Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\6b233cbe\vdb3ejx6n.dat
- C:\users\administrator\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\guest\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\guest\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\guest\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\administrator\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\administrator\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\uoioy6aauu@gcloiaoyxvg.com\install.rdf
- <LS_APPDATA>\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- <LS_APPDATA>\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- %WINDIR%\syswow64\grouppolicy\gpt.ini
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\uoioy6aauu@gcloiaoyxvg.com\bootstrap.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\uoioy6aauu@gcloiaoyxvg.com\chrome.manifest
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\uoioy6aauu@gcloiaoyxvg.com\content\bg.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- <LS_APPDATA>\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- <LS_APPDATA>\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- <LS_APPDATA>\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- <LS_APPDATA>\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- <LS_APPDATA>\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- <LS_APPDATA>\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\content.js
- %TEMP%\6b233cbe\vdb3ejx6n.exe
- %TEMP%\6b233cbe\uoioy6aauu@gcloiaoyxvg.com\content\bg.js
- %TEMP%\6b233cbe\uoioy6aauu@gcloiaoyxvg.com\install.rdf
- %TEMP%\6b233cbe\uoioy6aauu@gcloiaoyxvg.com\chrome.manifest
- %TEMP%\6b233cbe\uoioy6aauu@gcloiaoyxvg.com\bootstrap.js
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\lsdb.js
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\manifest.json
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\background.html
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\vruzhvvl2.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- <LS_APPDATA>\google\chrome\user data\default\preferences__.tmp
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- <LS_APPDATA>\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- <LS_APPDATA>\google\chrome\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\vruzhvvl2.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\content.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\lsdb.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\ifcncbmfilgmjkdelagacpihhbekcmmg\3.9\background.html
- %PROGRAMDATA%\de67a64df4bc1367\{fdb962f0-b5b8-9460-d12f-7966e97baa43}.20190718215835
Удаляет следующие файлы
- %TEMP%\6b233cbe\vdb3ejx6n.dat
- %TEMP%\6b233cbe\vdb3ejx6n.exe
- %TEMP%\6b233cbe\uoioy6aauu@gcloiaoyxvg.com\content\bg.js
- %TEMP%\6b233cbe\uoioy6aauu@gcloiaoyxvg.com\install.rdf
- %TEMP%\6b233cbe\uoioy6aauu@gcloiaoyxvg.com\chrome.manifest
- %TEMP%\6b233cbe\uoioy6aauu@gcloiaoyxvg.com\bootstrap.js
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\lsdb.js
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\content.js
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\manifest.json
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\background.html
- %TEMP%\6b233cbe\ifcncbmfilgmjkdelagacpihhbekcmmg\vruzhvvl2.js
Подменяет следующие файлы
- %PROGRAMDATA%\ntuser.pol
Другое
Создает и запускает на исполнение
- '%TEMP%\6b233cbe\vdb3ejx6n.exe'
Запускает на исполнение
- '<SYSTEM32>\raserver.exe' /offerraupdate
