Win32.HLLP.Legion.1

Техническая информация

Для обеспечения автозапуска и распространения

Подменяет следующие исполняемые системные файлы

%WINDIR%\Microsoft.NET\assembly\GAC_MSIL\Microsoft.Workflow.Compiler\v4.0_4.0.0.0__31bf3856ad364e35\Microsoft.Workflow.Compiler.exe файлом %WINDIR%\microsoft.net\assembly\gac_msil\microsoft.workflow.compiler\v4.0_4.0.0.0__31bf3856ad364e35\microsoft.workflow.compiler.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\CasPol.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\caspol.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\aspnet_wp.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_wp.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\aspnet_state.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_state.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\aspnet_regsql.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regsql.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\aspnet_regiis.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regiis.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\aspnet_regbrowsers.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regbrowsers.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\aspnet_compiler.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_compiler.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\AppLaunch.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\applaunch.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\AddInUtil.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\addinutil.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\AddInProcess32.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess32.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\AddInProcess.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\WsatConfig.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\wsatconfig.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\vbc.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\vbc.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\smsvchost.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ServiceModelReg.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\servicemodelreg.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\regtlibv12.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\regtlibv12.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegSvcs.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\regsvcs.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ngen.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\ngen.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\msbuild.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\mscorsvw.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\ComSvcConfig.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\comsvcconfig.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\csc.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe
%WINDIR%\SysWOW64\FlashPlayerApp.exe файлом %WINDIR%\syswow64\flashplayerapp.exe
%WINDIR%\Microsoft.NET\NETFXRepair.exe файлом %WINDIR%\microsoft.net\netfxrepair.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\WsatConfig.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\wsatconfig.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\vbc.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\vbc.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\smsvchost.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\ServiceModelReg.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\servicemodelreg.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\regtlibv12.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\regtlibv12.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\RegSvcs.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\regsvcs.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\RegAsm.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\regasm.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\mscorsvw.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regsql.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\MSBuild.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\msbuild.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\Microsoft.Workflow.Compiler.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.workflow.compiler.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\jsc.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\jsc.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\InstallUtil.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\installutil.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\ilasm.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\ilasm.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\EdmGen.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\edmgen.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\dfsvc.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\dfsvc.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\DataSvcUtil.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\datasvcutil.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.Workflow.Compiler.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.workflow.compiler.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\jsc.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\jsc.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\installutil.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\vbc.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\vbc.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\regsvcs.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\regasm.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\ngen.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\ngen.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\migpolwin.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\MigPol.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\migpol.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\jsc.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\jsc.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\installutil.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\ilasm.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\ilasm.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\IEExec.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\ieexec.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\cvtres.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\cvtres.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\csc.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\csc.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\configwizards.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\CasPol.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\caspol.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_wp.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_state.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_regiis.exe
%WINDIR%\Microsoft.NET\Framework\v1.1.4322\al.exe файлом %WINDIR%\microsoft.net\framework\v1.1.4322\al.exe
%WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe файлом %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe
%WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe файлом %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\servicemodelreg.exe
%WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe файлом %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\comsvcconfig.exe
%WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMConfigInstaller.exe файлом %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smconfiginstaller.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ilasm.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\ilasm.exe
%WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe файлом %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\EdmGen.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\edmgen.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\dfsvc.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\DataSvcUtil.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\datasvcutil.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\cvtres.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\cvtres.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\csc.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\csc.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\ComSvcConfig.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\comsvcconfig.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\CasPol.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\caspol.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_wp.exe
%WINDIR%\Microsoft.NET\Framework64\v4.0.30319\ngen.exe файлом %WINDIR%\microsoft.net\framework64\v4.0.30319\ngen.exe
%WINDIR%\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_261.exe файлом %WINDIR%\syswow64\macromed\flash\flashplayerplugin_18_0_0_261.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regiis.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regbrowsers.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\addinutil.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess32.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess.exe
%WINDIR%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe файлом %WINDIR%\microsoft.net\framework\v3.0\wpf\xamlviewer\xamlviewer_v0300.exe
%WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe файлом %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\wsatconfig.exe
%WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe файлом %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_state.exe
%WINDIR%\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe файлом %WINDIR%\syswow64\macromed\flash\flashplayerupdateservice.exe

Заражает следующие исполняемые файлы

C:\far2\far.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regsql.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regiis.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regbrowsers.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_compiler.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\applaunch.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinutil.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess32.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\wsatconfig.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_wp.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_state.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\servicemodelreg.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\regtlibv12.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\regsvcs.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\ngen.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\mscorsvw.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\msbuild.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.workflow.compiler.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\jsc.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\vbc.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\vbc.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\caspol.exe
%WINDIR%\syswow64\flashplayerapp.exe
%WINDIR%\microsoft.net\netfxrepair.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\wsatconfig.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\vbc.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\smsvchost.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\servicemodelreg.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\regtlibv12.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\regsvcs.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\regasm.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\ngen.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\mscorsvw.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\msbuild.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.workflow.compiler.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\jsc.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\installutil.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\ilasm.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\edmgen.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\dfsvc.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\datasvcutil.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\installutil.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\smsvchost.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\ilasm.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\edmgen.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\dfsvc.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\caspol.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\migpolwin.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\migpol.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\jsc.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\installutil.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\ilasm.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\ieexec.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\cvtres.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\csc.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\configwizards.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_wp.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\regasm.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_state.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_regiis.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\al.exe
%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.workflow.compiler\v4.0_4.0.0.0__31bf3856ad364e35\microsoft.workflow.compiler.exe
C:\totalcmd\tcusbrun.exe
C:\totalcmd\tcunin64.exe
C:\totalcmd\tcmdx32.exe
C:\totalcmd\tcmadm64.exe
C:\totalcmd\noclose64.exe
%WINDIR%\syswow64\macromed\flash\flashplayerplugin_18_0_0_261.exe
%WINDIR%\microsoft.net\framework64\v4.0.30319\comsvcconfig.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\regsvcs.exe
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe
%WINDIR%\microsoft.net\framework\v1.1.4322\ngen.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\datasvcutil.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\cvtres.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\csc.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\comsvcconfig.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\caspol.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_wp.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_state.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regsql.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regiis.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regbrowsers.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\addinutil.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess32.exe
%WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess.exe
%WINDIR%\microsoft.net\framework\v3.0\wpf\xamlviewer\xamlviewer_v0300.exe
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\wsatconfig.exe
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smconfiginstaller.exe
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\servicemodelreg.exe
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\comsvcconfig.exe
%WINDIR%\syswow64\macromed\flash\flashplayerupdateservice.exe

Изменения в файловой системе

Удаляет следующие файлы

%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.workflow.compiler\v4.0_4.0.0.0__31bf3856ad364e35\microsoft.workflow.compiler.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\caspol.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_wp.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_state.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regsql.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regiis.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regbrowsers.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_compiler.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\applaunch.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinutil.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\wsatconfig.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\vbc.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\smsvchost.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\servicemodelreg.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\regtlibv12.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\regsvcs.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\ngen.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess32.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_state.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe.tmp
%WINDIR%\syswow64\flashplayerapp.exe.tmp
%WINDIR%\panther\mainqueueonline1.que.tmp
%WINDIR%\panther\mainqueueonline0.que.tmp
%WINDIR%\microsoft.net\netfxrepair.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\wsatconfig.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\vbc.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\smsvchost.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\servicemodelreg.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\regtlibv12.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\mscorsvw.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\comsvcconfig.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\ngen.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\mscorsvw.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\msbuild.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.workflow.compiler.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\jsc.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\installutil.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\ilasm.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\edmgen.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\dfsvc.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\regasm.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\datasvcutil.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\msbuild.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.workflow.compiler.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\jsc.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\ilasm.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\comsvcconfig.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\vbc.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\regsvcs.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\regasm.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\ngen.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\migpolwin.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\migpol.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\jsc.exe.tmp
%WINDIR%\syswow64\macromed\flash\flashplayerplugin_18_0_0_261.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\servicemodelreg.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\ieexec.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\cvtres.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\csc.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\configwizards.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\caspol.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_wp.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_state.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_regiis.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\al.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\installutil.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\regsvcs.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smconfiginstaller.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\wpf\xamlviewer\xamlviewer_v0300.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\installutil.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\ilasm.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\edmgen.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\dfsvc.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\datasvcutil.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\cvtres.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\csc.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\comsvcconfig.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\wsatconfig.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\caspol.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regsql.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regiis.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regbrowsers.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\addinutil.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess32.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_wp.exe.tmp
%WINDIR%\syswow64\macromed\flash\flashplayerupdateservice.exe.tmp

Перемещает следующие системные файлы

%WINDIR%\microsoft.net\assembly\gac_msil\microsoft.workflow.compiler\v4.0_4.0.0.0__31bf3856ad364e35\microsoft.workflow.compiler.exe в %WINDIR%\microsoft.net\assembly\gac_msil\microsoft.workflow.compiler\v4.0_4.0.0.0__31bf3856ad364e35\microsoft.workflow.compiler.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\caspol.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\caspol.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_wp.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_wp.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_state.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_state.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regsql.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regsql.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regiis.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regiis.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regbrowsers.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_regbrowsers.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_compiler.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\aspnet_compiler.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\applaunch.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\applaunch.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinutil.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\addinutil.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\csc.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\wsatconfig.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\wsatconfig.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\vbc.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\vbc.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\smsvchost.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\smsvchost.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\servicemodelreg.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\servicemodelreg.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\regtlibv12.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\regtlibv12.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\regsvcs.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\regsvcs.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\regasm.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\ngen.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\ngen.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess32.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\addinprocess32.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_state.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_state.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\cvtres.exe.tmp
%WINDIR%\syswow64\flashplayerapp.exe в %WINDIR%\syswow64\flashplayerapp.exe.tmp
%WINDIR%\panther\mainqueueonline1.que в %WINDIR%\panther\mainqueueonline1.que.tmp
%WINDIR%\panther\mainqueueonline0.que в %WINDIR%\panther\mainqueueonline0.que.tmp
%WINDIR%\microsoft.net\netfxrepair.exe в %WINDIR%\microsoft.net\netfxrepair.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\wsatconfig.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\wsatconfig.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\vbc.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\vbc.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\smsvchost.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\smsvchost.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\servicemodelreg.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\servicemodelreg.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\regtlibv12.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\regtlibv12.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\mscorsvw.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\mscorsvw.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\comsvcconfig.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\comsvcconfig.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\ngen.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\ngen.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\mscorsvw.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\mscorsvw.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\msbuild.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\msbuild.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.workflow.compiler.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\microsoft.workflow.compiler.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\jsc.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\jsc.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\installutil.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\installutil.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\ilasm.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\ilasm.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\edmgen.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\edmgen.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\dfsvc.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\dfsvc.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\regasm.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\regasm.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\datasvcutil.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\datasvcutil.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\msbuild.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\msbuild.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.workflow.compiler.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\microsoft.workflow.compiler.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\jsc.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\jsc.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\ilasm.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\ilasm.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\comsvcconfig.exe в %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\comsvcconfig.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\vbc.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\vbc.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\regsvcs.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\regsvcs.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\regasm.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\regasm.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\ngen.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\ngen.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\migpolwin.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\migpolwin.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\migpol.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\migpol.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\jsc.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\jsc.exe.tmp
%WINDIR%\syswow64\macromed\flash\flashplayerplugin_18_0_0_261.exe в %WINDIR%\syswow64\macromed\flash\flashplayerplugin_18_0_0_261.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\servicemodelreg.exe в %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\servicemodelreg.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\ieexec.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\ieexec.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\cvtres.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\cvtres.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\csc.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\csc.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\configwizards.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\configwizards.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\caspol.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\caspol.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_wp.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_wp.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_state.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_state.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_regiis.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\aspnet_regiis.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\al.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\al.exe.tmp
%WINDIR%\microsoft.net\framework\v1.1.4322\installutil.exe в %WINDIR%\microsoft.net\framework\v1.1.4322\installutil.exe.tmp
%WINDIR%\microsoft.net\framework64\v4.0.30319\regsvcs.exe в %WINDIR%\microsoft.net\framework64\v4.0.30319\regsvcs.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smconfiginstaller.exe в %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smconfiginstaller.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\wpf\xamlviewer\xamlviewer_v0300.exe в %WINDIR%\microsoft.net\framework\v3.0\wpf\xamlviewer\xamlviewer_v0300.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe в %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\smsvchost.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\installutil.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\installutil.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\ilasm.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\ilasm.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\edmgen.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\edmgen.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\dfsvc.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\dfsvc.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\datasvcutil.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\datasvcutil.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\cvtres.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\cvtres.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\csc.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\csc.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\comsvcconfig.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\comsvcconfig.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\wsatconfig.exe в %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\wsatconfig.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\caspol.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\caspol.exe.tmp
%WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe в %WINDIR%\microsoft.net\framework\v3.0\windows communication foundation\infocard.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regsql.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regsql.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regiis.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regiis.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regbrowsers.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_regbrowsers.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_compiler.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\applaunch.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\addinutil.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\addinutil.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess32.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess32.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\addinprocess.exe.tmp
%WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_wp.exe в %WINDIR%\microsoft.net\framework\v4.0.30319\aspnet_wp.exe.tmp
%WINDIR%\syswow64\macromed\flash\flashplayerupdateservice.exe в %WINDIR%\syswow64\macromed\flash\flashplayerupdateservice.exe.tmp

Подменяет следующие исполняемые файлы

C:\Far2\Far.exe
C:\totalcmd\NOCLOSE64.EXE
C:\totalcmd\TCMADM64.EXE
C:\totalcmd\TCMDX32.EXE
C:\totalcmd\TCUNIN64.EXE
C:\totalcmd\TcUsbRun.exe

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация