Trojan.PWS.Siggen2.4078

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'firefox' = '"%APPDATA%\FFPortable\update.exe" about:robots'

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\is-1C5PK.tmp\<Имя файла>.tmp
%APPDATA%\FFPortable\searchplugins\is-8AVKJ.tmp
%TEMP%\bye1.tmp\Disk1\setup.ini
%TEMP%\bye1.tmp\Disk1\setup.ibt
%TEMP%\bye1.tmp\Disk1\setup.exe
%TEMP%\bye1.tmp\Disk1\layout.bin
%TEMP%\bye1.tmp\Disk1\engine32.cab
%TEMP%\bye1.tmp\Disk1\data1.hdr
%TEMP%\bye1.tmp\Disk1\setup.inx
%TEMP%\bye1.tmp\Disk1\data1.cab
%TEMP%\is-H28LR.tmp\rog\unins000.dat
%APPDATA%\is-M2H4G.tmp
%APPDATA%\FFPortable\uninstall\is-TUKNF.tmp
%APPDATA%\FFPortable\searchplugins\is-JQ1C3.tmp
%APPDATA%\FFPortable\searchplugins\is-42K1M.tmp
%APPDATA%\FFPortable\searchplugins\is-678OR.tmp
%APPDATA%\FFPortable\searchplugins\is-2F4FB.tmp
%TEMP%\ISPackFiles.ini
%APPDATA%\FFPortable\searchplugins\is-T2NBS.tmp
%APPDATA%\AMozilla\AFirefox\Crash Reports\InstallTime20100401080539
%TEMP%\set3.tmp
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\bookmarks.html
%APPDATA%\AMozilla\AFirefox\profiles.ini
%TEMP%\skin54ae.rra
%TEMP%\ispA.tmp
%TEMP%\isp6.tmp\temp.000
%TEMP%\_se9.tmp
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\isp7.tmp\temp.000
%TEMP%\_isdelet.ini
%TEMP%\igd8.tmp
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\895801cce21b135cbf95f16ec8f2c532_23ef5514-3059-436f-a4a7-4cefaab20eb1
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\isp4.tmp\temp.000
%TEMP%\set5.tmp
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\2d6fdd68a6aeb0d75e74249ac020c549_23ef5514-3059-436f-a4a7-4cefaab20eb1
%APPDATA%\Microsoft\Protect\CREDHIST
%APPDATA%\FFPortable\components\xpti.dat.tmp
%TEMP%\isp2.tmp\temp.000
%TEMP%\bye1.tmp\Disk1\setup.skin
%APPDATA%\FFPortable\searchplugins\is-19FDE.tmp
%APPDATA%\FFPortable\res\html\is-1R3I9.tmp
%APPDATA%\FFPortable\res\fonts\is-B90AL.tmp
%APPDATA%\FFPortable\res\is-0HG2L.tmp
%APPDATA%\FFPortable\res\is-IH34O.tmp
%APPDATA%\FFPortable\res\is-031BD.tmp
%APPDATA%\FFPortable\res\is-OEGIP.tmp
%APPDATA%\FFPortable\res\is-A9C64.tmp
%APPDATA%\FFPortable\res\is-8OORK.tmp
%APPDATA%\FFPortable\res\is-PUBRP.tmp
%APPDATA%\FFPortable\res\is-S2PQK.tmp
%APPDATA%\FFPortable\res\is-7JNSA.tmp
%APPDATA%\FFPortable\res\is-GUL9V.tmp
%APPDATA%\FFPortable\res\is-C76SC.tmp
%APPDATA%\FFPortable\res\is-KIOC6.tmp
%APPDATA%\FFPortable\res\is-5QLFJ.tmp
%APPDATA%\FFPortable\res\is-3IPMN.tmp
%APPDATA%\FFPortable\res\is-OBM2D.tmp
%APPDATA%\FFPortable\res\is-JC8JJ.tmp
%APPDATA%\FFPortable\res\is-T2NJI.tmp
%APPDATA%\FFPortable\res\is-EHK8J.tmp
%APPDATA%\FFPortable\res\fonts\is-2IMO0.tmp
%APPDATA%\FFPortable\res\is-26V2V.tmp
%APPDATA%\FFPortable\res\fonts\is-P8GFD.tmp
%APPDATA%\FFPortable\res\entityTables\is-28DAM.tmp
%APPDATA%\FFPortable\res\fonts\is-S4GJI.tmp
%APPDATA%\FFPortable\res\fonts\is-HMDIN.tmp
%APPDATA%\FFPortable\res\fonts\is-B25SQ.tmp
%APPDATA%\FFPortable\res\entityTables\is-T2S79.tmp
%APPDATA%\FFPortable\res\entityTables\is-6SCQD.tmp
%APPDATA%\FFPortable\res\entityTables\is-RGAI9.tmp
%APPDATA%\FFPortable\res\entityTables\is-K79UT.tmp
%APPDATA%\FFPortable\res\entityTables\is-R4M23.tmp
%APPDATA%\FFPortable\res\is-N0I4V.tmp
%APPDATA%\FFPortable\res\dtd\is-HBERK.tmp
%APPDATA%\FFPortable\res\dtd\is-31CJ0.tmp
%APPDATA%\FFPortable\res\is-EQOEG.tmp
%APPDATA%\FFPortable\res\is-6N0PS.tmp
%APPDATA%\FFPortable\res\is-60G50.tmp
%APPDATA%\FFPortable\res\is-A9TA8.tmp
%APPDATA%\FFPortable\res\is-7PM83.tmp
%APPDATA%\FFPortable\res\is-94S6M.tmp
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\chrome\userChrome-example.css
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\DotC.tmp
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\search.json
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\search.sqlite
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\search.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions-1.rdf
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\pluginreg.dat
%TEMP%\tFdfxPr20.dll
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\places.sqlite
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\permissions.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\places.sqlite-journal
%TEMP%\isprf3ad.rra
%TEMP%\ispreac3.rra
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\prefs-1.js
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions.rdf
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions-1.ini
%TEMP%\ispre219.rra
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions-1.cache
%TEMP%\isprfb5d.rra
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\permissions.sqlite
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\formhistory.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\cookies.sqlite
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\downloads.sqlite
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\downloads.sqlite-journal
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\urlclassifier3.sqlite
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\urlclassifier3.sqlite-journal
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\Cache\_CACHE_MAP_
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\Cache\_CACHE_003_
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\Cache\_CACHE_002_
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\content-prefs.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\formhistory.sqlite
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\cookies.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\key3.db
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\cert8.db
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\secmod.db
%TEMP%\nso13.tmp\System.dll
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\mimeTypes-1.rdf
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\content-prefs.sqlite
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\Cache\_CACHE_001_
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\_IsRdac6.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\Strid9db.rra
%APPDATA%\FFPortable\dictionaries\is-8F6TB.tmp
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\ctoD.tmp
%CommonProgramFiles%\InstallShield\Professional\RunTime\Obj11.tmp
%CommonProgramFiles%\InstallShield\Professional\RunTime\iKernel.rgs
%CommonProgramFiles%\InstallShield\Professional\RunTime\IsProBE.tlb
%CommonProgramFiles%\InstallShield\Professional\RunTime\IsP10.tmp
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iusF.tmp
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iscE.tmp
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\LICEd4ab.rra
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\XUL.mfl
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\setud45d.rra
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\compreg.dat.tmp
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\XPC.mfl
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\xpti.dat.tmp
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\compatibility.ini
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\prefs.js
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\mimeTypes.rdf
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iKeB.tmp
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\Setud4ca.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\setud98d.rra
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\chrome\userContent-example.css
%TEMP%\d0b4.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\_IsRd94f.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\_IsRd8f1.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\_IsRd8a3.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\defad874.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\isrtd826.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\Strid7d8.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\Strid7a9.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\setud74b.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\_IsRd6af.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\defad680.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\defad661.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\isrtd613.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\isrtd5b5.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\Strid567.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\cored538.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\_ISUd509.rra
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\localstore.rdf
%APPDATA%\FFPortable\res\is-613JE.tmp
%APPDATA%\FFPortable\res\is-K6ON5.tmp
%APPDATA%\FFPortable\res\is-ICV15.tmp
%APPDATA%\FFPortable\components\is-TUDH9.tmp
%APPDATA%\FFPortable\components\is-OSTRO.tmp
%APPDATA%\FFPortable\components\is-9LGT4.tmp
%APPDATA%\FFPortable\components\is-3770K.tmp
%APPDATA%\FFPortable\components\is-NN38C.tmp
%APPDATA%\FFPortable\components\is-G85LJ.tmp
%APPDATA%\FFPortable\components\is-KIUP9.tmp
%APPDATA%\FFPortable\components\is-1LQJH.tmp
%APPDATA%\FFPortable\components\is-UNBGH.tmp
%APPDATA%\FFPortable\chrome\is-169I9.tmp
%APPDATA%\FFPortable\chrome\is-3RCJ9.tmp
%APPDATA%\FFPortable\chrome\is-13V4L.tmp
%APPDATA%\FFPortable\chrome\is-4ETN6.tmp
%APPDATA%\FFPortable\chrome\is-KOUKU.tmp
%APPDATA%\FFPortable\chrome\is-PB1AB.tmp
%APPDATA%\FFPortable\chrome\is-T1213.tmp
%APPDATA%\FFPortable\chrome\is-OANKI.tmp
%APPDATA%\FFPortable\components\is-4QTKA.tmp
%APPDATA%\FFPortable\components\is-5M3KD.tmp
%APPDATA%\FFPortable\chrome\is-5L0MV.tmp
%APPDATA%\FFPortable\components\is-EE12S.tmp
%APPDATA%\FFPortable\components\is-0H61U.tmp
%APPDATA%\FFPortable\components\is-0UGK6.tmp
%APPDATA%\FFPortable\components\is-IG7HA.tmp
%APPDATA%\FFPortable\components\is-UNFUP.tmp
%APPDATA%\FFPortable\components\is-94R1N.tmp
%APPDATA%\FFPortable\components\is-3JEEP.tmp
%APPDATA%\FFPortable\components\is-JVVKR.tmp
%APPDATA%\FFPortable\components\is-01S8O.tmp
%APPDATA%\FFPortable\components\is-D9GF2.tmp
%APPDATA%\FFPortable\components\is-6A7SQ.tmp
%APPDATA%\FFPortable\components\is-S0GDQ.tmp
%APPDATA%\FFPortable\components\is-HESQF.tmp
%APPDATA%\FFPortable\components\is-VQO58.tmp
%APPDATA%\FFPortable\components\is-DHF2L.tmp
%APPDATA%\FFPortable\components\is-SAJ17.tmp
%APPDATA%\FFPortable\components\is-VU3EI.tmp
%APPDATA%\FFPortable\chrome\is-6SSHO.tmp
%APPDATA%\FFPortable\chrome\is-CAKGO.tmp
%APPDATA%\FFPortable\is-MT7BH.tmp
%APPDATA%\FFPortable\is-P04PE.tmp
%APPDATA%\FFPortable\is-4UE6I.tmp
%APPDATA%\FFPortable\is-PRPG1.tmp
%APPDATA%\FFPortable\is-D5F7P.tmp
%APPDATA%\FFPortable\is-1D3UV.tmp
%APPDATA%\FFPortable\is-JGIF1.tmp
%APPDATA%\FFPortable\is-958G8.tmp
%APPDATA%\FFPortable\is-JQV6P.tmp
%APPDATA%\FFPortable\is-8QPPP.tmp
%APPDATA%\FFPortable\is-4PE1D.tmp
%APPDATA%\FFPortable\is-TCKO6.tmp
%APPDATA%\FFPortable\is-LA87D.tmp
%TEMP%\is-H28LR.tmp\rog\is-4R7O3.tmp
%TEMP%\is-H28LR.tmp\_isetup\_isdecmp.dll
%APPDATA%\FFPortable\is-ELN85.tmp
%APPDATA%\FFPortable\is-2GKUT.tmp
%APPDATA%\FFPortable\is-QK05E.tmp
%APPDATA%\FFPortable\is-1P932.tmp
%APPDATA%\FFPortable\is-UIPQD.tmp
%APPDATA%\FFPortable\chrome\is-9N0US.tmp
%APPDATA%\FFPortable\is-KQ65C.tmp
%APPDATA%\FFPortable\chrome\is-FVGGO.tmp
%APPDATA%\FFPortable\is-ABV1V.tmp
%APPDATA%\FFPortable\is-MOUQ2.tmp
%APPDATA%\FFPortable\is-RU1KU.tmp
%APPDATA%\FFPortable\is-3US2I.tmp
%APPDATA%\FFPortable\is-8266U.tmp
%APPDATA%\FFPortable\is-J4KD8.tmp
%APPDATA%\FFPortable\is-VJ4ME.tmp
%APPDATA%\FFPortable\chrome\is-05OQQ.tmp
%APPDATA%\FFPortable\is-ROSLT.tmp
%APPDATA%\FFPortable\is-A625L.tmp
%APPDATA%\FFPortable\is-VVL0E.tmp
%APPDATA%\FFPortable\is-C4GFL.tmp
%APPDATA%\FFPortable\is-GNL95.tmp
%APPDATA%\FFPortable\is-5FA8G.tmp
%APPDATA%\FFPortable\components\is-8NLGT.tmp
%APPDATA%\FFPortable\components\is-GDS8G.tmp
%APPDATA%\FFPortable\components\is-VPG65.tmp
%APPDATA%\FFPortable\components\is-FF4MK.tmp
%APPDATA%\FFPortable\modules\is-5DFDE.tmp
%APPDATA%\FFPortable\modules\is-G17AO.tmp
%APPDATA%\FFPortable\modules\is-UGA6B.tmp
%APPDATA%\FFPortable\modules\is-09FPC.tmp
%APPDATA%\FFPortable\modules\is-6KBGK.tmp
%APPDATA%\FFPortable\modules\is-TM2RO.tmp
%APPDATA%\FFPortable\modules\is-R75L0.tmp
%APPDATA%\FFPortable\modules\is-QTR8T.tmp
%APPDATA%\FFPortable\modules\is-5TAN5.tmp
%APPDATA%\FFPortable\modules\is-2KNG4.tmp
%APPDATA%\FFPortable\modules\is-RBDPO.tmp
%APPDATA%\FFPortable\modules\is-7TFGJ.tmp
%APPDATA%\FFPortable\modules\is-9I2PM.tmp
%APPDATA%\FFPortable\greprefs\is-9FAT5.tmp
%APPDATA%\FFPortable\greprefs\is-5AN9M.tmp
%APPDATA%\FFPortable\greprefs\is-HGSSL.tmp
%APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\is-BACCM.tmp
%APPDATA%\FFPortable\modules\is-MR1CC.tmp
%APPDATA%\FFPortable\modules\is-KE6CD.tmp
%APPDATA%\FFPortable\res\is-E49BD.tmp
%APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\is-3JGOO.tmp
%APPDATA%\FFPortable\components\is-8GOMJ.tmp
%APPDATA%\FFPortable\res\is-VLLRT.tmp
%APPDATA%\FFPortable\res\is-DIJNR.tmp
%APPDATA%\FFPortable\res\is-U2R13.tmp
%APPDATA%\FFPortable\res\is-3V08P.tmp
%APPDATA%\FFPortable\res\is-44V6C.tmp
%APPDATA%\FFPortable\res\is-37RLO.tmp
%APPDATA%\FFPortable\res\is-UDV3L.tmp
%APPDATA%\FFPortable\res\is-2KD3G.tmp
%APPDATA%\FFPortable\res\is-LTED4.tmp
%APPDATA%\FFPortable\plugins\is-DPUM3.tmp
%APPDATA%\FFPortable\plugins\is-OCIT4.tmp
%APPDATA%\FFPortable\modules\is-VTSIP.tmp
%APPDATA%\FFPortable\modules\is-OM4EC.tmp
%APPDATA%\FFPortable\modules\is-R0EI4.tmp
%APPDATA%\FFPortable\modules\is-CG55O.tmp
%APPDATA%\FFPortable\modules\is-F1G1T.tmp
%APPDATA%\FFPortable\modules\is-4MU5I.tmp
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\Strida0a.rra
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\localstore-1.rdf
%APPDATA%\FFPortable\dictionaries\is-K6371.tmp
%APPDATA%\FFPortable\components\is-B92P1.tmp
%APPDATA%\FFPortable\components\is-UAMCV.tmp
%APPDATA%\FFPortable\components\is-U4HVD.tmp
%APPDATA%\FFPortable\components\is-2VB8H.tmp
%APPDATA%\FFPortable\components\is-JM217.tmp
%APPDATA%\FFPortable\components\is-KFP5J.tmp
%APPDATA%\FFPortable\components\is-JBU8M.tmp
%APPDATA%\FFPortable\components\is-8A8S4.tmp
%APPDATA%\FFPortable\components\is-LTQG2.tmp
%APPDATA%\FFPortable\components\is-V68FI.tmp
%APPDATA%\FFPortable\components\is-EG3P4.tmp
%APPDATA%\FFPortable\components\is-HKHL9.tmp
%APPDATA%\FFPortable\components\is-GPLPP.tmp
%APPDATA%\FFPortable\components\is-QJB24.tmp
%APPDATA%\FFPortable\components\is-I2LKK.tmp
%APPDATA%\FFPortable\components\is-6O13M.tmp
%APPDATA%\FFPortable\components\is-ELK2D.tmp
%APPDATA%\FFPortable\components\is-AFNUJ.tmp
%APPDATA%\FFPortable\components\is-J4O78.tmp
%APPDATA%\FFPortable\defaults\profile\chrome\is-827IK.tmp
%APPDATA%\FFPortable\defaults\pref\is-773U5.tmp
%APPDATA%\FFPortable\defaults\profile\chrome\is-1U1F6.tmp
%APPDATA%\FFPortable\defaults\profile\is-TI66U.tmp
%APPDATA%\FFPortable\defaults\profile\is-3AGVU.tmp
%APPDATA%\FFPortable\defaults\profile\is-TR990.tmp
%APPDATA%\FFPortable\defaults\profile\is-RUFLS.tmp
%APPDATA%\FFPortable\defaults\pref\is-SJAHM.tmp
%APPDATA%\FFPortable\defaults\pref\is-OC42M.tmp
%APPDATA%\FFPortable\defaults\pref\is-2JVVG.tmp
%APPDATA%\FFPortable\components\is-KM8KK.tmp
%APPDATA%\FFPortable\defaults\pref\is-H1SPQ.tmp
%APPDATA%\FFPortable\defaults\autoconfig\is-8P9EH.tmp
%APPDATA%\FFPortable\defaults\autoconfig\is-RVBOA.tmp
%APPDATA%\FFPortable\components\is-GREDA.tmp
%APPDATA%\FFPortable\components\is-520VI.tmp
%APPDATA%\FFPortable\components\is-0Q6MM.tmp
%APPDATA%\FFPortable\components\is-P8D1O.tmp
%APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\is-I20U7.tmp
%TEMP%\s4UE40LT.part

Удаляет следующие файлы:

%TEMP%\is-H28LR.tmp\rog\unins000.dat
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\cookies.sqlite-journal
%TEMP%\nso13.tmp\System.dll
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\content-prefs.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\formhistory.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\search.sqlite-journal
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\XUL.mfl
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\xpti.dat
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\compreg.dat
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\permissions.sqlite-journal
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\_IsRes.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\StringTable-0009-English.ips
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\urlclassifier3.sqlite-journal
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\_IsRes.dll
%CommonProgramFiles%\InstallShield\Professional\RunTime\IsP10.tmp
%TEMP%\skin54ae.rra
%TEMP%\is-1C5PK.tmp\<Имя файла>.tmp
%APPDATA%\FFPortable\components\xpti.dat
%TEMP%\_se9.tmp
%TEMP%\igd8.tmp
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\2d6fdd68a6aeb0d75e74249ac020c549_23ef5514-3059-436f-a4a7-4cefaab20eb1
%TEMP%\set5.tmp
%TEMP%\set3.tmp
%TEMP%\is-H28LR.tmp\_isetup\_isdecmp.dll
%TEMP%\is-H28LR.tmp\rog\unins000.exe
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\StringTable-0009-English.ips
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\downloads.sqlite-journal

Перемещает следующие файлы:

%TEMP%\is-H28LR.tmp\rog\is-4R7O3.tmp в %TEMP%\is-H28LR.tmp\rog\unins000.exe
%APPDATA%\FFPortable\res\is-7PM83.tmp в %APPDATA%\FFPortable\res\language.properties
%APPDATA%\FFPortable\res\is-JC8JJ.tmp в %APPDATA%\FFPortable\res\loading-image.png
%APPDATA%\FFPortable\res\is-OBM2D.tmp в %APPDATA%\FFPortable\res\mathml.css
%APPDATA%\FFPortable\res\is-3IPMN.tmp в %APPDATA%\FFPortable\res\quirk.css
%APPDATA%\FFPortable\res\is-5QLFJ.tmp в %APPDATA%\FFPortable\res\svg.css
%APPDATA%\FFPortable\res\is-KIOC6.tmp в %APPDATA%\FFPortable\res\table-add-column-after-active.gif
%APPDATA%\FFPortable\res\is-C76SC.tmp в %APPDATA%\FFPortable\res\table-add-column-after-hover.gif
%APPDATA%\FFPortable\res\is-T2NJI.tmp в %APPDATA%\FFPortable\res\table-add-column-after.gif
%APPDATA%\FFPortable\res\is-94S6M.tmp в %APPDATA%\FFPortable\res\table-add-column-before-active.gif
%APPDATA%\FFPortable\res\is-0HG2L.tmp в %APPDATA%\FFPortable\res\table-add-column-before-hover.gif
%APPDATA%\FFPortable\res\is-PUBRP.tmp в %APPDATA%\FFPortable\res\table-add-column-before.gif
%APPDATA%\FFPortable\res\is-8OORK.tmp в %APPDATA%\FFPortable\res\table-add-row-after-active.gif
%APPDATA%\FFPortable\modules\is-CG55O.tmp в %APPDATA%\FFPortable\modules\utils.js
%APPDATA%\FFPortable\res\is-A9C64.tmp в %APPDATA%\FFPortable\res\table-add-row-after-hover.gif
%APPDATA%\FFPortable\res\is-031BD.tmp в %APPDATA%\FFPortable\res\table-add-row-before-active.gif
%APPDATA%\FFPortable\res\is-IH34O.tmp в %APPDATA%\FFPortable\res\table-add-row-before-hover.gif
%APPDATA%\FFPortable\res\is-S2PQK.tmp в %APPDATA%\FFPortable\res\table-add-row-before.gif
%APPDATA%\FFPortable\res\is-7JNSA.tmp в %APPDATA%\FFPortable\res\table-remove-column-active.gif
%APPDATA%\FFPortable\res\is-GUL9V.tmp в %APPDATA%\FFPortable\res\table-remove-column-hover.gif
%APPDATA%\FFPortable\res\is-EHK8J.tmp в %APPDATA%\FFPortable\res\table-remove-column.gif
%APPDATA%\FFPortable\res\is-N0I4V.tmp в %APPDATA%\FFPortable\res\table-remove-row-active.gif
%APPDATA%\FFPortable\res\is-26V2V.tmp в %APPDATA%\FFPortable\res\table-remove-row-hover.gif
%APPDATA%\FFPortable\res\is-A9TA8.tmp в %APPDATA%\FFPortable\res\table-remove-row.gif
%APPDATA%\FFPortable\res\is-60G50.tmp в %APPDATA%\FFPortable\res\ua.css
%APPDATA%\FFPortable\res\is-6N0PS.tmp в %APPDATA%\FFPortable\res\viewsource.css
%APPDATA%\FFPortable\res\is-EQOEG.tmp в %APPDATA%\FFPortable\res\wincharset.properties
%APPDATA%\FFPortable\res\is-K6ON5.tmp в %APPDATA%\FFPortable\res\html.css
%APPDATA%\FFPortable\res\is-613JE.tmp в %APPDATA%\FFPortable\res\langGroups.properties
%APPDATA%\FFPortable\res\is-ICV15.tmp в %APPDATA%\FFPortable\res\hiddenWindow.html
%APPDATA%\FFPortable\res\is-E49BD.tmp в %APPDATA%\FFPortable\res\grabber.gif
%APPDATA%\FFPortable\res\is-VLLRT.tmp в %APPDATA%\FFPortable\res\forms.css
%APPDATA%\FFPortable\modules\is-G17AO.tmp в %APPDATA%\FFPortable\modules\DownloadLastDir.jsm
%APPDATA%\FFPortable\modules\is-QTR8T.tmp в %APPDATA%\FFPortable\modules\DownloadUtils.jsm
%APPDATA%\FFPortable\modules\is-R75L0.tmp в %APPDATA%\FFPortable\modules\FileUtils.jsm
%APPDATA%\FFPortable\modules\is-TM2RO.tmp в %APPDATA%\FFPortable\modules\ISO8601DateUtils.jsm
%APPDATA%\FFPortable\modules\is-6KBGK.tmp в %APPDATA%\FFPortable\modules\LightweightThemeConsumer.jsm
%APPDATA%\FFPortable\modules\is-09FPC.tmp в %APPDATA%\FFPortable\modules\LightweightThemeManager.jsm
%APPDATA%\FFPortable\modules\is-UGA6B.tmp в %APPDATA%\FFPortable\modules\Microformats.js
%APPDATA%\FFPortable\modules\is-5DFDE.tmp в %APPDATA%\FFPortable\modules\NetUtil.jsm
%APPDATA%\FFPortable\modules\is-2KNG4.tmp в %APPDATA%\FFPortable\modules\NetworkPrioritizer.jsm
%APPDATA%\FFPortable\modules\is-RBDPO.tmp в %APPDATA%\FFPortable\modules\openLocationLastURL.jsm
%APPDATA%\FFPortable\modules\is-5TAN5.tmp в %APPDATA%\FFPortable\modules\PlacesDBUtils.jsm
%APPDATA%\FFPortable\modules\is-KE6CD.tmp в %APPDATA%\FFPortable\modules\PluralForm.jsm
%APPDATA%\FFPortable\res\dtd\is-31CJ0.tmp в %APPDATA%\FFPortable\res\dtd\mathml.dtd
%APPDATA%\FFPortable\res\is-OEGIP.tmp в %APPDATA%\FFPortable\res\table-add-row-after.gif
%APPDATA%\FFPortable\modules\is-F1G1T.tmp в %APPDATA%\FFPortable\modules\SpatialNavigation.js
%APPDATA%\FFPortable\modules\is-OM4EC.tmp в %APPDATA%\FFPortable\modules\WindowsPreviewPerTab.jsm
%APPDATA%\FFPortable\modules\is-VTSIP.tmp в %APPDATA%\FFPortable\modules\XPCOMUtils.jsm
%APPDATA%\FFPortable\plugins\is-OCIT4.tmp в %APPDATA%\FFPortable\plugins\npbasic.dll
%APPDATA%\FFPortable\plugins\is-DPUM3.tmp в %APPDATA%\FFPortable\plugins\npnul32.dll
%APPDATA%\FFPortable\res\is-LTED4.tmp в %APPDATA%\FFPortable\res\arrow.gif
%APPDATA%\FFPortable\res\is-2KD3G.tmp в %APPDATA%\FFPortable\res\arrowd.gif
%APPDATA%\FFPortable\res\is-UDV3L.tmp в %APPDATA%\FFPortable\res\broken-image.png
%APPDATA%\FFPortable\res\is-37RLO.tmp в %APPDATA%\FFPortable\res\charsetalias.properties
%APPDATA%\FFPortable\res\is-44V6C.tmp в %APPDATA%\FFPortable\res\charsetData.properties
%APPDATA%\FFPortable\res\is-3V08P.tmp в %APPDATA%\FFPortable\res\contenteditable.css
%APPDATA%\FFPortable\res\is-U2R13.tmp в %APPDATA%\FFPortable\res\designmode.css
%APPDATA%\FFPortable\res\is-DIJNR.tmp в %APPDATA%\FFPortable\res\EditorOverride.css
%APPDATA%\FFPortable\modules\is-4MU5I.tmp в %APPDATA%\FFPortable\modules\distribution.js
%APPDATA%\FFPortable\modules\is-R0EI4.tmp в %APPDATA%\FFPortable\modules\WindowDraggingUtils.jsm
%APPDATA%\FFPortable\res\dtd\is-HBERK.tmp в %APPDATA%\FFPortable\res\dtd\xhtml11.dtd
%APPDATA%\FFPortable\res\entityTables\is-R4M23.tmp в %APPDATA%\FFPortable\res\entityTables\html40Latin1.properties
%APPDATA%\FFPortable\res\entityTables\is-28DAM.tmp в %APPDATA%\FFPortable\res\entityTables\html40Special.properties
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iusF.tmp в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iuser.dll
%CommonProgramFiles%\InstallShield\Professional\RunTime\Obj11.tmp в %CommonProgramFiles%\InstallShield\Professional\RunTime\Objectps.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\setud45d.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\setup.inx
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\LICEd4ab.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\LICENSE.txt
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\Setud4ca.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\SetupCfg.exe
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\_ISUd509.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\_ISUser.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\cored538.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\corecomp.ini
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\Strid567.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\StringTable-0009-English.ips
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\isrtd5b5.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\isrtd5a5.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\isrtd613.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\isrt.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\defad680.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\default.pal
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\_IsRd6af.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{49BF48CC-ABB6-4795-9B35-B5DE005D8612}\_IsRes.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\setud74b.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\setup.inx
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\Strid7d8.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\StringTable-0009-English.ips
%APPDATA%\FFPortable\modules\is-MR1CC.tmp в %APPDATA%\FFPortable\modules\debug.js
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\isrtd826.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\isrt.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\defad874.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\default.pal
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\_IsRd8a3.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\_IsRd893.rra
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\_IsRd8f1.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\_IsRes.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\setud98d.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\setup.inx
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\Strida0a.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\StringTable-0009-English.ips
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\isrtd5a5.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\isrt.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\defad661.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\default.pal
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\_IsRdac6.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\_IsRes.dll
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions-1.cache в %APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions.cache
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions-1.ini в %APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions.ini
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\prefs-1.js в %APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\prefs.js
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions-1.rdf в %APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions.rdf
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iscE.tmp в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iscript.dll
%APPDATA%\FFPortable\searchplugins\is-2F4FB.tmp в %APPDATA%\FFPortable\searchplugins\eBay.xml
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\ctoD.tmp в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\ctor.dll
%APPDATA%\FFPortable\searchplugins\is-T2NBS.tmp в %APPDATA%\FFPortable\searchplugins\creativecommons.xml
%APPDATA%\FFPortable\res\entityTables\is-K79UT.tmp в %APPDATA%\FFPortable\res\entityTables\html40Symbols.properties
%APPDATA%\FFPortable\res\entityTables\is-RGAI9.tmp в %APPDATA%\FFPortable\res\entityTables\htmlEntityVersions.properties
%APPDATA%\FFPortable\res\entityTables\is-6SCQD.tmp в %APPDATA%\FFPortable\res\entityTables\mathml20.properties
%APPDATA%\FFPortable\res\entityTables\is-T2S79.tmp в %APPDATA%\FFPortable\res\entityTables\transliterate.properties
%APPDATA%\FFPortable\res\fonts\is-B25SQ.tmp в %APPDATA%\FFPortable\res\fonts\mathfont.properties
%APPDATA%\FFPortable\res\fonts\is-HMDIN.tmp в %APPDATA%\FFPortable\res\fonts\mathfontStandardSymbolsL.properties
%APPDATA%\FFPortable\res\fonts\is-S4GJI.tmp в %APPDATA%\FFPortable\res\fonts\mathfontSTIXNonUnicode.properties
%APPDATA%\FFPortable\res\fonts\is-2IMO0.tmp в %APPDATA%\FFPortable\res\fonts\mathfontSTIXSize1.properties
%APPDATA%\FFPortable\res\fonts\is-P8GFD.tmp в %APPDATA%\FFPortable\res\fonts\mathfontSymbol.properties
%APPDATA%\FFPortable\res\fonts\is-B90AL.tmp в %APPDATA%\FFPortable\res\fonts\mathfontUnicode.properties
%APPDATA%\FFPortable\res\html\is-1R3I9.tmp в %APPDATA%\FFPortable\res\html\folder.png
%APPDATA%\FFPortable\searchplugins\is-8AVKJ.tmp в %APPDATA%\FFPortable\searchplugins\amazondotcom.xml
%APPDATA%\FFPortable\searchplugins\is-19FDE.tmp в %APPDATA%\FFPortable\searchplugins\answers.xml
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\mimeTypes-1.rdf в %APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\mimeTypes.rdf
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iKeB.tmp в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iKernel.dll
%APPDATA%\FFPortable\searchplugins\is-678OR.tmp в %APPDATA%\FFPortable\searchplugins\google.xml
%APPDATA%\FFPortable\searchplugins\is-42K1M.tmp в %APPDATA%\FFPortable\searchplugins\wikipedia.xml
%APPDATA%\FFPortable\searchplugins\is-JQ1C3.tmp в %APPDATA%\FFPortable\searchplugins\yahoo.xml
%APPDATA%\FFPortable\uninstall\is-TUKNF.tmp в %APPDATA%\FFPortable\uninstall\helper.exe
%APPDATA%\is-M2H4G.tmp в %APPDATA%\pinnacle-setup.exe
%TEMP%\isp2.tmp\temp.000 в %TEMP%\isp2.tmp\setup.dll
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\isp4.tmp\temp.000 в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\isp4.tmp\setup.dll
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\isp4.tmp\setup.dll в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\Setup.dll
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\isp7.tmp\temp.000 в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\isp7.tmp\IGdi.dll
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\isp7.tmp\IGdi.dll в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\iGdi.dll
%TEMP%\isp6.tmp\temp.000 в %TEMP%\isp6.tmp\_Setup.dll
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\xpti.dat.tmp в %APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\xpti.dat
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\compreg.dat.tmp в %APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\compreg.dat
%CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\DotC.tmp в %CommonProgramFiles%\InstallShield\Professional\RunTime\09\00\Intel32\DotNetInstaller.exe
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\Strid7a9.rra в %TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\Strid799.rra
%APPDATA%\FFPortable\modules\is-7TFGJ.tmp в %APPDATA%\FFPortable\modules\ctypes.jsm
%APPDATA%\FFPortable\defaults\pref\is-OC42M.tmp в %APPDATA%\FFPortable\defaults\pref\firefox.js
%APPDATA%\FFPortable\chrome\is-9N0US.tmp в %APPDATA%\FFPortable\chrome\browser.manifest
%APPDATA%\FFPortable\chrome\is-05OQQ.tmp в %APPDATA%\FFPortable\chrome\classic.jar
%APPDATA%\FFPortable\chrome\is-CAKGO.tmp в %APPDATA%\FFPortable\chrome\classic.manifest
%APPDATA%\FFPortable\chrome\is-6SSHO.tmp в %APPDATA%\FFPortable\chrome\comm.jar
%APPDATA%\FFPortable\chrome\is-5L0MV.tmp в %APPDATA%\FFPortable\chrome\comm.manifest
%APPDATA%\FFPortable\chrome\is-169I9.tmp в %APPDATA%\FFPortable\chrome\en-US.jar
%APPDATA%\FFPortable\chrome\is-T1213.tmp в %APPDATA%\FFPortable\chrome\en-US.manifest
%APPDATA%\FFPortable\chrome\is-PB1AB.tmp в %APPDATA%\FFPortable\chrome\pippki.jar
%APPDATA%\FFPortable\chrome\is-KOUKU.tmp в %APPDATA%\FFPortable\chrome\pippki.manifest
%APPDATA%\FFPortable\chrome\is-4ETN6.tmp в %APPDATA%\FFPortable\chrome\reporter.jar
%APPDATA%\FFPortable\chrome\is-13V4L.tmp в %APPDATA%\FFPortable\chrome\reporter.manifest
%APPDATA%\FFPortable\chrome\is-3RCJ9.tmp в %APPDATA%\FFPortable\chrome\toolkit.jar
%APPDATA%\FFPortable\is-JGIF1.tmp в %APPDATA%\FFPortable\nssckbi.dll
%APPDATA%\FFPortable\chrome\is-OANKI.tmp в %APPDATA%\FFPortable\chrome\toolkit.manifest
%APPDATA%\FFPortable\components\is-TUDH9.tmp в %APPDATA%\FFPortable\components\browserdirprovider.dll
%APPDATA%\FFPortable\components\is-KIUP9.tmp в %APPDATA%\FFPortable\components\brwsrcmp.dll
%APPDATA%\FFPortable\components\is-G85LJ.tmp в %APPDATA%\FFPortable\components\components.list
%APPDATA%\FFPortable\components\is-NN38C.tmp в %APPDATA%\FFPortable\components\compreg.dat
%APPDATA%\FFPortable\components\is-3770K.tmp в %APPDATA%\FFPortable\components\FeedConverter.js
%APPDATA%\FFPortable\components\is-9LGT4.tmp в %APPDATA%\FFPortable\components\FeedProcessor.js
%APPDATA%\FFPortable\components\is-OSTRO.tmp в %APPDATA%\FFPortable\components\FeedWriter.js
%APPDATA%\FFPortable\components\is-VPG65.tmp в %APPDATA%\FFPortable\components\fuelApplication.js
%APPDATA%\FFPortable\components\is-UNBGH.tmp в %APPDATA%\FFPortable\components\GPSDGeolocationProvider.js
%APPDATA%\FFPortable\components\is-1LQJH.tmp в %APPDATA%\FFPortable\components\jsconsole-clhandler.js
%APPDATA%\FFPortable\components\is-3JEEP.tmp в %APPDATA%\FFPortable\components\NetworkGeolocationProvider.js
%APPDATA%\FFPortable\components\is-5M3KD.tmp в %APPDATA%\FFPortable\components\nsAddonRepository.js
%APPDATA%\FFPortable\is-ABV1V.tmp в %APPDATA%\FFPortable\xul.dll
%APPDATA%\FFPortable\chrome\is-FVGGO.tmp в %APPDATA%\FFPortable\chrome\browser.jar
%APPDATA%\FFPortable\is-MOUQ2.tmp в %APPDATA%\FFPortable\xpcom.dll
%APPDATA%\FFPortable\is-RU1KU.tmp в %APPDATA%\FFPortable\updater.ini
%APPDATA%\FFPortable\is-3US2I.tmp в %APPDATA%\FFPortable\update.locale
%APPDATA%\FFPortable\is-TCKO6.tmp в %APPDATA%\FFPortable\application.ini
%APPDATA%\FFPortable\is-4PE1D.tmp в %APPDATA%\FFPortable\blocklist.xml
%APPDATA%\FFPortable\is-8QPPP.tmp в %APPDATA%\FFPortable\browserconfig.properties
%APPDATA%\FFPortable\is-JQV6P.tmp в %APPDATA%\FFPortable\crashreporter-override.ini
%APPDATA%\FFPortable\is-ELN85.tmp в %APPDATA%\FFPortable\crashreporter.exe
%APPDATA%\FFPortable\is-958G8.tmp в %APPDATA%\FFPortable\crashreporter.ini
%APPDATA%\FFPortable\is-1D3UV.tmp в %APPDATA%\FFPortable\freebl3.chk
%APPDATA%\FFPortable\is-D5F7P.tmp в %APPDATA%\FFPortable\freebl3.dll
%APPDATA%\FFPortable\is-PRPG1.tmp в %APPDATA%\FFPortable\js3250.dll
%APPDATA%\FFPortable\is-4UE6I.tmp в %APPDATA%\FFPortable\LICENSE
%APPDATA%\FFPortable\is-P04PE.tmp в %APPDATA%\FFPortable\mozcrt19.dll
%APPDATA%\FFPortable\is-1P932.tmp в %APPDATA%\FFPortable\nspr4.dll
%APPDATA%\FFPortable\components\is-DHF2L.tmp в %APPDATA%\FFPortable\components\nsBadCertHandler.js
%APPDATA%\FFPortable\components\is-4QTKA.tmp в %APPDATA%\FFPortable\components\browser.xpt
%APPDATA%\FFPortable\is-MT7BH.tmp в %APPDATA%\FFPortable\nss3.dll
%APPDATA%\FFPortable\is-QK05E.tmp в %APPDATA%\FFPortable\nssdbm3.dll
%APPDATA%\FFPortable\is-UIPQD.tmp в %APPDATA%\FFPortable\nssutil3.dll
%APPDATA%\FFPortable\is-5FA8G.tmp в %APPDATA%\FFPortable\platform.ini
%APPDATA%\FFPortable\is-GNL95.tmp в %APPDATA%\FFPortable\plc4.dll
%APPDATA%\FFPortable\is-C4GFL.tmp в %APPDATA%\FFPortable\plds4.dll
%APPDATA%\FFPortable\is-VVL0E.tmp в %APPDATA%\FFPortable\README.txt
%APPDATA%\FFPortable\is-A625L.tmp в %APPDATA%\FFPortable\smime3.dll
%APPDATA%\FFPortable\is-ROSLT.tmp в %APPDATA%\FFPortable\softokn3.chk
%APPDATA%\FFPortable\is-VJ4ME.tmp в %APPDATA%\FFPortable\softokn3.dll
%APPDATA%\FFPortable\is-KQ65C.tmp в %APPDATA%\FFPortable\sqlite3.dll
%APPDATA%\FFPortable\is-J4KD8.tmp в %APPDATA%\FFPortable\ssl3.dll
%APPDATA%\FFPortable\is-8266U.tmp в %APPDATA%\FFPortable\update.exe
%APPDATA%\FFPortable\is-LA87D.tmp в %APPDATA%\FFPortable\AccessibleMarshal.dll
%APPDATA%\FFPortable\is-2GKUT.tmp в %APPDATA%\FFPortable\nssdbm3.chk
%APPDATA%\FFPortable\components\is-VQO58.tmp в %APPDATA%\FFPortable\components\nsBlocklistService.js
%APPDATA%\FFPortable\components\is-HESQF.tmp в %APPDATA%\FFPortable\components\nsBrowserContentHandler.js
%APPDATA%\FFPortable\components\is-S0GDQ.tmp в %APPDATA%\FFPortable\components\nsBrowserGlue.js
%APPDATA%\FFPortable\components\is-JBU8M.tmp в %APPDATA%\FFPortable\components\nsURLFormatter.js
%APPDATA%\FFPortable\components\is-ELK2D.tmp в %APPDATA%\FFPortable\components\nsWebHandlerApp.js
%APPDATA%\FFPortable\components\is-J4O78.tmp в %APPDATA%\FFPortable\components\pluginGlue.js
%APPDATA%\FFPortable\components\is-KM8KK.tmp в %APPDATA%\FFPortable\components\storage-Legacy.js
%APPDATA%\FFPortable\components\is-P8D1O.tmp в %APPDATA%\FFPortable\components\storage-mozStorage.js
%APPDATA%\FFPortable\components\is-0Q6MM.tmp в %APPDATA%\FFPortable\components\txEXSLTRegExFunctions.js
%APPDATA%\FFPortable\components\is-520VI.tmp в %APPDATA%\FFPortable\components\WebContentConverter.js
%APPDATA%\FFPortable\components\is-GREDA.tmp в %APPDATA%\FFPortable\components\xpti.dat
%APPDATA%\FFPortable\defaults\autoconfig\is-RVBOA.tmp в %APPDATA%\FFPortable\defaults\autoconfig\platform.js
%APPDATA%\FFPortable\defaults\autoconfig\is-8P9EH.tmp в %APPDATA%\FFPortable\defaults\autoconfig\prefcalls.js
%APPDATA%\FFPortable\defaults\pref\is-H1SPQ.tmp в %APPDATA%\FFPortable\defaults\pref\channel-prefs.js
%APPDATA%\FFPortable\defaults\pref\is-2JVVG.tmp в %APPDATA%\FFPortable\defaults\pref\firefox-branding.js
%APPDATA%\FFPortable\defaults\pref\is-773U5.tmp в %APPDATA%\FFPortable\defaults\pref\firefox-l10n.js
%APPDATA%\FFPortable\defaults\pref\is-SJAHM.tmp в %APPDATA%\FFPortable\defaults\pref\reporter.js
%APPDATA%\FFPortable\modules\is-9I2PM.tmp в %APPDATA%\FFPortable\modules\CertUtils.jsm
%APPDATA%\FFPortable\defaults\profile\is-RUFLS.tmp в %APPDATA%\FFPortable\defaults\profile\bookmarks.html
%APPDATA%\FFPortable\defaults\profile\is-TR990.tmp в %APPDATA%\FFPortable\defaults\profile\localstore.rdf
%APPDATA%\FFPortable\defaults\profile\is-3AGVU.tmp в %APPDATA%\FFPortable\defaults\profile\mimeTypes.rdf
%APPDATA%\FFPortable\defaults\profile\is-TI66U.tmp в %APPDATA%\FFPortable\defaults\profile\prefs.js
%APPDATA%\FFPortable\defaults\profile\chrome\is-1U1F6.tmp в %APPDATA%\FFPortable\defaults\profile\chrome\userChrome-example.css
%APPDATA%\FFPortable\defaults\profile\chrome\is-827IK.tmp в %APPDATA%\FFPortable\defaults\profile\chrome\userContent-example.css
%APPDATA%\FFPortable\dictionaries\is-K6371.tmp в %APPDATA%\FFPortable\dictionaries\en-US.aff
%APPDATA%\FFPortable\dictionaries\is-8F6TB.tmp в %APPDATA%\FFPortable\dictionaries\en-US.dic
%APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\is-I20U7.tmp в %APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\icon.png
%APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\is-3JGOO.tmp в %APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\install.rdf
%APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\is-BACCM.tmp в %APPDATA%\FFPortable\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}\preview.png
%APPDATA%\FFPortable\greprefs\is-HGSSL.tmp в %APPDATA%\FFPortable\greprefs\all.js
%APPDATA%\FFPortable\greprefs\is-5AN9M.tmp в %APPDATA%\FFPortable\greprefs\security-prefs.js
%APPDATA%\FFPortable\components\is-AFNUJ.tmp в %APPDATA%\FFPortable\components\nsUrlClassifierListManager.js
%APPDATA%\FFPortable\components\is-FF4MK.tmp в %APPDATA%\FFPortable\components\nsPlacesDBFlush.js
%APPDATA%\FFPortable\components\is-B92P1.tmp в %APPDATA%\FFPortable\components\nsUrlClassifierLib.js
%APPDATA%\FFPortable\components\is-GDS8G.tmp в %APPDATA%\FFPortable\components\nsPlacesAutoComplete.js
%APPDATA%\FFPortable\components\is-6A7SQ.tmp в %APPDATA%\FFPortable\components\nsContentDispatchChooser.js
%APPDATA%\FFPortable\components\is-D9GF2.tmp в %APPDATA%\FFPortable\components\nsContentPrefService.js
%APPDATA%\FFPortable\components\is-VU3EI.tmp в %APPDATA%\FFPortable\components\nsDefaultCLH.js
%APPDATA%\FFPortable\components\is-SAJ17.tmp в %APPDATA%\FFPortable\components\nsDownloadManagerUI.js
%APPDATA%\FFPortable\components\is-01S8O.tmp в %APPDATA%\FFPortable\components\nsExtensionManager.js
%APPDATA%\FFPortable\components\is-94R1N.tmp в %APPDATA%\FFPortable\components\nsFormAutoComplete.js
%APPDATA%\FFPortable\components\is-UNFUP.tmp в %APPDATA%\FFPortable\components\nsHandlerService.js
%APPDATA%\FFPortable\components\is-IG7HA.tmp в %APPDATA%\FFPortable\components\nsHelperAppDlg.js
%APPDATA%\FFPortable\components\is-0UGK6.tmp в %APPDATA%\FFPortable\components\nsLivemarkService.js
%APPDATA%\FFPortable\components\is-0H61U.tmp в %APPDATA%\FFPortable\components\nsLoginInfo.js
%APPDATA%\FFPortable\components\is-EE12S.tmp в %APPDATA%\FFPortable\components\nsLoginManager.js
%APPDATA%\FFPortable\components\is-JVVKR.tmp в %APPDATA%\FFPortable\components\nsLoginManagerPrompter.js
%APPDATA%\FFPortable\components\is-8NLGT.tmp в %APPDATA%\FFPortable\components\nsMicrosummaryService.js
%APPDATA%\FFPortable\greprefs\is-9FAT5.tmp в %APPDATA%\FFPortable\greprefs\xpinstall.js
%APPDATA%\FFPortable\components\is-U4HVD.tmp в %APPDATA%\FFPortable\components\nsUpdateServiceStub.js
%APPDATA%\FFPortable\components\is-8GOMJ.tmp в %APPDATA%\FFPortable\components\nsPlacesTransactionsService.js
%APPDATA%\FFPortable\components\is-I2LKK.tmp в %APPDATA%\FFPortable\components\nsPrivateBrowsingService.js
%APPDATA%\FFPortable\components\is-QJB24.tmp в %APPDATA%\FFPortable\components\nsProxyAutoConfig.js
%APPDATA%\FFPortable\components\is-GPLPP.tmp в %APPDATA%\FFPortable\components\nsSafebrowsingApplication.js
%APPDATA%\FFPortable\components\is-HKHL9.tmp в %APPDATA%\FFPortable\components\nsSearchService.js
%APPDATA%\FFPortable\components\is-EG3P4.tmp в %APPDATA%\FFPortable\components\nsSearchSuggestions.js
%APPDATA%\FFPortable\components\is-V68FI.tmp в %APPDATA%\FFPortable\components\nsSessionStartup.js
%APPDATA%\FFPortable\components\is-LTQG2.tmp в %APPDATA%\FFPortable\components\nsSessionStore.js
%APPDATA%\FFPortable\components\is-6O13M.tmp в %APPDATA%\FFPortable\components\nsSetDefaultBrowser.js
%APPDATA%\FFPortable\components\is-8A8S4.tmp в %APPDATA%\FFPortable\components\nsSidebar.js
%APPDATA%\FFPortable\components\is-KFP5J.tmp в %APPDATA%\FFPortable\components\nsTaggingService.js
%APPDATA%\FFPortable\components\is-JM217.tmp в %APPDATA%\FFPortable\components\nsTryToClose.js
%APPDATA%\FFPortable\components\is-2VB8H.tmp в %APPDATA%\FFPortable\components\nsUpdateService.js
%APPDATA%\FFPortable\components\is-UAMCV.tmp в %APPDATA%\FFPortable\components\nsUpdateTimerManager.js
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\localstore-1.rdf в %APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\localstore.rdf

Подменяет следующие файлы:

%APPDATA%\FFPortable\components\xpti.dat
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\cookies.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\mimeTypes.rdf
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\mimeTypes-1.rdf
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\content-prefs.sqlite-journal
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\XUL.mfl
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions-1.ini
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\extensions-1.cache
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\prefs-1.js
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\compreg.dat
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\compreg.dat.tmp
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\xpti.dat
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\xpti.dat.tmp
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\permissions.sqlite-journal
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\_IsRes.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{565cffc3-824f-4e4a-980f-a36fe5199fe7}\StringTable-0009-English.ips
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\_IsRes.dll
%TEMP%\{611F2D3F-926C-4EAA-AFF8-FB9EEF0D3BBB}\{276a4a32-a727-4c52-827f-f90deceb5a93}\StringTable-0009-English.ips
<LS_APPDATA>\AMozilla\AFirefox\Profiles\9wyfd3t3.default\urlclassifier3.sqlite-journal
%APPDATA%\AMozilla\AFirefox\Profiles\9wyfd3t3.default\downloads.sqlite-journal

Сетевая активность:

Подключается к:

'localhost':1037
'localhost':1039
'localhost':1041
'74.##5.232.51':443
'fx####s.mozilla.com':80
'as##j.com':80
'mi###extube.net':80

TCP:

Запросы HTTP GET:

http://fx####s.mozilla.com/en-US/firefox/headlines.xml
http://www.as##j.com/ via as##j.com
http://mi###extube.net/

UDP:

DNS ASK sb-ssl.google.com
DNS ASK fx####s.mozilla.com
DNS ASK www.as##j.com
DNS ASK mi###extube.net

Другое:

Ищет следующие окна:

ClassName: 'AFirefoxMessageWindow' WindowName: ''

Создает и запускает на исполнение:

'%TEMP%\is-1C5PK.tmp\<Имя файла>.tmp' /SL5="$30092,23048672,57856,<Полный путь к файлу>"
'%APPDATA%\pinnacle-setup.exe'
'%APPDATA%\FFPortable\update.exe' about:robots
'%APPDATA%\pinnacle-setup.exe' -deleter
'%APPDATA%\FFPortable\uninstall\helper.exe' /SetAsDefaultAppUser

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней