Техническая информация
Вредоносные функции
Читает файлы, отвечающие за хранение паролей сторонними программами
- %LOCALAPPDATA%\google\chrome\user data\default\cookies
Изменения в файловой системе
Создает следующие файлы
- %LOCALAPPDATA%low\cr6im03b56g32r\arc_support.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_koreana.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_greek.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_bulgarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_norwegian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_bulgarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\skins_readme.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_norwegian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_koreana.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_greek.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_bulgarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_norwegian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_koreana.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\serverbrowser_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_greek.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\vgui_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_german_dualtouch.txt
- %LOCALAPPDATA%low\rqf69azbla
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_bulgarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_ukrainian_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_turkish_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_swedish_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_swedish_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_spanish_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_spanish_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_koreana.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_norwegian.txt
- %LOCALAPPDATA%low\rywtiizs2t
- %LOCALAPPDATA%low\1xvpfvjcrg
- %LOCALAPPDATA%low\fraqbc8wsa
- %LOCALAPPDATA%low\sqlite3.dll
- %LOCALAPPDATA%low\cr6im03b56g32r\wer5c82.tmp.appcompat.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\barcodefont.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\thirdpartylegalnotices.doc
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_russian_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_russian_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_romanian_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\license_cjk.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_norwegian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_koreana.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_brazilian_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_danish_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_brazilian_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_danish_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_portuguese_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_dutch_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_portuguese_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_polish_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_polish_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_norwegian_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_norwegian_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_italian_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_italian_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_german_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_french_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_french_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_finnish_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_finnish_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_english_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_english_default.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_dutch_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\layout_hungarian_dualtouch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tenfoot_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_greek.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_bulgarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\copyright.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\copyright(eng).txt
- %LOCALAPPDATA%low\cr6im03b56g32r\versions.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\partition iv library.doc
- %LOCALAPPDATA%low\cr6im03b56g32r\ildasmadvancedoptions.doc
- %LOCALAPPDATA%low\cr6im03b56g32r\hosting interfaces.doc
- %LOCALAPPDATA%low\cr6im03b56g32r\debug.doc
- %LOCALAPPDATA%low\cr6im03b56g32r\declarativesecuritysupport.doc
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\content_log.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\connection_log.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\configstore_log.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\bootstrap_log.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\readme_en_ca.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_norwegian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_koreana.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\assembly metadata unmanaged api.doc
- %LOCALAPPDATA%low\cr6im03b56g32r\redist.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\icaros license.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tabletextservicedayi.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tabletextserviceamharic.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\thirdpartylicensereadme.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\thirdpartylicensereadme-javafx.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\jvm.hprof.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\xusage.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\readme.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\notes_rus.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\notes.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\ftpcmds_rus.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\ftpcmds.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\techinfo.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\plugins_review.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\plugins_install.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\far_faq.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\bug_report.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\license.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\rar.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\tabletextserviceyi.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\whatsnew.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\ffmpeg license.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\symbol.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\excluded.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\added.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\readme_en_us.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\wordnet_license.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\readme_en_gb.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\changelog.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\affdescription.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\trackerui_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\list.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\products.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\displaylanguagenames.en_us_posix.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\displaylanguagenames.en_us.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\displaylanguagenames.en_gb_euro.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\displaylanguagenames.en_gb.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\displaylanguagenames.en_ca.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\zdingbat.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\readme_th_en_ca_v2.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_greek.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_bulgarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\url_list.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_postlogon_greek.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamui_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_bulgarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_norwegian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_koreana.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\overlay_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_schinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_russian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_norwegian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_koreana.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_greek.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_german.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_swedish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_tchinese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_spanish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_thai.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_romanian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_turkish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_portuguese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_polish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_norwegian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_korean.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_japanese.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_italian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_hungarian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\platform_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_french.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_finnish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_english.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_dutch.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_danish.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_czech.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_brazilian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steambootstrapper_ukrainian.txt
- %LOCALAPPDATA%low\cr6im03b56g32r\steamclean_greek.txt
- %LOCALAPPDATA%low\x3cf3ednhm
Удаляет следующие файлы
- %LOCALAPPDATA%low\fraqbc8wsa
- %LOCALAPPDATA%low\1xvpfvjcrg
- %LOCALAPPDATA%low\rywtiizs2t
- %LOCALAPPDATA%low\rqf69azbla
- %LOCALAPPDATA%low\x3cf3ednhm
Сетевая активность
TCP
Запросы HTTP GET
- http://10#.#55.44.42/gate/sqlite3.dll
Запросы HTTP POST
- http://10#.#55.44.42/gate/log.php
UDP
- DNS ASK drive.google.com
- DNS ASK do#########ocs.googleusercontent.com
