Trojan.MulDrop8.26396

Техническая информация

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\7zS45BCC292\data1.cab
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\EULAb036.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVIDb007.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVCLafc9.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvauaf9a.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInad39.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInaaa8.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\coreb20b.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_isrb065.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Capaa9ae.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUna931.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUna8c4.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupa895.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupa866.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvsma847.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvauaa7a.rra
%TEMP%\7zS45BCC292\setup.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\dotnb269.rra
<SYSTEM32>\NVUNINST.EXE
%WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.nvu
%WINDIR%\Temp\_isTmp_{8675309}\nvupf8f7.rra
%WINDIR%\Temp\_isTmp_{8675309}\nvupf8c8.rra
%WINDIR%\Temp\_isTmp_{8675309}\NVUnf86b.rra
%WINDIR%\Temp\_isTmp_{8675309}\NVUnf7ee.rra
%WINDIR%\Temp\_isTmp_{8675309}\DPInf677.rra
%WINDIR%\Temp\_isTmp_{8675309}\DPInf56d.rra
%WINDIR%\Temp\_isTmp_{8675309}\Capaf51f.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\skinbc6b.rra
%TEMP%\isprbc2d.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_IsRb6ed.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\defab69f.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\isrtb641.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Strib576.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnra818.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\IsBkaa3b.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnea7da.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmpa7ba.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmca79b.rra
%TEMP%\7zS45BCC292\setup.isn
%TEMP%\7zS45BCC292\SMBus\nvsmb.cat
%TEMP%\7zS45BCC292\SMBus\nfsmb64.inf
%TEMP%\7zS45BCC292\SMBus\nfsmb64.cat
%TEMP%\7zS45BCC292\SMBus\nf4sys.inf
%TEMP%\7zS45BCC292\SMBus\nf4sys.cat
%TEMP%\7zS45BCC292\setup.iss
%TEMP%\7zS45BCC292\setup.inx
%TEMP%\7zS45BCC292\SMBus\nvsmbus.inf
%TEMP%\7zS45BCC292\setup.ini
%TEMP%\7zS45BCC292\setup.bmp
%TEMP%\7zS45BCC292\README.TXT
%TEMP%\7zS45BCC292\layout.bin
%TEMP%\7zS45BCC292\data2.cab
%TEMP%\7zS45BCC292\data1.hdr
%WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.out
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Fontb528.rra
%TEMP%\7zS45BCC292\ISSetup.dll
%TEMP%\7zS45BCC292\_setup.dll
%TEMP%\7zS45BCC292\SMBus\nvsmb.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NvIna75d.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvida72e.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvgaa70f.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvena6e0.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvena6b1.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVDia692.rra
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\setua615.rra
%TEMP%\a4cc.rra
%TEMP%\skinf7b4.rra
%TEMP%\{DB1099CA-BFDC-499C-BE93-FD2387B69045}\setup.isn
%TEMP%\{DB1099CA-BFDC-499C-BE93-FD2387B69045}\_Setup.dll
%TEMP%\{DB1099CA-BFDC-499C-BE93-FD2387B69045}\setup.ini
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\1bda0a244828f62851364d24eb7e820c_23ef5514-3059-436f-a4a7-4cefaab20eb1
%APPDATA%\Microsoft\Protect\CREDHIST
%TEMP%\7zS45BCC292\SMBus\nvusmb.exe
%TEMP%\{DB1099CA-BFDC-499C-BE93-FD2387B69045}\_isdel.ini

Удаляет следующие файлы:

%TEMP%\skinf7b4.rra
%TEMP%\7zS45BCC292\data1.cab
%TEMP%\{DB1099CA-BFDC-499C-BE93-FD2387B69045}\_isdel.ini
%TEMP%\{DB1099CA-BFDC-499C-BE93-FD2387B69045}\_Setup.dll
%TEMP%\{DB1099CA-BFDC-499C-BE93-FD2387B69045}\setup.ini
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\1bda0a244828f62851364d24eb7e820c_23ef5514-3059-436f-a4a7-4cefaab20eb1
%TEMP%\a4cc.rra
%TEMP%\7zS45BCC292\data1.hdr
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\setup.inx
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvenet.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvenetfd.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvgart.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvide.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NvInstNT.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmctl.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVDisp.nvu
%TEMP%\7zS45BCC292\setup.iss
%TEMP%\7zS45BCC292\SMBus\nvusmb.exe
%TEMP%\7zS45BCC292\layout.bin
%TEMP%\7zS45BCC292\SMBus\nvsmbus.inf
%TEMP%\7zS45BCC292\SMBus\nvsmb.nvu
%TEMP%\7zS45BCC292\SMBus\nvsmb.cat
%TEMP%\7zS45BCC292\SMBus\nfsmb64.inf
%TEMP%\7zS45BCC292\SMBus\nfsmb64.cat
%TEMP%\7zS45BCC292\SMBus\nf4sys.inf
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmpu.nvu
%TEMP%\7zS45BCC292\SMBus\nf4sys.cat
%TEMP%\7zS45BCC292\setup.isn
%TEMP%\7zS45BCC292\setup.inx
%TEMP%\7zS45BCC292\setup.ini
%TEMP%\7zS45BCC292\setup.exe
%TEMP%\7zS45BCC292\setup.bmp
%TEMP%\7zS45BCC292\README.TXT
%TEMP%\7zS45BCC292\data2.cab
%TEMP%\7zS45BCC292\ISSetup.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnetbus.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\dotnetinstaller.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\isrt.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\default.pal
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_IsRes.dll
%TEMP%\isprbc2d.rra
%WINDIR%\Temp\_isTmp_{8675309}\CapabilityTable.exe
%WINDIR%\Temp\_isTmp_{8675309}\DPInst.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\StringTable-0009-English.ips
%WINDIR%\Temp\_isTmp_{8675309}\DPInst_64.exe
%WINDIR%\Temp\_isTmp_{8675309}\NVUninst.exe
%WINDIR%\Temp\_isTmp_{8675309}\nvupnp-amd64.exe
%WINDIR%\Temp\_isTmp_{8675309}\nvupnpbr.exe
%WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.out
%WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\skinbc6b.rra
%WINDIR%\Temp\_isTmp_{8675309}\NVUninst-amd64.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInst_64.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvsmb.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\corecomp.ini
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnp-amd64.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnpbr.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst-amd64.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\CapabilityTable.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\IsBkgd.bmp
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnrm.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvaudio.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInst.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvautl.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVCLOSE.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVIDE.TXT
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\EULA.txt
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_isressm.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\FontData.ini
%TEMP%\7zS45BCC292\_setup.dll

Перемещает следующие файлы:

%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\setua615.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\setup.inx
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVIDb007.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVIDE.TXT
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\EULAb036.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\EULA.txt
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_isrb065.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_isressm.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\coreb20b.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\corecomp.ini
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\dotnb269.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\dotnetinstaller.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Fontb528.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\FontData.ini
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvauaf9a.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvautl.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVCLafc9.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVCLOSE.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Strib576.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\StringTable-0009-English.ips
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_IsRb6ed.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\_IsRes.dll
%WINDIR%\Temp\_isTmp_{8675309}\Capaf51f.rra в %WINDIR%\Temp\_isTmp_{8675309}\CapabilityTable.exe
%WINDIR%\Temp\_isTmp_{8675309}\DPInf56d.rra в %WINDIR%\Temp\_isTmp_{8675309}\DPInst.exe
%WINDIR%\Temp\_isTmp_{8675309}\DPInf677.rra в %WINDIR%\Temp\_isTmp_{8675309}\DPInst_64.exe
%WINDIR%\Temp\_isTmp_{8675309}\NVUnf7ee.rra в %WINDIR%\Temp\_isTmp_{8675309}\NVUninst-amd64.exe
%WINDIR%\Temp\_isTmp_{8675309}\NVUnf86b.rra в %WINDIR%\Temp\_isTmp_{8675309}\NVUninst.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\isrtb641.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\isrt.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\defab69f.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\default.pal
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInad39.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInst.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInaaa8.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\DPInst_64.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvauaa7a.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvaudio.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvena6b1.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvenet.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvena6e0.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvenetfd.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvgaa70f.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvgart.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvida72e.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvide.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NvIna75d.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NvInstNT.dll
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmca79b.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmctl.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmpa7ba.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvmpu.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVDia692.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVDisp.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnea7da.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnetbus.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvsma847.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvsmb.nvu
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupa866.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnp-amd64.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupa895.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvupnpbr.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUna8c4.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUna931.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\NVUninst-amd64.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\Capaa9ae.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\CapabilityTable.exe
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\IsBkaa3b.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\IsBkgd.bmp
%TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnra818.rra в %TEMP%\{556CA8E4-C617-40FA-A9C3-5CC59BB3C957}\{EFB7D050-CAD2-11D4-B34D-00105A1C23DD}\nvnrm.nvu
%WINDIR%\Temp\_isTmp_{8675309}\nvupf8c8.rra в %WINDIR%\Temp\_isTmp_{8675309}\nvupnp-amd64.exe
%WINDIR%\Temp\_isTmp_{8675309}\nvupf8f7.rra в %WINDIR%\Temp\_isTmp_{8675309}\nvupnpbr.exe

Другое:

Создает и запускает на исполнение:

'%TEMP%\7zS45BCC292\setup.exe'
'%WINDIR%\Temp\_isTmp_{8675309}\NVUninst.exe' run %WINDIR%\Temp\_isTmp_{8675309}\nvgetreg.nvu

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней