Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.MulDrop11.41607

Добавлен в вирусную базу Dr.Web: 2020-02-13

Описание добавлено:

Техническая информация

Изменения в файловой системе
Создает следующие файлы
  • %TEMP%\ixp000.tmp\nwbc50~1.exe
  • %TEMP%\sape8.tmp\setup\sapaxlvars.xml
  • %TEMP%\sape8.tmp\setup\sapbilocale.xml
  • %TEMP%\sape8.tmp\setup\sapbisetup.xml
  • %TEMP%\sape8.tmp\setup\sapbishared.xml
  • %TEMP%\sape8.tmp\setup\sapbivars.xml
  • %TEMP%\sape8.tmp\setup\sapbwcommon.xml
  • %TEMP%\sape8.tmp\setup\sapchartocxshared.xml
  • %TEMP%\sape8.tmp\setup\sapdhtmledshared.xml
  • %TEMP%\sape8.tmp\setup\sapguilocale.xml
  • %TEMP%\sape8.tmp\setup\sapguinwbclocale.xml
  • %TEMP%\sape8.tmp\setup\sapaxlsetup.xml
  • %TEMP%\sape8.tmp\setup\sapaxlshared.xml
  • %TEMP%\sape8.tmp\setup\sapguinwbcsetup.xml
  • %TEMP%\sape8.tmp\setup\sapguipackage.xml
  • %TEMP%\sape8.tmp\setup\sapguisetup.xml
  • %TEMP%\sape8.tmp\setup\sapguishared.xml
  • %TEMP%\sape8.tmp\setup\sapguivars.xml
  • %TEMP%\sape8.tmp\setup\sapicu_50shared.xml
  • %TEMP%\sape8.tmp\setup\sapishmedlocale.xml
  • %TEMP%\sape8.tmp\setup\sapishmedsetup.xml
  • %TEMP%\sape8.tmp\setup\sapishmedshared.xml
  • %TEMP%\sape8.tmp\setup\sapishmedvars.xml
  • %TEMP%\sape8.tmp\setup\sapjnetlocale.xml
  • %TEMP%\sape8.tmp\setup\sapguinwbcshared.xml
  • %TEMP%\sape8.tmp\setup\sapguinwbcvars.xml
  • %TEMP%\sape8.tmp\setup\sapjnetshared.xml
  • %TEMP%\sape8.tmp\setup\sapjnetsetup.xml
  • %TEMP%\sape8.tmp\setup\productvars.dtd
  • %TEMP%\sape8.tmp\setup\mfc120u.dll
  • %TEMP%\sape8.tmp\setup\mfcm120u.dll
  • %TEMP%\sape8.tmp\setup\sapregsv.exe
  • %TEMP%\sape8.tmp\setup\nwsapsetup.exe
  • %TEMP%\sape8.tmp\setup\nwcheckworkstation.exe
  • %TEMP%\sape8.tmp\setup\nwsapsetuponrebootinstsvc.exe
  • %TEMP%\sape8.tmp\setup\sapsetuperror.xsl
  • %TEMP%\sape8.tmp\setup\sapsplash.jpg
  • %TEMP%\sape8.tmp\setup\nwsapsetupengine.dll
  • %TEMP%\sape8.tmp\setup\sapatl71shared.xml
  • %TEMP%\sape8.tmp\setup\msvcp120.dll
  • %TEMP%\sape8.tmp\setup\sapaxllocale.xml
  • %TEMP%\sape8.tmp\setup\nwsapsetupatlcommon.dll
  • %TEMP%\sape8.tmp\setup\nwsapfeilg.dll
  • %TEMP%\sape8.tmp\setup\nwsapfeiut.dll
  • %TEMP%\sape8.tmp\setup\nwsnapshot64.exe
  • %TEMP%\sape8.tmp\setup\processconfig.cfg
  • %TEMP%\sape8.tmp\setup\nwsapsetupis.exe
  • %TEMP%\sape8.tmp\setup\productcommon.dtd
  • %TEMP%\sape8.tmp\setup\productdefinition.dtd
  • %TEMP%\sape8.tmp\setup\productdefinition2.dtd
  • %TEMP%\sape8.tmp\setup\productlocales.dtd
  • %TEMP%\sape8.tmp\setup\nwsapsetupui.dll
  • %TEMP%\sape8.tmp\setup\dotnetutils40.exe
  • %TEMP%\sape8.tmp\setup\dotnetutils20.exe
  • %TEMP%\sape8.tmp\nwbc\nwbccore.exe
  • %TEMP%\sape8.tmp\setup\sapjnetvars.xml
  • %TEMP%\sape8.tmp\setup\sapsrxshared.xml
  • %TEMP%\sape8.tmp\setup\sapstartshared.xml
  • %TEMP%\sape8.tmp\setup\saptwk_setup.xml
  • %TEMP%\sape8.tmp\setup\sapvc10rtshared.xml
  • %TEMP%\sape8.tmp\setup\sapvc10rtx64shared.xml
  • %TEMP%\sape8.tmp\setup\sapvc11rtshared.xml
  • %TEMP%\sape8.tmp\setup\sapvc11rtx64shared.xml
  • %TEMP%\sape8.tmp\setup\sapvc12rtshared.xml
  • %TEMP%\sape8.tmp\setup\sapvc8rtshared.xml
  • %TEMP%\sape8.tmp\setup\sapvedirectx9sdkshared.xml
  • %TEMP%\sape8.tmp\setup\sapsrxsetup.xml
  • %TEMP%\sape8.tmp\setup\sapvefiletransfershared.xml
  • %TEMP%\sape8.tmp\setup\sapsrxvars.xml
  • %TEMP%\sape8.tmp\setup\sapvevsetup.xml
  • %TEMP%\sape8.tmp\setup\sapvevvars.xml
  • %TEMP%\sape8.tmp\setup\sapvisualenterpriseviewerlocale.xml
  • %TEMP%\sape8.tmp\setup\sapwdtlogocxshared.xml
  • %TEMP%\sape8.tmp\setup\sapwuslocale.xml
  • %TEMP%\sape8.tmp\setup\sapwussetup.xml
  • %TEMP%\sape8.tmp\setup\sapwusshared.xml
  • %TEMP%\sape8.tmp\setup\scriptsamples.xml
  • %TEMP%\sape8.tmp\setup\serverrecord.xml
  • %TEMP%\sape8.tmp\sapsx.cfg
  • %TEMP%\sape8.tmp\setup\sapvegdtfontshared.xml
  • %TEMP%\sape8.tmp\setup\sapsrxlocale.xml
  • %TEMP%\sape8.tmp\setup\sapvevshared.xml
  • %TEMP%\sape8.tmp\setup\sapsncclientencryptionvars.xml
  • %TEMP%\sape8.tmp\setup\sapsncclientencryptionsetup.xml
  • %TEMP%\sape8.tmp\setup\sapkwshared.xml
  • %TEMP%\sape8.tmp\setup\saplibrfc32shared.xml
  • %TEMP%\sape8.tmp\setup\saplibrfc32ushared.xml
  • %TEMP%\sape8.tmp\setup\saplibrfc32x64shared.xml
  • %TEMP%\sape8.tmp\setup\sapmfc71shared.xml
  • %TEMP%\sape8.tmp\setup\sapmsoffice2003piashared.xml
  • %TEMP%\sape8.tmp\setup\sapmsoffice2007piashared.xml
  • %TEMP%\sape8.tmp\setup\sapmsoffice2010piashared.xml
  • %TEMP%\sape8.tmp\setup\sapmsofficepiaextshared.xml
  • %TEMP%\sape8.tmp\setup\sapmsofficepiaextvars.xml
  • %TEMP%\sape8.tmp\setup\sapmsofficepiashared.xml
  • %TEMP%\sape8.tmp\setup\sapmsofficepiavars.xml
  • %TEMP%\sape8.tmp\setup\sapkw_setup.xml
  • %TEMP%\sape8.tmp\setup\sapmsvcp71shared.xml
  • %TEMP%\sape8.tmp\setup\sapnwbc50locale.xml
  • %TEMP%\sape8.tmp\setup\sapnwbc50setup.xml
  • %TEMP%\sape8.tmp\setup\sapnwbc50shared.xml
  • %TEMP%\sape8.tmp\setup\sapnwbc50vars.xml
  • %TEMP%\sape8.tmp\setup\sapnwrfcx86shared.xml
  • %TEMP%\sape8.tmp\setup\sappackagesetup.xml
  • %TEMP%\sape8.tmp\setup\sapsetup.xml
  • %TEMP%\sape8.tmp\setup\sapsetuplocale.xml
  • %TEMP%\sape8.tmp\setup\sapsetupvars.xml
  • %TEMP%\sape8.tmp\setup\sapsncclientencryptionlocale.xml
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_zh_tw.txt
  • %TEMP%\sape8.tmp\setup\sapmsvcr71shared.xml
  • %TEMP%\sape8.tmp\setup\msvcr120.dll
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_zh_cn.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_tr.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_th.txt
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110cht.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110deu.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110enu.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110esn.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110fra.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110ita.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110jpn.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110kor.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110rus.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfcm110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110chs.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\vcomp110.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcsettings.dll
  • %TEMP%\sape8.tmp\nwbc\interop.browserutil.dll
  • %TEMP%\sape8.tmp\nwbc\interop.mssearch.dll
  • %TEMP%\sape8.tmp\nwbc\interop.shdocvw.dll
  • %TEMP%\sape8.tmp\nwbc\interop.sapfewselib.dll
  • %TEMP%\sape8.tmp\nwbc\interop.saprotwr.dll
  • %TEMP%\sape8.tmp\nwbc\nwbc.exe
  • %TEMP%\sape8.tmp\nwbc\nwbcbrowser.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcbrowsercom.dll
  • %TEMP%\sape8.tmp\nwbc\axinterop.browserutil.dll
  • %TEMP%\sape8.tmp\nwbc\browserserver.exe
  • %TEMP%\sape8.tmp\nwbc\browserutil.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110u.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\vcamp110.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcconfiguration.dll
  • %TEMP%\sape8.tmp\setup\sapstart.exe
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120chs.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120cht.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120deu.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120enu.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120esn.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120fra.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120ita.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120jpn.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120kor.dll
  • %ProgramFiles(x86)%\sap\sapsetup\logs\nwbc50~1.log
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120rus.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfcm120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfcm120u.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\msvcp120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\msvcr120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\vcamp120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\vccorlib120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\vcomp120.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\msvcr110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\msvcp110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\vccorlib110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\atl110.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120u.dll
  • %ProgramFiles(x86)%\sap\sapsetup\logs\nwsapsetup.log
  • %TEMP%\sape8.tmp\setup\sapkwlocale.xml
  • %TEMP%\sape8.tmp\nwbc\nwbcdesktopagent.exe
  • %TEMP%\sape8.tmp\nwbc\nwbcfederatedruntime.dll
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_es.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_et.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_fi.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_fr.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_he.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_hr.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_hu.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_it.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ja.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_de.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ko.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_en.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_lv.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_no.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_pl.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_pt.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ro.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ru.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_sh.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_sk.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_sl.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_sv.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_lt.txt
  • %TEMP%\sape8.tmp\system\vc11\x86\mfcm110u.dll
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_nl.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_el.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_da.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_cs.txt
  • %TEMP%\sape8.tmp\nwbc\nwbcmodel.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcthemes.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcpipelib.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcremoting.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcsapguicom.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcsapguiruntime.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcsapguiextractor.dll
  • %TEMP%\sape8.tmp\nwbc\nwbctranslation.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcuiutil.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcurlhandler.exe
  • %TEMP%\sape8.tmp\nwbc\nwbcdesktopsearch.dll
  • %TEMP%\sape8.tmp\nwbc\nwbctaskbarhandler.exe
  • %TEMP%\sape8.tmp\nwbc\nwbcpluginapi.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcextensionapi.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcpropertycollector.exe
  • %TEMP%\sape8.tmp\nwbc\reset_fontcache.bat
  • %TEMP%\sape8.tmp\nwbc\configuration\nwbcoptions.xsd
  • %TEMP%\sape8.tmp\nwbc\configuration\nwbcoptions.xml.template
  • %TEMP%\sape8.tmp\nwbc\configuration\nwbcremoteoptions.xml.template
  • %TEMP%\sape8.tmp\nwbc\documentation\nwbc50.pdf
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ar.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_bg.txt
  • %TEMP%\sape8.tmp\nwbc\nwbcutil.dll
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ca.txt
  • %TEMP%\sape8.tmp\nwbc\nwbchttpruntime.dll
  • %WINDIR%\saplnkcopy.log
Удаляет следующие файлы
  • %TEMP%\sape8.tmp\nwbc\nwbcthemes.dll
  • %TEMP%\sape8.tmp\setup\sapaxlshared.xml
  • %TEMP%\sape8.tmp\setup\sapaxlvars.xml
  • %TEMP%\sape8.tmp\setup\sapbilocale.xml
  • %TEMP%\sape8.tmp\setup\sapbisetup.xml
  • %TEMP%\sape8.tmp\setup\sapbishared.xml
  • %TEMP%\sape8.tmp\setup\sapbivars.xml
  • %TEMP%\sape8.tmp\setup\sapbwcommon.xml
  • %TEMP%\sape8.tmp\setup\sapchartocxshared.xml
  • %TEMP%\sape8.tmp\setup\sapdhtmledshared.xml
  • %TEMP%\sape8.tmp\setup\sapguilocale.xml
  • %TEMP%\sape8.tmp\setup\sapguinwbclocale.xml
  • %TEMP%\sape8.tmp\setup\sapguinwbcshared.xml
  • %TEMP%\sape8.tmp\setup\sapjnetsetup.xml
  • %TEMP%\sape8.tmp\setup\sapguinwbcvars.xml
  • %TEMP%\sape8.tmp\setup\sapguipackage.xml
  • %TEMP%\sape8.tmp\setup\sapguisetup.xml
  • %TEMP%\sape8.tmp\setup\sapguishared.xml
  • %TEMP%\sape8.tmp\setup\sapguivars.xml
  • %TEMP%\sape8.tmp\setup\sapicu_50shared.xml
  • %TEMP%\sape8.tmp\setup\sapishmedlocale.xml
  • %TEMP%\sape8.tmp\setup\sapishmedsetup.xml
  • %TEMP%\sape8.tmp\setup\sapishmedshared.xml
  • %TEMP%\sape8.tmp\setup\sapishmedvars.xml
  • %TEMP%\sape8.tmp\setup\sapjnetlocale.xml
  • %TEMP%\sape8.tmp\setup\sapaxlsetup.xml
  • %TEMP%\sape8.tmp\setup\sapguinwbcsetup.xml
  • %TEMP%\sape8.tmp\setup\sapaxllocale.xml
  • %TEMP%\sape8.tmp\setup\nwsapsetupatlcommon.dll
  • %TEMP%\sape8.tmp\setup\msvcp120.dll
  • %TEMP%\sape8.tmp\setup\msvcr120.dll
  • %TEMP%\sape8.tmp\setup\mfc120u.dll
  • %TEMP%\sape8.tmp\setup\mfcm120u.dll
  • %TEMP%\sape8.tmp\setup\sapregsv.exe
  • %TEMP%\sape8.tmp\setup\nwsapsetup.exe
  • %TEMP%\sape8.tmp\setup\nwcheckworkstation.exe
  • %TEMP%\sape8.tmp\setup\nwsapsetuponrebootinstsvc.exe
  • %TEMP%\sape8.tmp\setup\sapsetuperror.xsl
  • %TEMP%\sape8.tmp\setup\sapsplash.jpg
  • %TEMP%\sape8.tmp\setup\nwsapsetupengine.dll
  • %TEMP%\sape8.tmp\setup\nwsapsetupui.dll
  • %TEMP%\sape8.tmp\setup\productvars.dtd
  • %TEMP%\sape8.tmp\setup\dotnetutils40.exe
  • %TEMP%\sape8.tmp\setup\dotnetutils20.exe
  • %TEMP%\sape8.tmp\setup\nwsapfeilg.dll
  • %TEMP%\sape8.tmp\setup\nwsapfeiut.dll
  • %TEMP%\sape8.tmp\setup\nwsnapshot64.exe
  • %TEMP%\sape8.tmp\setup\processconfig.cfg
  • %TEMP%\sape8.tmp\setup\nwsapsetupis.exe
  • %TEMP%\sape8.tmp\setup\productcommon.dtd
  • %TEMP%\sape8.tmp\setup\productdefinition.dtd
  • %TEMP%\sape8.tmp\setup\productdefinition2.dtd
  • %TEMP%\sape8.tmp\setup\productlocales.dtd
  • %TEMP%\sape8.tmp\setup\sapatl71shared.xml
  • %TEMP%\sape8.tmp\setup\sapmsofficepiavars.xml
  • %TEMP%\sape8.tmp\sapsx.cfg
  • %TEMP%\sape8.tmp\setup\sapkwlocale.xml
  • %TEMP%\sape8.tmp\setup\sapsrxsetup.xml
  • %TEMP%\sape8.tmp\setup\sapsrxshared.xml
  • %TEMP%\sape8.tmp\setup\sapsrxvars.xml
  • %TEMP%\sape8.tmp\setup\sapstartshared.xml
  • %TEMP%\sape8.tmp\setup\saptwk_setup.xml
  • %TEMP%\sape8.tmp\setup\sapvc10rtshared.xml
  • %TEMP%\sape8.tmp\setup\sapvc10rtx64shared.xml
  • %TEMP%\sape8.tmp\setup\sapvc11rtshared.xml
  • %TEMP%\sape8.tmp\setup\sapvc11rtx64shared.xml
  • %TEMP%\sape8.tmp\setup\sapvc12rtshared.xml
  • %TEMP%\sape8.tmp\setup\sapvc8rtshared.xml
  • %TEMP%\sape8.tmp\setup\sapvefiletransfershared.xml
  • %TEMP%\sape8.tmp\setup\sapjnetvars.xml
  • %TEMP%\sape8.tmp\setup\sapvegdtfontshared.xml
  • %TEMP%\sape8.tmp\setup\sapvevsetup.xml
  • %TEMP%\sape8.tmp\setup\sapvevshared.xml
  • %TEMP%\sape8.tmp\setup\sapvevvars.xml
  • %TEMP%\sape8.tmp\setup\sapvisualenterpriseviewerlocale.xml
  • %TEMP%\sape8.tmp\setup\sapwdtlogocxshared.xml
  • %TEMP%\sape8.tmp\setup\sapwuslocale.xml
  • %TEMP%\sape8.tmp\setup\sapwussetup.xml
  • %TEMP%\sape8.tmp\setup\sapwusshared.xml
  • %TEMP%\sape8.tmp\setup\scriptsamples.xml
  • %TEMP%\sape8.tmp\setup\serverrecord.xml
  • %TEMP%\sape8.tmp\setup\sapsrxlocale.xml
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_zh_tw.txt
  • %TEMP%\sape8.tmp\setup\sapsncclientencryptionvars.xml
  • %TEMP%\sape8.tmp\setup\sapmsofficepiashared.xml
  • %TEMP%\sape8.tmp\setup\sapkwshared.xml
  • %TEMP%\sape8.tmp\setup\sapkw_setup.xml
  • %TEMP%\sape8.tmp\setup\saplibrfc32shared.xml
  • %TEMP%\sape8.tmp\setup\saplibrfc32ushared.xml
  • %TEMP%\sape8.tmp\setup\saplibrfc32x64shared.xml
  • %TEMP%\sape8.tmp\setup\sapmfc71shared.xml
  • %TEMP%\sape8.tmp\setup\sapmsoffice2003piashared.xml
  • %TEMP%\sape8.tmp\setup\sapmsoffice2007piashared.xml
  • %TEMP%\sape8.tmp\setup\sapmsoffice2010piashared.xml
  • %TEMP%\sape8.tmp\setup\sapmsofficepiaextshared.xml
  • %TEMP%\sape8.tmp\setup\sapmsofficepiaextvars.xml
  • %TEMP%\sape8.tmp\setup\sapjnetshared.xml
  • %TEMP%\sape8.tmp\setup\sapsncclientencryptionlocale.xml
  • %TEMP%\sape8.tmp\setup\sapmsvcp71shared.xml
  • %TEMP%\sape8.tmp\setup\sapmsvcr71shared.xml
  • %TEMP%\sape8.tmp\setup\sapnwbc50locale.xml
  • %TEMP%\sape8.tmp\setup\sapnwbc50setup.xml
  • %TEMP%\sape8.tmp\setup\sapnwbc50shared.xml
  • %TEMP%\sape8.tmp\setup\sapnwbc50vars.xml
  • %TEMP%\sape8.tmp\setup\sapnwrfcx86shared.xml
  • %TEMP%\sape8.tmp\setup\sappackagesetup.xml
  • %TEMP%\sape8.tmp\setup\sapsetup.xml
  • %TEMP%\sape8.tmp\setup\sapsetuplocale.xml
  • %TEMP%\sape8.tmp\setup\sapsetupvars.xml
  • %TEMP%\sape8.tmp\setup\sapsncclientencryptionsetup.xml
  • %TEMP%\sape8.tmp\setup\sapvedirectx9sdkshared.xml
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_zh_cn.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ko.txt
  • %TEMP%\sape8.tmp\system\vc11\x86\mfcm110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfcm110u.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110chs.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110cht.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110deu.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110enu.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110esn.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110fra.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110ita.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110jpn.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110kor.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\vcomp110.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcbrowsercom.dll
  • %TEMP%\sape8.tmp\nwbc\axinterop.browserutil.dll
  • %TEMP%\sape8.tmp\nwbc\browserserver.exe
  • %TEMP%\sape8.tmp\nwbc\browserutil.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcsettings.dll
  • %TEMP%\sape8.tmp\nwbc\interop.browserutil.dll
  • %TEMP%\sape8.tmp\nwbc\interop.mssearch.dll
  • %TEMP%\sape8.tmp\nwbc\interop.shdocvw.dll
  • %TEMP%\sape8.tmp\nwbc\interop.sapfewselib.dll
  • %TEMP%\sape8.tmp\nwbc\interop.saprotwr.dll
  • %TEMP%\sape8.tmp\nwbc\nwbc.exe
  • %TEMP%\sape8.tmp\nwbc\nwbcbrowser.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110u.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110rus.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\mfc110.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120kor.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcdesktopagent.exe
  • %TEMP%\sape8.tmp\setup\sapstart.exe
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120chs.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120cht.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120deu.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120enu.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120esn.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120fra.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120ita.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120jpn.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120rus.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\atl110.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfc120u.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfcm120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\mfcm120u.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\msvcp120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\msvcr120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\vcamp120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\vccorlib120.dll
  • %TEMP%\sape8.tmp\system\vc12\x86\vcomp120.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\msvcr110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\msvcp110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\vccorlib110.dll
  • %TEMP%\sape8.tmp\system\vc11\x86\vcamp110.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcutil.dll
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_th.txt
  • %TEMP%\sape8.tmp\nwbc\nwbchttpruntime.dll
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_el.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_en.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_es.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_et.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_fi.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_fr.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_he.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_hr.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_hu.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_it.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ja.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_lt.txt
  • %TEMP%\sape8.tmp\nwbc\nwbccore.exe
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_lv.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_nl.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_no.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_pl.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_pt.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ro.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ru.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_sh.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_sk.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_sl.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_sv.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_de.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_tr.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_da.txt
  • %TEMP%\sape8.tmp\nwbc\nwbctaskbarhandler.exe
  • %TEMP%\sape8.tmp\nwbc\nwbcdesktopsearch.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcfederatedruntime.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcmodel.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcpipelib.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcremoting.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcsapguicom.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcsapguiruntime.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcsapguiextractor.dll
  • %TEMP%\sape8.tmp\nwbc\nwbctranslation.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcuiutil.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcurlhandler.exe
  • %TEMP%\sape8.tmp\nwbc\nwbcconfiguration.dll
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ca.txt
  • %TEMP%\sape8.tmp\nwbc\nwbcpluginapi.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcextensionapi.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcpropertycollector.exe
  • %TEMP%\sape8.tmp\nwbc\reset_fontcache.bat
  • %TEMP%\sape8.tmp\nwbc\configuration\nwbcoptions.xsd
  • %TEMP%\sape8.tmp\nwbc\configuration\nwbcoptions.xml.template
  • %TEMP%\sape8.tmp\nwbc\configuration\nwbcremoteoptions.xml.template
  • %TEMP%\sape8.tmp\nwbc\documentation\nwbc50.pdf
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_ar.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_bg.txt
  • %TEMP%\sape8.tmp\nwbc\lang\nwbcv2_cs.txt
  • %TEMP%\ixp000.tmp\nwbc50~1.exe
Подменяет следующие файлы
  • %TEMP%\sape8.tmp\nwbc\nwbcthemes.dll
  • %TEMP%\sape8.tmp\nwbc\nwbcdesktopagent.exe
Другое
Создает и запускает на исполнение
  • '%TEMP%\ixp000.tmp\nwbc50~1.exe' /Silent /Uninstall /Package="NWBC50"
  • '%TEMP%\sape8.tmp\setup\nwsapsetup.exe' /package:"cb59c355-efb2-41fb-9ef2-3db3753eb15c" /Silent /Uninstall /Package=NWBC50
  • '%TEMP%\ixp000.tmp\nwbc50~1.exe' /Silent /Uninstall /Package="NWBC50"' (со скрытым окном)
  • '<SYSTEM32>\cmd.exe' /c xcopy "%PROGRAMDATA%\Microsoft\Windows\Start Menu\Programs\SAP Front End\SAP Logon.lnk" "C:\Users\Public\Desktop" /y > %WINDIR%\sapLNKCopy.log' (со скрытым окном)
Запускает на исполнение
  • '<SYSTEM32>\cmd.exe' /c xcopy "%PROGRAMDATA%\Microsoft\Windows\Start Menu\Programs\SAP Front End\SAP Logon.lnk" "C:\Users\Public\Desktop" /y > %WINDIR%\sapLNKCopy.log
  • '<SYSTEM32>\xcopy.exe' "%PROGRAMDATA%\Microsoft\Windows\Start Menu\Programs\SAP Front End\SAP Logon.lnk" "C:\Users\Public\Desktop" /y

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке