Техническая информация
Вредоносные функции
Завершает или пытается завершить
следующие пользовательские процессы:
- iexplore.exe
Регистрирует BHO
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{73af75fc-178d-4f9f-972b-fb002eb72a59}]
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\03c44deb\ihusg7eqo1oktbe.dat
- C:\documents and settings\aspnet\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\aspnet\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\guest\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\guest\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\guest\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\aspnet\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\aspnet\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\guest\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\helpassistant\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\helpassistant\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\helpassistant\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\helpassistant\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\support_388945a0\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\guest\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\helpassistant\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\aspnet\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- <LS_APPDATA>\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\support_388945a0\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\helpassistant\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\helpassistant\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\helpassistant\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\helpassistant\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\helpassistant\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- <LS_APPDATA>\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- <LS_APPDATA>\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- <LS_APPDATA>\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\support_388945a0\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\guest\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- <LS_APPDATA>\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\helpassistant\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\support_388945a0\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\helpassistant\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\support_388945a0\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\support_388945a0\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\support_388945a0\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\support_388945a0\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\support_388945a0\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\extensions\staged\n@qj.com\bootstrap.js
- %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\extensions\staged\n@qj.com\chrome.manifest
- %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\extensions\staged\n@qj.com\content\bg.js
- %APPDATA%\mozilla\firefox\profiles\22ie2h77.default\extensions\staged\n@qj.com\install.rdf
- %ProgramFiles%\costmin\le2curbijo5lqh.dll
- %ProgramFiles%\costmin\le2curbijo5lqh.tlb
- %ProgramFiles%\costmin\le2curbijo5lqh.dat
- %ProgramFiles%\costmin\le2curbijo5lqh.x64.dll
- %ALLUSERSPROFILE%\application data\costmin\ihusg7eqo1oktbe.exe
- C:\documents and settings\helpassistant\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\guest\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\guest\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\helpassistant\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- <LS_APPDATA>\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\aspnet\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\aspnet\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\aspnet\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\aspnet\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\aspnet\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\guest\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\guest\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\guest\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\guest\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\guest\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\helpassistant\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\support_388945a0\local settings\application data\torch\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\guest\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\guest\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\aspnet\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\aspnet\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\aspnet\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\guest\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\guest\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\guest\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\guest\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\guest\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\helpassistant\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\helpassistant\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\helpassistant\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\helpassistant\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\helpassistant\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\aspnet\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- <LS_APPDATA>\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\aspnet\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- %ALLUSERSPROFILE%\application data\costmin\ihusg7eqo1oktbe.dat
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- <LS_APPDATA>\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- %TEMP%\03c44deb\le2curbijo5lqh.dll
- %TEMP%\03c44deb\le2curbijo5lqh.tlb
- %TEMP%\03c44deb\le2curbijo5lqh.x64.dll
- %TEMP%\03c44deb\n@qj.com\content\bg.js
- %TEMP%\03c44deb\n@qj.com\bootstrap.js
- %TEMP%\03c44deb\n@qj.com\chrome.manifest
- %TEMP%\03c44deb\ihusg7eqo1oktbe.exe
- %TEMP%\03c44deb\n@qj.com\install.rdf
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\background.html
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\manifest.json
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\content.js
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\lsdb.js
- <LS_APPDATA>\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- <LS_APPDATA>\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\k.js
- <LS_APPDATA>\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\helpassistant\local settings\application data\chromatic browser\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\support_388945a0\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\support_388945a0\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\support_388945a0\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\support_388945a0\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\support_388945a0\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- <LS_APPDATA>\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\aspnet\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\aspnet\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\aspnet\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\aspnet\local settings\application data\google\chrome sxs\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\helpassistant\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\support_388945a0\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\helpassistant\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\aspnet\local settings\application data\google\chrome\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- <LS_APPDATA>\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\aspnet\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\aspnet\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\aspnet\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\aspnet\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\aspnet\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\guest\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\guest\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\content.js
- C:\documents and settings\guest\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- C:\documents and settings\guest\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\lsdb.js
- C:\documents and settings\guest\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\manifest.json
- C:\documents and settings\helpassistant\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\background.html
- C:\documents and settings\helpassistant\local settings\application data\comodo\dragon\user data\default\extensions\ookppnfgppnogpjdhaljkbiibnafgcgl\2.2\k.js
- %ALLUSERSPROFILE%\application data\2860731775a58648\{2f5f003b-c71b-72e3-42b4-de51ab079eb2}.20190719233601
Удаляет следующие файлы
- %TEMP%\03c44deb\ihusg7eqo1oktbe.dat
- %TEMP%\03c44deb\ihusg7eqo1oktbe.exe
- %TEMP%\03c44deb\le2curbijo5lqh.dll
- %TEMP%\03c44deb\le2curbijo5lqh.tlb
- %TEMP%\03c44deb\le2curbijo5lqh.x64.dll
- %TEMP%\03c44deb\n@qj.com\content\bg.js
- %TEMP%\03c44deb\n@qj.com\bootstrap.js
- %TEMP%\03c44deb\n@qj.com\chrome.manifest
- %TEMP%\03c44deb\n@qj.com\install.rdf
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\k.js
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\background.html
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\manifest.json
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\content.js
- %TEMP%\03c44deb\ookppnfgppnogpjdhaljkbiibnafgcgl\lsdb.js
Другое
Создает и запускает на исполнение
- '%TEMP%\03c44deb\ihusg7eqo1oktbe.exe'
Запускает на исполнение
- '<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\costmin\Le2CUrBIjo5lqH.x64.dll"
