Техническая информация
Для обеспечения автозапуска и распространения:
Создает или изменяет следующие файлы:
- %WINDIR%\Tasks\desktop.ini.org
- %WINDIR%\Tasks\__iWasHere.txt
Изменения в файловой системе:
Создает следующие файлы:
- C:\boot.ini.org
- <STUBS_DIR>\webmoney\__iWasHere.txt
- <STUBS_DIR>\wclnt\__iWasHere.txt
- <STUBS_DIR>\UniStream\__iWasHere.txt
- <STUBS_DIR>\TwelveSky2\__iWasHere.txt
- <STUBS_DIR>\trillian\__iWasHere.txt
- <STUBS_DIR>\translink\__iWasHere.txt
- <STUBS_DIR>\startclient7\__iWasHere.txt
- <STUBS_DIR>\ZZ__cd75efb816b2cc__\__iWasHere.txt
- <STUBS_DIR>\sro_client\__iWasHere.txt
- <STUBS_DIR>\spidernt\__iWasHere.txt
- <STUBS_DIR>\so3d\__iWasHere.txt
- <STUBS_DIR>\smc\__iWasHere.txt
- <STUBS_DIR>\skype\__iWasHere.txt
- <STUBS_DIR>\sgbclient\__iWasHere.txt
- <STUBS_DIR>\winbaram\__iWasHere.txt
- <STUBS_DIR>\woool\__iWasHere.txt
- <STUBS_DIR>\wow\__iWasHere.txt
- <STUBS_DIR>\wsm\__iWasHere.txt
- <STUBS_DIR>\YahooMessenger\__iWasHere.txt
- <STUBS_DIR>\ybclient\__iWasHere.txt
- <STUBS_DIR>\zapro\__iWasHere.txt
- <STUBS_DIR>\zlclient\__iWasHere.txt
- <STUBS_DIR>\ZONEALARM\__iWasHere.txt
- <STUBS_DIR>\tiny\__iWasHere.txt
- <STUBS_DIR>\__cd75efb816b2cc__\__iWasHere.txt
- <STUBS_DIR>\__iWasHere.txt
- %WINDIR%\$NtUninstallKB942288-v3$\__iWasHere.txt
- %WINDIR%\$NtUninstallWIC$\__iWasHere.txt
- %WINDIR%\AppPatch\__iWasHere.txt
- %WINDIR%\assembly\__iWasHere.txt
- %WINDIR%\assembly\Desktop.ini.org
- <STUBS_DIR>\safari\__iWasHere.txt
- <STUBS_DIR>\rclient\__iWasHere.txt
- <STUBS_DIR>\RagFree\__iWasHere.txt
- <STUBS_DIR>\Ragexe\__iWasHere.txt
- <STUBS_DIR>\magent\__iWasHere.txt
- <STUBS_DIR>\lotroclient\__iWasHere.txt
- <STUBS_DIR>\loadmain\__iWasHere.txt
- <STUBS_DIR>\lin\__iWasHere.txt
- <STUBS_DIR>\l2\__iWasHere.txt
- <STUBS_DIR>\kb_cli\__iWasHere.txt
- <STUBS_DIR>\java\__iWasHere.txt
- %WINDIR%\Cursors\__iWasHere.txt
- <STUBS_DIR>\ISClient\__iWasHere.txt
- <STUBS_DIR>\iscc\__iWasHere.txt
- <STUBS_DIR>\intpro\__iWasHere.txt
- <STUBS_DIR>\InphaseNXD\__iWasHere.txt
- <STUBS_DIR>\inbank-start-ff\__iWasHere.txt
- <STUBS_DIR>\iexplore\__iWasHere.txt
- <STUBS_DIR>\maplestory\__iWasHere.txt
- <STUBS_DIR>\nod32\__iWasHere.txt
- <STUBS_DIR>\MCAGENT\__iWasHere.txt
- <STUBS_DIR>\ntvdm\__iWasHere.txt
- <STUBS_DIR>\qip\__iWasHere.txt
- <STUBS_DIR>\putty\__iWasHere.txt
- <STUBS_DIR>\pidgin\__iWasHere.txt
- <STUBS_DIR>\outpost\__iWasHere.txt
- <STUBS_DIR>\opera\__iWasHere.txt
- <STUBS_DIR>\oncbcli\__iWasHere.txt
- <STUBS_DIR>\ICQ\__iWasHere.txt
- <STUBS_DIR>\miranda32\__iWasHere.txt
- <STUBS_DIR>\nod\__iWasHere.txt
- <STUBS_DIR>\netxray\__iWasHere.txt
- <STUBS_DIR>\NAVAPW32\__iWasHere.txt
- <STUBS_DIR>\msnmsgr\__iWasHere.txt
- <STUBS_DIR>\msn6\__iWasHere.txt
- <STUBS_DIR>\mpftray\__iWasHere.txt
- <STUBS_DIR>\Mir3Game\__iWasHere.txt
- <STUBS_DIR>\javaw\__iWasHere.txt
- %WINDIR%\Debug\__iWasHere.txt
- %WINDIR%\Help\ixqlang.htm.org
- <ANALYSE_DIR>\__iWasHere.txt
- <SYSTEM32>\desktop.ini.org
- <SYSTEM32>\esentprf.ini.org
- <SYSTEM32>\mqperf.ini.org
- <SYSTEM32>\msdtcprf.ini.org
- <SYSTEM32>\perfci.ini.org
- <SYSTEM32>\PerfStringBackup.INI.org
- %WINDIR%\vbaddin.ini.org
- <SYSTEM32>\perfwci.ini.org
- <SYSTEM32>\prodspec.ini.org
- <SYSTEM32>\pschdprf.ini.org
- <SYSTEM32>\rasctrs.ini.org
- <SYSTEM32>\rsvp.ini.org
- <SYSTEM32>\tcpmon.ini.org
- <ANALYSE_DIR>\AngarCl.ini.org
- %WINDIR%\Temp\__iWasHere.txt
- %WINDIR%\twain_32\__iWasHere.txt
- %WINDIR%\Web\__iWasHere.txt
- %WINDIR%\Web\tip.htm.org
- %WINDIR%\WinSxS\__iWasHere.txt
- %WINDIR%\XXInstall\__iWasHere.txt
- %WINDIR%\__iWasHere.txt
- %WINDIR%\win.ini.org
- <SYSTEM32>\perffilt.ini.org
- %WINDIR%\vb.ini.org
- %WINDIR%\system.ini.org
- %WINDIR%\ODBCINST.INI.org
- %WINDIR%\msdfmap.ini.org
- %WINDIR%\desktop.ini.org
- %WINDIR%\control.ini.org
- C:\__iWasHere.txt
- <SYSTEM32>\tslabels.ini.org
- <SYSTEM32>\__iWasHere.txt
- %WINDIR%\system\__iWasHere.txt
- %WINDIR%\srchasst\__iWasHere.txt
- %WINDIR%\java\__iWasHere.txt
- %WINDIR%\Installer\__iWasHere.txt
- %WINDIR%\inf\__iWasHere.txt
- %WINDIR%\ime\__iWasHere.txt
- %WINDIR%\Help\ciadmin.htm.org
- %WINDIR%\Help\ciquery.htm.org
- %WINDIR%\Help\migwiz.htm.org
- %WINDIR%\Downloaded Program Files\__iWasHere.txt
- %WINDIR%\Help\migwiz2.htm.org
- %WINDIR%\Help\__iWasHere.txt
- %WINDIR%\Fonts\desktop.ini.org
- %WINDIR%\Fonts\__iWasHere.txt
- %WINDIR%\ehome\__iWasHere.txt
- %WINDIR%\Driver Cache\__iWasHere.txt
- %WINDIR%\Media\__iWasHere.txt
- %WINDIR%\Prefetch\__iWasHere.txt
- %WINDIR%\Microsoft.NET\__iWasHere.txt
- %WINDIR%\Provisioning\__iWasHere.txt
- %WINDIR%\SoftwareDistribution\__iWasHere.txt
- %WINDIR%\security\__iWasHere.txt
- %WINDIR%\Resources\__iWasHere.txt
- %WINDIR%\repair\__iWasHere.txt
- %WINDIR%\Registration\__iWasHere.txt
- %WINDIR%\pss\__iWasHere.txt
- %WINDIR%\Downloaded Program Files\desktop.ini.org
- %WINDIR%\msapps\__iWasHere.txt
- %WINDIR%\PeerNet\__iWasHere.txt
- %WINDIR%\pchealth\__iWasHere.txt
- %WINDIR%\Offline Web Pages\desktop.ini.org
- %WINDIR%\Offline Web Pages\__iWasHere.txt
- %WINDIR%\ocx\__iWasHere.txt
- %WINDIR%\mui\__iWasHere.txt
- %WINDIR%\msagent\__iWasHere.txt
- <STUBS_DIR>\httplook\__iWasHere.txt
Удаляет следующие файлы:
- %WINDIR%\control.ini
- %WINDIR%\Fonts\desktop.ini
- %WINDIR%\Help\migwiz2.htm
- %WINDIR%\Help\migwiz.htm
- %WINDIR%\Help\ixqlang.htm
- %WINDIR%\Help\ciquery.htm
- %WINDIR%\Help\ciadmin.htm
- %WINDIR%\Offline Web Pages\desktop.ini
- <SYSTEM32>\tslabels.ini
- <SYSTEM32>\tcpmon.ini
- <SYSTEM32>\rsvp.ini
- <SYSTEM32>\rasctrs.ini
- <SYSTEM32>\pschdprf.ini
- <SYSTEM32>\prodspec.ini
- <SYSTEM32>\perfwci.ini
- %WINDIR%\Downloaded Program Files\desktop.ini
- <SYSTEM32>\PerfStringBackup.INI
- <SYSTEM32>\perfci.ini
- <SYSTEM32>\msdtcprf.ini
- <SYSTEM32>\mqperf.ini
- <SYSTEM32>\esentprf.ini
- <SYSTEM32>\desktop.ini
- %WINDIR%\Tasks\desktop.ini
- %WINDIR%\Web\tip.htm
- %WINDIR%\win.ini
- %WINDIR%\vbaddin.ini
- %WINDIR%\vb.ini
- %WINDIR%\system.ini
- %WINDIR%\ODBCINST.INI
- %WINDIR%\msdfmap.ini
- %WINDIR%\desktop.ini
- <SYSTEM32>\perffilt.ini
- %WINDIR%\assembly\Desktop.ini
Подменяет следующие файлы:
- C:\boot.ini
- <ANALYSE_DIR>\AngarCl.ini
- %WINDIR%\assembly\Desktop.ini
