BackDoor.Bifrost.14350

Техническая информация

Изменения в файловой системе:

Создает следующие файлы:

%ProgramFiles%\LXSeries4Windows\reports\M_ChannelList.lxxreport
%ProgramFiles%\LXSeries4Windows\reports\CircuitList.lxxreport
%ProgramFiles%\LXSeries4Windows\reports\Symbols.lxxreport
%ProgramFiles%\LXSeries4Windows\reports\Positions.lxxreport
%ProgramFiles%\LXSeries4Windows\reports\ColorCount.lxxreport
%ProgramFiles%\LXSeries4Windows\reports\DimmerList.lxxreport
%ProgramFiles%\LXSeries4Windows\reports\InstrumentSchedule.lxxreport
%ProgramFiles%\LXSeries4Windows\reports\ChannelList.lxxreport
%ProgramFiles%\LXSeries4Windows\reports\ChannelSummary.lxxreport
%ProgramFiles%\LXSeries4Windows\keys\pars.lxkey
%ProgramFiles%\LXSeries4Windows\keys\rankstrand.lxkey
%ProgramFiles%\LXSeries4Windows\keys\mole.lxkey
%ProgramFiles%\LXSeries4Windows\keys\niethammer.lxkey
%ProgramFiles%\LXSeries4Windows\keys\strandlighting.lxkey
%ProgramFiles%\LXSeries4Windows\keys\striplights.lxkey
%ProgramFiles%\LXSeries4Windows\keys\selecon.lxkey
%ProgramFiles%\LXSeries4Windows\keys\strand.lxkey
%ProgramFiles%\LXSeries4Windows\scripts\CopyCircuitsToDimmers.js
%ProgramFiles%\LXSeries4Windows\scripts\CopyDimmersToCircuits.js
%ProgramFiles%\LXSeries4Windows\scripts\SetChannelByColor.js
%ProgramFiles%\LXSeries4Windows\scripts\ReplaceColor.js
%WINDIR%\Installer\232e1.msi
%APPDATA%\Microsoft\Installer\{AC7E8467-EA6A-4D6C-AC89-A6CF1FA6D3CB}\LXXFileIcon
%HOMEPATH%\Desktop\LXFree for Java.lnk
%HOMEPATH%\Start Menu\Programs\LXSeries\LXFree for Java.lnk
%ProgramFiles%\LXSeries4Windows\scripts\InsertChannel.js
%ProgramFiles%\LXSeries4Windows\colors\R.lxcolors
%ProgramFiles%\LXSeries4Windows\colors\L.lxcolors
%ProgramFiles%\LXSeries4Windows\reports\UnusedCircuits.lxxreport
%ProgramFiles%\LXSeries4Windows\LXFreeForJava.exe
%ProgramFiles%\LXSeries4Windows\colors\w.lxcolors
%ProgramFiles%\LXSeries4Windows\scripts\DeleteChannel.js
%ProgramFiles%\LXSeries4Windows\colors\G.lxcolors
%ProgramFiles%\LXSeries4Windows\colors\AP.lxcolors
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SOFTWARE
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SYSTEM
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_.DEFAULT
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SECURITY
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\domain.txt
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\$WinMgmt.CFG
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_MACHINE_SAM
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\ComDb.Dat
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-21-2052111302-484763869-725345543-1003
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-18
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-19
%TEMP%\msx1\InstallLXFreeForJava.msi
%WINDIR%\Installer\232dd.msi
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-20
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-21-2052111302-484763869-725345543-1003
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_USRCLASS_S-1-5-19
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\_REGISTRY_USER_NTUSER_S-1-5-20
%ProgramFiles%\LXSeries4Windows\keys\all.lxkey
%ProgramFiles%\LXSeries4Windows\keys\altman.lxkey
C:\Config.Msi\232e0.rbs
%ProgramFiles%\LXSeries4Windows\keys\zero(empty).lxkey
%ProgramFiles%\LXSeries4Windows\keys\etc.lxkey
%ProgramFiles%\LXSeries4Windows\keys\extras.lxkey
%ProgramFiles%\LXSeries4Windows\keys\cct.lxkey
%ProgramFiles%\LXSeries4Windows\keys\colortran.lxkey
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING.VER
%WINDIR%\Installer\232df.ipi
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\INDEX.BTR
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING2.MAP
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\OBJECTS.DATA
C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP16\snapshot\Repository\FS\MAPPING1.MAP
%WINDIR%\Installer\MSI2.tmp