе:

Создает следующие файлы:

<STUBS_DIR>\6BE53D97210004023D6A291D2112DCAA.MOLE
<STUBS_DIR>\31DAFB6A1BE38F2EE3D7EE8D1BF667D6.MOLE
<STUBS_DIR>\0741CA522020B76824A861D220339010.MOLE
<STUBS_DIR>\9C3C17FF163B2622804DECE3164DFECA.MOLE
<STUBS_DIR>\75B196D12718EDFDC6EAC239272BC6A5.MOLE
<STUBS_DIR>\5F0F8AAE08F2D50F3643092E0905ADB7.MOLE
<STUBS_DIR>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\360tray\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ageofconan\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\05AF39E414CDAAF8D4608BBF14E083A0.MOLE
<STUBS_DIR>\2203332145C3B2CB8EC311B545D68B73.MOLE
<STUBS_DIR>\2DF63DB414D3149E0568B34A14E5ED46.MOLE
C:\Far2\PluginSDK\Headers.pas\9F7E26B011122A3E4E1113F01124F5B6.MOLE
C:\Far2\PluginSDK\Headers.pas\91560FBB41783E796707B43D418B09F1.MOLE
C:\Far2\PluginSDK\Headers.pas\09AC516835326AD0A9D0F6A335453648.MOLE
C:\Far2\PluginSDK\Headers.c\9DA6B3FF0811457B7CD1CEFF082410F3.MOLE
C:\Far2\PluginSDK\Headers.c\91698DFC44B17C92060318BE44C4480A.MOLE
C:\Far2\PluginSDK\Headers.c\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\RECYCLER\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\43AEEF7004D53B3077846F8704E813D8.MOLE
C:\Far2\PluginSDK\Headers.pas\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Muldrop\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%ProgramFiles%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bc_loader\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bdagent\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bdss\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bankcl\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\BBClient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\cbank\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\cbmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\cbsmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bdsubmit\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\bk\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\cabalmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ashAvSrv\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\avgcc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVGCC32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\aion\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ash\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ashAvast\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVPCC\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVPM\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVSYNMGR\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVGCTRL\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVP\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\AVP32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\FTP\lib\5AA63D1D40DF15BA5652D64940F1DA9A.MOLE
C:\Far2\Plugins\FTP\lib\2AC286580A7148388A27C6990A840D18.MOLE
C:\Far2\Plugins\FTP\lib\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\FTP\5EA632743C265BDB8ED4387C3C392753.MOLE
C:\Far2\Plugins\FTP\638ED2B31FAA66CC73F8998D1FBD3244.MOLE
C:\Far2\Plugins\FTP\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\MacroView\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Network\A852B4DA223919BA616D5AC3224BE532.MOLE
C:\Far2\Plugins\Network\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\HlfViewer\DCFC2B7C256081BCE6CAE1D525734D34.MOLE
C:\Far2\Plugins\HlfViewer\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\MacroView\D553C9BE0DD44540673A522D0DE710B8.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\670E00743A7F689A6C00600C3A9226E2.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\FarCmds\7EB640AB151D06E0B26408CD152FD258.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\FC2B311412100515F06AAE7C1222C35D.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\00F29F403928A24CA32DF710393B6094.MOLE
C:\Far2\Plugins\ExtSearch\sources\RegExp\015018A021AFDA304EF8869A21C29878.MOLE
C:\Far2\Plugins\FTP\9C72CBA904AA417088A5242504BD0CE8.MOLE
C:\Far2\Plugins\FTP\D98489380B5C7469583EE2C80B6F3FE1.MOLE
C:\Far2\Plugins\FTP\04A2B7A41EC0F32C02A2EE9E1ED3BEA4.MOLE
C:\Far2\Plugins\FarCmds\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\FileCase\DD6CDC781691EC9889511C8B16A4B810.MOLE
C:\Far2\Plugins\FileCase\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\packages\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\putty\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\putty\charset\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\filezilla\misc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\forms\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\lib\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\windows\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\PluginSDK\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\PluginSDK\Headers.c\3D51ACDE1CB868D6038A3D411CCB344E.MOLE
C:\Far2\Plugins\WinSCP\putty\windows\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\release\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\resource\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\TmpPanel\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\components\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ProcList\A833EBD2252348C3A26B9B822536143B.MOLE
C:\Far2\Plugins\ProcList\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\TmpPanel\4CCB63FE31B1BBDAF724953531C48752.MOLE
C:\Far2\Plugins\WinSCP\far\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\fari\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\filezilla\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\console\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\core\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\WinSCP\dragext\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\pidgin\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\putty\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\qip\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\oncbcli\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\opera\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\outpost\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\safari\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\sgbclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\skype\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Ragexe\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\RagFree\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\rclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\miranda32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\mpftray\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\msn6\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\maplestory\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\MCAGENT\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Mir3Game\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\nod\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\nod32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ntvdm\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\msnmsgr\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\NAVAPW32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\netxray\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\wsm\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\YahooMessenger\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ybclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\winbaram\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\woool\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\wow\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ZZ__cd75efb816b2cc__\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\__cd75efb816b2cc__\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%WINDIR%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\zapro\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\zlclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ZONEALARM\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\sro_client\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\startclient7\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\tiny\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\smc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\so3d\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\spidernt\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\UniStream\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\wclnt\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\webmoney\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\translink\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\trillian\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\TwelveSky2\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ecmd\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\egni\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ekrn\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\drweb386\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Drwebupw\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Drwebwcl\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\firefox\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\fsav\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\fsav32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\elbank\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\elementclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\el_cli\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\clbank\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\client7\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\clmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ccapp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\chrome\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ClamWin\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\dnf\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\drweb\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\Drweb32w\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\clntw32\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\contactNG\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\dekaron\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ISClient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\java\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\javaw\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\InphaseNXD\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\intpro\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\iscc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\loadmain\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\lotroclient\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\magent\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\kb_cli\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\l2\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\lin\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ge\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\googletalk\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\GUARD\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\fsavaui\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\fsavgui\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\gc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\ICQ\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\iexplore\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\inbank-start-ff\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\GVOnline\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\gw\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<STUBS_DIR>\httplook\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%APPDATA%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Cookies\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\Temp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<LS_APPDATA>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\History\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Desktop\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Favorites\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Favorites\Links\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\Temp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\History\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\2A21C460048EC81413F58FD804A1865C.MOLE
C:\Documents and Settings\NetworkService\Local Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Local Settings\History\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\NetworkService\Cookies\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Start Menu\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Start Menu\Programs\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Start Menu\Programs\Accessories\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\PrintHood\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Recent\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\SendTo\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Templates\EDA7FF0024EC1BE0F909EA6824FEE758.MOLE
%HOMEPATH%\Templates\9A9BD85F3D3C270B8AE0A5C53D4EF283.MOLE
%HOMEPATH%\Templates\3C844DEA29592D50FC9B65DF296BF8C8.MOLE
%HOMEPATH%\Start Menu\Programs\Accessories\Accessibility\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Start Menu\Programs\Accessories\Entertainment\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Templates\90FCB419404BF1B5BD95CE07405EBD2D.MOLE
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%TEMP%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\<INETFILES>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\History\History.IE5\9030FA4416EE07608A85980E1700C5A8.MOLE
%HOMEPATH%\Local Settings\History\History.IE5\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\D22928D8315EBA60C5E1215931717210.MOLE
%HOMEPATH%\My Documents\My Pictures\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\My Documents\My Received Files\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\NetHood\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\My Documents\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\My Documents\Downloads\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%HOMEPATH%\My Documents\My Music\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\History\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Cookies\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Desktop\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Favorites\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\My Documents\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\NetHood\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\63B0C542252969C639E8C4DF253C280E.MOLE
C:\Documents and Settings\Default User\Local Settings\History\History.IE5\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Local Settings\Temp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\1012792012FD104023C707AF130FEF80.MOLE
C:\1525D1AA140FFEBFB1135A061422DDFF.MOLE
C:\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%APPDATA%\26E14BA00B70A5D0AE4EBAD33D3416B0.MOLE
%APPDATA%\8B982AA3.exe
%APPDATA%\8B982AA3.exe:Zone.Identifier
C:\Documents and Settings\Default User\7F1F303A3F5A43B2BC7980053F6D15C2.MOLE
C:\Documents and Settings\Default User\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
<Текущая директория>\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
%ALLUSERSPROFILE%\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Templates\D77FFCB1269AAB13A716783B26AD768B.MOLE
C:\Documents and Settings\Default User\Templates\5E37C8A8151869000094C26A152B3478.MOLE
C:\Documents and Settings\Default User\Templates\6CB8672B1505A8DC992344B715187454.MOLE
C:\Documents and Settings\Default User\Templates\AF0063753FA4E96CD439F0B93FB7B4E4.MOLE
C:\Documents and Settings\Default User\Templates\C1862CCF0DC92176D062AABB0DDBECEE.MOLE
C:\Documents and Settings\Default User\Templates\BDA806893D26E3E8333FB3FD3D39AF60.MOLE
C:\Documents and Settings\LocalService\Application Data\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Cookies\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\Local Settings\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Templates\E75A4FDA3E1C6AD4BFB437973E2F364C.MOLE
C:\Documents and Settings\Default User\Templates\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\LocalService\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\PrintHood\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Recent\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\SendTo\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Templates\5B42A73E00BEDD864CECCDBB00D1A8FE.MOLE
C:\Documents and Settings\Default User\Templates\D2F3AAB80D7B822A915A058C0D8E4DA2.MOLE
C:\Documents and Settings\Default User\Templates\91C631AE2D43983B7CBF81BA2D5663B3.MOLE
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\Startup\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrd\2E518CFE1A4FE9401EA1B4B21A62AE20.MOLE
C:\Far2\Plugins\Colorer\hrd\983316422A31B162B27C25572A447642.MOLE
C:\Far2\Plugins\Colorer\hrd\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrc\auto\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrc\auto\types\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrd\19A630F52D2ED612745D6BF92D419AF2.MOLE
C:\Far2\Plugins\Compare\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\DrawLine\6978A1644BCDC6E4ED8E1AA34BE0925C.MOLE
C:\Far2\Plugins\DrawLine\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrd\console\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrd\console\contrib\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Compare\A368873B2030AE6BF9942DC1204379E3.MOLE
C:\Far2\Plugins\AutoWrap\F5DEEDD62BEB9A36E2C332E52BFE65AE.MOLE
C:\Far2\Plugins\AutoWrap\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Brackets\7AE940F23FCCAA7C128C1EA13FDF75F4.MOLE
C:\Far2\Plugins\Align\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\arclite\EF56A23009351160150778010947DCD8.MOLE
C:\Far2\Plugins\arclite\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\bin\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\hrc\5474CC9E3A849928B5886ECF3A975E08.MOLE
C:\Far2\Plugins\Colorer\hrc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Brackets\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Colorer\3118686C0AD1E0B230F577FE0AE4AC2A.MOLE
C:\Far2\Plugins\Colorer\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\sources\EF77D4260DECDA1C894969CB0DFF9EFC.MOLE
C:\Far2\Plugins\ExtSearch\sources\6795FABC03E1DDCC457E333B03F4A2AC.MOLE
C:\Far2\Plugins\ExtSearch\sources\40ECEB720B4A33FE7A38F8220B5CF8DE.MOLE
C:\Far2\Plugins\ExtSearch\sources\473B0FC824E497203403CA7D24F75C00.MOLE
C:\Far2\Plugins\ExtSearch\sources\B4CECF92180AC7D557F1A2CE181D8CB5.MOLE
C:\Far2\Plugins\ExtSearch\sources\12EDC65E3F5CFAB44FCC8F0F3F6FBF94.MOLE
C:\Far2\Plugins\ExtSearch\sources\6CBE44D02F8D40789C8C27FE2FA00558.MOLE
C:\Far2\Plugins\ExtSearch\sources\CF285C4E1E9CA5278D4AA0921EAF6A07.MOLE
C:\Far2\Plugins\ExtSearch\sources\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\sources\0C46732017E7D2834B8D882017FA9763.MOLE
C:\Far2\Plugins\ExtSearch\sources\70075AFE2A82D6DBA43297D62A959BBB.MOLE
C:\Far2\Plugins\ExtSearch\sources\ADD2202E1A6A666AC1B4013E1A7D2B4A.MOLE
C:\Far2\Plugins\EMenu\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\doc\C12D58141477B01C9907DE63148A74FC.MOLE
C:\Far2\Plugins\EditCase\303881763ADA9798A848F64F3AED6310.MOLE
C:\Far2\Plugins\EditCase\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\EMenu\3652D9B22D14C4D4D57E941B2D27904C.MOLE
C:\Far2\Plugins\ExtSearch\doc\D81ACA8630710BD8F576460D3083D0B8.MOLE
C:\Far2\Plugins\ExtSearch\doc\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\keys\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\ExtSearch\doc\A71D65DB432EE8A71CC41ACF4341AD87.MOLE
C:\Far2\Plugins\ExtSearch\doc\79BC30741064C094874FBB2110778574.MOLE
C:\Far2\Plugins\ExtSearch\doc\B00B45A94C37BEBDE8FADEBD4C4A839D.MOLE
C:\Far2\Addons\Colors\D8A2C3B0470F581077B7478247222388.MOLE
C:\Far2\Addons\Colors\EB0934542311C78357C38374232492FB.MOLE
C:\Far2\Addons\Colors\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\5D4C26513218C3475511642D322B9557.MOLE
C:\Far2\Addons\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\Colors\Default Highlighting\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\Macros\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\SetUp\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\Colors\Custom Highlighting\0D55FE8C195E0164B6F857321970C644.MOLE
C:\Far2\Addons\Colors\Custom Highlighting\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\Colors\Default Highlighting\BBB811601E9DD6A06BBCF6201EB09B80.MOLE
%HOMEPATH%\Templates\B2AC126A4580113EF4048AC74592DCB6.MOLE
%HOMEPATH%\Templates\27935054432F92466151D5CC43425DBE.MOLE
%HOMEPATH%\Templates\0052D49005FD9BFAAB04EF7006106772.MOLE
%HOMEPATH%\Templates\A4B7B66C13767058FB9F2F7F13893BD0.MOLE
%HOMEPATH%\Templates\A168EA1112623B4C063A138B127506C4.MOLE
%HOMEPATH%\Templates\332CC12C4462E4744154157E4475AFEC.MOLE
C:\Far2\6252CB9F2BB9861CDD7F39592BCC5EC4.MOLE
C:\Far2\6761255C197F03EA0E3A638E1991DC92.MOLE
C:\Far2\5AB1FC8A061683A24A09074506295C4A.MOLE
%HOMEPATH%\Templates\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\87F4D15021F9010C112F250C220BD9B4.MOLE
C:\Far2\6651DA440075DE58118233A20088B700.MOLE
C:\Far2\Documentation\rus\D1D09561004F1DAE73CC197F0061E926.MOLE
C:\Far2\Documentation\rus\A8C9C8802FFEF222FB7DC2C03011BD9A.MOLE
C:\Far2\Documentation\rus\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\rus\A276003C3DB165341F172D3C3DC430AC.MOLE
C:\Far2\Documentation\rus\B6C18BBC1FACC0A6F89AE6CA1FBF8C1E.MOLE
C:\Far2\Documentation\rus\F93EBE0418D39EFC84D25A2F18E66A74.MOLE
C:\Far2\Plugins\7-Zip\ADD7E9361B6290DFE524053E1B755C57.MOLE
C:\Far2\Plugins\7-Zip\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\Align\05BF427C034ACB18D7AC0A21035D9690.MOLE
C:\Far2\Encyclopedia\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\FExcept\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Plugins\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\eng\54F00C5A3E924931F097AD163EA514A9.MOLE
C:\Far2\Documentation\eng\2BDC0F2028941218AFB997B428A6DD90.MOLE
C:\Far2\Addons\Shell\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\XLat\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Addons\XLat\Russian\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\eng\0ED84823120B5193FB5EEDD5121E1D0B.MOLE
C:\Far2\Documentation\eng\INSTRUCTION_FOR_HELPING_FILE_RECOVERY.TXT
C:\Far2\Documentation\rus\EE67F6A0354157B0551F83D035542328.MOLE
C:\Far2\Documentation\eng\DF3F77AC060B47D8D647793A061E1350.MOLE
C:\Far2\Documentation\eng\E2A367C34363F0E32911CE474376BC5B.MOLE
C:\Far2\Documentation\eng\5415FD0228D6CAE0724D4B8E28E99658.MOLE

Сетевая активность:

Подключается к:

'21#.#7.254.187':80

TCP:

Запросы HTTP POST:

http://21#.#7.254.187/scripts/superfish/js/supersubs.php

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней