Trojan.MulDrop8.26393

Техническая информация

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\7zS42B2F742\data1.cab
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\core1c24.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_isr1bd6.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\EULA1bb7.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVID1b97.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVCL1b69.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvau1b49.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvsm1619.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPIn1994.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvau17cf.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\IsBk17a0.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Capa1742.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUn16e4.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUn1696.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvup1667.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPIn17ee.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvup1648.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\dotn1c43.rra
%WINDIR%\Temp\_isTmp_{8675309}\DPIn497d.rra
<SYSTEM32>\NVUNINST.EXE
%WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.nvu
%WINDIR%\Temp\_isTmp_{8675309}\nvup4d56.rra
%WINDIR%\Temp\_isTmp_{8675309}\nvup4d27.rra
%WINDIR%\Temp\_isTmp_{8675309}\NVUn4cc9.rra
%WINDIR%\Temp\_isTmp_{8675309}\NVUn4c6b.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Stri1c91.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Font1c63.rra
%WINDIR%\Temp\_isTmp_{8675309}\Capa493f.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\skin2079.rra
%TEMP%\ispr205a.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_IsR1d3d.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\defa1d0e.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\isrt1cb1.rra
%WINDIR%\Temp\_isTmp_{8675309}\DPIn4ac6.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnr15fa.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvne15db.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmp15bb.rra
%TEMP%\7zS42B2F742\ISSetup.dll
%TEMP%\7zS42B2F742\SMU\smuc64.inf
%TEMP%\7zS42B2F742\SMU\nvsmu.nvu
%TEMP%\7zS42B2F742\SMU\nvsmu.cat
%TEMP%\7zS42B2F742\setup.iss
%TEMP%\7zS42B2F742\SMU\nvcosmu.dll
%TEMP%\7zS42B2F742\setup.isn
%TEMP%\7zS42B2F742\setup.ini
%TEMP%\7zS42B2F742\setup.bmp
%TEMP%\7zS42B2F742\README.TXT
%TEMP%\7zS42B2F742\layout.bin
%TEMP%\7zS42B2F742\data2.cab
%TEMP%\7zS42B2F742\data1.hdr
%TEMP%\7zS42B2F742\setup.inx
%TEMP%\7zS42B2F742\SMU\nvsmu.sys
%TEMP%\7zS42B2F742\setup.exe
%TEMP%\7zS42B2F742\SMU\nvusmu.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmc159c.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\setu1454.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NvIn155e.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvid153e.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvga151f.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nven14f0.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nven14d1.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVDi14b2.rra
%TEMP%\134a.rra
%TEMP%\7zS42B2F742\_setup.dll
%TEMP%\skina128.rra
%TEMP%\{4B24EB72-4F28-4774-A1DD-6E7DAB1AAAB1}\setup.isn
%TEMP%\{4B24EB72-4F28-4774-A1DD-6E7DAB1AAAB1}\_Setup.dll
%TEMP%\{4B24EB72-4F28-4774-A1DD-6E7DAB1AAAB1}\setup.ini
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\38a54cd33e9a47ab4b38a89e3a2546e2_23ef5514-3059-436f-a4a7-4cefaab20eb1
%APPDATA%\Microsoft\Protect\CREDHIST
%WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.out
%TEMP%\{4B24EB72-4F28-4774-A1DD-6E7DAB1AAAB1}\_isdel.ini

Удаляет следующие файлы:

%TEMP%\skina128.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmpu.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmctl.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NvInstNT.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvide.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvgart.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvenetfd.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvenet.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVDisp.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\setup.inx
%TEMP%\134a.rra
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\38a54cd33e9a47ab4b38a89e3a2546e2_23ef5514-3059-436f-a4a7-4cefaab20eb1
%TEMP%\{4B24EB72-4F28-4774-A1DD-6E7DAB1AAAB1}\setup.ini
%TEMP%\{4B24EB72-4F28-4774-A1DD-6E7DAB1AAAB1}\_Setup.dll
%TEMP%\{4B24EB72-4F28-4774-A1DD-6E7DAB1AAAB1}\_isdel.ini
%TEMP%\7zS42B2F742\data1.cab
%TEMP%\7zS42B2F742\data1.hdr
%TEMP%\7zS42B2F742\data2.cab
%TEMP%\7zS42B2F742\SMU\nvusmu.exe
%TEMP%\7zS42B2F742\SMU\nvsmu.sys
%TEMP%\7zS42B2F742\SMU\nvsmu.nvu
%TEMP%\7zS42B2F742\SMU\nvsmu.cat
%TEMP%\7zS42B2F742\SMU\nvcosmu.dll
%TEMP%\7zS42B2F742\setup.iss
%TEMP%\7zS42B2F742\setup.inx
%TEMP%\7zS42B2F742\setup.isn
%TEMP%\7zS42B2F742\setup.ini
%TEMP%\7zS42B2F742\setup.exe
%TEMP%\7zS42B2F742\setup.bmp
%TEMP%\7zS42B2F742\README.TXT
%TEMP%\7zS42B2F742\layout.bin
%TEMP%\7zS42B2F742\ISSetup.dll
%TEMP%\7zS42B2F742\SMU\smuc64.inf
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnetbus.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnrm.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvsmb.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\skin2079.rra
%WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.nvu
%WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.out
%WINDIR%\Temp\_isTmp_{8675309}\nvupnpbr.exe
%WINDIR%\Temp\_isTmp_{8675309}\nvupnp-amd64.exe
%WINDIR%\Temp\_isTmp_{8675309}\NVUninst.exe
%WINDIR%\Temp\_isTmp_{8675309}\NVUninst-amd64.exe
%WINDIR%\Temp\_isTmp_{8675309}\DPInst_64.exe
%WINDIR%\Temp\_isTmp_{8675309}\DPInst.exe
%WINDIR%\Temp\_isTmp_{8675309}\CapabilityTable.exe
%TEMP%\ispr205a.rra
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_IsRes.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\default.pal
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\isrt.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\StringTable-0009-English.ips
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\FontData.ini
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\dotnetinstaller.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnpbr.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst-amd64.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\CapabilityTable.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\IsBkgd.bmp
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvaudio.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInst.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInst_64.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvautl.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVCLOSE.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVIDE.TXT
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\EULA.txt
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_isressm.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\corecomp.ini
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnp-amd64.exe
%TEMP%\7zS42B2F742\_setup.dll

Перемещает следующие файлы:

%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\setu1454.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\setup.inx
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVID1b97.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVIDE.TXT
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\EULA1bb7.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\EULA.txt
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_isr1bd6.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_isressm.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\core1c24.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\corecomp.ini
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\dotn1c43.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\dotnetinstaller.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Font1c63.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\FontData.ini
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvau1b49.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvautl.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVCL1b69.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVCLOSE.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Stri1c91.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\StringTable-0009-English.ips
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_IsR1d3d.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_IsRes.dll
%WINDIR%\Temp\_isTmp_{8675309}\Capa493f.rra в %WINDIR%\Temp\_isTmp_{8675309}\CapabilityTable.exe
%WINDIR%\Temp\_isTmp_{8675309}\DPIn497d.rra в %WINDIR%\Temp\_isTmp_{8675309}\DPInst.exe
%WINDIR%\Temp\_isTmp_{8675309}\DPIn4ac6.rra в %WINDIR%\Temp\_isTmp_{8675309}\DPInst_64.exe
%WINDIR%\Temp\_isTmp_{8675309}\NVUn4c6b.rra в %WINDIR%\Temp\_isTmp_{8675309}\NVUninst-amd64.exe
%WINDIR%\Temp\_isTmp_{8675309}\NVUn4cc9.rra в %WINDIR%\Temp\_isTmp_{8675309}\NVUninst.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\isrt1cb1.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\isrt.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\defa1d0e.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\default.pal
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPIn1994.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInst.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPIn17ee.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInst_64.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvau17cf.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvaudio.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nven14d1.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvenet.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nven14f0.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvenetfd.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvga151f.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvgart.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvid153e.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvide.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NvIn155e.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NvInstNT.dll
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmc159c.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmctl.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmp15bb.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmpu.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVDi14b2.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVDisp.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvne15db.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnetbus.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvsm1619.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvsmb.nvu
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvup1648.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnp-amd64.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvup1667.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnpbr.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUn1696.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUn16e4.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst-amd64.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Capa1742.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\CapabilityTable.exe
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\IsBk17a0.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\IsBkgd.bmp
%TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnr15fa.rra в %TEMP%\{801BC11C-C4B1-45AB-B67D-80B81C845FCB}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnrm.nvu
%WINDIR%\Temp\_isTmp_{8675309}\nvup4d27.rra в %WINDIR%\Temp\_isTmp_{8675309}\nvupnp-amd64.exe
%WINDIR%\Temp\_isTmp_{8675309}\nvup4d56.rra в %WINDIR%\Temp\_isTmp_{8675309}\nvupnpbr.exe

Другое:

Создает и запускает на исполнение:

'%TEMP%\7zS42B2F742\setup.exe'
'%WINDIR%\Temp\_isTmp_{8675309}\NVUninst.exe' run %WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.nvu

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней