Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.Encoder.29113

Добавлен в вирусную базу Dr.Web: 2019-07-28

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения
Создает или изменяет следующие файлы
  • %ALLUSERSPROFILE%\start menu\programs\startup\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\startup\qd17sgj4a2-readme.txt
Создает следующие файлы на съемном носителе
  • <Имя диска съемного носителя>:\qd17sgj4a2-readme.txt
  • <Имя диска съемного носителя>:\gruenspecht_02172016.pptx
  • <Имя диска съемного носителя>:\waterresourcesag.pptx
Вредоносные функции
Для затруднения выявления своего присутствия в системе
удаляет теневые копии разделов.
Читает файлы, отвечающие за хранение паролей сторонними программами
  • %HOMEPATH%\desktop\about.htm
  • %HOMEPATH%\desktop\testcertificate.cer
  • %HOMEPATH%\desktop\sdszfo.docx
  • %HOMEPATH%\desktop\sdkfailsafeemulator.cer
  • %HOMEPATH%\desktop\region-north-karelia.jpg
  • %HOMEPATH%\desktop\pushkin.jpeg
  • %HOMEPATH%\desktop\pmd.cer
  • %HOMEPATH%\desktop\parnas_01.jpeg
  • %HOMEPATH%\desktop\ovp25012015.doc
  • %HOMEPATH%\desktop\ituneshelpunavailable.html
  • %HOMEPATH%\desktop\february_catalogue__2015.doc
  • %HOMEPATH%\desktop\dialmap.bmp
  • %HOMEPATH%\desktop\dial.bmp
  • %HOMEPATH%\desktop\default.bmp
  • %HOMEPATH%\desktop\dashborder_192.bmp
  • %HOMEPATH%\desktop\dashborder_120.bmp
  • %HOMEPATH%\desktop\contosoroot_1.cer
  • %HOMEPATH%\desktop\applicantform_en.doc
  • %HOMEPATH%\desktop\api-hashmap.html
  • %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
  • %HOMEPATH%\desktop\alert.htm
  • %HOMEPATH%\desktop\advice_process.htm
  • %HOMEPATH%\desktop\tileimage.bmp
  • %HOMEPATH%\desktop\toolbar.bmp
Изменения в файловой системе
Создает следующие файлы
  • C:\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\cs\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\da\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\de\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\el\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\en\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\ru\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\es\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\fil\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\fr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\he\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\hi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\hr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\hu\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\ar\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\fi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\ca\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\bg\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\zh_tw\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\zh_cn\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\nb\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\nl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\pl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\pt_br\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\pt_pt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\id\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\ro\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\ko\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\sk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\sr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\sv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\th\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\tr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\uk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\lt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\vi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\sl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\lv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\it\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\lv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\bg\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\ca\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\cs\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\da\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\de\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\el\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\zh_cn\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\en\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\fi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\fil\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\fr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\hi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\hr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\hu\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\ar\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\zh_tw\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\vi\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\tr\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\nl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\no\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\pl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\pt_br\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\pt_pt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\ja\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\lt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\ko\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\ro\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\sr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\sv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\th\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\tr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\uk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\ru\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\sk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\sl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\ja\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\it\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\id\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ml\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\mo\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\mr\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ms\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\mt\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\my\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ro\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\nb\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\nl\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\nn\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\oc\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\pl\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\pt\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\lt\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ku\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\mk\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ko\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\kn\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\fr\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\gl\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\gu\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\he\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\hi\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\hr\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\pt_br\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\hu\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ne\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\is\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ja\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\jv\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ka\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\kab\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\kk\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\id\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\fy\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\it\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\lv\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ru\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\ca\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\da\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\de\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\el\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\en\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\en_gb\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\bg\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\shn\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\cs\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\es\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\fil\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\fr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\hi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\hr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\hu\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\es_419\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\et\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\fi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\es\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\id\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\zh_cn\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sl\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sq\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sr\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sv\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ta\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\te\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\zh_hk\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\zh_tw\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\th\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ug\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\uk\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ur\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\uz\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\vi\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\wae\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sk\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\tw\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\no\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\locale\browser-region\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\ko\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\th\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\tr\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\locale\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\locale\qd17sgj4a2-readme.txt
  • %TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\branding\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\lt\qd17sgj4a2-readme.txt
  • %TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\browser-region\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\pkt\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\util\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\wubi\backends\common\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\wubi\backends\win32\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\win32\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ar\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\sl\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\msg\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\sv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\sr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\sk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\ru\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\hr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\hu\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\id\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\it\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\ja\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\bg\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\ko\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\fr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\lv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\nl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\no\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\pl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\pt_br\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\pt_pt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\he\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\ro\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\ms\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\hi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ca\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\el\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pt_pt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ro\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ru\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\nl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\sv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\tr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\uk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\vi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\zh_cn\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\zh_tw\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\locale\branding\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\pt_br\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\no\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\lv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\it\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\en\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\es\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fil\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\fr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\cs\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\de\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\da\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\he\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\id\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\it\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ja\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\ko\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\lt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\hu\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\fil\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\fi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\eu\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\ca\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\cs\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\da\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\de\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\el\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\en\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\he\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\en_gb\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\es\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\es_419\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\et\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\fi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\fil\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\__macosx\_locales\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\zh_tw\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\bg\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\zh_cn\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\vi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\lt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\nl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\no\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\pl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\pt_br\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\pt_pt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\fr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\ro\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\en_us\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\se\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\sl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\sr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\th\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\tr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\uk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\ru\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\lv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\sk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\ar\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\hi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\uk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\zh_cn\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\zh_tw\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\ar\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\bg\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\ca\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\tr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\hr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\vi\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\cs\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\en_gb\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\en_us\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\es\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\es_419\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\et\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\da\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\de\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\el\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\fi\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\ja\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\sr\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\id\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\it\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\ja\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\ko\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\lt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\lv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\sv\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\th\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\nl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\pt_br\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\pt_pt\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\ro\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\ru\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\sk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\sl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\hu\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\pl\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\_locales\th\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\fa\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\el\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\hsperfdata_user\qd17sgj4a2-readme.txt
  • %TEMP%\lilo.1120\qd17sgj4a2-readme.txt
  • %TEMP%\microsoft .net framework 4 setup_4.0.30319\qd17sgj4a2-readme.txt
  • %TEMP%\microsoft visual c++ 2010 x86 redistributable setup_10.0.30319\qd17sgj4a2-readme.txt
  • %TEMP%\opera installer\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\start menu\programs\accessories\qd17sgj4a2-readme.txt
  • %TEMP%\outlook logging\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\qd17sgj4a2-readme.txt
  • %TEMP%\adobe_admlogs\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\qd17sgj4a2-readme.txt
  • %TEMP%\history\qd17sgj4a2-readme.txt
  • %TEMP%\cookies\qd17sgj4a2-readme.txt
  • %TEMP%\7f4987fb1a6e43d69e3e94b29eb75926\qd17sgj4a2-readme.txt
  • %TEMP%\2.9.0.1467 (partner)\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\mirc\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\qip 2012\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\steam\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\winrar\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\history\history.ie5\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\google chrome\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\start menu\programs\startup\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\history\history.ie5\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\qd17sgj4a2-readme.txt
  • %HOMEPATH%\favorites\links\почта.url
  • %HOMEPATH%\favorites\links\яндекс.url
  • %ALLUSERSPROFILE%\start menu\programs\microsoft .net framework sdk v1.1\qd17sgj4a2-readme.txt
  • %HOMEPATH%\local settings\history\history.ie5\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\history\history.ie5\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\microsoft office\qd17sgj4a2-readme.txt
  • %TEMP%\<INETFILES>\qd17sgj4a2-readme.txt
  • %TEMP%\{74d0e5db-b326-4dae-a6b2-445b9de1836e}\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\mqraz07n\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\o4q6sqop\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\qiszf4kx\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\ee7gwdg8\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\etuaii8e\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\h8mbgrq8\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\z9pmdpek\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\<INETFILES>\content.ie5\z9pmdpek\qd17sgj4a2-readme.txt
  • %TEMP%\2.9.0.1467 (partner)\chrome\qd17sgj4a2-readme.txt
  • %TEMP%\history\history.ie5\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\bin\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\data\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\start menu\programs\accessories\entertainment\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\<INETFILES>\content.ie5\9stcdn6y\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\start menu\programs\accessories\accessibility\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\h8mbgrq8\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\my videos\qd17sgj4a2-readme.txt
  • %TEMP%\{f0080ca2-80ae-4958-b6eb-e8fa916d744a}\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\accessories\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\administrative tools\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\icq\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\telegram desktop\qd17sgj4a2-readme.txt
  • %TEMP%\{01db25f3-1b76-4d97-88c8-1c90634d88fb}\qd17sgj4a2-readme.txt
  • %TEMP%\{615bc16d-60f5-482e-91b3-b51d8130963b}\qd17sgj4a2-readme.txt
  • %TEMP%\{2af972c7-13b0-4978-92a8-fee26a4fb4e9}\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\winrar\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\accessories\entertainment\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\accessories\system tools\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\microsoft office\microsoft office tools\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\ee7gwdg8\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\<INETFILES>\content.ie5\etuaii8e\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\my music\sample playlists\00107ff6\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\accessories\accessibility\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\accessories\communications\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\games\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\administrative tools\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\accessories\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\printhood\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\recent\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\sendto\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\start menu\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\templates\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\cookies\qd17sgj4a2-readme.txt
  • %HOMEPATH%\my documents\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\qd17sgj4a2-readme.txt
  • %HOMEPATH%\.oracle_jre_usage\qd17sgj4a2-readme.txt
  • %HOMEPATH%\cookies\qd17sgj4a2-readme.txt
  • %HOMEPATH%\desktop\qd17sgj4a2-readme.txt
  • %HOMEPATH%\favorites\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\favorites\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\nethood\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\desktop\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\cookies\qd17sgj4a2-readme.txt
  • C:\documents and settings\qd17sgj4a2-readme.txt
  • C:\recycler\qd17sgj4a2-readme.txt
  • <Текущая директория>\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\qd17sgj4a2-readme.txt
  • %HOMEPATH%\local settings\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\cookies\qd17sgj4a2-readme.txt
  • C:\recycler\s-1-5-21-1229272821-842925246-1060284298-1003\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\drm\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\favorites\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\templates\qd17sgj4a2-readme.txt
  • %HOMEPATH%\qd17sgj4a2-readme.txt
  • %ProgramFiles%\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\desktop\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\my documents\qd17sgj4a2-readme.txt
  • %HOMEPATH%\nethood\qd17sgj4a2-readme.txt
  • %HOMEPATH%\favorites\links\qd17sgj4a2-readme.txt
  • %TEMP%\qd17sgj4a2-readme.txt
  • %HOMEPATH%\local settings\<INETFILES>\qd17sgj4a2-readme.txt
  • %HOMEPATH%\my documents\downloads\qd17sgj4a2-readme.txt
  • %HOMEPATH%\my documents\my music\qd17sgj4a2-readme.txt
  • %HOMEPATH%\my documents\my pictures\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\<INETFILES>\qd17sgj4a2-readme.txt
  • %HOMEPATH%\printhood\qd17sgj4a2-readme.txt
  • %HOMEPATH%\local settings\history\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\qd17sgj4a2-readme.txt
  • %HOMEPATH%\userdata\ubghkdcj\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\my music\my playlists\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\my music\sample music\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\my music\sample playlists\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\my pictures\sample pictures\qd17sgj4a2-readme.txt
  • %HOMEPATH%\userdata\09upir0l\qd17sgj4a2-readme.txt
  • %HOMEPATH%\userdata\e3unqlkn\qd17sgj4a2-readme.txt
  • %HOMEPATH%\userdata\inafedwn\qd17sgj4a2-readme.txt
  • %HOMEPATH%\local settings\history\history.ie5\mshist012017042620170427\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\winboot\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\<INETFILES>\qd17sgj4a2-readme.txt
  • %HOMEPATH%\sendto\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\qd17sgj4a2-readme.txt
  • %HOMEPATH%\templates\qd17sgj4a2-readme.txt
  • %HOMEPATH%\userdata\qd17sgj4a2-readme.txt
  • %HOMEPATH%\voip\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\my music\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\history\qd17sgj4a2-readme.txt
  • C:\documents and settings\networkservice\local settings\temp\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\documents\my pictures\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\history\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\temp\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\local settings\<INETFILES>\qd17sgj4a2-readme.txt
  • C:\documents and settings\default user\start menu\programs\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\history\qd17sgj4a2-readme.txt
  • C:\documents and settings\localservice\local settings\temp\qd17sgj4a2-readme.txt
  • %HOMEPATH%\recent\qd17sgj4a2-readme.txt
  • %ALLUSERSPROFILE%\start menu\programs\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\fi\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\et\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\vi\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\wae\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\zh_cn\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\zh_hk\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\zh_tw\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\_locales\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\__macosx\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\_locales\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_24406\crx_install\__macosx\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\_locales\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\_locales\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\en-gb\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\uk\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\_locales\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\uz\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ur\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ug\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\tw\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\pl\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\pt\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\pt_br\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ro\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ru\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\en-gb\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\shn\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\nl\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sl\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sr\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sv\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ta\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\te\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\th\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\nn\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\tr\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\sq\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\oc\qd17sgj4a2-readme.txt
  • %TEMP%\<INETFILES>\content.ie5\4xoboj8j\qd17sgj4a2-readme.txt
  • %TEMP%\2.9.0.1467 (partner)\chrome\en-gb\locale\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ca\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\crh\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\cs\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\csb\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\cy\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\da\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\bg\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\de\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\en\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\en_au\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\en_ca\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\en_gb\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\eo\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\es\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\br\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\bs\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\bo\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ast\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2064_18724\crx_install\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\data\custom-installation\hooks\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\data\custom-installation\packages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\crypto\cipher\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\crypto\hash\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\crypto\publickey\qd17sgj4a2-readme.txt
  • %TEMP%\<INETFILES>\content.ie5\chyzclen\qd17sgj4a2-readme.txt
  • %TEMP%\<INETFILES>\content.ie5\ibwpozo7\qd17sgj4a2-readme.txt
  • %TEMP%\<INETFILES>\content.ie5\g1qjk5mv\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\crypto\util\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\xml\parsers\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\xml\sax\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\af\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ar\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\as\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\sap\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\wubi\backends\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\wubi\frontends\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ne\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\nb\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\my\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\af\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ar\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\as\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ast\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\bg\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\bo\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\de\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\br\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ca\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\crh\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\cs\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\csb\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\cy\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\winui\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\urlgrabber\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\xml\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\sets\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\openpgp\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_28580\crx_install\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 1 for omni.ja_20150820125829.zip\chrome\qd17sgj4a2-readme.txt
  • %TEMP%\temporary directory 2 for omni.ja_20150820125829.zip\chrome\qd17sgj4a2-readme.txt
  • %TEMP%\<INETFILES>\content.ie5\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\accessories\accessibility\qd17sgj4a2-readme.txt
  • %HOMEPATH%\start menu\programs\accessories\entertainment\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\da\qd17sgj4a2-readme.txt
  • %TEMP%\2.9.0.1467 (partner)\chrome\en-gb\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\bs\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\data\custom-installation\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\bittorrent\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\crypto\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\ctypes\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\encodings\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\logging\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\bin\formats\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_9112\crx_install\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\data\images\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\lib\wubi\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\el\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ja\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ka\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\kab\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\kk\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\kn\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ko\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\it\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\en\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\jv\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ku\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ml\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\mo\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\mr\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\ms\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\mt\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\lt\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\lv\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\mk\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\eu\lc_messages\qd17sgj4a2-readme.txt
  • %TEMP%\scoped_dir_2812_13253\crx_install\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\hu\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\en_ca\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\en_gb\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\eo\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\es\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\et\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\eu\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\id\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\is\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\fa\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\fy\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\gl\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\gu\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\he\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\hi\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\hr\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\en_au\qd17sgj4a2-readme.txt
  • %TEMP%\pyl1.tmp\translations\fr\qd17sgj4a2-readme.txt
  • D:\qd17sgj4a2-readme.txt
Перемещает следующие файлы
  • %HOMEPATH%\favorites\links\почта.url в %HOMEPATH%\favorites\links\почта.url.qd17sgj4a2
  • %TEMP%\javadeployreg.log в %TEMP%\javadeployreg.log.qd17sgj4a2
  • %TEMP%\dd_vcredist_x86_20151215221751.log в %TEMP%\dd_vcredist_x86_20151215221751.log.qd17sgj4a2
  • %TEMP%\dd_vcredist_x86_20151215221751_000_vcruntimeminimum_x86.log в %TEMP%\dd_vcredist_x86_20151215221751_000_vcruntimeminimum_x86.log.qd17sgj4a2
  • %TEMP%\dd_xps.txt в %TEMP%\dd_xps.txt.qd17sgj4a2
  • %TEMP%\java_install.log в %TEMP%\java_install.log.qd17sgj4a2
  • %TEMP%\dd_net_framework30_setup7762.txt в %TEMP%\dd_net_framework30_setup7762.txt.qd17sgj4a2
  • %TEMP%\dd_depcheck_netfx20_exp_35.txt в %TEMP%\dd_depcheck_netfx20_exp_35.txt.qd17sgj4a2
  • %TEMP%\jusched.log в %TEMP%\jusched.log.qd17sgj4a2
  • %TEMP%\java_install_reg.log в %TEMP%\java_install_reg.log.qd17sgj4a2
  • %TEMP%\dd_net_framework35_msi77c4.txt в %TEMP%\dd_net_framework35_msi77c4.txt.qd17sgj4a2
  • %TEMP%\setupexe(201511201342324e4).log в %TEMP%\setupexe(201511201342324e4).log.qd17sgj4a2
  • %TEMP%\setupexe(20151215230521214).log в %TEMP%\setupexe(20151215230521214).log.qd17sgj4a2
  • %TEMP%\setupexe(2015121523093290).log в %TEMP%\setupexe(2015121523093290).log.qd17sgj4a2
  • %TEMP%\uxeventlog.txt в %TEMP%\uxeventlog.txt.qd17sgj4a2
  • %TEMP%\dotnetfxsdk.log в %TEMP%\dotnetfxsdk.log.qd17sgj4a2
  • %TEMP%\jaureg.log в %TEMP%\jaureg.log.qd17sgj4a2
  • %TEMP%\dotnetfx.log в %TEMP%\dotnetfx.log.qd17sgj4a2
  • %TEMP%\dd_wcf_retca4a2a.txt в %TEMP%\dd_wcf_retca4a2a.txt.qd17sgj4a2
  • %TEMP%\dd_dotnetfx35install.txt в %TEMP%\dd_dotnetfx35install.txt.qd17sgj4a2
  • %TEMP%\adobearm.log в %TEMP%\adobearm.log.qd17sgj4a2
  • %TEMP%\adobesfx.log в %TEMP%\adobesfx.log.qd17sgj4a2
  • %TEMP%\adobearm_notlocked.log в %TEMP%\adobearm_notlocked.log.qd17sgj4a2
  • %TEMP%\aspnetsetup_00000.log в %TEMP%\aspnetsetup_00000.log.qd17sgj4a2
  • %TEMP%\aucheck_parser.txt в %TEMP%\aucheck_parser.txt.qd17sgj4a2
  • %TEMP%\aspnetsetup.log в %TEMP%\aspnetsetup.log.qd17sgj4a2
  • %TEMP%\wubi-14.04-rev286.log в %TEMP%\wubi-14.04-rev286.log.qd17sgj4a2
  • %TEMP%\dd_vcredist_x86_20151215221751_001_vcruntimeadditional_x86.log в %TEMP%\dd_vcredist_x86_20151215221751_001_vcruntimeadditional_x86.log.qd17sgj4a2
  • %TEMP%\dd_clwireg.txt в %TEMP%\dd_clwireg.txt.qd17sgj4a2
  • %TEMP%\dd_dotnetfx35error.txt в %TEMP%\dd_dotnetfx35error.txt.qd17sgj4a2
  • %TEMP%\dd_dotnetfx20install.txt в %TEMP%\dd_dotnetfx20install.txt.qd17sgj4a2
  • %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt в %TEMP%\dd_dotnetfx40_full_x86_x64_decompression_log.txt.qd17sgj4a2
  • %TEMP%\dd_depcheck_netfx_exp_35.txt в %TEMP%\dd_depcheck_netfx_exp_35.txt.qd17sgj4a2
  • %TEMP%\dd_dotnetfx45_full_setup_decompression_log.txt в %TEMP%\dd_dotnetfx45_full_setup_decompression_log.txt.qd17sgj4a2
  • %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt в %TEMP%\dd_ndp452-kb2901907-x86-x64-allos-enu_decompression_log.txt.qd17sgj4a2
  • %HOMEPATH%\favorites\links\яндекс.url в %HOMEPATH%\favorites\links\яндекс.url.qd17sgj4a2
  • %TEMP%\dd_dotnetfx20error.txt в %TEMP%\dd_dotnetfx20error.txt.qd17sgj4a2
  • %TEMP%\dd_net_framework20_setup74f9.txt в %TEMP%\dd_net_framework20_setup74f9.txt.qd17sgj4a2
Изменяет множество файлов пользовательских данных (Trojan.Encoder).
Изменяет расширения файлов пользовательских данных (Trojan.Encoder).
Другое
Создает и запускает на исполнение
  • '<SYSTEM32>\cmd.exe' /c vssadmin.exe Delete Shadows /All /Quiet & bcdedit /set {default} recoveryenabled No & bcdedit /set {default} bootstatuspolicy ignoreallfailures' (со скрытым окном)
Запускает на исполнение
  • '<SYSTEM32>\verclsid.exe' /C {B5A7F190-DDA6-4420-B3BA-52453494E6CD} /I {00000000-0000-0000-C000-000000000046} /X 0x401
  • '<SYSTEM32>\verclsid.exe' /C {6C467336-8281-4E60-8204-430CED96822D} /I {000214E8-0000-0000-C000-000000000046} /X 0x401
  • '<SYSTEM32>\cmd.exe' /c vssadmin.exe Delete Shadows /All /Quiet & bcdedit /set {default} recoveryenabled No & bcdedit /set {default} bootstatuspolicy ignoreallfailures

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке