Trojan.MulDrop7.29399

Техническая информация

Вредоносные функции:

Для затруднения выявления своего присутствия в системе

блокирует:

Компонент восстановления системы (SR)

удаляет теневые копии разделов.

Запускает на исполнение:

'<SYSTEM32>\net1.exe' stop swprv
'<SYSTEM32>\net.exe' stop srservice
'<SYSTEM32>\net1.exe' stop srservice
'<SYSTEM32>\net1.exe' stop vss
'<SYSTEM32>\reg.exe' add "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore" /v DisableSR /t REG_DWORD /d 1 /f
'<SYSTEM32>\reg.exe' add "HKLM\SYSTEM\CurrentControlSet\services\VSS" /v Start /t REG_DWORD /d 4 /f
'<SYSTEM32>\net.exe' stop swprv
'<SYSTEM32>\net.exe' stop vss

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\PrintHood\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\NetHood\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Recent\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\PrintHood\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\My Documents\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Local Settings\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\NetHood\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\My Documents\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Templates\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Start Menu\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\Colors\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Templates\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\SendTo\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Recent\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Start Menu\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\SendTo\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\Local Settings\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\Cookies\README_HOW_TO_UNLOCK.HTML
%APPDATA%\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\Local Settings\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\Application Data\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\Local Settings\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\Cookies\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\Application Data\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Favorites\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Desktop\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Local Settings\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Favorites\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Cookies\README_HOW_TO_UNLOCK.TXT
%APPDATA%\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Desktop\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Cookies\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\Brackets\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\AutoWrap\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\Colorer\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\Brackets\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\arclite\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\Align\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\AutoWrap\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\arclite\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\EditCase\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\DrawLine\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\EMenu\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\EditCase\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\Compare\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\Colorer\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\DrawLine\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\Compare\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\Shell\README_HOW_TO_UNLOCK.TXT
C:\Far2\Addons\SetUp\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\XLat\README_HOW_TO_UNLOCK.TXT
C:\Far2\Addons\Shell\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\Macros\README_HOW_TO_UNLOCK.TXT
C:\Far2\Addons\Colors\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\SetUp\README_HOW_TO_UNLOCK.TXT
C:\Far2\Addons\Macros\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\7-Zip\README_HOW_TO_UNLOCK.TXT
C:\Far2\Documentation\rus\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\Align\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\7-Zip\README_HOW_TO_UNLOCK.HTML
C:\Far2\Documentation\eng\README_HOW_TO_UNLOCK.TXT
C:\Far2\Addons\XLat\README_HOW_TO_UNLOCK.HTML
C:\Far2\Documentation\rus\README_HOW_TO_UNLOCK.TXT
C:\Far2\Documentation\eng\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\Local Settings\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\__cd75efb816b2cc__\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\__cd75efb816b2cc__\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Application Data\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Application Data\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ZONEALARM\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ZONEALARM\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ZZ__cd75efb816b2cc__\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ZZ__cd75efb816b2cc__\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\DRM\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\DRM\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Favorites\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Favorites\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Desktop\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Desktop\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Documents\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Documents\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\wow\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\wow\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\wsm\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\wsm\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\winbaram\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\winbaram\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\woool\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\woool\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\zapro\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\zapro\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\zlclient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\zlclient\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\YahooMessenger\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\YahooMessenger\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ybclient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ybclient\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Recent\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Recent\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\SendTo\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\SendTo\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\NetHood\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\NetHood\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\PrintHood\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\PrintHood\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\Application Data\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\Application Data\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\Cookies\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\Cookies\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Start Menu\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Start Menu\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Templates\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Templates\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Application Data\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Application Data\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Cookies\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Cookies\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Start Menu\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Start Menu\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Templates\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Templates\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Local Settings\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Local Settings\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\My Documents\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\My Documents\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Desktop\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Desktop\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Favorites\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Favorites\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\My Documents\My Music\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\My Documents\My Music\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\My Documents\My Pictures\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\My Documents\My Pictures\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Local Settings\<INETFILES>\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Local Settings\<INETFILES>\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\My Documents\Downloads\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\My Documents\Downloads\README_HOW_TO_UNLOCK.TXT
C:\Far2\Addons\Colors\Custom Highlighting\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\Colors\Custom Highlighting\README_HOW_TO_UNLOCK.TXT
C:\Far2\Addons\Colors\Default Highlighting\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\Colors\Default Highlighting\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\My Documents\My Received Files\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\My Documents\My Received Files\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Start Menu\Programs\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Start Menu\Programs\README_HOW_TO_UNLOCK.TXT
%APPDATA%\Microsoft\README_HOW_TO_UNLOCK.HTML
%APPDATA%\Microsoft\README_HOW_TO_UNLOCK.TXT
%APPDATA%\Mozilla\README_HOW_TO_UNLOCK.HTML
%APPDATA%\Mozilla\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\Local Settings\<INETFILES>\README_HOW_TO_UNLOCK.TXT
%APPDATA%\Identities\README_HOW_TO_UNLOCK.HTML
%APPDATA%\Identities\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Local Settings\History\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Local Settings\History\README_HOW_TO_UNLOCK.TXT
%TEMP%\README_HOW_TO_UNLOCK.HTML
%TEMP%\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\Favorites\Links\README_HOW_TO_UNLOCK.HTML
%HOMEPATH%\Favorites\Links\README_HOW_TO_UNLOCK.TXT
<LS_APPDATA>\README_HOW_TO_UNLOCK.HTML
<LS_APPDATA>\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\WinSCP\components\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\WinSCP\components\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\WinSCP\console\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\WinSCP\console\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\ExtSearch\sources\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\ExtSearch\sources\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\FTP\lib\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\FTP\lib\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\WinSCP\far\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\WinSCP\far\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\WinSCP\fari\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\WinSCP\fari\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\WinSCP\core\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\WinSCP\core\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\WinSCP\dragext\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\WinSCP\dragext\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\Colorer\hrc\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\Colorer\hrc\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\Colorer\hrd\README_HOW_TO_UNLOCK.TXT
<SYSTEM32>\wbem\AutoRecover\C8463ECBE33BC240263A0B094E46D510.mof
C:\Far2\Addons\XLat\Russian\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\XLat\Russian\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\Colorer\bin\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\Colorer\bin\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\ExtSearch\keys\README_HOW_TO_UNLOCK.TXT
<SYSTEM32>\wbem\AutoRecover\23BDE61F1F4FACE17E9B0C01F2A1FD9B.mof
C:\Far2\Plugins\ExtSearch\keys\README_HOW_TO_UNLOCK.HTML
<SYSTEM32>\wbem\Logs\WMIC.LOG
C:\Far2\Plugins\Colorer\hrd\README_HOW_TO_UNLOCK.HTML
%TEMP%\tmp3.tmp
C:\Far2\Plugins\ExtSearch\doc\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\ExtSearch\doc\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\Local Settings\Temp\README_HOW_TO_UNLOCK.HTML
C:\Far2\PluginSDK\Headers.c\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\WinSCP\README_HOW_TO_UNLOCK.HTML
C:\Far2\PluginSDK\Headers.pas\README_HOW_TO_UNLOCK.TXT
C:\Far2\PluginSDK\Headers.c\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\TmpPanel\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\ProcList\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\WinSCP\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\TmpPanel\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Documents\My Pictures\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Documents\My Music\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Documents\My Videos\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Documents\My Pictures\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Application Data\Microsoft\README_HOW_TO_UNLOCK.TXT
C:\Far2\PluginSDK\Headers.pas\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Documents\My Music\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Application Data\Microsoft\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\FileCase\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\FarCmds\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\FTP\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\FileCase\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\ExtSearch\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\EMenu\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\FarCmds\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\ExtSearch\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\Network\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\MacroView\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\ProcList\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\Network\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\HlfViewer\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\FTP\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\MacroView\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\HlfViewer\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\Local Settings\Temp\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\Local Settings\History\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\Local Settings\Temp\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\Local Settings\Application Data\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\Application Data\Microsoft\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\Local Settings\History\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\Local Settings\Application Data\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\Local Settings\History\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\Local Settings\Application Data\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\Local Settings\Temp\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\Local Settings\History\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\Application Data\Microsoft\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\Local Settings\<INETFILES>\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\Local Settings\Application Data\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\Application Data\Microsoft\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Local Settings\Application Data\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Application Data\Microsoft\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Local Settings\History\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Local Settings\Application Data\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\Start Menu\Programs\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Documents\My Videos\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Application Data\Microsoft\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\Start Menu\Programs\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Start Menu\Programs\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\Application Data\Microsoft\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Start Menu\Programs\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Local Settings\Temp\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Local Settings\History\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\Local Settings\<INETFILES>\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\Local Settings\Temp\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\cbmain\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\cbank\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\cbsmain\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\cbmain\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\cabalmain\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\bk\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\cbank\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\cabalmain\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ClamWin\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\chrome\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\clbank\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ClamWin\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ccapp\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\cbsmain\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\chrome\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ccapp\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\bclient\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\BBClient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\bc_loader\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\bclient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\bankcl\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\AVSYNMGR\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\BBClient\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\bankcl\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\bdsubmit\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\bdss\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\bk\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\bdsubmit\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\bdagent\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\bc_loader\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\bdss\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\bdagent\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\Drwebwcl\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\Drwebupw\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ecmd\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\Drwebwcl\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\drweb386\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\Drweb32w\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\Drwebupw\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\drweb386\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\elbank\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ekrn\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\elementclient\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\elbank\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\egni\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ecmd\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ekrn\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\egni\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\clntw32\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\clmain\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\contactNG\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\clntw32\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\client7\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\clbank\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\clmain\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\client7\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\drweb\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\dnf\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\Drweb32w\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\drweb\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\dekaron\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\contactNG\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\dnf\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\dekaron\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\AVSYNMGR\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\NetworkService\README_HOW_TO_UNLOCK.HTML
C:\Far2\Addons\README_HOW_TO_UNLOCK.TXT
%HOMEPATH%\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\LocalService\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\Default User\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\NetworkService\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\LocalService\README_HOW_TO_UNLOCK.HTML
C:\Far2\FExcept\README_HOW_TO_UNLOCK.TXT
C:\Far2\Encyclopedia\README_HOW_TO_UNLOCK.HTML
C:\Far2\FExcept\README_HOW_TO_UNLOCK.HTML
%TEMP%\tmp2.tmp
C:\Far2\Documentation\README_HOW_TO_UNLOCK.TXT
C:\Far2\Addons\README_HOW_TO_UNLOCK.HTML
C:\Far2\Encyclopedia\README_HOW_TO_UNLOCK.TXT
C:\Far2\Documentation\README_HOW_TO_UNLOCK.HTML
C:\Far2\README_HOW_TO_UNLOCK.TXT
C:\Documents and Settings\README_HOW_TO_UNLOCK.HTML
C:\Muldrop\README_HOW_TO_UNLOCK.TXT
C:\Far2\README_HOW_TO_UNLOCK.HTML
<Текущая директория>\README_HOW_TO_UNLOCK.TXT
%TEMP%\tmp1.tmp
C:\Documents and Settings\README_HOW_TO_UNLOCK.TXT
<Текущая директория>\README_HOW_TO_UNLOCK.HTML
%ALLUSERSPROFILE%\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\README_HOW_TO_UNLOCK.HTML
C:\Documents and Settings\Default User\README_HOW_TO_UNLOCK.TXT
%ALLUSERSPROFILE%\README_HOW_TO_UNLOCK.HTML
C:\RECYCLER\README_HOW_TO_UNLOCK.TXT
C:\Muldrop\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\README_HOW_TO_UNLOCK.TXT
C:\RECYCLER\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\AVGCC32\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\AVGCC32\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\AVGCTRL\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\AVGCTRL\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ashAvSrv\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ashAvSrv\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\avgcc\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\avgcc\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\AVPCC\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\AVPCC\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\AVPM\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\AVPM\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\AVP\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\AVP\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\AVP32\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\AVP32\README_HOW_TO_UNLOCK.TXT
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\README_HOW_TO_UNLOCK.HTML
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\360tray\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\360tray\README_HOW_TO_UNLOCK.TXT
C:\Far2\Plugins\README_HOW_TO_UNLOCK.HTML
C:\Far2\Plugins\README_HOW_TO_UNLOCK.TXT
C:\Far2\PluginSDK\README_HOW_TO_UNLOCK.HTML
C:\Far2\PluginSDK\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ash\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ash\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ashAvast\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ashAvast\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ageofconan\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ageofconan\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\aion\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\aion\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\outpost\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\outpost\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\pidgin\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\pidgin\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\oncbcli\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\oncbcli\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\opera\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\opera\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\Ragexe\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\Ragexe\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\RagFree\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\RagFree\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\putty\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\putty\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\qip\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\qip\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\msnmsgr\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\msnmsgr\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\NAVAPW32\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\NAVAPW32\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\mpftray\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\mpftray\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\msn6\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\msn6\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\nod32\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\nod32\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ntvdm\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ntvdm\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\netxray\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\netxray\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\nod\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\nod\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\translink\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\translink\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\trillian\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\trillian\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\startclient7\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\startclient7\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\tiny\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\tiny\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\wclnt\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\wclnt\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\webmoney\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\webmoney\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\TwelveSky2\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\TwelveSky2\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\UniStream\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\UniStream\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\sgbclient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\sgbclient\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\skype\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\skype\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\rclient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\rclient\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\safari\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\safari\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\spidernt\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\spidernt\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\sro_client\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\sro_client\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\smc\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\smc\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\so3d\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\so3d\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\miranda32\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\GVOnline\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\GUARD\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\gw\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\GVOnline\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\googletalk\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ge\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\GUARD\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\googletalk\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\iexplore\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ICQ\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\inbank-start-ff\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\iexplore\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\httplook\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\gw\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ICQ\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\httplook\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\fsav\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\firefox\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\fsav32\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\fsav\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\el_cli\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\elementclient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\firefox\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\el_cli\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\gc\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\fsavgui\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ge\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\gc\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\fsavaui\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\fsav32\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\fsavgui\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\fsavaui\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\lotroclient\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\loadmain\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\magent\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\lotroclient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\lin\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\l2\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\loadmain\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\lin\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\Mir3Game\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\MCAGENT\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\miranda32\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\Mir3Game\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\maplestory\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\magent\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\MCAGENT\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\maplestory\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\iscc\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\intpro\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\ISClient\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\iscc\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\InphaseNXD\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\inbank-start-ff\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\intpro\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\InphaseNXD\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\kb_cli\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\javaw\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\l2\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\kb_cli\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\java\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\ISClient\README_HOW_TO_UNLOCK.HTML
<STUBS_DIR>\javaw\README_HOW_TO_UNLOCK.TXT
<STUBS_DIR>\java\README_HOW_TO_UNLOCK.HTML

Удаляет следующие файлы:

%TEMP%\tmp3.tmp
%TEMP%\tmp2.tmp
%TEMP%\tmp1.tmp

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней