Trojan.DownLoader29.45968

Техническая информация

Изменения в файловой системе

Создает следующие файлы

<Текущая директория>\file recovery application\18.0.2.0\xsandbox.bin.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0x25b121863fe1514e\filepreview.exe.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0x25b121863fe1514e\filepreview.exe.manifest.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qdds.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qdds.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qgif.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qgif.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qicns.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qicns.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qico.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qico.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qjpeg.dll
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\platforms\qwindows.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\platforms\qwindows.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qjpeg.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtga.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtga.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtiff.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtiff.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwbmp.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwbmp.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwebp.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwebp.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\836_0000000140000000_tls.dll
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini
<Текущая директория>\file recovery application\18.0.2.0\roaming\meta\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qsvg.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qsvg.dll.__meta__.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\2000_0000000065000000_tls.dll
<Текущая директория>\file recovery application\18.0.2.0\local\temp\2000_0000000002af0000_tls.dll
<Текущая директория>\file recovery application\18.0.2.0\local\temp\2000_0000000064000000_tls.dll
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\diskeditor.exe\diskeditor.exe.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\filepreview.exe\filepreview.exe.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\filerecovery.exe\filerecovery.exe.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\deact.exe_0x411cd1175b5e21b6a3c6a72c34e8773c.1.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\diskeditor.exe_0x5be5c449d4545a2552c5f77eec1a8657.1.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\filepreview.exe_0x8aa94e0840a14e79e26d30449149ecbb.1.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\filerecovery.exe_0x16436ac6a105582444e296ffe7b9678d.1.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5core.dll_0xfa0ed178af0ed5e2b983bcc9915b2dd2.2.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5gui.dll_0xb6f30bced2e5c467e9dfca76deba900c.2.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5multimedia.dll_0xa528392224091a34ac84f055c69b85c8.2.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5network.dll_0x2c6b63bb0e161401964923b6d8dccb59.2.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5printsupport.dll_0xfa93aedb0bedcf3ef95d25377227ecd4.2.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\deact.exe\deact.exe.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5widgets.dll_0x59a24da0f993f6ea19e87eb7bd7753fb.2.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5core.dll\qt5core.dll.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5gui.dll\qt5gui.dll.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5multimedia.dll\qt5multimedia.dll.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5network.dll\qt5network.dll.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5printsupport.dll\qt5printsupport.dll.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5widgets.dll\qt5widgets.dll.manifest.__tmp__
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5winextras.dll\qt5winextras.dll.manifest.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0xd55a753fe3ae64ed\filerecovery.exe.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0xd55a753fe3ae64ed\filerecovery.exe.manifest.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\2000_0000000140000000_tls.dll
<Текущая директория>\file recovery application\18.0.2.0\local\temp\2000_0000000067000000_tls.dll
<Текущая директория>\file recovery application\18.0.2.0\local\temp\2000_0000000002d90000_tls.dll
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5winextras.dll_0x8df59f42b295167997b9179010213510.2.manifest.__tmp__
<Текущая директория>\file recovery application\18.0.2.0\roaming\modified\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini.lock
<Текущая директория>\file recovery application\18.0.2.0\roaming\modified\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini.hp2000

Удаляет следующие файлы

<Текущая директория>\file recovery application\18.0.2.0\roaming\modified\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini.lock

Перемещает следующие файлы

<Текущая директория>\file recovery application\18.0.2.0\xsandbox.bin.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\xsandbox.bin
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qdds.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qdds.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qdds.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qdds.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qgif.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qgif.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qgif.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qgif.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qicns.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qicns.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qicns.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qicns.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qico.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qico.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qico.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qico.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qjpeg.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qjpeg.dll
<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0x25b121863fe1514e\filepreview.exe.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0x25b121863fe1514e\filepreview.exe
<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0x25b121863fe1514e\filepreview.exe.manifest.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0x25b121863fe1514e\filepreview.exe.manifest
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qjpeg.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qjpeg.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtga.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtga.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtga.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtga.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtiff.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtiff.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtiff.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qtiff.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwbmp.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwbmp.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwbmp.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwbmp.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwebp.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwebp.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwebp.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qwebp.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini в <Текущая директория>\file recovery application\18.0.2.0\roaming\modified\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qsvg.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qsvg.dll
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qsvg.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\imageformats\qsvg.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\platforms\qwindows.dll.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\meta\@programfiles@\lsoft technologies\active@ file recovery professional\platforms\qwindows.dll.__meta__
<Текущая директория>\file recovery application\18.0.2.0\local\temp\@programfiles@\lsoft technologies\active@ file recovery professional\platforms\qwindows.dll в <Текущая директория>\file recovery application\18.0.2.0\local\modified\@programfiles@\lsoft technologies\active@ file recovery professional\platforms\qwindows.dll
<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0xd55a753fe3ae64ed\filerecovery.exe.manifest.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0xd55a753fe3ae64ed\filerecovery.exe.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\diskeditor.exe\diskeditor.exe.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\diskeditor.exe\diskeditor.exe.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\filepreview.exe\filepreview.exe.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\filepreview.exe\filepreview.exe.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\filerecovery.exe\filerecovery.exe.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\filerecovery.exe\filerecovery.exe.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\deact.exe_0x411cd1175b5e21b6a3c6a72c34e8773c.1.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\deact.exe_0x411cd1175b5e21b6a3c6a72c34e8773c.1.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\diskeditor.exe_0x5be5c449d4545a2552c5f77eec1a8657.1.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\diskeditor.exe_0x5be5c449d4545a2552c5f77eec1a8657.1.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\filepreview.exe_0x8aa94e0840a14e79e26d30449149ecbb.1.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\filepreview.exe_0x8aa94e0840a14e79e26d30449149ecbb.1.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\filerecovery.exe_0x16436ac6a105582444e296ffe7b9678d.1.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\filerecovery.exe_0x16436ac6a105582444e296ffe7b9678d.1.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5core.dll_0xfa0ed178af0ed5e2b983bcc9915b2dd2.2.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5core.dll_0xfa0ed178af0ed5e2b983bcc9915b2dd2.2.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5gui.dll_0xb6f30bced2e5c467e9dfca76deba900c.2.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5gui.dll_0xb6f30bced2e5c467e9dfca76deba900c.2.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5multimedia.dll_0xa528392224091a34ac84f055c69b85c8.2.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5multimedia.dll_0xa528392224091a34ac84f055c69b85c8.2.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\deact.exe\deact.exe.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\deact.exe\deact.exe.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5network.dll_0x2c6b63bb0e161401964923b6d8dccb59.2.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5network.dll_0x2c6b63bb0e161401964923b6d8dccb59.2.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5widgets.dll_0x59a24da0f993f6ea19e87eb7bd7753fb.2.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5widgets.dll_0x59a24da0f993f6ea19e87eb7bd7753fb.2.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5winextras.dll_0x8df59f42b295167997b9179010213510.2.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5winextras.dll_0x8df59f42b295167997b9179010213510.2.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5core.dll\qt5core.dll.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5core.dll\qt5core.dll.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5gui.dll\qt5gui.dll.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5gui.dll\qt5gui.dll.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5multimedia.dll\qt5multimedia.dll.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5multimedia.dll\qt5multimedia.dll.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5network.dll\qt5network.dll.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5network.dll\qt5network.dll.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5printsupport.dll\qt5printsupport.dll.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5printsupport.dll\qt5printsupport.dll.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5widgets.dll\qt5widgets.dll.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5widgets.dll\qt5widgets.dll.manifest
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5winextras.dll\qt5winextras.dll.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\qt5winextras.dll\qt5winextras.dll.manifest
<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0xd55a753fe3ae64ed\filerecovery.exe.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0xd55a753fe3ae64ed\filerecovery.exe
%TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5printsupport.dll_0xfa93aedb0bedcf3ef95d25377227ecd4.2.manifest.__tmp__ в %TEMP%\spoon\cache\0xeab14e59107bf9fd\sxs\manifests\qt5printsupport.dll_0xfa93aedb0bedcf3ef95d25377227ecd4.2.manifest
<Текущая директория>\file recovery application\18.0.2.0\roaming\meta\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini.__meta__.__tmp__ в <Текущая директория>\file recovery application\18.0.2.0\roaming\meta\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini.__meta__
<Текущая директория>\file recovery application\18.0.2.0\roaming\modified\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini.hp2000 в <Текущая директория>\file recovery application\18.0.2.0\roaming\modified\@programfiles@\lsoft technologies\active@ file recovery professional\settings.ini

Сетевая активность

UDP

DNS ASK ls##t.net

Другое

Создает и запускает на исполнение

'<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0xd55a753fe3ae64ed\filerecovery.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8
'<Текущая директория>\file recovery application\18.0.2.0\local\stubexe\0x25b121863fe1514e\filepreview.exe' /864A627C-C6B2-464A-AA13-25D62F282BD8

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней