Trojan.Encoder.29658

Техническая информация

Для обеспечения автозапуска и распространения

Модифицирует следующие ключи реестра

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'WindowsUpdateCheck' = '<Полный путь к файлу>'

Создает следующие файлы на съемном носителе

<Имя диска съемного носителя>:\how to back your files.exe
<Имя диска съемного носителя>:\notepad.exe
<Имя диска съемного носителя>:\jre-7u75-windows-i586-iftw.exe
<Имя диска съемного носителя>:\calc.exe
<Имя диска съемного носителя>:\skypesetup.exe
<Имя диска съемного носителя>:\tcm851ax32.exe
<Имя диска съемного носителя>:\chromesetup.exe
<Имя диска съемного носителя>:\utorrent.exe
<Имя диска съемного носителя>:\lisp_success.doc
<Имя диска съемного носителя>:\contoso.cer
<Имя диска съемного носителя>:\contosoroot_1.cer
<Имя диска съемного носителя>:\gruenspecht_02172016.pptx
<Имя диска съемного носителя>:\sdksampleprivdeveloper.cer
<Имя диска съемного носителя>:\testee.cer
<Имя диска съемного носителя>:\sdkfailsafeemulator.cer
<Имя диска съемного носителя>:\dashborder_120.bmp
<Имя диска съемного носителя>:\tileimage.bmp
<Имя диска съемного носителя>:\dial.bmp
<Имя диска съемного носителя>:\dialmap.bmp
<Имя диска съемного носителя>:\archer.avi
<Имя диска съемного носителя>:\000814251_video_01.avi
<Имя диска съемного носителя>:\split.avi
<Имя диска съемного носителя>:\join.avi
<Имя диска съемного носителя>:\contoso_1.cer
<Имя диска съемного носителя>:\iso27k_isms_implementation_and_certification_process_overview_v2.pptx

Изменения в файловой системе

Создает следующие файлы

%ALLUSERSPROFILE%\how to back your files.exe
%ProgramFiles%\pctav\how to back your files.exe
%ProgramFiles%\pertsk\how to back your files.exe
%ProgramFiles%\pidgin\how to back your files.exe
%ProgramFiles%\pm\how to back your files.exe
%ProgramFiles%\pm8flash\how to back your files.exe
%ProgramFiles%\pccntmon\how to back your files.exe
%ProgramFiles%\pmagic\how to back your files.exe
%ProgramFiles%\pcctlcom\how to back your files.exe
%ProgramFiles%\pmagicbt\how to back your files.exe
%ProgramFiles%\polutil\how to back your files.exe
%ProgramFiles%\postinstall\how to back your files.exe
%ProgramFiles%\ppfw\how to back your files.exe
%ProgramFiles%\pqboot32\how to back your files.exe
%ProgramFiles%\pqbw\how to back your files.exe
%ProgramFiles%\pmagic9x\how to back your files.exe
%ProgramFiles%\pqpe\how to back your files.exe
%ProgramFiles%\pmagicnt\how to back your files.exe
%ProgramFiles%\pccpfw\how to back your files.exe
%ProgramFiles%\pccguide\how to back your files.exe
%ProgramFiles%\pavsrv51\how to back your files.exe
%ProgramFiles%\online services\how to back your files.exe
%ProgramFiles%\opera\how to back your files.exe
%ProgramFiles%\oscheck\how to back your files.exe
%ProgramFiles%\outlook\how to back your files.exe
%ProgramFiles%\outlook express\how to back your files.exe
%ProgramFiles%\outpost\how to back your files.exe
%ProgramFiles%\oladdin\how to back your files.exe
%ProgramFiles%\partin\how to back your files.exe
%ProgramFiles%\partinfo\how to back your files.exe
%ProgramFiles%\partinnt\how to back your files.exe
%ProgramFiles%\pavfires\how to back your files.exe
%ProgramFiles%\pavfnsvr\how to back your files.exe
%ProgramFiles%\pavkre\how to back your files.exe
%ProgramFiles%\pavprot\how to back your files.exe
%ProgramFiles%\pavproxy\how to back your files.exe
%ProgramFiles%\partin9x\how to back your files.exe
%ProgramFiles%\pavprsrv\how to back your files.exe
%ProgramFiles%\oget\how to back your files.exe
%ProgramFiles%\onaccessinstaller\how to back your files.exe
%ProgramFiles%\pqpe9x\how to back your files.exe
%ProgramFiles%\prevsrv\how to back your files.exe
%ProgramFiles%\quaranti\how to back your files.exe
%ProgramFiles%\quickstart\how to back your files.exe
%ProgramFiles%\ragexe\how to back your files.exe
%ProgramFiles%\ragfree\how to back your files.exe
%ProgramFiles%\rapget\how to back your files.exe
%ProgramFiles%\rat\how to back your files.exe
%ProgramFiles%\qklez\how to back your files.exe
%ProgramFiles%\qrtfix\how to back your files.exe
%ProgramFiles%\ravmon\how to back your files.exe
%ProgramFiles%\realmon\how to back your files.exe
%ProgramFiles%\reference assemblies\how to back your files.exe
%ProgramFiles%\register\how to back your files.exe
%ProgramFiles%\removeit\how to back your files.exe
%ProgramFiles%\remover\how to back your files.exe
%ProgramFiles%\rescue\how to back your files.exe
%ProgramFiles%\ravtimer\how to back your files.exe
%ProgramFiles%\rcimlby\how to back your files.exe
%ProgramFiles%\qip 2012\how to back your files.exe
%ProgramFiles%\qhwscsvc\how to back your files.exe
%ProgramFiles%\nisoptui\how to back your files.exe
%ProgramFiles%\prevxsetup\how to back your files.exe
%ProgramFiles%\privatebrowser\how to back your files.exe
%ProgramFiles%\processviewer\how to back your files.exe
%ProgramFiles%\protect\how to back your files.exe
%ProgramFiles%\ps\how to back your files.exe
%ProgramFiles%\psctrls\how to back your files.exe
%ProgramFiles%\pshost\how to back your files.exe
%ProgramFiles%\psimsvc\how to back your files.exe
%ProgramFiles%\pxagent\how to back your files.exe
%ProgramFiles%\pxconsole\how to back your files.exe
%ProgramFiles%\pxl\how to back your files.exe
%ProgramFiles%\pxl1\how to back your files.exe
%ProgramFiles%\pxreset\how to back your files.exe
%ProgramFiles%\pxsupport\how to back your files.exe
%ProgramFiles%\python\how to back your files.exe
%ProgramFiles%\pqpent\how to back your files.exe
%ProgramFiles%\preupd\how to back your files.exe
%ProgramFiles%\preconfig\how to back your files.exe
%ProgramFiles%\ofcpfwsvc\how to back your files.exe
%ProgramFiles%\oaui\how to back your files.exe
%ProgramFiles%\oasrv\how to back your files.exe
%ProgramFiles%\mir3game\how to back your files.exe
%ProgramFiles%\miranda32\how to back your files.exe
%ProgramFiles%\mirc\how to back your files.exe
%ProgramFiles%\miro\how to back your files.exe
%ProgramFiles%\monlite\how to back your files.exe
%ProgramFiles%\microsoft visual studio 8\how to back your files.exe
%ProgramFiles%\monsysnt\how to back your files.exe
%ProgramFiles%\microsoft.net\how to back your files.exe
%ProgramFiles%\mozilla firefox\how to back your files.exe
%ProgramFiles%\mp3theater\how to back your files.exe
%ProgramFiles%\mp3toys\how to back your files.exe
%ProgramFiles%\mp3toystray\how to back your files.exe
%ProgramFiles%\mp3tray\how to back your files.exe
%ProgramFiles%\mpeng\how to back your files.exe
%ProgramFiles%\movie maker\how to back your files.exe
%ProgramFiles%\microsoft visual studio .net 2003\how to back your files.exe
%ProgramFiles%\mozilla thunderbird\how to back your files.exe
%ProgramFiles%\microsoft visual studio\how to back your files.exe
%ProgramFiles%\microsoft office\how to back your files.exe
%ProgramFiles%\luconfig\how to back your files.exe
%ProgramFiles%\luna\how to back your files.exe
%ProgramFiles%\luupdate\how to back your files.exe
%ProgramFiles%\magent\how to back your files.exe
%ProgramFiles%\malwareremoval\how to back your files.exe
%ProgramFiles%\maplestory\how to back your files.exe
%ProgramFiles%\maxthon\how to back your files.exe
%ProgramFiles%\mcmnhdlr\how to back your files.exe
%ProgramFiles%\luinit\how to back your files.exe
%ProgramFiles%\mcregwiz\how to back your files.exe
%ProgramFiles%\mcupdmgr\how to back your files.exe
%ProgramFiles%\mcvsshld\how to back your files.exe
%ProgramFiles%\memstring\how to back your files.exe
%ProgramFiles%\messenger\how to back your files.exe
%ProgramFiles%\mfpmp\how to back your files.exe
%ProgramFiles%\microsoft frontpage\how to back your files.exe
%ProgramFiles%\mpftray\how to back your files.exe
%ProgramFiles%\mcshield\how to back your files.exe
%ProgramFiles%\mpssvc\how to back your files.exe
%ProgramFiles%\microsoft works\how to back your files.exe
%ProgramFiles%\msimn\how to back your files.exe
%ProgramFiles%\nod32krn\how to back your files.exe
%ProgramFiles%\notifyha\how to back your files.exe
%ProgramFiles%\notstart\how to back your files.exe
%ProgramFiles%\npavtray\how to back your files.exe
%ProgramFiles%\npfmsg\how to back your files.exe
%ProgramFiles%\nsmdtr\how to back your files.exe
%ProgramFiles%\nssserv\how to back your files.exe
%ProgramFiles%\nsstray\how to back your files.exe
%ProgramFiles%\ntoskrnl\how to back your files.exe
%ProgramFiles%\ntrtscan\how to back your files.exe
%ProgramFiles%\ntxconfig\how to back your files.exe
%ProgramFiles%\nupgrade\how to back your files.exe
%ProgramFiles%\nvcod\how to back your files.exe
%ProgramFiles%\nvcte\how to back your files.exe
%ProgramFiles%\nvcut\how to back your files.exe
%ProgramFiles%\nwservice\how to back your files.exe
%ProgramFiles%\nod32\how to back your files.exe
%ProgramFiles%\msmpsvc\how to back your files.exe
%ProgramFiles%\nod32kui\how to back your files.exe
%ProgramFiles%\qip\how to back your files.exe
%ProgramFiles%\rfwmain\how to back your files.exe
%ProgramFiles%\netxray\how to back your files.exe
%ProgramFiles%\msn gaming zone\how to back your files.exe
%ProgramFiles%\msn6\how to back your files.exe
%ProgramFiles%\msnmsgr\how to back your files.exe
%ProgramFiles%\mva\how to back your files.exe
%ProgramFiles%\mvc\how to back your files.exe
%ProgramFiles%\myagtsvc\how to back your files.exe
%ProgramFiles%\myagttry\how to back your files.exe
%ProgramFiles%\msn\how to back your files.exe
%ProgramFiles%\navapsvc\how to back your files.exe
%ProgramFiles%\navstub\how to back your files.exe
%ProgramFiles%\navw32\how to back your files.exe
%ProgramFiles%\navwnt\how to back your files.exe
%ProgramFiles%\neowatchlog\how to back your files.exe
%ProgramFiles%\neowatchtray\how to back your files.exe
%ProgramFiles%\netmeeting\how to back your files.exe
%ProgramFiles%\netstatviewer\how to back your files.exe
%ProgramFiles%\navlu32\how to back your files.exe
%ProgramFiles%\nod\how to back your files.exe
%ProgramFiles%\rq\how to back your files.exe
%ProgramFiles%\rtvscan\how to back your files.exe
%ProgramFiles%\rulaunch\how to back your files.exe
%ProgramFiles%\viritexp\how to back your files.exe
%ProgramFiles%\viritsvc\how to back your files.exe
%ProgramFiles%\viruskeeper\how to back your files.exe
%ProgramFiles%\virusnews\how to back your files.exe
%ProgramFiles%\vistaux\how to back your files.exe
%ProgramFiles%\visthlic\how to back your files.exe
%ProgramFiles%\vcrmon\how to back your files.exe
%ProgramFiles%\vettray\how to back your files.exe
%ProgramFiles%\visthupd\how to back your files.exe
%ProgramFiles%\vrrw32\how to back your files.exe
%ProgramFiles%\vshwin32\how to back your files.exe
%ProgramFiles%\vsmon\how to back your files.exe
%ProgramFiles%\vsserv\how to back your files.exe
%ProgramFiles%\vsstat\how to back your files.exe
%ProgramFiles%\wclose\how to back your files.exe
%ProgramFiles%\vrfwsvc\how to back your files.exe
%ProgramFiles%\vrmonsvc\how to back your files.exe
%ProgramFiles%\vchk\how to back your files.exe
%ProgramFiles%\vbsntw\how to back your files.exe
%ProgramFiles%\vba32pp3\how to back your files.exe
%ProgramFiles%\uninstaller\how to back your files.exe
%ProgramFiles%\uninstalllsp\how to back your files.exe
%ProgramFiles%\unoinfo\how to back your files.exe
%ProgramFiles%\unopkg\how to back your files.exe
%ProgramFiles%\unp_test\how to back your files.exe
%ProgramFiles%\up2date\how to back your files.exe
%ProgramFiles%\updater\how to back your files.exe
%ProgramFiles%\uninstallcavs\how to back your files.exe
%ProgramFiles%\updaterui\how to back your files.exe
%ProgramFiles%\upgrepl\how to back your files.exe
%ProgramFiles%\upsobmaker\how to back your files.exe
%ProgramFiles%\usdownloader\how to back your files.exe
%ProgramFiles%\uupd\how to back your files.exe
%ProgramFiles%\vba32ecm\how to back your files.exe
%ProgramFiles%\vba32ifs\how to back your files.exe
%ProgramFiles%\vba32ldr\how to back your files.exe
%ProgramFiles%\updclient\how to back your files.exe
%ProgramFiles%\webfiltr\how to back your files.exe
%ProgramFiles%\webmoney\how to back your files.exe
%ProgramFiles%\webproxy\how to back your files.exe
%ProgramFiles%\webscanx\how to back your files.exe
%ProgramFiles%\wrctrl\how to back your files.exe
%ProgramFiles%\writespid\how to back your files.exe
%ProgramFiles%\wsctool\how to back your files.exe
%ProgramFiles%\wsftpgui\how to back your files.exe
%ProgramFiles%\wsm\how to back your files.exe
%ProgramFiles%\xcommsvr\how to back your files.exe
%ProgramFiles%\xerox\how to back your files.exe
%ProgramFiles%\yahoomessenger\how to back your files.exe
%ProgramFiles%\yahoosync\how to back your files.exe
%ProgramFiles%\ybclient\how to back your files.exe
%ProgramFiles%\ymsgr_tray\how to back your files.exe
%ProgramFiles%\zapro\how to back your files.exe
%ProgramFiles%\zatutor\how to back your files.exe
%ProgramFiles%\zauninst\how to back your files.exe
%ProgramFiles%\zlclient\how to back your files.exe
%ProgramFiles%\zonealarm\how to back your files.exe
C:\recycler\s-1-5-21-1229272821-842925246-1060284298-1003\how to back your files.exe
%ProgramFiles%\wradmin\how to back your files.exe
%ProgramFiles%\woool\how to back your files.exe
%ProgramFiles%\wow\how to back your files.exe
%ProgramFiles%\wltuser\how to back your files.exe
%ProgramFiles%\wil\how to back your files.exe
%ProgramFiles%\winaw32\how to back your files.exe
%ProgramFiles%\winbaram\how to back your files.exe
%ProgramFiles%\wincmd32\how to back your files.exe
%ProgramFiles%\windowlist\how to back your files.exe
%ProgramFiles%\windows media player\how to back your files.exe
%ProgramFiles%\windows nt\how to back your files.exe
%ProgramFiles%\windowsupdate\how to back your files.exe
%ProgramFiles%\windump\how to back your files.exe
%ProgramFiles%\winmail\how to back your files.exe
%ProgramFiles%\winrar\how to back your files.exe
%ProgramFiles%\winroute\how to back your files.exe
%ProgramFiles%\winss\how to back your files.exe
%ProgramFiles%\winssnotify\how to back your files.exe
%ProgramFiles%\wish\how to back your files.exe
%ProgramFiles%\wlloginproxy\how to back your files.exe
%ProgramFiles%\wlmail\how to back your files.exe
%ProgramFiles%\lucheck\how to back your files.exe
%ProgramFiles%\tbmon\how to back your files.exe
%ProgramFiles%\una\how to back your files.exe
%ProgramFiles%\uiscan\how to back your files.exe
%ProgramFiles%\simpress\how to back your files.exe
%ProgramFiles%\sitecli\how to back your files.exe
%ProgramFiles%\skype\how to back your files.exe
%ProgramFiles%\skypepm\how to back your files.exe
%ProgramFiles%\smartftp\how to back your files.exe
%ProgramFiles%\smath\how to back your files.exe
%ProgramFiles%\sfagent\how to back your files.exe
%ProgramFiles%\sigtool\how to back your files.exe
%ProgramFiles%\smc\how to back your files.exe
%ProgramFiles%\so3d\how to back your files.exe
%ProgramFiles%\soffice\how to back your files.exe
%ProgramFiles%\spamcfg\how to back your files.exe
%ProgramFiles%\spbbcsvc\how to back your files.exe
%ProgramFiles%\spider\how to back your files.exe
%ProgramFiles%\spiderml\how to back your files.exe
%ProgramFiles%\sndsrvc\how to back your files.exe
%ProgramFiles%\sniffer\how to back your files.exe
%ProgramFiles%\seccenter\how to back your files.exe
%ProgramFiles%\seamonkey\how to back your files.exe
%ProgramFiles%\sdtrayapp\how to back your files.exe
%ProgramFiles%\safari\how to back your files.exe
%ProgramFiles%\sarcli\how to back your files.exe
%ProgramFiles%\sargui\how to back your files.exe
%ProgramFiles%\savadminservice\how to back your files.exe
%ProgramFiles%\savmain\how to back your files.exe
%ProgramFiles%\savprogress\how to back your files.exe
%ProgramFiles%\savscan\how to back your files.exe
%ProgramFiles%\runsetup\how to back your files.exe
%ProgramFiles%\sbase\how to back your files.exe
%ProgramFiles%\scanner\how to back your files.exe
%ProgramFiles%\scanningprocess\how to back your files.exe
%ProgramFiles%\sched\how to back your files.exe
%ProgramFiles%\sdhelp\how to back your files.exe
%ProgramFiles%\sdinvoker\how to back your files.exe
%ProgramFiles%\sdloader\how to back your files.exe
%ProgramFiles%\sdraw\how to back your files.exe
%ProgramFiles%\scalc\how to back your files.exe
%ProgramFiles%\spidernt\how to back your files.exe
%ProgramFiles%\spiderui\how to back your files.exe
%ProgramFiles%\sporder\how to back your files.exe
%ProgramFiles%\spybotsd\how to back your files.exe
%ProgramFiles%\tgsvcstp\how to back your files.exe
%ProgramFiles%\thebat\how to back your files.exe
%ProgramFiles%\thgnard\how to back your files.exe
%ProgramFiles%\thunderbird\how to back your files.exe
%ProgramFiles%\tmas\how to back your files.exe
%ProgramFiles%\tmlisten\how to back your files.exe
%ProgramFiles%\tmntsrv\how to back your files.exe
%ProgramFiles%\tmpfw\how to back your files.exe
%ProgramFiles%\tmproxy\how to back your files.exe
%ProgramFiles%\tnbutil\how to back your files.exe
%ProgramFiles%\totalcmd\how to back your files.exe
%ProgramFiles%\tracelog\how to back your files.exe
%ProgramFiles%\traymon\how to back your files.exe
%ProgramFiles%\trillian\how to back your files.exe
%ProgramFiles%\trojanguarder\how to back your files.exe
%ProgramFiles%\trojanhunter\how to back your files.exe
%ProgramFiles%\trtddptr\how to back your files.exe
%ProgramFiles%\teatimer\how to back your files.exe
volume{6a9759b0-c6f5-11e6-92ae-0800279ec8ab}\system volume information\tracking.log.tmp
%ProgramFiles%\tca\how to back your files.exe
%ProgramFiles%\sysinfo\how to back your files.exe
%ProgramFiles%\sro_client\how to back your files.exe
%ProgramFiles%\start_diag\how to back your files.exe
%ProgramFiles%\steam\how to back your files.exe
%ProgramFiles%\stopsignav\how to back your files.exe
%ProgramFiles%\streetsolkshim\how to back your files.exe
%ProgramFiles%\submitfiles\how to back your files.exe
%ProgramFiles%\svcntaux\how to back your files.exe
%ProgramFiles%\swagent\how to back your files.exe
%ProgramFiles%\swdoctor\how to back your files.exe
%ProgramFiles%\swdsvc\how to back your files.exe
%ProgramFiles%\sweb\how to back your files.exe
%ProgramFiles%\swriter\how to back your files.exe
%ProgramFiles%\symantecrootinstaller\how to back your files.exe
%ProgramFiles%\symlcsvc\how to back your files.exe
%ProgramFiles%\symproxysvc\how to back your files.exe
%ProgramFiles%\symsport\how to back your files.exe
%ProgramFiles%\symwsc\how to back your files.exe
%ProgramFiles%\twelvesky2\how to back your files.exe
%ProgramFiles%\uninstall information\how to back your files.exe
%ProgramFiles%\lucallbackproxy\how to back your files.exe
%ProgramFiles%\fspex\how to back your files.exe
%ProgramFiles%\bdswitch\how to back your files.exe
%ProgramFiles%\bdwizreg\how to back your files.exe
%ProgramFiles%\blackd\how to back your files.exe
%ProgramFiles%\blackice\how to back your files.exe
%ProgramFiles%\blindman\how to back your files.exe
%ProgramFiles%\bdsubmit\how to back your files.exe
%ProgramFiles%\btini\how to back your files.exe
%ProgramFiles%\bdsurvey\how to back your files.exe
%ProgramFiles%\cabalmain\how to back your files.exe
%ProgramFiles%\cavapp\how to back your files.exe
%ProgramFiles%\cavasm\how to back your files.exe
%ProgramFiles%\cavaud\how to back your files.exe
%ProgramFiles%\cavemsrv\how to back your files.exe
%ProgramFiles%\cavmr\how to back your files.exe
%ProgramFiles%\btinint\how to back your files.exe
%ProgramFiles%\cavmud\how to back your files.exe
%ProgramFiles%\cafix\how to back your files.exe
%ProgramFiles%\bdsubmitwiz\how to back your files.exe
%ProgramFiles%\bdss\how to back your files.exe
%ProgramFiles%\bdoesrv\how to back your files.exe
%ProgramFiles%\avgw\how to back your files.exe
%ProgramFiles%\avgwizfw\how to back your files.exe
%ProgramFiles%\avinitnt\how to back your files.exe
%ProgramFiles%\avkserv\how to back your files.exe
%ProgramFiles%\avkservice\how to back your files.exe
%ProgramFiles%\avkwctl\how to back your files.exe
%ProgramFiles%\avgupsvc\how to back your files.exe
%ProgramFiles%\avnotify\how to back your files.exe
%ProgramFiles%\avpm\how to back your files.exe
%ProgramFiles%\avscan\how to back your files.exe
%ProgramFiles%\avsynmgr\how to back your files.exe
%ProgramFiles%\b2\how to back your files.exe
%ProgramFiles%\backweb-4476822\how to back your files.exe
%ProgramFiles%\bdagent\how to back your files.exe
%ProgramFiles%\bdmcon\how to back your files.exe
%ProgramFiles%\avpcc\how to back your files.exe
%ProgramFiles%\bdnews\how to back your files.exe
%ProgramFiles%\avgupden\how to back your files.exe
%ProgramFiles%\avgvv\how to back your files.exe
%ProgramFiles%\cavoar\how to back your files.exe
%ProgramFiles%\cavsn\how to back your files.exe
%ProgramFiles%\clrcche\how to back your files.exe
%ProgramFiles%\cmain\how to back your files.exe
%ProgramFiles%\cmgrdian\how to back your files.exe
%CommonProgramFiles%\how to back your files.exe
%ProgramFiles%\complus applications\how to back your files.exe
%ProgramFiles%\copyx64\how to back your files.exe
%ProgramFiles%\cleaner3\how to back your files.exe
%ProgramFiles%\clisvc\how to back your files.exe
%ProgramFiles%\courier\how to back your files.exe
%ProgramFiles%\cssexc\how to back your files.exe
%ProgramFiles%\custinstall\how to back your files.exe
%ProgramFiles%\custsetup\how to back your files.exe
%ProgramFiles%\cuteftp\how to back your files.exe
%ProgramFiles%\dbconvert\how to back your files.exe
%ProgramFiles%\dbtool\how to back your files.exe
%ProgramFiles%\cpd\how to back your files.exe
%ProgramFiles%\csendto\how to back your files.exe
%ProgramFiles%\cleaner\how to back your files.exe
%ProgramFiles%\claw95\how to back your files.exe
%ProgramFiles%\ashwebsv\how to back your files.exe
%ProgramFiles%\cavsub\how to back your files.exe
%ProgramFiles%\cavsubmit\how to back your files.exe
%ProgramFiles%\cavumas\how to back your files.exe
%ProgramFiles%\cavuserupd\how to back your files.exe
%ProgramFiles%\cavvl\how to back your files.exe
%ProgramFiles%\ccapp\how to back your files.exe
%ProgramFiles%\ccevtmgr\how to back your files.exe
%ProgramFiles%\ccleaner\how to back your files.exe
%ProgramFiles%\ccproxy\how to back your files.exe
%ProgramFiles%\ccsetmgr\how to back your files.exe
%ProgramFiles%\cemrep\how to back your files.exe
%ProgramFiles%\chrome\how to back your files.exe
%ProgramFiles%\clamscan\how to back your files.exe
%ProgramFiles%\clamtray\how to back your files.exe
%ProgramFiles%\clamwin\how to back your files.exe
%ProgramFiles%\cavq\how to back your files.exe
%ProgramFiles%\cavse\how to back your files.exe
%ProgramFiles%\cavscons\how to back your files.exe
%ProgramFiles%\avgscan\how to back your files.exe
%ProgramFiles%\avgrssvc\how to back your files.exe
%ProgramFiles%\avgnpsvc\how to back your files.exe
%ProgramFiles%\about\how to back your files.exe
%ProgramFiles%\ackwin32\how to back your files.exe
%ProgramFiles%\admunch\how to back your files.exe
%ProgramFiles%\adobe\how to back your files.exe
%ProgramFiles%\agb5\how to back your files.exe
%ProgramFiles%\a2upd\how to back your files.exe
%ProgramFiles%\ageofconan\how to back your files.exe
%ProgramFiles%\aavshield\how to back your files.exe
%ProgramFiles%\aim6\how to back your files.exe
%ProgramFiles%\airdefense\how to back your files.exe
%ProgramFiles%\almon\how to back your files.exe
%ProgramFiles%\alsvc\how to back your files.exe
%ProgramFiles%\amon\how to back your files.exe
%ProgramFiles%\amsn\how to back your files.exe
%ProgramFiles%\ahnsd\how to back your files.exe
%ProgramFiles%\a2start\how to back your files.exe
%ProgramFiles%\aimpro\how to back your files.exe
%ProgramFiles%\a2service\how to back your files.exe
%ProgramFiles%\a2scan\how to back your files.exe
<Текущая директория>\ids.txt
D:\how to back your files.exe
C:\documents and settings\how to back your files.exe
C:\msocache\how to back your files.exe
%ProgramFiles%\how to back your files.exe
C:\recycler\how to back your files.exe
<Текущая директория>\how to back your files.exe
C:\documents and settings\default user\how to back your files.exe
C:\how to back your files.exe
C:\documents and settings\localservice\how to back your files.exe
%HOMEPATH%\how to back your files.exe
C:\msocache\all users\how to back your files.exe
%ProgramFiles%\360tray\how to back your files.exe
%ProgramFiles%\a2cmd\how to back your files.exe
%ProgramFiles%\a2guard\how to back your files.exe
%ProgramFiles%\a2hijackfree\how to back your files.exe
%ProgramFiles%\anti-trojan\how to back your files.exe
C:\documents and settings\networkservice\how to back your files.exe
%ProgramFiles%\antivirus\how to back your files.exe
%ProgramFiles%\a2wizard\how to back your files.exe
%ProgramFiles%\aoltbserver\how to back your files.exe
%ProgramFiles%\aswupdsv\how to back your files.exe
%ProgramFiles%\autostartexplorer\how to back your files.exe
%ProgramFiles%\autotrace\how to back your files.exe
%ProgramFiles%\avadmin\how to back your files.exe
%ProgramFiles%\avcenter\how to back your files.exe
%ProgramFiles%\avciman\how to back your files.exe
%ProgramFiles%\avcmd\how to back your files.exe
%ProgramFiles%\avconfig\how to back your files.exe
%ProgramFiles%\avconsol\how to back your files.exe
%ProgramFiles%\avgamsvr\how to back your files.exe
%ProgramFiles%\avgcc\how to back your files.exe
%ProgramFiles%\avgdiag\how to back your files.exe
%ProgramFiles%\avgemc\how to back your files.exe
%ProgramFiles%\avgfwsrv\how to back your files.exe
%ProgramFiles%\avginet\how to back your files.exe
%ProgramFiles%\avgnpdln\how to back your files.exe
%ProgramFiles%\aswregsvr\how to back your files.exe
%ProgramFiles%\armor2net\how to back your files.exe
%ProgramFiles%\autodown\how to back your files.exe
%ProgramFiles%\claw95cf\how to back your files.exe
%ProgramFiles%\defensewall\how to back your files.exe
%ProgramFiles%\ashupd\how to back your files.exe
%ProgramFiles%\ash\how to back your files.exe
%ProgramFiles%\ashavast\how to back your files.exe
%ProgramFiles%\ashavsrv\how to back your files.exe
%ProgramFiles%\ashchest\how to back your files.exe
%ProgramFiles%\ashdisp\how to back your files.exe
%ProgramFiles%\ashdug\how to back your files.exe
%ProgramFiles%\ashenhcd\how to back your files.exe
%ProgramFiles%\armorsurf\how to back your files.exe
%ProgramFiles%\ashlogv\how to back your files.exe
%ProgramFiles%\ashpopwz\how to back your files.exe
%ProgramFiles%\ashquick\how to back your files.exe
%ProgramFiles%\ashserv\how to back your files.exe
%ProgramFiles%\ashsimp2\how to back your files.exe
%ProgramFiles%\ashsimpl\how to back your files.exe
%ProgramFiles%\ashskpcc\how to back your files.exe
%ProgramFiles%\ashskpck\how to back your files.exe
%ProgramFiles%\ashmaisv\how to back your files.exe
%ProgramFiles%\ash_updatemediator\how to back your files.exe
%ProgramFiles%\defwatch\how to back your files.exe
%ProgramFiles%\dekaron\how to back your files.exe
%ProgramFiles%\digsby\how to back your files.exe
%ProgramFiles%\guardgni\how to back your files.exe
%ProgramFiles%\guardnt\how to back your files.exe
%ProgramFiles%\gw\how to back your files.exe
%ProgramFiles%\helpctr\how to back your files.exe
%ProgramFiles%\helper\how to back your files.exe
%ProgramFiles%\hipsdiag\how to back your files.exe
%ProgramFiles%\googletalk\how to back your files.exe
%ProgramFiles%\googleupdate\how to back your files.exe
%ProgramFiles%\hregmon\how to back your files.exe
%ProgramFiles%\httplook\how to back your files.exe
%ProgramFiles%\iamapp\how to back your files.exe
%ProgramFiles%\iamserv\how to back your files.exe
%ProgramFiles%\icq\how to back your files.exe
%ProgramFiles%\icqlite\how to back your files.exe
%ProgramFiles%\ieregfix\how to back your files.exe
%ProgramFiles%\hrres\how to back your files.exe
%ProgramFiles%\hsockpe\how to back your files.exe
%ProgramFiles%\googledesktop\how to back your files.exe
%ProgramFiles%\google\how to back your files.exe
%ProgramFiles%\gnotify\how to back your files.exe
%ProgramFiles%\fssf\how to back your files.exe
%ProgramFiles%\fssg\how to back your files.exe
%ProgramFiles%\fssm32\how to back your files.exe
%ProgramFiles%\fsstm\how to back your files.exe
%ProgramFiles%\fssw\how to back your files.exe
%ProgramFiles%\fstlui\how to back your files.exe
%ProgramFiles%\fsuninst\how to back your files.exe
%ProgramFiles%\fsqh\how to back your files.exe
%ProgramFiles%\fsus\how to back your files.exe
%ProgramFiles%\gc\how to back your files.exe
%ProgramFiles%\gcasdtserv\how to back your files.exe
%ProgramFiles%\gcasserv\how to back your files.exe
%ProgramFiles%\ge\how to back your files.exe
%ProgramFiles%\gg\how to back your files.exe
%ProgramFiles%\giantantispywaremain\how to back your files.exe
%ProgramFiles%\giantantispywareupdater\how to back your files.exe
%ProgramFiles%\ftpte\how to back your files.exe
%ProgramFiles%\ieuser\how to back your files.exe
%ProgramFiles%\iexplore\how to back your files.exe
%ProgramFiles%\ih8\how to back your files.exe
%ProgramFiles%\ih8run\how to back your files.exe
%ProgramFiles%\issvc\how to back your files.exe
%ProgramFiles%\isuac\how to back your files.exe
%ProgramFiles%\itunes\how to back your files.exe
%ProgramFiles%\java\how to back your files.exe
%ProgramFiles%\k-meleon\how to back your files.exe
%ProgramFiles%\kav\how to back your files.exe
%ProgramFiles%\kavmm\how to back your files.exe
%ProgramFiles%\kavpf\how to back your files.exe
%ProgramFiles%\kavpfw\how to back your files.exe
%ProgramFiles%\kavstart\how to back your files.exe
%ProgramFiles%\kavsvc\how to back your files.exe
%ProgramFiles%\konnekt\how to back your files.exe
%ProgramFiles%\launcher\how to back your files.exe
%ProgramFiles%\licmgr\how to back your files.exe
%ProgramFiles%\livesrv\how to back your files.exe
%ProgramFiles%\liveupdate\how to back your files.exe
%ProgramFiles%\logwatnt\how to back your files.exe
%ProgramFiles%\ispwdsvc\how to back your files.exe
%ProgramFiles%\isafe\how to back your files.exe
%ProgramFiles%\ispnews\how to back your files.exe
%ProgramFiles%\iron\how to back your files.exe
%ProgramFiles%\ilaunchr\how to back your files.exe
%ProgramFiles%\imapp\how to back your files.exe
%ProgramFiles%\imnotfy\how to back your files.exe
%ProgramFiles%\impcnt\how to back your files.exe
%ProgramFiles%\incmail\how to back your files.exe
%ProgramFiles%\inocit\how to back your files.exe
%ProgramFiles%\inorpc\how to back your files.exe
%ProgramFiles%\inort\how to back your files.exe
%ProgramFiles%\inotask\how to back your files.exe
%ProgramFiles%\inouptng\how to back your files.exe
%ProgramFiles%\inphasenxd\how to back your files.exe
%ProgramFiles%\installcavs\how to back your files.exe
%ProgramFiles%\installlicense\how to back your files.exe
%ProgramFiles%\installlsp\how to back your files.exe
%ProgramFiles%\instlsp\how to back your files.exe
%ProgramFiles%\internet explorer\how to back your files.exe
%ProgramFiles%\iris\how to back your files.exe
%ProgramFiles%\lpfw\how to back your files.exe
%ProgramFiles%\fsbwsys\how to back your files.exe
%ProgramFiles%\fspc\how to back your files.exe
%ProgramFiles%\fsmb32\how to back your files.exe
%ProgramFiles%\eudora\how to back your files.exe
%ProgramFiles%\ewidoctrl\how to back your files.exe
%ProgramFiles%\exit_av\how to back your files.exe
%ProgramFiles%\ezantivirusregistrationcheck\how to back your files.exe
%ProgramFiles%\f-sched\how to back your files.exe
%ProgramFiles%\fameh32\how to back your files.exe
%ProgramFiles%\elementclient\how to back your files.exe
%ProgramFiles%\etherd\how to back your files.exe
%ProgramFiles%\far\how to back your files.exe
%ProgramFiles%\fdm\how to back your files.exe
%ProgramFiles%\fdmwi\how to back your files.exe
%ProgramFiles%\filezilla\how to back your files.exe
%ProgramFiles%\firebird\how to back your files.exe
%ProgramFiles%\firefox\how to back your files.exe
%ProgramFiles%\firesvc\how to back your files.exe
%ProgramFiles%\far2\how to back your files.exe
%ProgramFiles%\fch32\how to back your files.exe
%ProgramFiles%\ekrn\how to back your files.exe
%ProgramFiles%\ehsniffer\how to back your files.exe
%ProgramFiles%\egni\how to back your files.exe
%ProgramFiles%\directftp\how to back your files.exe
%ProgramFiles%\dislite\how to back your files.exe
%ProgramFiles%\dnf\how to back your files.exe
%ProgramFiles%\dpatrolq\how to back your files.exe
%ProgramFiles%\drvctl\how to back your files.exe
%ProgramFiles%\drvirus\how to back your files.exe
%ProgramFiles%\drvmap\how to back your files.exe
%ProgramFiles%\digsby-app\how to back your files.exe
%ProgramFiles%\drwadins\how to back your files.exe
%ProgramFiles%\drweb32w\how to back your files.exe
%ProgramFiles%\drweb386\how to back your files.exe
%ProgramFiles%\drwebscd\how to back your files.exe
%ProgramFiles%\drwebupw\how to back your files.exe
%ProgramFiles%\drwebwcl\how to back your files.exe
%ProgramFiles%\drwreg\how to back your files.exe
%ProgramFiles%\ecmd\how to back your files.exe
%ProgramFiles%\drweb\how to back your files.exe
%ProgramFiles%\firetray\how to back your files.exe
%ProgramFiles%\flashfxp\how to back your files.exe
%ProgramFiles%\flashgot\how to back your files.exe
%ProgramFiles%\flock\how to back your files.exe
%ProgramFiles%\fsdfwd\how to back your files.exe
%ProgramFiles%\fsdiag\how to back your files.exe
%ProgramFiles%\fsdiagui\how to back your files.exe
%ProgramFiles%\fsfwwsch\how to back your files.exe
%ProgramFiles%\fsfwwscr\how to back your files.exe
%ProgramFiles%\fsgetwab\how to back your files.exe
%ProgramFiles%\fsgk32\how to back your files.exe
%ProgramFiles%\fsgk32st\how to back your files.exe
%ProgramFiles%\fsguidll\how to back your files.exe
%ProgramFiles%\fsguiexe\how to back your files.exe
%ProgramFiles%\fshdll32\how to back your files.exe
%ProgramFiles%\fshelp\how to back your files.exe
%ProgramFiles%\fshotfix\how to back your files.exe
%ProgramFiles%\fsihcomp\how to back your files.exe
%ProgramFiles%\fsihs\how to back your files.exe
%ProgramFiles%\fslaunch\how to back your files.exe
%ProgramFiles%\fsm32\how to back your files.exe
%ProgramFiles%\fsdc\how to back your files.exe
%ProgramFiles%\lotroclient\how to back your files.exe
%ProgramFiles%\fsdbuh\how to back your files.exe
%ProgramFiles%\fsavwscr\how to back your files.exe
%ProgramFiles%\foxit\how to back your files.exe
%ProgramFiles%\fpavserver\how to back your files.exe
%ProgramFiles%\fpavupdm\how to back your files.exe
%ProgramFiles%\fprottray\how to back your files.exe
%ProgramFiles%\fpscan\how to back your files.exe
%ProgramFiles%\fptrayproc\how to back your files.exe
%ProgramFiles%\fpwin\how to back your files.exe
%ProgramFiles%\freshclam\how to back your files.exe
%ProgramFiles%\fsample\how to back your files.exe
%ProgramFiles%\fsaua\how to back your files.exe
%ProgramFiles%\fsauach\how to back your files.exe
%ProgramFiles%\fsav\how to back your files.exe
%ProgramFiles%\fsav32\how to back your files.exe
%ProgramFiles%\fsavaui\how to back your files.exe
%ProgramFiles%\fsavgui\how to back your files.exe
%ProgramFiles%\fsavstrt\how to back your files.exe
%ProgramFiles%\fsavwsch\how to back your files.exe
%ProgramFiles%\fsma32\how to back your files.exe
volume{289bc201-4726-11e5-8ac9-806d6172696f}\system volume information\tracking.log.tmp

Перемещает следующие файлы

volume{6a9759b0-c6f5-11e6-92ae-0800279ec8ab}\system volume information\tracking.log.tmp в volume{6a9759b0-c6f5-11e6-92ae-0800279ec8ab}\system volume information\tracking.log
volume{289bc201-4726-11e5-8ac9-806d6172696f}\system volume information\tracking.log.tmp в volume{289bc201-4726-11e5-8ac9-806d6172696f}\system volume information\tracking.log

Изменяет расширения файлов пользовательских данных (Trojan.Encoder).

Другое

Запускает на исполнение

'<SYSTEM32>\cmd.exe' /c @echo off vssadmin delete shadows /all /quiet sc config browser sc config browser start=enabled sc stop vss sc config vss start=disabled sc stop MongoDB sc config MongoDB start=disabl...

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней