Trojan.Encoder.30969

Техническая информация

Для обеспечения автозапуска и распространения

Модифицирует следующие ключи реестра

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'WindowsUpdateCheck' = '<Полный путь к файлу>'

Заражает следующие исполняемые файлы

%ProgramFiles%\internet explorer\ieproxy.dll.system32x

Создает следующие файлы на съемном носителе

<Имя диска съемного носителя>:\!!instructions!!.exe
<Имя диска съемного носителя>:\jre-7u75-windows-i586-iftw.exe
<Имя диска съемного носителя>:\sdszfo.docx
<Имя диска съемного носителя>:\adhd_and_obesity.docx
<Имя диска съемного носителя>:\glidescope_review_rev_010.docx
<Имя диска съемного носителя>:\fi51.doc
<Имя диска съемного носителя>:\february_catalogue__2015.doc
<Имя диска съемного носителя>:\hanni_umami_chapter.doc
<Имя диска съемного носителя>:\cveuropeo.doc
<Имя диска съемного носителя>:\508softwareandos.doc
<Имя диска съемного носителя>:\testee.cer
<Имя диска съемного носителя>:\sdkfailsafeemulator.cer
<Имя диска съемного носителя>:\contosoroot.cer
<Имя диска съемного носителя>:\contoso_1.cer
<Имя диска съемного носителя>:\sdksampleunprivdeveloper.cer
<Имя диска съемного носителя>:\coffee.bmp
<Имя диска съемного носителя>:\toolbar.bmp
<Имя диска съемного носителя>:\dashborder_192.bmp
<Имя диска съемного носителя>:\notepad.exe
<Имя диска съемного носителя>:\dotnetfx45_full_setup.exe

Изменения в файловой системе

Создает следующие файлы

%PROGRAMDATA%\!!instructions!!.exe
%ProgramFiles%\swagent\!!instructions!!.exe
%ProgramFiles%\swdoctor\!!instructions!!.exe
%ProgramFiles%\swdsvc\!!instructions!!.exe
%ProgramFiles%\sweb\!!instructions!!.exe
%ProgramFiles%\swriter\!!instructions!!.exe
%ProgramFiles%\symantecrootinstaller\!!instructions!!.exe
%ProgramFiles%\symlcsvc\!!instructions!!.exe
%ProgramFiles%\symproxysvc\!!instructions!!.exe
%ProgramFiles%\symsport\!!instructions!!.exe
%ProgramFiles%\so3d\!!instructions!!.exe
%ProgramFiles%\symwsc\!!instructions!!.exe
%ProgramFiles%\tbmon\!!instructions!!.exe
%ProgramFiles%\tca\!!instructions!!.exe
%ProgramFiles%\teatimer\!!instructions!!.exe
%ProgramFiles%\tgsvcstp\!!instructions!!.exe
%ProgramFiles%\thebat\!!instructions!!.exe
%ProgramFiles%\thgnard\!!instructions!!.exe
%ProgramFiles%\thunderbird\!!instructions!!.exe
%ProgramFiles%\tmas\!!instructions!!.exe
%ProgramFiles%\tmlisten\!!instructions!!.exe
%ProgramFiles%\submitfiles\!!instructions!!.exe
%ProgramFiles%\svcntaux\!!instructions!!.exe
%ProgramFiles%\streetsolkshim\!!instructions!!.exe
%ProgramFiles%\stopsignav\!!instructions!!.exe
%ProgramFiles%\start_diag\!!instructions!!.exe
%ProgramFiles%\sigtool\!!instructions!!.exe
%ProgramFiles%\simpress\!!instructions!!.exe
%ProgramFiles%\sitecli\!!instructions!!.exe
%ProgramFiles%\skype\!!instructions!!.exe
%ProgramFiles%\skypepm\!!instructions!!.exe
%ProgramFiles%\smartftp\!!instructions!!.exe
%ProgramFiles%\smath\!!instructions!!.exe
%ProgramFiles%\smc\!!instructions!!.exe
%ProgramFiles%\sndsrvc\!!instructions!!.exe
%ProgramFiles%\tmntsrv\!!instructions!!.exe
%ProgramFiles%\sysinfo\!!instructions!!.exe
%ProgramFiles%\sniffer\!!instructions!!.exe
%ProgramFiles%\spamcfg\!!instructions!!.exe
%ProgramFiles%\spbbcsvc\!!instructions!!.exe
%ProgramFiles%\spider\!!instructions!!.exe
%ProgramFiles%\spiderml\!!instructions!!.exe
%ProgramFiles%\spidernt\!!instructions!!.exe
%ProgramFiles%\spiderui\!!instructions!!.exe
%ProgramFiles%\sporder\!!instructions!!.exe
%ProgramFiles%\spybotsd\!!instructions!!.exe
%ProgramFiles%\sro_client\!!instructions!!.exe
%ProgramFiles%\sfagent\!!instructions!!.exe
%ProgramFiles%\soffice\!!instructions!!.exe
%ProgramFiles%\uninstallcavs\!!instructions!!.exe
%ProgramFiles%\wclose\!!instructions!!.exe
%ProgramFiles%\tnbutil\!!instructions!!.exe
%ProgramFiles%\vba32ldr\!!instructions!!.exe
%ProgramFiles%\vba32pp3\!!instructions!!.exe
%ProgramFiles%\vbsntw\!!instructions!!.exe
%ProgramFiles%\vchk\!!instructions!!.exe
%ProgramFiles%\vcrmon\!!instructions!!.exe
%ProgramFiles%\vettray\!!instructions!!.exe
%ProgramFiles%\viritexp\!!instructions!!.exe
%ProgramFiles%\viritsvc\!!instructions!!.exe
%ProgramFiles%\viruskeeper\!!instructions!!.exe
%ProgramFiles%\tmpfw\!!instructions!!.exe
%ProgramFiles%\virusnews\!!instructions!!.exe
%ProgramFiles%\visthlic\!!instructions!!.exe
%ProgramFiles%\visthupd\!!instructions!!.exe
%ProgramFiles%\vrfwsvc\!!instructions!!.exe
%ProgramFiles%\vrmonsvc\!!instructions!!.exe
%ProgramFiles%\vrrw32\!!instructions!!.exe
%ProgramFiles%\vshwin32\!!instructions!!.exe
%ProgramFiles%\vsmon\!!instructions!!.exe
%ProgramFiles%\vsserv\!!instructions!!.exe
%ProgramFiles%\vsstat\!!instructions!!.exe
%ProgramFiles%\vba32ecm\!!instructions!!.exe
%ProgramFiles%\vba32ifs\!!instructions!!.exe
%ProgramFiles%\uupd\!!instructions!!.exe
%ProgramFiles%\usdownloader\!!instructions!!.exe
%ProgramFiles%\upsobmaker\!!instructions!!.exe
%ProgramFiles%\tracelog\!!instructions!!.exe
%ProgramFiles%\traymon\!!instructions!!.exe
%ProgramFiles%\trillian\!!instructions!!.exe
%ProgramFiles%\trojanguarder\!!instructions!!.exe
%ProgramFiles%\trojanhunter\!!instructions!!.exe
%ProgramFiles%\trtddptr\!!instructions!!.exe
%ProgramFiles%\twelvesky2\!!instructions!!.exe
%ProgramFiles%\uiscan\!!instructions!!.exe
%ProgramFiles%\una\!!instructions!!.exe
%ProgramFiles%\tmproxy\!!instructions!!.exe
%ProgramFiles%\seccenter\!!instructions!!.exe
%ProgramFiles%\uninstall information\!!instructions!!.exe
%ProgramFiles%\uninstalllsp\!!instructions!!.exe
%ProgramFiles%\unoinfo\!!instructions!!.exe
%ProgramFiles%\unopkg\!!instructions!!.exe
%ProgramFiles%\unp_test\!!instructions!!.exe
%ProgramFiles%\up2date\!!instructions!!.exe
%ProgramFiles%\updater\!!instructions!!.exe
%ProgramFiles%\updaterui\!!instructions!!.exe
%ProgramFiles%\updclient\!!instructions!!.exe
%ProgramFiles%\upgrepl\!!instructions!!.exe
%ProgramFiles%\totalcmd\!!instructions!!.exe
%ProgramFiles%\uninstaller\!!instructions!!.exe
%ProgramFiles%\vistaux\!!instructions!!.exe
%ProgramFiles%\seamonkey\!!instructions!!.exe
%ProgramFiles%\savprogress\!!instructions!!.exe
%ProgramFiles%\pm\!!instructions!!.exe
%ProgramFiles%\pm8flash\!!instructions!!.exe
%ProgramFiles%\pmagic\!!instructions!!.exe
%ProgramFiles%\pmagic9x\!!instructions!!.exe
%ProgramFiles%\pmagicbt\!!instructions!!.exe
%ProgramFiles%\pmagicnt\!!instructions!!.exe
%ProgramFiles%\polutil\!!instructions!!.exe
%ProgramFiles%\postinstall\!!instructions!!.exe
%ProgramFiles%\ppfw\!!instructions!!.exe
%ProgramFiles%\partinfo\!!instructions!!.exe
%ProgramFiles%\pqboot32\!!instructions!!.exe
%ProgramFiles%\pqpe\!!instructions!!.exe
%ProgramFiles%\pqpe9x\!!instructions!!.exe
%ProgramFiles%\pqpent\!!instructions!!.exe
%ProgramFiles%\preconfig\!!instructions!!.exe
%ProgramFiles%\preupd\!!instructions!!.exe
%ProgramFiles%\prevsrv\!!instructions!!.exe
%ProgramFiles%\prevxsetup\!!instructions!!.exe
%ProgramFiles%\privatebrowser\!!instructions!!.exe
%ProgramFiles%\processviewer\!!instructions!!.exe
%ProgramFiles%\pertsk\!!instructions!!.exe
%ProgramFiles%\pidgin\!!instructions!!.exe
%ProgramFiles%\pctav\!!instructions!!.exe
%ProgramFiles%\pcctlcom\!!instructions!!.exe
%ProgramFiles%\pccpfw\!!instructions!!.exe
%ProgramFiles%\ofcpfwsvc\!!instructions!!.exe
%ProgramFiles%\oget\!!instructions!!.exe
%ProgramFiles%\oladdin\!!instructions!!.exe
%ProgramFiles%\onaccessinstaller\!!instructions!!.exe
%ProgramFiles%\opera\!!instructions!!.exe
%ProgramFiles%\oscheck\!!instructions!!.exe
%ProgramFiles%\outlook\!!instructions!!.exe
%ProgramFiles%\outpost\!!instructions!!.exe
%ProgramFiles%\partin\!!instructions!!.exe
%ProgramFiles%\protect\!!instructions!!.exe
%ProgramFiles%\pqbw\!!instructions!!.exe
%ProgramFiles%\partin9x\!!instructions!!.exe
%ProgramFiles%\pavfires\!!instructions!!.exe
%ProgramFiles%\pavfnsvr\!!instructions!!.exe
%ProgramFiles%\pavkre\!!instructions!!.exe
%ProgramFiles%\pavprot\!!instructions!!.exe
%ProgramFiles%\pavproxy\!!instructions!!.exe
%ProgramFiles%\pavprsrv\!!instructions!!.exe
%ProgramFiles%\pavsrv51\!!instructions!!.exe
%ProgramFiles%\pccguide\!!instructions!!.exe
%ProgramFiles%\pccntmon\!!instructions!!.exe
%ProgramFiles%\oaui\!!instructions!!.exe
%ProgramFiles%\partinnt\!!instructions!!.exe
%ProgramFiles%\qrtfix\!!instructions!!.exe
%ProgramFiles%\sdraw\!!instructions!!.exe
%ProgramFiles%\pshost\!!instructions!!.exe
%ProgramFiles%\rfwmain\!!instructions!!.exe
%ProgramFiles%\rq\!!instructions!!.exe
%ProgramFiles%\rtvscan\!!instructions!!.exe
%ProgramFiles%\rulaunch\!!instructions!!.exe
%ProgramFiles%\runsetup\!!instructions!!.exe
%ProgramFiles%\safari\!!instructions!!.exe
%ProgramFiles%\sarcli\!!instructions!!.exe
%ProgramFiles%\sargui\!!instructions!!.exe
%ProgramFiles%\savadminservice\!!instructions!!.exe
%ProgramFiles%\ps\!!instructions!!.exe
%ProgramFiles%\savmain\!!instructions!!.exe
%ProgramFiles%\savscan\!!instructions!!.exe
%ProgramFiles%\sbase\!!instructions!!.exe
%ProgramFiles%\scalc\!!instructions!!.exe
%ProgramFiles%\scanner\!!instructions!!.exe
%ProgramFiles%\scanningprocess\!!instructions!!.exe
%ProgramFiles%\sched\!!instructions!!.exe
%ProgramFiles%\sdhelp\!!instructions!!.exe
%ProgramFiles%\sdinvoker\!!instructions!!.exe
%ProgramFiles%\sdloader\!!instructions!!.exe
%ProgramFiles%\remover\!!instructions!!.exe
%ProgramFiles%\rescue\!!instructions!!.exe
%ProgramFiles%\removeit\!!instructions!!.exe
%ProgramFiles%\register\!!instructions!!.exe
%ProgramFiles%\reference assemblies\!!instructions!!.exe
%ProgramFiles%\pxagent\!!instructions!!.exe
%ProgramFiles%\pxconsole\!!instructions!!.exe
%ProgramFiles%\pxl\!!instructions!!.exe
%ProgramFiles%\pxl1\!!instructions!!.exe
%ProgramFiles%\pxreset\!!instructions!!.exe
%ProgramFiles%\pxsupport\!!instructions!!.exe
%ProgramFiles%\python\!!instructions!!.exe
%ProgramFiles%\qhwscsvc\!!instructions!!.exe
%ProgramFiles%\qip\!!instructions!!.exe
%ProgramFiles%\psctrls\!!instructions!!.exe
%ProgramFiles%\sdtrayapp\!!instructions!!.exe
%ProgramFiles%\qklez\!!instructions!!.exe
%ProgramFiles%\quickstart\!!instructions!!.exe
%ProgramFiles%\ragexe\!!instructions!!.exe
%ProgramFiles%\ragfree\!!instructions!!.exe
%ProgramFiles%\rapget\!!instructions!!.exe
%ProgramFiles%\rat\!!instructions!!.exe
%ProgramFiles%\ravmon\!!instructions!!.exe
%ProgramFiles%\ravtimer\!!instructions!!.exe
%ProgramFiles%\rcimlby\!!instructions!!.exe
%ProgramFiles%\realmon\!!instructions!!.exe
%ProgramFiles%\psimsvc\!!instructions!!.exe
%ProgramFiles%\quaranti\!!instructions!!.exe
%ProgramFiles%\webfiltr\!!instructions!!.exe
%ProgramFiles%\webmoney\!!instructions!!.exe
%ProgramFiles%\webproxy\!!instructions!!.exe
C:\documents and settings\user\pictures\!!instructions!!.exe
C:\documents and settings\user\printhood\!!instructions!!.exe
C:\documents and settings\user\recent\!!instructions!!.exe
C:\documents and settings\user\saved games\!!instructions!!.exe
C:\documents and settings\user\searches\!!instructions!!.exe
C:\documents and settings\user\sendto\!!instructions!!.exe
C:\documents and settings\user\start menu\!!instructions!!.exe
C:\documents and settings\user\templates\!!instructions!!.exe
C:\documents and settings\public\pictures\!!instructions!!.exe
C:\documents and settings\user\videos\!!instructions!!.exe
C:\far2\addons\colors\!!instructions!!.exe
C:\far2\addons\macros\!!instructions!!.exe
C:\far2\addons\setup\!!instructions!!.exe
C:\far2\addons\shell\!!instructions!!.exe
C:\far2\addons\xlat\!!instructions!!.exe
C:\far2\documentation\eng\!!instructions!!.exe
C:\far2\documentation\rus\!!instructions!!.exe
C:\far2\encyclopedia\tap\!!instructions!!.exe
C:\far2\plugins\align\!!instructions!!.exe
C:\documents and settings\user\nethood\!!instructions!!.exe
C:\documents and settings\user\voip\!!instructions!!.exe
C:\documents and settings\user\ntuser.pol.system32x
C:\documents and settings\user\ntuser.ini.system32x
C:\documents and settings\user\music\!!instructions!!.exe
C:\documents and settings\user\local settings\!!instructions!!.exe
C:\documents and settings\default\saved games\!!instructions!!.exe
C:\documents and settings\default\sendto\!!instructions!!.exe
C:\documents and settings\default\start menu\!!instructions!!.exe
C:\documents and settings\default\templates\!!instructions!!.exe
C:\documents and settings\default\videos\!!instructions!!.exe
C:\documents and settings\public\desktop.ini.system32x
C:\documents and settings\public\downloads\!!instructions!!.exe
C:\documents and settings\public\libraries\!!instructions!!.exe
C:\far2\plugins\arclite\!!instructions!!.exe
C:\documents and settings\public\music\!!instructions!!.exe
C:\documents and settings\default\pictures\!!instructions!!.exe
C:\documents and settings\public\recorded tv\!!instructions!!.exe
C:\documents and settings\user\appdata\!!instructions!!.exe
C:\documents and settings\user\application data\!!instructions!!.exe
C:\documents and settings\user\contacts\!!instructions!!.exe
C:\documents and settings\user\cookies\!!instructions!!.exe
C:\documents and settings\user\desktop\!!instructions!!.exe
C:\documents and settings\user\documents\!!instructions!!.exe
C:\documents and settings\user\downloads\!!instructions!!.exe
C:\documents and settings\user\favorites\!!instructions!!.exe
C:\documents and settings\default\printhood\!!instructions!!.exe
C:\documents and settings\user\links\!!instructions!!.exe
C:\documents and settings\public\videos\!!instructions!!.exe
C:\documents and settings\default\recent\!!instructions!!.exe
C:\far2\plugins\autowrap\!!instructions!!.exe
C:\far2\plugins\editcase\!!instructions!!.exe
%CommonProgramFiles%\microsoft shared\!!instructions!!.exe
%CommonProgramFiles%\services\!!instructions!!.exe
%CommonProgramFiles%\speechengines\!!instructions!!.exe
%CommonProgramFiles%\system\!!instructions!!.exe
%ProgramFiles%\dvd maker\en-us\!!instructions!!.exe
%ProgramFiles%\dvd maker\shared\!!instructions!!.exe
%ProgramFiles%\firefox\chrome\!!instructions!!.exe
%ProgramFiles%\firefox\components\!!instructions!!.exe
%ProgramFiles%\internet explorer\en-us\!!instructions!!.exe
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
%ProgramFiles%\internet explorer\signup\!!instructions!!.exe
%ProgramFiles%\microsoft analysis services\as oledb\!!instructions!!.exe
%ProgramFiles%\microsoft office\clipart\!!instructions!!.exe
%ProgramFiles%\microsoft office\document themes 14\!!instructions!!.exe
%ProgramFiles%\microsoft office\media\!!instructions!!.exe
%ProgramFiles%\microsoft office\office14\!!instructions!!.exe
%ProgramFiles%\microsoft office\stationery\!!instructions!!.exe
%ProgramFiles%\microsoft office\templates\!!instructions!!.exe
%ProgramFiles%\microsoft sql server compact edition\v3.5\!!instructions!!.exe
%ProgramFiles%\microsoft sync framework\v1.0\!!instructions!!.exe
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
%CommonProgramFiles%\designer\!!instructions!!.exe
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
%ProgramFiles%\microsoft synchronization services\ado.net\!!instructions!!.exe
C:\far2\plugins\emenu\!!instructions!!.exe
C:\far2\plugins\farcmds\!!instructions!!.exe
C:\far2\plugins\filecase\!!instructions!!.exe
C:\far2\plugins\ftp\!!instructions!!.exe
C:\far2\plugins\hlfviewer\!!instructions!!.exe
C:\far2\plugins\macroview\!!instructions!!.exe
C:\far2\plugins\network\!!instructions!!.exe
C:\far2\plugins\proclist\!!instructions!!.exe
C:\far2\plugins\brackets\!!instructions!!.exe
C:\far2\plugins\drawline\!!instructions!!.exe
C:\far2\plugins\compare\!!instructions!!.exe
C:\far2\plugins\tmppanel\!!instructions!!.exe
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\far2\pluginsdk\headers.c\!!instructions!!.exe
C:\far2\pluginsdk\headers.pas\!!instructions!!.exe
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\!!instructions!!.exe
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000002.regtrans-ms.system32x
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tmcontainer00000000000000000001.regtrans-ms.system32x
C:\documents and settings\default\ntuser.dat{016888bd-6c6f-11de-8d1d-001e0bcde3ec}.tm.blf.system32x
%ProgramFiles%\writespid\!!instructions!!.exe
%ProgramFiles%\wsctool\!!instructions!!.exe
%ProgramFiles%\wsftpgui\!!instructions!!.exe
%ProgramFiles%\wsm\!!instructions!!.exe
%ProgramFiles%\xcommsvr\!!instructions!!.exe
%ProgramFiles%\yahoomessenger\!!instructions!!.exe
%ProgramFiles%\yahoosync\!!instructions!!.exe
%ProgramFiles%\ybclient\!!instructions!!.exe
%ProgramFiles%\ymsgr_tray\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft office\!!instructions!!.exe
%ProgramFiles%\zapro\!!instructions!!.exe
%ProgramFiles%\zauninst\!!instructions!!.exe
%ProgramFiles%\zlclient\!!instructions!!.exe
%ProgramFiles%\zonealarm\!!instructions!!.exe
%ProgramFiles(x86)%\adobe\!!instructions!!.exe
%CommonProgramFiles(x86)%\!!instructions!!.exe
%ProgramFiles(x86)%\google\!!instructions!!.exe
%ProgramFiles(x86)%\internet explorer\!!instructions!!.exe
%ProgramFiles(x86)%\k-lite codec pack\!!instructions!!.exe
%ProgramFiles%\wow\!!instructions!!.exe
%ProgramFiles%\woool\!!instructions!!.exe
%ProgramFiles%\wrctrl\!!instructions!!.exe
%ProgramFiles%\wltuser\!!instructions!!.exe
%ProgramFiles%\wlmail\!!instructions!!.exe
%ProgramFiles%\webscanx\!!instructions!!.exe
%ProgramFiles%\winaw32\!!instructions!!.exe
%ProgramFiles%\winbaram\!!instructions!!.exe
%ProgramFiles%\wincmd32\!!instructions!!.exe
%ProgramFiles%\windowlist\!!instructions!!.exe
%ProgramFiles%\windows defender\!!instructions!!.exe
%ProgramFiles%\windows journal\!!instructions!!.exe
%ProgramFiles%\windows mail\!!instructions!!.exe
%ProgramFiles%\windows media player\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft analysis services\!!instructions!!.exe
%ProgramFiles%\windows nt\!!instructions!!.exe
%ProgramFiles%\zatutor\!!instructions!!.exe
%ProgramFiles%\windows portable devices\!!instructions!!.exe
%ProgramFiles%\windump\!!instructions!!.exe
%ProgramFiles%\winmail\!!instructions!!.exe
%ProgramFiles%\winrar\!!instructions!!.exe
%ProgramFiles%\winroute\!!instructions!!.exe
%ProgramFiles%\winss\!!instructions!!.exe
%ProgramFiles%\winssnotify\!!instructions!!.exe
%ProgramFiles%\wish\!!instructions!!.exe
%ProgramFiles%\wlloginproxy\!!instructions!!.exe
%ProgramFiles%\windows photo viewer\!!instructions!!.exe
%ProgramFiles%\wil\!!instructions!!.exe
%ProgramFiles%\windows sidebar\!!instructions!!.exe
%ProgramFiles%\wradmin\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft visual studio .net 2003\!!instructions!!.exe
%PROGRAMDATA%\mozilla\!!instructions!!.exe
%PROGRAMDATA%\package cache\!!instructions!!.exe
%PROGRAMDATA%\start menu\!!instructions!!.exe
%PROGRAMDATA%\sun\!!instructions!!.exe
%PROGRAMDATA%\templates\!!instructions!!.exe
C:\recovery\1195d5a8-f371-11e4-9c00-dd3082671db2\!!instructions!!.exe
C:\system volume information\spp\!!instructions!!.exe
C:\totalcmd\language\!!instructions!!.exe
C:\documents and settings\default\appdata\!!instructions!!.exe
%PROGRAMDATA%\microsoft toolkit\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft visual studio 8\!!instructions!!.exe
%PROGRAMDATA%\oracle\!!instructions!!.exe
C:\documents and settings\default\application data\!!instructions!!.exe
C:\documents and settings\default\downloads\!!instructions!!.exe
C:\documents and settings\default\favorites\!!instructions!!.exe
C:\documents and settings\default\links\!!instructions!!.exe
C:\documents and settings\default\local settings\!!instructions!!.exe
C:\documents and settings\default\music\!!instructions!!.exe
C:\documents and settings\default\nethood\!!instructions!!.exe
C:\documents and settings\default\ntuser.dat.log.system32x
C:\documents and settings\default\ntuser.dat.log1.system32x
C:\documents and settings\default\cookies\!!instructions!!.exe
C:\documents and settings\default\desktop\!!instructions!!.exe
C:\documents and settings\default\documents\!!instructions!!.exe
%ProgramFiles(x86)%\winamp\!!instructions!!.exe
%ProgramFiles%\oasrv\!!instructions!!.exe
%PROGRAMDATA%\favorites\!!instructions!!.exe
%ProgramFiles(x86)%\mirc\!!instructions!!.exe
%ProgramFiles(x86)%\mozilla firefox\!!instructions!!.exe
%ProgramFiles(x86)%\mozilla thunderbird\!!instructions!!.exe
%ProgramFiles(x86)%\msbuild\!!instructions!!.exe
%ProgramFiles(x86)%\opera\!!instructions!!.exe
%ProgramFiles(x86)%\pidgin\!!instructions!!.exe
%ProgramFiles(x86)%\qip 2012\!!instructions!!.exe
%ProgramFiles(x86)%\reference assemblies\!!instructions!!.exe
%ProgramFiles(x86)%\steam\!!instructions!!.exe
%PROGRAMDATA%\microsoft\!!instructions!!.exe
%PROGRAMDATA%\microsoft help\!!instructions!!.exe
%ProgramFiles(x86)%\uninstall information\!!instructions!!.exe
%ProgramFiles(x86)%\windows mail\!!instructions!!.exe
%ProgramFiles(x86)%\windows media player\!!instructions!!.exe
%ProgramFiles(x86)%\windows nt\!!instructions!!.exe
%ProgramFiles(x86)%\windows photo viewer\!!instructions!!.exe
%ProgramFiles(x86)%\windows portable devices\!!instructions!!.exe
%ProgramFiles(x86)%\windows sidebar\!!instructions!!.exe
%PROGRAMDATA%\adobe\!!instructions!!.exe
%PROGRAMDATA%\desktop\!!instructions!!.exe
%PROGRAMDATA%\documents\!!instructions!!.exe
%ProgramFiles(x86)%\microsoft.net\!!instructions!!.exe
%ProgramFiles(x86)%\windows defender\!!instructions!!.exe
%ProgramFiles%\java\jre1.8.0_45\!!instructions!!.exe
%ProgramFiles%\nwservice\!!instructions!!.exe
%ProgramFiles%\npavtray\!!instructions!!.exe
%ProgramFiles%\cavmud\!!instructions!!.exe
%ProgramFiles%\cavoar\!!instructions!!.exe
%ProgramFiles%\cavq\!!instructions!!.exe
%ProgramFiles%\cavscons\!!instructions!!.exe
%ProgramFiles%\cavse\!!instructions!!.exe
%ProgramFiles%\cavsn\!!instructions!!.exe
%ProgramFiles%\cavsub\!!instructions!!.exe
%ProgramFiles%\cavsubmit\!!instructions!!.exe
%ProgramFiles%\cavumas\!!instructions!!.exe
%ProgramFiles%\bdsubmitwiz\!!instructions!!.exe
%ProgramFiles%\cavuserupd\!!instructions!!.exe
%ProgramFiles%\ccapp\!!instructions!!.exe
%ProgramFiles%\ccevtmgr\!!instructions!!.exe
%ProgramFiles%\ccleaner\!!instructions!!.exe
%ProgramFiles%\ccproxy\!!instructions!!.exe
%ProgramFiles%\ccsetmgr\!!instructions!!.exe
%ProgramFiles%\cemrep\!!instructions!!.exe
%ProgramFiles%\chrome\!!instructions!!.exe
%ProgramFiles%\clamscan\!!instructions!!.exe
%ProgramFiles%\clamtray\!!instructions!!.exe
%ProgramFiles%\cavemsrv\!!instructions!!.exe
%ProgramFiles%\cavmr\!!instructions!!.exe
%ProgramFiles%\cavaud\!!instructions!!.exe
%ProgramFiles%\cavasm\!!instructions!!.exe
%ProgramFiles%\cavapp\!!instructions!!.exe
%ProgramFiles%\avscan\!!instructions!!.exe
%ProgramFiles%\avsynmgr\!!instructions!!.exe
%ProgramFiles%\b2\!!instructions!!.exe
%ProgramFiles%\backweb-4476822\!!instructions!!.exe
%ProgramFiles%\bdagent\!!instructions!!.exe
%ProgramFiles%\bdmcon\!!instructions!!.exe
%ProgramFiles%\bdnews\!!instructions!!.exe
%ProgramFiles%\bdoesrv\!!instructions!!.exe
%ProgramFiles%\bdss\!!instructions!!.exe
%ProgramFiles%\clamwin\!!instructions!!.exe
%ProgramFiles%\cavvl\!!instructions!!.exe
%ProgramFiles%\bdsubmit\!!instructions!!.exe
%ProgramFiles%\bdswitch\!!instructions!!.exe
%ProgramFiles%\bdwizreg\!!instructions!!.exe
%ProgramFiles%\blackd\!!instructions!!.exe
%ProgramFiles%\blackice\!!instructions!!.exe
%ProgramFiles%\blindman\!!instructions!!.exe
%ProgramFiles%\btini\!!instructions!!.exe
%ProgramFiles%\btinint\!!instructions!!.exe
%ProgramFiles%\cabalmain\!!instructions!!.exe
%ProgramFiles%\cafix\!!instructions!!.exe
%ProgramFiles%\avpm\!!instructions!!.exe
%ProgramFiles%\bdsurvey\!!instructions!!.exe
%ProgramFiles%\custinstall\!!instructions!!.exe
%ProgramFiles%\f-sched\!!instructions!!.exe
%ProgramFiles%\cleaner\!!instructions!!.exe
%ProgramFiles%\drvmap\!!instructions!!.exe
%ProgramFiles%\drwadins\!!instructions!!.exe
%ProgramFiles%\drweb\!!instructions!!.exe
%ProgramFiles%\drweb32w\!!instructions!!.exe
%ProgramFiles%\drweb386\!!instructions!!.exe
%ProgramFiles%\drwebscd\!!instructions!!.exe
%ProgramFiles%\drwebupw\!!instructions!!.exe
%ProgramFiles%\drwebwcl\!!instructions!!.exe
%ProgramFiles%\drwreg\!!instructions!!.exe
%ProgramFiles%\claw95\!!instructions!!.exe
%ProgramFiles%\dvd maker\!!instructions!!.exe
%ProgramFiles%\egni\!!instructions!!.exe
%ProgramFiles%\ehsniffer\!!instructions!!.exe
%ProgramFiles%\ekrn\!!instructions!!.exe
%ProgramFiles%\elementclient\!!instructions!!.exe
%ProgramFiles%\etherd\!!instructions!!.exe
%ProgramFiles%\eudora\!!instructions!!.exe
%ProgramFiles%\ewidoctrl\!!instructions!!.exe
%ProgramFiles%\exit_av\!!instructions!!.exe
%ProgramFiles%\ezantivirusregistrationcheck\!!instructions!!.exe
%ProgramFiles%\drvctl\!!instructions!!.exe
%ProgramFiles%\drvirus\!!instructions!!.exe
%ProgramFiles%\dpatrolq\!!instructions!!.exe
%ProgramFiles%\dnf\!!instructions!!.exe
%ProgramFiles%\dislite\!!instructions!!.exe
%ProgramFiles%\clisvc\!!instructions!!.exe
%ProgramFiles%\clrcche\!!instructions!!.exe
%ProgramFiles%\cmain\!!instructions!!.exe
%ProgramFiles%\cmgrdian\!!instructions!!.exe
%CommonProgramFiles%\!!instructions!!.exe
%ProgramFiles%\copyx64\!!instructions!!.exe
%ProgramFiles%\courier\!!instructions!!.exe
%ProgramFiles%\cpd\!!instructions!!.exe
%ProgramFiles%\csendto\!!instructions!!.exe
%ProgramFiles%\claw95cf\!!instructions!!.exe
%ProgramFiles%\avpcc\!!instructions!!.exe
%ProgramFiles%\cssexc\!!instructions!!.exe
%ProgramFiles%\cuteftp\!!instructions!!.exe
%ProgramFiles%\dbconvert\!!instructions!!.exe
%ProgramFiles%\dbtool\!!instructions!!.exe
%ProgramFiles%\defensewall\!!instructions!!.exe
%ProgramFiles%\defwatch\!!instructions!!.exe
%ProgramFiles%\dekaron\!!instructions!!.exe
%ProgramFiles%\digsby\!!instructions!!.exe
%ProgramFiles%\digsby-app\!!instructions!!.exe
%ProgramFiles%\directftp\!!instructions!!.exe
%ProgramFiles%\cleaner3\!!instructions!!.exe
%ProgramFiles%\custsetup\!!instructions!!.exe
%ProgramFiles%\ecmd\!!instructions!!.exe
%ProgramFiles%\avnotify\!!instructions!!.exe
%ProgramFiles%\avgnpsvc\!!instructions!!.exe
%ProgramFiles%\a2scan\!!instructions!!.exe
%ProgramFiles%\a2service\!!instructions!!.exe
%ProgramFiles%\a2start\!!instructions!!.exe
%ProgramFiles%\a2upd\!!instructions!!.exe
%ProgramFiles%\a2wizard\!!instructions!!.exe
%ProgramFiles%\aavshield\!!instructions!!.exe
%ProgramFiles%\about\!!instructions!!.exe
%ProgramFiles%\ackwin32\!!instructions!!.exe
%ProgramFiles%\admunch\!!instructions!!.exe
C:\totalcmd\!!instructions!!.exe
%ProgramFiles%\agb5\!!instructions!!.exe
%ProgramFiles%\ahnsd\!!instructions!!.exe
%ProgramFiles%\aim6\!!instructions!!.exe
%ProgramFiles%\aimpro\!!instructions!!.exe
%ProgramFiles%\airdefense\!!instructions!!.exe
%ProgramFiles%\almon\!!instructions!!.exe
%ProgramFiles%\alsvc\!!instructions!!.exe
%ProgramFiles%\amon\!!instructions!!.exe
%ProgramFiles%\amsn\!!instructions!!.exe
%ProgramFiles%\anti-trojan\!!instructions!!.exe
%ProgramFiles%\a2guard\!!instructions!!.exe
%ProgramFiles%\a2hijackfree\!!instructions!!.exe
%ProgramFiles%\a2cmd\!!instructions!!.exe
%ProgramFiles%\360tray\!!instructions!!.exe
C:\msocache\all users\!!instructions!!.exe
D:\!!instructions!!.exe
C:\!!instructions!!.exe
C:\documents and settings\!!instructions!!.exe
z:\!!instructions!!.exe
C:\far2\!!instructions!!.exe
<Текущая директория>\!!instructions!!.exe
C:\msocache\!!instructions!!.exe
%ProgramFiles%\!!instructions!!.exe
%ProgramFiles(x86)%\!!instructions!!.exe
%ProgramFiles%\antivirus\!!instructions!!.exe
%ProgramFiles%\ageofconan\!!instructions!!.exe
C:\recovery\!!instructions!!.exe
C:\documents and settings\desktop.ini.system32x
C:\documents and settings\public\!!instructions!!.exe
C:\documents and settings\user\!!instructions!!.exe
C:\far2\addons\!!instructions!!.exe
C:\far2\documentation\!!instructions!!.exe
C:\far2\encyclopedia\!!instructions!!.exe
C:\far2\fexcept\!!instructions!!.exe
C:\far2\plugins\!!instructions!!.exe
C:\far2\pluginsdk\!!instructions!!.exe
<Текущая директория>\ids.txt
C:\documents and settings\default\!!instructions!!.exe
%ProgramFiles%\ashserv\!!instructions!!.exe
%ProgramFiles%\avkservice\!!instructions!!.exe
%ProgramFiles%\armorsurf\!!instructions!!.exe
%ProgramFiles%\avcmd\!!instructions!!.exe
%ProgramFiles%\avconfig\!!instructions!!.exe
%ProgramFiles%\avconsol\!!instructions!!.exe
%ProgramFiles%\avgamsvr\!!instructions!!.exe
%ProgramFiles%\avgcc\!!instructions!!.exe
%ProgramFiles%\avgdiag\!!instructions!!.exe
%ProgramFiles%\avgemc\!!instructions!!.exe
%ProgramFiles%\avgfwsrv\!!instructions!!.exe
%ProgramFiles%\avginet\!!instructions!!.exe
%ProgramFiles%\aoltbserver\!!instructions!!.exe
%ProgramFiles%\avgnpdln\!!instructions!!.exe
%ProgramFiles%\avgrssvc\!!instructions!!.exe
%ProgramFiles%\avgscan\!!instructions!!.exe
%ProgramFiles%\avgupden\!!instructions!!.exe
%ProgramFiles%\avgupsvc\!!instructions!!.exe
%ProgramFiles%\avgvv\!!instructions!!.exe
%ProgramFiles%\avgw\!!instructions!!.exe
%ProgramFiles%\avgwizfw\!!instructions!!.exe
%ProgramFiles%\avinitnt\!!instructions!!.exe
%ProgramFiles%\avkserv\!!instructions!!.exe
%ProgramFiles%\avcenter\!!instructions!!.exe
%ProgramFiles%\avciman\!!instructions!!.exe
%ProgramFiles%\avadmin\!!instructions!!.exe
%ProgramFiles%\autotrace\!!instructions!!.exe
%ProgramFiles%\autostartexplorer\!!instructions!!.exe
%ProgramFiles%\ashavast\!!instructions!!.exe
%ProgramFiles%\ashavsrv\!!instructions!!.exe
%ProgramFiles%\ashchest\!!instructions!!.exe
%ProgramFiles%\ashdisp\!!instructions!!.exe
%ProgramFiles%\ashdug\!!instructions!!.exe
%ProgramFiles%\ashenhcd\!!instructions!!.exe
%ProgramFiles%\ashlogv\!!instructions!!.exe
%ProgramFiles%\ashmaisv\!!instructions!!.exe
%ProgramFiles%\ashpopwz\!!instructions!!.exe
%ProgramFiles%\armor2net\!!instructions!!.exe
%ProgramFiles%\avkwctl\!!instructions!!.exe
%ProgramFiles%\ashquick\!!instructions!!.exe
%ProgramFiles%\ashsimpl\!!instructions!!.exe
%ProgramFiles%\ashskpcc\!!instructions!!.exe
%ProgramFiles%\ashskpck\!!instructions!!.exe
%ProgramFiles%\ashupd\!!instructions!!.exe
%ProgramFiles%\ashwebsv\!!instructions!!.exe
%ProgramFiles%\ash_updatemediator\!!instructions!!.exe
%ProgramFiles%\aswregsvr\!!instructions!!.exe
%ProgramFiles%\aswupdsv\!!instructions!!.exe
%ProgramFiles%\autodown\!!instructions!!.exe
%ProgramFiles%\ash\!!instructions!!.exe
%ProgramFiles%\ashsimp2\!!instructions!!.exe
%ProgramFiles%\fameh32\!!instructions!!.exe
%ProgramFiles%\far\!!instructions!!.exe
%ProgramFiles%\fch32\!!instructions!!.exe
%ProgramFiles%\lpfw\!!instructions!!.exe
%ProgramFiles%\lucallbackproxy\!!instructions!!.exe
%ProgramFiles%\lucheck\!!instructions!!.exe
%ProgramFiles%\luconfig\!!instructions!!.exe
%ProgramFiles%\luinit\!!instructions!!.exe
%ProgramFiles%\luna\!!instructions!!.exe
%ProgramFiles%\luupdate\!!instructions!!.exe
%ProgramFiles%\magent\!!instructions!!.exe
%ProgramFiles%\isuac\!!instructions!!.exe
%ProgramFiles%\malwareremoval\!!instructions!!.exe
%ProgramFiles%\maxthon\!!instructions!!.exe
%ProgramFiles%\mcmnhdlr\!!instructions!!.exe
%ProgramFiles%\mcregwiz\!!instructions!!.exe
%ProgramFiles%\mcshield\!!instructions!!.exe
%ProgramFiles%\mcupdmgr\!!instructions!!.exe
%ProgramFiles%\mcvsshld\!!instructions!!.exe
%ProgramFiles%\memstring\!!instructions!!.exe
%ProgramFiles%\mfpmp\!!instructions!!.exe
%ProgramFiles%\microsoft analysis services\!!instructions!!.exe
%ProgramFiles%\liveupdate\!!instructions!!.exe
%ProgramFiles%\maplestory\!!instructions!!.exe
%ProgramFiles%\lotroclient\!!instructions!!.exe
%ProgramFiles%\logwatnt\!!instructions!!.exe
%ProgramFiles%\livesrv\!!instructions!!.exe
%ProgramFiles%\licmgr\!!instructions!!.exe
%ProgramFiles%\installlsp\!!instructions!!.exe
%ProgramFiles%\instlsp\!!instructions!!.exe
%ProgramFiles%\internet explorer\!!instructions!!.exe
%ProgramFiles%\iris\!!instructions!!.exe
%ProgramFiles%\iron\!!instructions!!.exe
%ProgramFiles%\isafe\!!instructions!!.exe
%ProgramFiles%\ispnews\!!instructions!!.exe
%ProgramFiles%\ispwdsvc\!!instructions!!.exe
%ProgramFiles%\microsoft office\!!instructions!!.exe
%ProgramFiles%\issvc\!!instructions!!.exe
%ProgramFiles%\inphasenxd\!!instructions!!.exe
%ProgramFiles%\itunes\!!instructions!!.exe
%ProgramFiles%\k-meleon\!!instructions!!.exe
%ProgramFiles%\kav\!!instructions!!.exe
%ProgramFiles%\kavmm\!!instructions!!.exe
%ProgramFiles%\kavpf\!!instructions!!.exe
%ProgramFiles%\kavpfw\!!instructions!!.exe
%ProgramFiles%\kavstart\!!instructions!!.exe
%ProgramFiles%\kavsvc\!!instructions!!.exe
%ProgramFiles%\konnekt\!!instructions!!.exe
%ProgramFiles%\installcavs\!!instructions!!.exe
%ProgramFiles%\launcher\!!instructions!!.exe
%ProgramFiles%\java\!!instructions!!.exe
%ProgramFiles%\installlicense\!!instructions!!.exe
%ProgramFiles%\microsoft sql server compact edition\!!instructions!!.exe
%ProgramFiles%\miranda32\!!instructions!!.exe
%ProgramFiles%\neowatchtray\!!instructions!!.exe
%ProgramFiles%\netstatviewer\!!instructions!!.exe
%ProgramFiles%\netxray\!!instructions!!.exe
%ProgramFiles%\nisoptui\!!instructions!!.exe
%ProgramFiles%\nod\!!instructions!!.exe
%ProgramFiles%\nod32\!!instructions!!.exe
%ProgramFiles%\nod32krn\!!instructions!!.exe
%ProgramFiles%\nod32kui\!!instructions!!.exe
%ProgramFiles%\notifyha\!!instructions!!.exe
%ProgramFiles%\navstub\!!instructions!!.exe
%ProgramFiles%\notstart\!!instructions!!.exe
%ProgramFiles%\npfmsg\!!instructions!!.exe
%ProgramFiles%\nsmdtr\!!instructions!!.exe
%ProgramFiles%\nssserv\!!instructions!!.exe
%ProgramFiles%\nsstray\!!instructions!!.exe
%ProgramFiles%\ntoskrnl\!!instructions!!.exe
%ProgramFiles%\ntrtscan\!!instructions!!.exe
%ProgramFiles%\ntxconfig\!!instructions!!.exe
%ProgramFiles%\nupgrade\!!instructions!!.exe
%ProgramFiles%\nvcod\!!instructions!!.exe
%ProgramFiles%\navwnt\!!instructions!!.exe
%ProgramFiles%\neowatchlog\!!instructions!!.exe
%ProgramFiles%\navw32\!!instructions!!.exe
%ProgramFiles%\navlu32\!!instructions!!.exe
%ProgramFiles%\nvcte\!!instructions!!.exe
%ProgramFiles%\miro\!!instructions!!.exe
%ProgramFiles%\monlite\!!instructions!!.exe
%ProgramFiles%\monsysnt\!!instructions!!.exe
%ProgramFiles%\mp3theater\!!instructions!!.exe
%ProgramFiles%\mp3toys\!!instructions!!.exe
%ProgramFiles%\mp3toystray\!!instructions!!.exe
%ProgramFiles%\mp3tray\!!instructions!!.exe
%ProgramFiles%\mpeng\!!instructions!!.exe
%ProgramFiles%\microsoft sync framework\!!instructions!!.exe
%ProgramFiles%\mir3game\!!instructions!!.exe
%ProgramFiles%\microsoft synchronization services\!!instructions!!.exe
%ProgramFiles%\mpftray\!!instructions!!.exe
%ProgramFiles%\msmpsvc\!!instructions!!.exe
%ProgramFiles%\msn6\!!instructions!!.exe
%ProgramFiles%\msnmsgr\!!instructions!!.exe
%ProgramFiles%\mva\!!instructions!!.exe
%ProgramFiles%\mvc\!!instructions!!.exe
%ProgramFiles%\myagtsvc\!!instructions!!.exe
%ProgramFiles%\myagttry\!!instructions!!.exe
%ProgramFiles%\navapsvc\!!instructions!!.exe
%ProgramFiles%\mpssvc\!!instructions!!.exe
%ProgramFiles%\msbuild\!!instructions!!.exe
%ProgramFiles%\msimn\!!instructions!!.exe
%ProgramFiles%\inouptng\!!instructions!!.exe
%ProgramFiles%\inotask\!!instructions!!.exe
%ProgramFiles%\inort\!!instructions!!.exe
%ProgramFiles%\fsbwsys\!!instructions!!.exe
%ProgramFiles%\fsdbuh\!!instructions!!.exe
%ProgramFiles%\fsdc\!!instructions!!.exe
%ProgramFiles%\fsdfwd\!!instructions!!.exe
%ProgramFiles%\fsdiag\!!instructions!!.exe
%ProgramFiles%\fsdiagui\!!instructions!!.exe
%ProgramFiles%\fsfwwsch\!!instructions!!.exe
%ProgramFiles%\fsfwwscr\!!instructions!!.exe
%ProgramFiles%\fsgetwab\!!instructions!!.exe
%ProgramFiles%\fsma32\!!instructions!!.exe
%ProgramFiles%\fsgk32\!!instructions!!.exe
%ProgramFiles%\fsguidll\!!instructions!!.exe
%ProgramFiles%\fsguiexe\!!instructions!!.exe
%ProgramFiles%\fshdll32\!!instructions!!.exe
%ProgramFiles%\fshelp\!!instructions!!.exe
%ProgramFiles%\fshotfix\!!instructions!!.exe
%ProgramFiles%\fsihcomp\!!instructions!!.exe
%ProgramFiles%\fsihs\!!instructions!!.exe
%ProgramFiles%\fslaunch\!!instructions!!.exe
%ProgramFiles%\fsavstrt\!!instructions!!.exe
%ProgramFiles%\fsavgui\!!instructions!!.exe
%ProgramFiles%\fsavwscr\!!instructions!!.exe
%ProgramFiles%\fsavaui\!!instructions!!.exe
%ProgramFiles%\fsav32\!!instructions!!.exe
%ProgramFiles%\fdm\!!instructions!!.exe
%ProgramFiles%\filezilla\!!instructions!!.exe
%ProgramFiles%\firebird\!!instructions!!.exe
%ProgramFiles%\firefox\!!instructions!!.exe
%ProgramFiles%\firesvc\!!instructions!!.exe
%ProgramFiles%\firetray\!!instructions!!.exe
%ProgramFiles%\flashfxp\!!instructions!!.exe
%ProgramFiles%\flashgot\!!instructions!!.exe
%ProgramFiles%\flock\!!instructions!!.exe
%ProgramFiles%\fsm32\!!instructions!!.exe
%ProgramFiles%\foxit\!!instructions!!.exe
%ProgramFiles%\fsgk32st\!!instructions!!.exe
%ProgramFiles%\fpavupdm\!!instructions!!.exe
%ProgramFiles%\fpscan\!!instructions!!.exe
%ProgramFiles%\fptrayproc\!!instructions!!.exe
%ProgramFiles%\fpwin\!!instructions!!.exe
%ProgramFiles%\freshclam\!!instructions!!.exe
%ProgramFiles%\fsample\!!instructions!!.exe
%ProgramFiles%\fsaua\!!instructions!!.exe
%ProgramFiles%\fsauach\!!instructions!!.exe
%ProgramFiles%\fsav\!!instructions!!.exe
%ProgramFiles%\fpavserver\!!instructions!!.exe
%ProgramFiles%\fdmwi\!!instructions!!.exe
%ProgramFiles%\fprottray\!!instructions!!.exe
%ProgramFiles%\fsavwsch\!!instructions!!.exe
%ProgramFiles%\fsmb32\!!instructions!!.exe
%ProgramFiles%\helper\!!instructions!!.exe
%ProgramFiles%\hregmon\!!instructions!!.exe
%ProgramFiles%\hrres\!!instructions!!.exe
%ProgramFiles%\hsockpe\!!instructions!!.exe
%ProgramFiles%\httplook\!!instructions!!.exe
%ProgramFiles%\iamapp\!!instructions!!.exe
%ProgramFiles%\iamserv\!!instructions!!.exe
%ProgramFiles%\icq\!!instructions!!.exe
%ProgramFiles%\icqlite\!!instructions!!.exe
%ProgramFiles%\helpctr\!!instructions!!.exe
%ProgramFiles%\fspc\!!instructions!!.exe
%ProgramFiles%\hipsdiag\!!instructions!!.exe
%ProgramFiles%\ieregfix\!!instructions!!.exe
%ProgramFiles%\ih8run\!!instructions!!.exe
%ProgramFiles%\ilaunchr\!!instructions!!.exe
%ProgramFiles%\imapp\!!instructions!!.exe
%ProgramFiles%\imnotfy\!!instructions!!.exe
%ProgramFiles%\impcnt\!!instructions!!.exe
%ProgramFiles%\incmail\!!instructions!!.exe
%ProgramFiles%\inocit\!!instructions!!.exe
%ProgramFiles%\inorpc\!!instructions!!.exe
%ProgramFiles%\ieuser\!!instructions!!.exe
%ProgramFiles%\iexplore\!!instructions!!.exe
%ProgramFiles%\ih8\!!instructions!!.exe
%ProgramFiles%\gc\!!instructions!!.exe
%ProgramFiles%\nvcut\!!instructions!!.exe
%ProgramFiles%\guardgni\!!instructions!!.exe
%ProgramFiles%\fsqh\!!instructions!!.exe
%ProgramFiles%\fssf\!!instructions!!.exe
%ProgramFiles%\fssg\!!instructions!!.exe
%ProgramFiles%\fssm32\!!instructions!!.exe
%ProgramFiles%\fsstm\!!instructions!!.exe
%ProgramFiles%\fssw\!!instructions!!.exe
%ProgramFiles%\fstlui\!!instructions!!.exe
%ProgramFiles%\fsuninst\!!instructions!!.exe
%ProgramFiles%\fsus\!!instructions!!.exe
%ProgramFiles%\guardnt\!!instructions!!.exe
%ProgramFiles%\gw\!!instructions!!.exe
%ProgramFiles%\ftpte\!!instructions!!.exe
%ProgramFiles%\gcasserv\!!instructions!!.exe
%ProgramFiles%\ge\!!instructions!!.exe
%ProgramFiles%\gg\!!instructions!!.exe
%ProgramFiles%\giantantispywaremain\!!instructions!!.exe
%ProgramFiles%\giantantispywareupdater\!!instructions!!.exe
%ProgramFiles%\gnotify\!!instructions!!.exe
%ProgramFiles%\googledesktop\!!instructions!!.exe
%ProgramFiles%\googletalk\!!instructions!!.exe
%ProgramFiles%\googleupdate\!!instructions!!.exe
%ProgramFiles%\fspex\!!instructions!!.exe
%ProgramFiles%\gcasdtserv\!!instructions!!.exe
%ProgramFiles%\msbuild\microsoft\!!instructions!!.exe

Перемещает следующие файлы

%ProgramFiles%\desktop.ini в %ProgramFiles%\desktop.ini.system32x
%ProgramFiles%\fstlui\fstlui.exe в %ProgramFiles%\fstlui\fstlui.exe.system32x
%ProgramFiles%\fssw\fssw.exe в %ProgramFiles%\fssw\fssw.exe.system32x
%ProgramFiles%\fsstm\fsstm.exe в %ProgramFiles%\fsstm\fsstm.exe.system32x
%ProgramFiles%\fssm32\fssm32.exe в %ProgramFiles%\fssm32\fssm32.exe.system32x
%ProgramFiles%\fssg\fssg.exe в %ProgramFiles%\fssg\fssg.exe.system32x
%ProgramFiles%\fssf\fssf.exe в %ProgramFiles%\fssf\fssf.exe.system32x
%ProgramFiles%\fsqh\fsqh.exe в %ProgramFiles%\fsqh\fsqh.exe.system32x
%ProgramFiles%\fspex\fspex.exe в %ProgramFiles%\fspex\fspex.exe.system32x
%ProgramFiles%\fspc\fspc.exe в %ProgramFiles%\fspc\fspc.exe.system32x
%ProgramFiles%\fsmb32\fsmb32.exe в %ProgramFiles%\fsmb32\fsmb32.exe.system32x
%ProgramFiles%\fsma32\fsma32.exe в %ProgramFiles%\fsma32\fsma32.exe.system32x
%ProgramFiles%\fsm32\fsm32.exe в %ProgramFiles%\fsm32\fsm32.exe.system32x
%ProgramFiles%\fslaunch\fslaunch.exe в %ProgramFiles%\fslaunch\fslaunch.exe.system32x
%ProgramFiles%\fsihs\fsihs.exe в %ProgramFiles%\fsihs\fsihs.exe.system32x
%ProgramFiles%\fsihcomp\fsihcomp.exe в %ProgramFiles%\fsihcomp\fsihcomp.exe.system32x
%ProgramFiles%\fshotfix\fshotfix.exe в %ProgramFiles%\fshotfix\fshotfix.exe.system32x
%ProgramFiles%\fshelp\fshelp.exe в %ProgramFiles%\fshelp\fshelp.exe.system32x
%ProgramFiles%\fshdll32\fshdll32.exe в %ProgramFiles%\fshdll32\fshdll32.exe.system32x
%ProgramFiles%\fsguiexe\fsguiexe.exe в %ProgramFiles%\fsguiexe\fsguiexe.exe.system32x
%ProgramFiles%\fsguidll\fsguidll.exe в %ProgramFiles%\fsguidll\fsguidll.exe.system32x
%ProgramFiles%\fsgk32st\fsgk32st.exe в %ProgramFiles%\fsgk32st\fsgk32st.exe.system32x
%ProgramFiles%\fsgk32\fsgk32.exe в %ProgramFiles%\fsgk32\fsgk32.exe.system32x
%ProgramFiles%\fsgetwab\fsgetwab.exe в %ProgramFiles%\fsgetwab\fsgetwab.exe.system32x
%ProgramFiles%\fsuninst\fsuninst.exe в %ProgramFiles%\fsuninst\fsuninst.exe.system32x
%ProgramFiles%\fsus\fsus.exe в %ProgramFiles%\fsus\fsus.exe.system32x
%ProgramFiles%\ftpte\ftpte.exe в %ProgramFiles%\ftpte\ftpte.exe.system32x
%ProgramFiles%\gc\gc.exe в %ProgramFiles%\gc\gc.exe.system32x
%ProgramFiles%\fsfwwsch\fsfwwsch.exe в %ProgramFiles%\fsfwwsch\fsfwwsch.exe.system32x
%ProgramFiles%\icq\icq.exe в %ProgramFiles%\icq\icq.exe.system32x
%ProgramFiles%\iamserv\iamserv.exe в %ProgramFiles%\iamserv\iamserv.exe.system32x
%ProgramFiles%\iamapp\iamapp.exe в %ProgramFiles%\iamapp\iamapp.exe.system32x
%ProgramFiles%\httplook\httplook.exe в %ProgramFiles%\httplook\httplook.exe.system32x
%ProgramFiles%\hsockpe\hsockpe.exe в %ProgramFiles%\hsockpe\hsockpe.exe.system32x
%ProgramFiles%\hrres\hrres.exe в %ProgramFiles%\hrres\hrres.exe.system32x
%ProgramFiles%\hregmon\hregmon.exe в %ProgramFiles%\hregmon\hregmon.exe.system32x
%ProgramFiles%\hipsdiag\hipsdiag.exe в %ProgramFiles%\hipsdiag\hipsdiag.exe.system32x
%ProgramFiles%\helper\helper.exe в %ProgramFiles%\helper\helper.exe.system32x
%ProgramFiles%\helpctr\helpctr.exe в %ProgramFiles%\helpctr\helpctr.exe.system32x
%ProgramFiles%\fsfwwscr\fsfwwscr.exe в %ProgramFiles%\fsfwwscr\fsfwwscr.exe.system32x
%ProgramFiles%\gw\gw.exe в %ProgramFiles%\gw\gw.exe.system32x
%ProgramFiles%\icqlite\icqlite.exe в %ProgramFiles%\icqlite\icqlite.exe.system32x
%ProgramFiles%\googleupdate\googleupdate.exe в %ProgramFiles%\googleupdate\googleupdate.exe.system32x
%ProgramFiles%\googletalk\googletalk.exe в %ProgramFiles%\googletalk\googletalk.exe.system32x
%ProgramFiles%\googledesktop\googledesktop.exe в %ProgramFiles%\googledesktop\googledesktop.exe.system32x
%ProgramFiles%\gnotify\gnotify.exe в %ProgramFiles%\gnotify\gnotify.exe.system32x
%ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe в %ProgramFiles%\giantantispywareupdater\giantantispywareupdater.exe.system32x
%ProgramFiles%\giantantispywaremain\giantantispywaremain.exe в %ProgramFiles%\giantantispywaremain\giantantispywaremain.exe.system32x
%ProgramFiles%\gg\gg.exe в %ProgramFiles%\gg\gg.exe.system32x
%ProgramFiles%\ge\ge.exe в %ProgramFiles%\ge\ge.exe.system32x
%ProgramFiles%\gcasserv\gcasserv.exe в %ProgramFiles%\gcasserv\gcasserv.exe.system32x
%ProgramFiles%\gcasdtserv\gcasdtserv.exe в %ProgramFiles%\gcasdtserv\gcasdtserv.exe.system32x
%ProgramFiles%\guardnt\guardnt.exe в %ProgramFiles%\guardnt\guardnt.exe.system32x
%ProgramFiles%\firefox\nsinstall.exe в %ProgramFiles%\firefox\nsinstall.exe.system32x
%ProgramFiles%\guardgni\guardgni.exe в %ProgramFiles%\guardgni\guardgni.exe.system32x
%ProgramFiles%\fsample\fsample.exe в %ProgramFiles%\fsample\fsample.exe.system32x
%ProgramFiles%\firefox\xpt_link.exe в %ProgramFiles%\firefox\xpt_link.exe.system32x
%ProgramFiles%\firefox\xpt_dump.exe в %ProgramFiles%\firefox\xpt_dump.exe.system32x
%ProgramFiles%\firefox\xpidl.exe в %ProgramFiles%\firefox\xpidl.exe.system32x
%ProgramFiles%\firefox\xpcshell.exe в %ProgramFiles%\firefox\xpcshell.exe.system32x
%ProgramFiles%\firefox\xpcom.dll в %ProgramFiles%\firefox\xpcom.dll.system32x
%ProgramFiles%\firefox\updater.ini в %ProgramFiles%\firefox\updater.ini.system32x
%ProgramFiles%\firefox\updater.exe в %ProgramFiles%\firefox\updater.exe.system32x
%ProgramFiles%\firefox\update.locale в %ProgramFiles%\firefox\update.locale.system32x
%ProgramFiles%\firefox\ssl3.dll в %ProgramFiles%\firefox\ssl3.dll.system32x
%ProgramFiles%\firefox\softokn3.dll в %ProgramFiles%\firefox\softokn3.dll.system32x
%ProgramFiles%\firefox\softokn3.chk в %ProgramFiles%\firefox\softokn3.chk.system32x
%ProgramFiles%\firefox\smime3.dll в %ProgramFiles%\firefox\smime3.dll.system32x
%ProgramFiles%\firefox\shlibsign.exe в %ProgramFiles%\firefox\shlibsign.exe.system32x
%ProgramFiles%\firefox\readme.txt в %ProgramFiles%\firefox\readme.txt.system32x
%ProgramFiles%\firefox\plugin_container.exe в %ProgramFiles%\firefox\plugin_container.exe.system32x
%ProgramFiles%\firefox\plds4.dll в %ProgramFiles%\firefox\plds4.dll.system32x
%ProgramFiles%\firefox\plc4.dll в %ProgramFiles%\firefox\plc4.dll.system32x
%ProgramFiles%\firefox\platform.ini в %ProgramFiles%\firefox\platform.ini.system32x
%ProgramFiles%\firefox\nssutil3.dll в %ProgramFiles%\firefox\nssutil3.dll.system32x
%ProgramFiles%\firefox\nssdbm3.dll в %ProgramFiles%\firefox\nssdbm3.dll.system32x
%ProgramFiles%\firefox\nssdbm3.chk в %ProgramFiles%\firefox\nssdbm3.chk.system32x
%ProgramFiles%\firefox\nssckbi.dll в %ProgramFiles%\firefox\nssckbi.dll.system32x
%ProgramFiles%\firefox\nss3.dll в %ProgramFiles%\firefox\nss3.dll.system32x
%ProgramFiles%\firefox\xul.dll в %ProgramFiles%\firefox\xul.dll.system32x
%ProgramFiles%\firesvc\firesvc.exe в %ProgramFiles%\firesvc\firesvc.exe.system32x
%ProgramFiles%\firetray\firetray.exe в %ProgramFiles%\firetray\firetray.exe.system32x
%ProgramFiles%\flashfxp\flashfxp.exe в %ProgramFiles%\flashfxp\flashfxp.exe.system32x
%ProgramFiles%\fsdiag\fsdiag.exe в %ProgramFiles%\fsdiag\fsdiag.exe.system32x
%ProgramFiles%\fsdc\fsdc.exe в %ProgramFiles%\fsdc\fsdc.exe.system32x
%ProgramFiles%\fsdbuh\fsdbuh.exe в %ProgramFiles%\fsdbuh\fsdbuh.exe.system32x
%ProgramFiles%\fsbwsys\fsbwsys.exe в %ProgramFiles%\fsbwsys\fsbwsys.exe.system32x
%ProgramFiles%\fsavwscr\fsavwscr.exe в %ProgramFiles%\fsavwscr\fsavwscr.exe.system32x
%ProgramFiles%\fsavwsch\fsavwsch.exe в %ProgramFiles%\fsavwsch\fsavwsch.exe.system32x
%ProgramFiles%\fsavstrt\fsavstrt.exe в %ProgramFiles%\fsavstrt\fsavstrt.exe.system32x
%ProgramFiles%\fsavgui\fsavgui.exe в %ProgramFiles%\fsavgui\fsavgui.exe.system32x
%ProgramFiles%\fsavaui\fsavaui.exe в %ProgramFiles%\fsavaui\fsavaui.exe.system32x
%ProgramFiles%\fsav32\fsav32.exe в %ProgramFiles%\fsav32\fsav32.exe.system32x
%ProgramFiles%\fsav\fsav.exe в %ProgramFiles%\fsav\fsav.exe.system32x
%ProgramFiles%\fsdiagui\fsdiagui.exe в %ProgramFiles%\fsdiagui\fsdiagui.exe.system32x
%ProgramFiles%\fsauach\fsauach.exe в %ProgramFiles%\fsauach\fsauach.exe.system32x
%ProgramFiles%\fsdfwd\fsdfwd.exe в %ProgramFiles%\fsdfwd\fsdfwd.exe.system32x
%ProgramFiles%\freshclam\freshclam.exe в %ProgramFiles%\freshclam\freshclam.exe.system32x
%ProgramFiles%\fpwin\fpwin.exe в %ProgramFiles%\fpwin\fpwin.exe.system32x
%ProgramFiles%\fptrayproc\fptrayproc.exe в %ProgramFiles%\fptrayproc\fptrayproc.exe.system32x
%ProgramFiles%\fpscan\fpscan.exe в %ProgramFiles%\fpscan\fpscan.exe.system32x
%ProgramFiles%\fprottray\fprottray.exe в %ProgramFiles%\fprottray\fprottray.exe.system32x
%ProgramFiles%\fpavupdm\fpavupdm.exe в %ProgramFiles%\fpavupdm\fpavupdm.exe.system32x
%ProgramFiles%\fpavserver\fpavserver.exe в %ProgramFiles%\fpavserver\fpavserver.exe.system32x
%ProgramFiles%\foxit\foxit в %ProgramFiles%\foxit\foxit.system32x
%ProgramFiles%\flock\flock.exe в %ProgramFiles%\flock\flock.exe.system32x
%ProgramFiles%\flashgot\flashgot.exe в %ProgramFiles%\flashgot\flashgot.exe.system32x
%ProgramFiles%\fsaua\fsaua.exe в %ProgramFiles%\fsaua\fsaua.exe.system32x
%ProgramFiles%\firefox\nspr4.dll в %ProgramFiles%\firefox\nspr4.dll.system32x
%ProgramFiles%\ieregfix\ieregfix.exe в %ProgramFiles%\ieregfix\ieregfix.exe.system32x
%ProgramFiles%\internet explorer\ieproxy.dll в %ProgramFiles%\internet explorer\ieproxy.dll.system32x
%ProgramFiles%\monsysnt\monsysnt.exe в %ProgramFiles%\monsysnt\monsysnt.exe.system32x
%ProgramFiles%\monlite\monlite.exe в %ProgramFiles%\monlite\monlite.exe.system32x
%ProgramFiles%\miro\miro.exe в %ProgramFiles%\miro\miro.exe.system32x
%ProgramFiles%\miranda32\miranda32.exe в %ProgramFiles%\miranda32\miranda32.exe.system32x
%ProgramFiles%\mir3game\mir3game.exe в %ProgramFiles%\mir3game\mir3game.exe.system32x
%ProgramFiles%\mfpmp\mfpmp.exe в %ProgramFiles%\mfpmp\mfpmp.exe.system32x
%ProgramFiles%\memstring\memstring.exe в %ProgramFiles%\memstring\memstring.exe.system32x
%ProgramFiles%\mcvsshld\mcvsshld.exe в %ProgramFiles%\mcvsshld\mcvsshld.exe.system32x
%ProgramFiles%\mcupdmgr\mcupdmgr.exe в %ProgramFiles%\mcupdmgr\mcupdmgr.exe.system32x
%ProgramFiles%\mcshield\mcshield.exe в %ProgramFiles%\mcshield\mcshield.exe.system32x
%ProgramFiles%\mcregwiz\mcregwiz.exe в %ProgramFiles%\mcregwiz\mcregwiz.exe.system32x
%ProgramFiles%\maxthon\maxthon.exe в %ProgramFiles%\maxthon\maxthon.exe.system32x
%ProgramFiles%\mp3toys\mp3toys.exe в %ProgramFiles%\mp3toys\mp3toys.exe.system32x
%ProgramFiles%\maplestory\maplestory.exe в %ProgramFiles%\maplestory\maplestory.exe.system32x
%ProgramFiles%\malwareremoval\malwareremoval.exe в %ProgramFiles%\malwareremoval\malwareremoval.exe.system32x
%ProgramFiles%\magent\magent.exe в %ProgramFiles%\magent\magent.exe.system32x
%ProgramFiles%\luupdate\luupdate.exe в %ProgramFiles%\luupdate\luupdate.exe.system32x
%ProgramFiles%\luna\luna.exe в %ProgramFiles%\luna\luna.exe.system32x
%ProgramFiles%\luinit\luinit.exe в %ProgramFiles%\luinit\luinit.exe.system32x
%ProgramFiles%\luconfig\luconfig.exe в %ProgramFiles%\luconfig\luconfig.exe.system32x
%ProgramFiles%\lucheck\lucheck.exe в %ProgramFiles%\lucheck\lucheck.exe.system32x
%ProgramFiles%\lucallbackproxy\lucallbackproxy.exe в %ProgramFiles%\lucallbackproxy\lucallbackproxy.exe.system32x
%ProgramFiles%\lpfw\lpfw.exe в %ProgramFiles%\lpfw\lpfw.exe.system32x
%ProgramFiles%\mcmnhdlr\mcmnhdlr.exe в %ProgramFiles%\mcmnhdlr\mcmnhdlr.exe.system32x
%ProgramFiles%\digsby\digsby.exe в %ProgramFiles%\digsby\digsby.exe.system32x
%ProgramFiles%\mp3toystray\mp3toystray.exe в %ProgramFiles%\mp3toystray\mp3toystray.exe.system32x
%ProgramFiles%\nod32krn\nod32krn.exe в %ProgramFiles%\nod32krn\nod32krn.exe.system32x
%ProgramFiles%\nod32\nod32.exe в %ProgramFiles%\nod32\nod32.exe.system32x
%ProgramFiles%\nod\nod.exe в %ProgramFiles%\nod\nod.exe.system32x
%ProgramFiles%\nisoptui\nisoptui.exe в %ProgramFiles%\nisoptui\nisoptui.exe.system32x
%ProgramFiles%\netxray\netxray.exe в %ProgramFiles%\netxray\netxray.exe.system32x
%ProgramFiles%\netstatviewer\netstatviewer.exe в %ProgramFiles%\netstatviewer\netstatviewer.exe.system32x
%ProgramFiles%\neowatchtray\neowatchtray.exe в %ProgramFiles%\neowatchtray\neowatchtray.exe.system32x
%ProgramFiles%\neowatchlog\neowatchlog.exe в %ProgramFiles%\neowatchlog\neowatchlog.exe.system32x
%ProgramFiles%\navwnt\navwnt.exe в %ProgramFiles%\navwnt\navwnt.exe.system32x
%ProgramFiles%\navw32\navw32.exe в %ProgramFiles%\navw32\navw32.exe.system32x
%ProgramFiles%\navstub\navstub.exe в %ProgramFiles%\navstub\navstub.exe.system32x
%ProgramFiles%\lotroclient\lotroclient.exe в %ProgramFiles%\lotroclient\lotroclient.exe.system32x
%ProgramFiles%\mp3theater\mp3theater.exe в %ProgramFiles%\mp3theater\mp3theater.exe.system32x
%ProgramFiles%\myagttry\myagttry.exe в %ProgramFiles%\myagttry\myagttry.exe.system32x
%ProgramFiles%\myagtsvc\myagtsvc.exe в %ProgramFiles%\myagtsvc\myagtsvc.exe.system32x
%ProgramFiles%\mvc\mvc.exe в %ProgramFiles%\mvc\mvc.exe.system32x
%ProgramFiles%\mva\mva.exe в %ProgramFiles%\mva\mva.exe.system32x
%ProgramFiles%\msnmsgr\msnmsgr.exe в %ProgramFiles%\msnmsgr\msnmsgr.exe.system32x
%ProgramFiles%\msn6\msn6.exe в %ProgramFiles%\msn6\msn6.exe.system32x
%ProgramFiles%\msmpsvc\msmpsvc.exe в %ProgramFiles%\msmpsvc\msmpsvc.exe.system32x
%ProgramFiles%\msimn\msimn.exe в %ProgramFiles%\msimn\msimn.exe.system32x
%ProgramFiles%\mpssvc\mpssvc.exe в %ProgramFiles%\mpssvc\mpssvc.exe.system32x
%ProgramFiles%\mpftray\mpftray.exe в %ProgramFiles%\mpftray\mpftray.exe.system32x
%ProgramFiles%\mpeng\mpeng.exe в %ProgramFiles%\mpeng\mpeng.exe.system32x
%ProgramFiles%\navapsvc\navapsvc.exe в %ProgramFiles%\navapsvc\navapsvc.exe.system32x
%ProgramFiles%\mp3tray\mp3tray.exe в %ProgramFiles%\mp3tray\mp3tray.exe.system32x
%ProgramFiles%\iexplore\iexplore.exe в %ProgramFiles%\iexplore\iexplore.exe.system32x
%ProgramFiles%\ieuser\ieuser.exe в %ProgramFiles%\ieuser\ieuser.exe.system32x
%ProgramFiles%\livesrv\livesrv.exe в %ProgramFiles%\livesrv\livesrv.exe.system32x
%ProgramFiles%\internet explorer\ieshims.dll в %ProgramFiles%\internet explorer\ieshims.dll.system32x
%ProgramFiles%\internet explorer\ieinstal.exe в %ProgramFiles%\internet explorer\ieinstal.exe.system32x
%ProgramFiles%\internet explorer\iedvtool.dll в %ProgramFiles%\internet explorer\iedvtool.dll.system32x
%ProgramFiles%\internet explorer\iecompat.dll в %ProgramFiles%\internet explorer\iecompat.dll.system32x
%ProgramFiles%\internet explorer\ie8props.propdesc в %ProgramFiles%\internet explorer\ie8props.propdesc.system32x
%ProgramFiles%\internet explorer\hmmapi.dll в %ProgramFiles%\internet explorer\hmmapi.dll.system32x
%ProgramFiles%\instlsp\instlsp.exe в %ProgramFiles%\instlsp\instlsp.exe.system32x
%ProgramFiles%\installlsp\installlsp.exe в %ProgramFiles%\installlsp\installlsp.exe.system32x
%ProgramFiles%\installlicense\installlicense.exe в %ProgramFiles%\installlicense\installlicense.exe.system32x
%ProgramFiles%\installcavs\installcavs.exe в %ProgramFiles%\installcavs\installcavs.exe.system32x
%ProgramFiles%\inphasenxd\inphasenxd.exe в %ProgramFiles%\inphasenxd\inphasenxd.exe.system32x
%ProgramFiles%\inouptng\inouptng.exe в %ProgramFiles%\inouptng\inouptng.exe.system32x
%ProgramFiles%\inotask\inotask.exe в %ProgramFiles%\inotask\inotask.exe.system32x
%ProgramFiles%\inort\inort.exe в %ProgramFiles%\inort\inort.exe.system32x
%ProgramFiles%\inorpc\inorpc.exe в %ProgramFiles%\inorpc\inorpc.exe.system32x
%ProgramFiles%\inocit\inocit.exe в %ProgramFiles%\inocit\inocit.exe.system32x
%ProgramFiles%\incmail\incmail.exe в %ProgramFiles%\incmail\incmail.exe.system32x
%ProgramFiles%\impcnt\impcnt.exe в %ProgramFiles%\impcnt\impcnt.exe.system32x
%ProgramFiles%\imnotfy\imnotfy.exe в %ProgramFiles%\imnotfy\imnotfy.exe.system32x
%ProgramFiles%\imapp\imapp.exe в %ProgramFiles%\imapp\imapp.exe.system32x
%ProgramFiles%\ilaunchr\ilaunchr.exe в %ProgramFiles%\ilaunchr\ilaunchr.exe.system32x
%ProgramFiles%\ih8run\ih8run.exe в %ProgramFiles%\ih8run\ih8run.exe.system32x
%ProgramFiles%\ih8\ih8.exe в %ProgramFiles%\ih8\ih8.exe.system32x
%ProgramFiles%\internet explorer\iexplore.exe в %ProgramFiles%\internet explorer\iexplore.exe.system32x
%ProgramFiles%\internet explorer\jsdbgui.dll в %ProgramFiles%\internet explorer\jsdbgui.dll.system32x
%ProgramFiles%\licmgr\licmgr.exe в %ProgramFiles%\licmgr\licmgr.exe.system32x
%ProgramFiles%\issvc\issvc.exe в %ProgramFiles%\issvc\issvc.exe.system32x
%ProgramFiles%\isuac\isuac.exe в %ProgramFiles%\isuac\isuac.exe.system32x
%ProgramFiles%\launcher\launcher.exe в %ProgramFiles%\launcher\launcher.exe.system32x
%ProgramFiles%\konnekt\konnekt.exe в %ProgramFiles%\konnekt\konnekt.exe.system32x
%ProgramFiles%\kavsvc\kavsvc.exe в %ProgramFiles%\kavsvc\kavsvc.exe.system32x
%ProgramFiles%\kavstart\kavstart.exe в %ProgramFiles%\kavstart\kavstart.exe.system32x
%ProgramFiles%\kavpfw\kavpfw.exe в %ProgramFiles%\kavpfw\kavpfw.exe.system32x
%ProgramFiles%\kavpf\kavpf.exe в %ProgramFiles%\kavpf\kavpf.exe.system32x
%ProgramFiles%\kavmm\kavmm.exe в %ProgramFiles%\kavmm\kavmm.exe.system32x
%ProgramFiles%\kav\kav.exe в %ProgramFiles%\kav\kav.exe.system32x
%ProgramFiles%\k-meleon\k-meleon.exe в %ProgramFiles%\k-meleon\k-meleon.exe.system32x
%ProgramFiles%\itunes\itunes.exe в %ProgramFiles%\itunes\itunes.exe.system32x
%ProgramFiles%\logwatnt\logwatnt.exe в %ProgramFiles%\logwatnt\logwatnt.exe.system32x
%ProgramFiles%\liveupdate\liveupdate.exe в %ProgramFiles%\liveupdate\liveupdate.exe.system32x
%ProgramFiles%\internet explorer\ielowutil.exe в %ProgramFiles%\internet explorer\ielowutil.exe.system32x
%ProgramFiles%\ispnews\ispnews.exe в %ProgramFiles%\ispnews\ispnews.exe.system32x
%ProgramFiles%\isafe\isafe.exe в %ProgramFiles%\isafe\isafe.exe.system32x
%ProgramFiles%\iron\iron.exe в %ProgramFiles%\iron\iron.exe.system32x
%ProgramFiles%\iris\iris.exe в %ProgramFiles%\iris\iris.exe.system32x
%ProgramFiles%\internet explorer\sqmapi.dll в %ProgramFiles%\internet explorer\sqmapi.dll.system32x
%ProgramFiles%\internet explorer\pdm.dll в %ProgramFiles%\internet explorer\pdm.dll.system32x
%ProgramFiles%\internet explorer\msdbg2.dll в %ProgramFiles%\internet explorer\msdbg2.dll.system32x
%ProgramFiles%\internet explorer\jsprofilerui.dll в %ProgramFiles%\internet explorer\jsprofilerui.dll.system32x
%ProgramFiles%\internet explorer\jsprofilercore.dll в %ProgramFiles%\internet explorer\jsprofilercore.dll.system32x
%ProgramFiles%\internet explorer\jsdebuggeride.dll в %ProgramFiles%\internet explorer\jsdebuggeride.dll.system32x
%ProgramFiles%\ispwdsvc\ispwdsvc.exe в %ProgramFiles%\ispwdsvc\ispwdsvc.exe.system32x
%ProgramFiles%\firefox\mozsqlite3.dll в %ProgramFiles%\firefox\mozsqlite3.dll.system32x
%ProgramFiles%\firefox\mozjs.dll в %ProgramFiles%\firefox\mozjs.dll.system32x
%ProgramFiles%\firefox\mozalloc.dll в %ProgramFiles%\firefox\mozalloc.dll.system32x
%ProgramFiles%\avkservice\avkservice.exe в %ProgramFiles%\avkservice\avkservice.exe.system32x
%ProgramFiles%\avkserv\avkserv.exe в %ProgramFiles%\avkserv\avkserv.exe.system32x
%ProgramFiles%\avinitnt\avinitnt.exe в %ProgramFiles%\avinitnt\avinitnt.exe.system32x
%ProgramFiles%\avgwizfw\avgwizfw.exe в %ProgramFiles%\avgwizfw\avgwizfw.exe.system32x
%ProgramFiles%\avgw\avgw.exe в %ProgramFiles%\avgw\avgw.exe.system32x
%ProgramFiles%\avgvv\avgvv.exe в %ProgramFiles%\avgvv\avgvv.exe.system32x
%ProgramFiles%\avgupsvc\avgupsvc.exe в %ProgramFiles%\avgupsvc\avgupsvc.exe.system32x
%ProgramFiles%\avgupden\avgupden.exe в %ProgramFiles%\avgupden\avgupden.exe.system32x
%ProgramFiles%\avgscan\avgscan.exe в %ProgramFiles%\avgscan\avgscan.exe.system32x
%ProgramFiles%\avgrssvc\avgrssvc.exe в %ProgramFiles%\avgrssvc\avgrssvc.exe.system32x
%ProgramFiles%\avgnpsvc\avgnpsvc.exe в %ProgramFiles%\avgnpsvc\avgnpsvc.exe.system32x
%ProgramFiles%\avgnpdln\avgnpdln.exe в %ProgramFiles%\avgnpdln\avgnpdln.exe.system32x
%ProgramFiles%\avginet\avginet.exe в %ProgramFiles%\avginet\avginet.exe.system32x
%ProgramFiles%\avgfwsrv\avgfwsrv.exe в %ProgramFiles%\avgfwsrv\avgfwsrv.exe.system32x
%ProgramFiles%\avgemc\avgemc.exe в %ProgramFiles%\avgemc\avgemc.exe.system32x
%ProgramFiles%\avgdiag\avgdiag.exe в %ProgramFiles%\avgdiag\avgdiag.exe.system32x
%ProgramFiles%\avgcc\avgcc.exe в %ProgramFiles%\avgcc\avgcc.exe.system32x
%ProgramFiles%\avgamsvr\avgamsvr.exe в %ProgramFiles%\avgamsvr\avgamsvr.exe.system32x
%ProgramFiles%\avconsol\avconsol.exe в %ProgramFiles%\avconsol\avconsol.exe.system32x
%ProgramFiles%\avconfig\avconfig.exe в %ProgramFiles%\avconfig\avconfig.exe.system32x
%ProgramFiles%\avcmd\avcmd.exe в %ProgramFiles%\avcmd\avcmd.exe.system32x
%ProgramFiles%\avciman\avciman.exe в %ProgramFiles%\avciman\avciman.exe.system32x
%ProgramFiles%\avnotify\avnotify.exe в %ProgramFiles%\avnotify\avnotify.exe.system32x
%ProgramFiles%\avpcc\avpcc.exe в %ProgramFiles%\avpcc\avpcc.exe.system32x
%ProgramFiles%\avpm\avpm.exe в %ProgramFiles%\avpm\avpm.exe.system32x
%ProgramFiles%\avscan\avscan.exe в %ProgramFiles%\avscan\avscan.exe.system32x
%ProgramFiles%\cavemsrv\cavemsrv.exe в %ProgramFiles%\cavemsrv\cavemsrv.exe.system32x
%ProgramFiles%\cavaud\cavaud.exe в %ProgramFiles%\cavaud\cavaud.exe.system32x
%ProgramFiles%\cavasm\cavasm.exe в %ProgramFiles%\cavasm\cavasm.exe.system32x
%ProgramFiles%\cavapp\cavapp.exe в %ProgramFiles%\cavapp\cavapp.exe.system32x
%ProgramFiles%\cafix\cafix.exe в %ProgramFiles%\cafix\cafix.exe.system32x
%ProgramFiles%\cabalmain\cabalmain.exe в %ProgramFiles%\cabalmain\cabalmain.exe.system32x
%ProgramFiles%\btinint\btinint.exe в %ProgramFiles%\btinint\btinint.exe.system32x
%ProgramFiles%\btini\btini.exe в %ProgramFiles%\btini\btini.exe.system32x
%ProgramFiles%\blindman\blindman.exe в %ProgramFiles%\blindman\blindman.exe.system32x
%ProgramFiles%\blackice\blackice.exe в %ProgramFiles%\blackice\blackice.exe.system32x
%ProgramFiles%\blackd\blackd.exe в %ProgramFiles%\blackd\blackd.exe.system32x
%ProgramFiles%\avcenter\avcenter.exe в %ProgramFiles%\avcenter\avcenter.exe.system32x
%ProgramFiles%\cavmr\cavmr.exe в %ProgramFiles%\cavmr\cavmr.exe.system32x
%ProgramFiles%\bdsurvey\bdsurvey.exe в %ProgramFiles%\bdsurvey\bdsurvey.exe.system32x
%ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe в %ProgramFiles%\bdsubmitwiz\bdsubmitwiz.exe.system32x
%ProgramFiles%\bdsubmit\bdsubmit.exe в %ProgramFiles%\bdsubmit\bdsubmit.exe.system32x
%ProgramFiles%\bdss\bdss.exe в %ProgramFiles%\bdss\bdss.exe.system32x
%ProgramFiles%\bdoesrv\bdoesrv.exe в %ProgramFiles%\bdoesrv\bdoesrv.exe.system32x
%ProgramFiles%\bdnews\bdnews.exe в %ProgramFiles%\bdnews\bdnews.exe.system32x
%ProgramFiles%\bdmcon\bdmcon.exe в %ProgramFiles%\bdmcon\bdmcon.exe.system32x
%ProgramFiles%\bdagent\bdagent.exe в %ProgramFiles%\bdagent\bdagent.exe.system32x
%ProgramFiles%\backweb-4476822\backweb-4476822.exe в %ProgramFiles%\backweb-4476822\backweb-4476822.exe.system32x
%ProgramFiles%\b2\b2.exe в %ProgramFiles%\b2\b2.exe.system32x
%ProgramFiles%\avsynmgr\avsynmgr.exe в %ProgramFiles%\avsynmgr\avsynmgr.exe.system32x
%ProgramFiles%\bdswitch\bdswitch.exe в %ProgramFiles%\bdswitch\bdswitch.exe.system32x
%ProgramFiles%\avadmin\avadmin.exe в %ProgramFiles%\avadmin\avadmin.exe.system32x
%ProgramFiles%\bdwizreg\bdwizreg.exe в %ProgramFiles%\bdwizreg\bdwizreg.exe.system32x
%ProgramFiles%\autostartexplorer\autostartexplorer.exe в %ProgramFiles%\autostartexplorer\autostartexplorer.exe.system32x
%ProgramFiles%\ashquick\ashquick.exe в %ProgramFiles%\ashquick\ashquick.exe.system32x
%ProgramFiles%\alsvc\alsvc.exe в %ProgramFiles%\alsvc\alsvc.exe.system32x
%ProgramFiles%\almon\almon.exe в %ProgramFiles%\almon\almon.exe.system32x
%ProgramFiles%\airdefense\airdefense.exe в %ProgramFiles%\airdefense\airdefense.exe.system32x
%ProgramFiles%\aimpro\aimpro.exe в %ProgramFiles%\aimpro\aimpro.exe.system32x
%ProgramFiles%\aim6\aim6.exe в %ProgramFiles%\aim6\aim6.exe.system32x
%ProgramFiles%\ahnsd\ahnsd.exe в %ProgramFiles%\ahnsd\ahnsd.exe.system32x
%ProgramFiles%\ageofconan\ageofconan.exe в %ProgramFiles%\ageofconan\ageofconan.exe.system32x
%ProgramFiles%\agb5\agb5.exe в %ProgramFiles%\agb5\agb5.exe.system32x
%ProgramFiles%\admunch\admunch.exe в %ProgramFiles%\admunch\admunch.exe.system32x
%ProgramFiles%\ackwin32\ackwin32.exe в %ProgramFiles%\ackwin32\ackwin32.exe.system32x
%ProgramFiles%\about\about.exe в %ProgramFiles%\about\about.exe.system32x
%ProgramFiles%\aavshield\aavshield.exe в %ProgramFiles%\aavshield\aavshield.exe.system32x
%ProgramFiles%\a2wizard\a2wizard.exe в %ProgramFiles%\a2wizard\a2wizard.exe.system32x
%ProgramFiles%\a2upd\a2upd.exe в %ProgramFiles%\a2upd\a2upd.exe.system32x
%ProgramFiles%\a2start\a2start.exe в %ProgramFiles%\a2start\a2start.exe.system32x
%ProgramFiles%\a2service\a2service.exe в %ProgramFiles%\a2service\a2service.exe.system32x
%ProgramFiles%\a2scan\a2scan.exe в %ProgramFiles%\a2scan\a2scan.exe.system32x
%ProgramFiles%\a2hijackfree\a2hijackfree.exe в %ProgramFiles%\a2hijackfree\a2hijackfree.exe.system32x
%ProgramFiles%\a2guard\a2guard.exe в %ProgramFiles%\a2guard\a2guard.exe.system32x
%ProgramFiles%\a2cmd\a2cmd.exe в %ProgramFiles%\a2cmd\a2cmd.exe.system32x
%ProgramFiles%\360tray\360tray.exe в %ProgramFiles%\360tray\360tray.exe.system32x
%ProgramFiles(x86)%\desktop.ini в %ProgramFiles(x86)%\desktop.ini.system32x
%ProgramFiles%\amsn\amsn.exe в %ProgramFiles%\amsn\amsn.exe.system32x
%ProgramFiles%\anti-trojan\anti-trojan.exe в %ProgramFiles%\anti-trojan\anti-trojan.exe.system32x
%ProgramFiles%\antivirus\antivirus.exe в %ProgramFiles%\antivirus\antivirus.exe.system32x
%ProgramFiles%\aoltbserver\aoltbserver.exe в %ProgramFiles%\aoltbserver\aoltbserver.exe.system32x
%ProgramFiles%\autodown\autodown.exe в %ProgramFiles%\autodown\autodown.exe.system32x
%ProgramFiles%\aswupdsv\aswupdsv.exe в %ProgramFiles%\aswupdsv\aswupdsv.exe.system32x
%ProgramFiles%\aswregsvr\aswregsvr.exe в %ProgramFiles%\aswregsvr\aswregsvr.exe.system32x
%ProgramFiles%\ash_updatemediator\ash_updatemediator.exe в %ProgramFiles%\ash_updatemediator\ash_updatemediator.exe.system32x
%ProgramFiles%\ashwebsv\ashwebsv.exe в %ProgramFiles%\ashwebsv\ashwebsv.exe.system32x
%ProgramFiles%\ashupd\ashupd.exe в %ProgramFiles%\ashupd\ashupd.exe.system32x
%ProgramFiles%\ashskpck\ashskpck.exe в %ProgramFiles%\ashskpck\ashskpck.exe.system32x
%ProgramFiles%\ashskpcc\ashskpcc.exe в %ProgramFiles%\ashskpcc\ashskpcc.exe.system32x
%ProgramFiles%\ashsimpl\ashsimpl.exe в %ProgramFiles%\ashsimpl\ashsimpl.exe.system32x
%ProgramFiles%\ashsimp2\ashsimp2.exe в %ProgramFiles%\ashsimp2\ashsimp2.exe.system32x
%ProgramFiles%\ashserv\ashserv.exe в %ProgramFiles%\ashserv\ashserv.exe.system32x
%ProgramFiles%\autotrace\autotrace.exe в %ProgramFiles%\autotrace\autotrace.exe.system32x
%ProgramFiles%\cavmud\cavmud.exe в %ProgramFiles%\cavmud\cavmud.exe.system32x
%ProgramFiles%\ashmaisv\ashmaisv.exe в %ProgramFiles%\ashmaisv\ashmaisv.exe.system32x
%ProgramFiles%\ashlogv\ashlogv.exe в %ProgramFiles%\ashlogv\ashlogv.exe.system32x
%ProgramFiles%\ashenhcd\ashenhcd.exe в %ProgramFiles%\ashenhcd\ashenhcd.exe.system32x
%ProgramFiles%\ashdug\ashdug.exe в %ProgramFiles%\ashdug\ashdug.exe.system32x
%ProgramFiles%\ashdisp\ashdisp.exe в %ProgramFiles%\ashdisp\ashdisp.exe.system32x
%ProgramFiles%\ashchest\ashchest.exe в %ProgramFiles%\ashchest\ashchest.exe.system32x
%ProgramFiles%\ashavsrv\ashavsrv.exe в %ProgramFiles%\ashavsrv\ashavsrv.exe.system32x
%ProgramFiles%\ashavast\ashavast.exe в %ProgramFiles%\ashavast\ashavast.exe.system32x
%ProgramFiles%\ash\ash.exe в %ProgramFiles%\ash\ash.exe.system32x
%ProgramFiles%\armorsurf\armorsurf.exe в %ProgramFiles%\armorsurf\armorsurf.exe.system32x
%ProgramFiles%\armor2net\armor2net.exe в %ProgramFiles%\armor2net\armor2net.exe.system32x
%ProgramFiles%\ashpopwz\ashpopwz.exe в %ProgramFiles%\ashpopwz\ashpopwz.exe.system32x
%ProgramFiles%\amon\amon.exe в %ProgramFiles%\amon\amon.exe.system32x
%ProgramFiles%\avkwctl\avkwctl.exe в %ProgramFiles%\avkwctl\avkwctl.exe.system32x
%ProgramFiles%\cavoar\cavoar.exe в %ProgramFiles%\cavoar\cavoar.exe.system32x
%ProgramFiles%\etherd\etherd.exe в %ProgramFiles%\etherd\etherd.exe.system32x
%ProgramFiles%\ewidoctrl\ewidoctrl.exe в %ProgramFiles%\ewidoctrl\ewidoctrl.exe.system32x
%ProgramFiles%\elementclient\elementclient.exe в %ProgramFiles%\elementclient\elementclient.exe.system32x
%ProgramFiles%\ekrn\ekrn.exe в %ProgramFiles%\ekrn\ekrn.exe.system32x
%ProgramFiles%\ehsniffer\ehsniffer.exe в %ProgramFiles%\ehsniffer\ehsniffer.exe.system32x
%ProgramFiles%\egni\egni.exe в %ProgramFiles%\egni\egni.exe.system32x
%ProgramFiles%\ecmd\ecmd.exe в %ProgramFiles%\ecmd\ecmd.exe.system32x
%ProgramFiles%\dvd maker\wmm2clip.dll в %ProgramFiles%\dvd maker\wmm2clip.dll.system32x
%ProgramFiles%\dvd maker\sonicsptransform.ax в %ProgramFiles%\dvd maker\sonicsptransform.ax.system32x
%ProgramFiles%\dvd maker\soniccolorconverter.ax в %ProgramFiles%\dvd maker\soniccolorconverter.ax.system32x
%ProgramFiles%\dvd maker\secretst.ttf в %ProgramFiles%\dvd maker\secretst.ttf.system32x
%ProgramFiles%\dvd maker\rtstreamsource.ax в %ProgramFiles%\dvd maker\rtstreamsource.ax.system32x
%ProgramFiles%\dvd maker\rtstreamsink.ax в %ProgramFiles%\dvd maker\rtstreamsink.ax.system32x
%ProgramFiles%\dvd maker\pipetran.dll в %ProgramFiles%\dvd maker\pipetran.dll.system32x
%ProgramFiles%\dvd maker\pipeline.dll в %ProgramFiles%\dvd maker\pipeline.dll.system32x
%ProgramFiles%\dvd maker\omdproject.dll в %ProgramFiles%\dvd maker\omdproject.dll.system32x
%ProgramFiles%\dvd maker\omdbase.dll в %ProgramFiles%\dvd maker\omdbase.dll.system32x
%ProgramFiles%\dvd maker\offset.ax в %ProgramFiles%\dvd maker\offset.ax.system32x
%ProgramFiles%\dvd maker\fieldswitch.ax в %ProgramFiles%\dvd maker\fieldswitch.ax.system32x
%ProgramFiles%\dvd maker\eurosti.ttf в %ProgramFiles%\dvd maker\eurosti.ttf.system32x
%ProgramFiles%\dvd maker\dvdmaker.exe в %ProgramFiles%\dvd maker\dvdmaker.exe.system32x
%ProgramFiles%\dvd maker\directshowtap.ax в %ProgramFiles%\dvd maker\directshowtap.ax.system32x
%ProgramFiles%\dvd maker\bod_r.ttf в %ProgramFiles%\dvd maker\bod_r.ttf.system32x
%ProgramFiles%\dvd maker\audiodepthconverter.ax в %ProgramFiles%\dvd maker\audiodepthconverter.ax.system32x
%ProgramFiles%\exit_av\exit_av.exe в %ProgramFiles%\exit_av\exit_av.exe.system32x
%ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe в %ProgramFiles%\ezantivirusregistrationcheck\ezantivirusregistrationcheck.exe.system32x
%ProgramFiles%\firefox\mangle.exe в %ProgramFiles%\firefox\mangle.exe.system32x
%ProgramFiles%\firefox\chrome.manifest в %ProgramFiles%\firefox\chrome.manifest.system32x
%ProgramFiles%\firefox\crashreporter.exe в %ProgramFiles%\firefox\crashreporter.exe.system32x
%ProgramFiles%\firefox\js.log в %ProgramFiles%\firefox\js.log.system32x
%ProgramFiles%\firefox\js.exe в %ProgramFiles%\firefox\js.exe.system32x
%ProgramFiles%\firefox\ia2marshal.dll в %ProgramFiles%\firefox\ia2marshal.dll.system32x
%ProgramFiles%\firefox\greprefs.js в %ProgramFiles%\firefox\greprefs.js.system32x
%ProgramFiles%\firefox\freebl3.dll в %ProgramFiles%\firefox\freebl3.dll.system32x
%ProgramFiles%\firefox\freebl3.chk в %ProgramFiles%\firefox\freebl3.chk.system32x
%ProgramFiles%\firefox\firefox.exe в %ProgramFiles%\firefox\firefox.exe.system32x
%ProgramFiles%\firefox\dependentlibs.list в %ProgramFiles%\firefox\dependentlibs.list.system32x
%ProgramFiles%\firefox\crashreporter_override.ini в %ProgramFiles%\firefox\crashreporter_override.ini.system32x
%ProgramFiles%\firefox\crashreporter.ini в %ProgramFiles%\firefox\crashreporter.ini.system32x
%ProgramFiles%\eudora\eudora.exe в %ProgramFiles%\eudora\eudora.exe.system32x
%ProgramFiles%\drwreg\drwreg.exe в %ProgramFiles%\drwreg\drwreg.exe.system32x
%ProgramFiles%\drwebupw\drwebupw.exe в %ProgramFiles%\drwebupw\drwebupw.exe.system32x
%ProgramFiles%\firefox\application.ini в %ProgramFiles%\firefox\application.ini.system32x
%ProgramFiles%\firefox\accessiblemarshal.dll в %ProgramFiles%\firefox\accessiblemarshal.dll.system32x
%ProgramFiles%\firebird\firebird.exe в %ProgramFiles%\firebird\firebird.exe.system32x
%ProgramFiles%\filezilla\filezilla.exe в %ProgramFiles%\filezilla\filezilla.exe.system32x
%ProgramFiles%\fdmwi\fdmwi.exe в %ProgramFiles%\fdmwi\fdmwi.exe.system32x
%ProgramFiles%\fdm\fdm.exe в %ProgramFiles%\fdm\fdm.exe.system32x
%ProgramFiles%\fch32\fch32.exe в %ProgramFiles%\fch32\fch32.exe.system32x
%ProgramFiles%\far\far.exe в %ProgramFiles%\far\far.exe.system32x
%ProgramFiles%\fameh32\fameh32.exe в %ProgramFiles%\fameh32\fameh32.exe.system32x
%ProgramFiles%\f-sched\f-sched.exe в %ProgramFiles%\f-sched\f-sched.exe.system32x
%ProgramFiles%\firefox\blocklist.xml в %ProgramFiles%\firefox\blocklist.xml.system32x
%ProgramFiles%\drwebwcl\drwebwcl.exe в %ProgramFiles%\drwebwcl\drwebwcl.exe.system32x
%ProgramFiles%\drwebscd\drwebscd.exe в %ProgramFiles%\drwebscd\drwebscd.exe.system32x
%ProgramFiles%\cavq\cavq.exe в %ProgramFiles%\cavq\cavq.exe.system32x
%ProgramFiles%\ccproxy\ccproxy.exe в %ProgramFiles%\ccproxy\ccproxy.exe.system32x
%ProgramFiles%\clisvc\clisvc.exe в %ProgramFiles%\clisvc\clisvc.exe.system32x
%ProgramFiles%\cleaner3\cleaner3.exe в %ProgramFiles%\cleaner3\cleaner3.exe.system32x
%ProgramFiles%\cleaner\cleaner.exe в %ProgramFiles%\cleaner\cleaner.exe.system32x
%ProgramFiles%\claw95cf\claw95cf.exe в %ProgramFiles%\claw95cf\claw95cf.exe.system32x
%ProgramFiles%\claw95\claw95.exe в %ProgramFiles%\claw95\claw95.exe.system32x
%ProgramFiles%\clamwin\clamwin.exe в %ProgramFiles%\clamwin\clamwin.exe.system32x
%ProgramFiles%\clamtray\clamtray.exe в %ProgramFiles%\clamtray\clamtray.exe.system32x
%ProgramFiles%\clamscan\clamscan.exe в %ProgramFiles%\clamscan\clamscan.exe.system32x
%ProgramFiles%\chrome\chrome.exe в %ProgramFiles%\chrome\chrome.exe.system32x
%ProgramFiles%\cemrep\cemrep.exe в %ProgramFiles%\cemrep\cemrep.exe.system32x
%ProgramFiles%\nod32kui\nod32kui.exe в %ProgramFiles%\nod32kui\nod32kui.exe.system32x
%ProgramFiles%\cmain\cmain.exe в %ProgramFiles%\cmain\cmain.exe.system32x
%ProgramFiles%\ccleaner\ccleaner.exe в %ProgramFiles%\ccleaner\ccleaner.exe.system32x
%ProgramFiles%\ccevtmgr\ccevtmgr.exe в %ProgramFiles%\ccevtmgr\ccevtmgr.exe.system32x
%ProgramFiles%\ccapp\ccapp.exe в %ProgramFiles%\ccapp\ccapp.exe.system32x
%ProgramFiles%\cavvl\cavvl.exe в %ProgramFiles%\cavvl\cavvl.exe.system32x
%ProgramFiles%\cavuserupd\cavuserupd.exe в %ProgramFiles%\cavuserupd\cavuserupd.exe.system32x
%ProgramFiles%\cavumas\cavumas.exe в %ProgramFiles%\cavumas\cavumas.exe.system32x
%ProgramFiles%\cavsubmit\cavsubmit.exe в %ProgramFiles%\cavsubmit\cavsubmit.exe.system32x
%ProgramFiles%\cavsub\cavsub.exe в %ProgramFiles%\cavsub\cavsub.exe.system32x
%ProgramFiles%\cavsn\cavsn.exe в %ProgramFiles%\cavsn\cavsn.exe.system32x
%ProgramFiles%\cavse\cavse.exe в %ProgramFiles%\cavse\cavse.exe.system32x
%ProgramFiles%\cavscons\cavscons.exe в %ProgramFiles%\cavscons\cavscons.exe.system32x
%ProgramFiles%\ccsetmgr\ccsetmgr.exe в %ProgramFiles%\ccsetmgr\ccsetmgr.exe.system32x
%ProgramFiles%\navlu32\navlu32.exe в %ProgramFiles%\navlu32\navlu32.exe.system32x
%ProgramFiles%\cmgrdian\cmgrdian.exe в %ProgramFiles%\cmgrdian\cmgrdian.exe.system32x
%ProgramFiles%\cpd\cpd.exe в %ProgramFiles%\cpd\cpd.exe.system32x
%ProgramFiles%\copyx64\copyx64.exe в %ProgramFiles%\copyx64\copyx64.exe.system32x
%ProgramFiles%\drweb386\drweb386.exe в %ProgramFiles%\drweb386\drweb386.exe.system32x
%ProgramFiles%\drweb32w\drweb32w.exe в %ProgramFiles%\drweb32w\drweb32w.exe.system32x
%ProgramFiles%\drweb\drweb.exe в %ProgramFiles%\drweb\drweb.exe.system32x
%ProgramFiles%\drwadins\drwadins.exe в %ProgramFiles%\drwadins\drwadins.exe.system32x
%ProgramFiles%\drvmap\drvmap.exe в %ProgramFiles%\drvmap\drvmap.exe.system32x
%ProgramFiles%\drvirus\drvirus.exe в %ProgramFiles%\drvirus\drvirus.exe.system32x
%ProgramFiles%\drvctl\drvctl.exe в %ProgramFiles%\drvctl\drvctl.exe.system32x
%ProgramFiles%\dpatrolq\dpatrolq.exe в %ProgramFiles%\dpatrolq\dpatrolq.exe.system32x
%ProgramFiles%\dnf\dnf.exe в %ProgramFiles%\dnf\dnf.exe.system32x
%ProgramFiles%\dislite\dislite.exe в %ProgramFiles%\dislite\dislite.exe.system32x
%ProgramFiles%\courier\courier.exe в %ProgramFiles%\courier\courier.exe.system32x
%ProgramFiles%\directftp\directftp.exe в %ProgramFiles%\directftp\directftp.exe.system32x
%ProgramFiles%\clrcche\clrcche.exe в %ProgramFiles%\clrcche\clrcche.exe.system32x
%ProgramFiles%\dekaron\dekaron.exe в %ProgramFiles%\dekaron\dekaron.exe.system32x
%ProgramFiles%\defwatch\defwatch.exe в %ProgramFiles%\defwatch\defwatch.exe.system32x
%ProgramFiles%\defensewall\defensewall.exe в %ProgramFiles%\defensewall\defensewall.exe.system32x
%ProgramFiles%\dbtool\dbtool.exe в %ProgramFiles%\dbtool\dbtool.exe.system32x
%ProgramFiles%\dbconvert\dbconvert.exe в %ProgramFiles%\dbconvert\dbconvert.exe.system32x
%ProgramFiles%\cuteftp\cuteftp.exe в %ProgramFiles%\cuteftp\cuteftp.exe.system32x
%ProgramFiles%\custsetup\custsetup.exe в %ProgramFiles%\custsetup\custsetup.exe.system32x
%ProgramFiles%\custinstall\custinstall.exe в %ProgramFiles%\custinstall\custinstall.exe.system32x
%ProgramFiles%\cssexc\cssexc.exe в %ProgramFiles%\cssexc\cssexc.exe.system32x
%ProgramFiles%\csendto\csendto.exe в %ProgramFiles%\csendto\csendto.exe.system32x
%ProgramFiles%\digsby-app\digsby-app.exe в %ProgramFiles%\digsby-app\digsby-app.exe.system32x
%ProgramFiles%\notifyha\notifyha.exe в %ProgramFiles%\notifyha\notifyha.exe.system32x

Подменяет следующие исполняемые файлы

%ProgramFiles%\Internet Explorer\ieproxy.dll

Изменяет расширения файлов пользовательских данных (Trojan.Encoder).

Другое

Запускает на исполнение

'%WINDIR%\syswow64\cmd.exe' /c @echo off vssadmin delete shadows /all /quiet sc config browser sc config browser start=enabled sc stop vss sc config vss start=disabled sc stop MongoDB sc config MongoDB start=disabl...

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней