Trojan.DownLoader7.2868

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%HOMEPATH%\Windows\UpdateOffice.exe

Вредоносные функции:

Создает и запускает на исполнение:

%HOMEPATH%\PrintHood\UpdateOffice.exe
%HOMEPATH%\Windows\UpdateOffice.exe

Запускает на исполнение:

<SYSTEM32>\cmd.exe /c ""%HOMEPATH%\PrintHood\pangtip.bat" "
<SYSTEM32>\ping.exe 174.142.57.28
<SYSTEM32>\attrib.exe -h -s %HOMEPATH%\PrintHood\UpdateOffice.exe
<SYSTEM32>\cmd.exe /c ""%HOMEPATH%\PrintHood\700.bat" "

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\PrintHood\j0oHP8Vqkl.PRI
%HOMEPATH%\PrintHood\5taBXOaAMp.PRI
%HOMEPATH%\PrintHood\RuxJ2FOvZH.PRI
%HOMEPATH%\PrintHood\wXuj1qqCBr.PRI
%HOMEPATH%\PrintHood\7RX35qRWB5.PRI
%HOMEPATH%\PrintHood\RF2nxge09R.PRI
%HOMEPATH%\PrintHood\5qYcTQ3L92.PRI
%HOMEPATH%\PrintHood\nK92pZxxBd.PRI
%HOMEPATH%\PrintHood\6kJx7JYQH2.PRI
%HOMEPATH%\PrintHood\~bxiYYZdDijXbnF0A05Dl.TMP
%HOMEPATH%\PrintHood\~eHDZ0XtOxoYmaG4w5FLK.TMP
%HOMEPATH%\PrintHood\~wqXBxCu5a34cdPEqUFGc.TMP
%HOMEPATH%\PrintHood\~sHzACsYOJDN69PdfYFLy.TMP
%HOMEPATH%\PrintHood\~XZZsGmhBRa2KYiNXvd3b.TMP
%HOMEPATH%\PrintHood\~0SmXgdUmkETZvZjKiIBB.TMP
%HOMEPATH%\PrintHood\~mc7g6Z4rzqRvvcRLx01b.TMP
%HOMEPATH%\PrintHood\~53CvnmSBkUJ22bDSeU1O.TMP
%HOMEPATH%\PrintHood\~VPxmE7fAjhdWfl4QyJ3w.TMP
%HOMEPATH%\PrintHood\~P2OKVmk78SE10H0kPsjR.TMP
%HOMEPATH%\PrintHood\q6cgZkLfZE.PRI
%HOMEPATH%\PrintHood\8WZPzHR3MR.PRI
%HOMEPATH%\PrintHood\aN3nHbONcB.PRI
%HOMEPATH%\PrintHood\ORown4kyuF.PRI
%HOMEPATH%\PrintHood\LJqv2SatoU.PRI
%HOMEPATH%\PrintHood\qJrv3DHLxw.PRI
%HOMEPATH%\PrintHood\NfcUQsTTbX.PRI
%HOMEPATH%\PrintHood\ncHO6f1OLN.PRI
%HOMEPATH%\PrintHood\KHmq2TYPEr.PRI
%HOMEPATH%\PrintHood\hfmBxnTkPQ.PRI
%HOMEPATH%\PrintHood\WqMlsMFhGR.PRI
%HOMEPATH%\PrintHood\PGL00WOJ1I.PRI
%HOMEPATH%\PrintHood\rgzekGFnN3.PRI
%HOMEPATH%\PrintHood\Zg4mZJ3Kih.PRI
%HOMEPATH%\PrintHood\iuDquJqoKP.PRI
%HOMEPATH%\PrintHood\nvcRLWi7IN.PRI
%HOMEPATH%\PrintHood\6kkFzYD7V7.PRI
%HOMEPATH%\PrintHood\yTcYoLIxtg.PRI
%HOMEPATH%\PrintHood\TZXU22mK95.PRI
%HOMEPATH%\PrintHood\~7ez0mlvWamh9IKlaPgrd.TMP
%HOMEPATH%\PrintHood\~dfbNmudMBPHAmR0ihJjU.TMP
%HOMEPATH%\PrintHood\~IqrPLYgDuoOsi6scMakr.TMP
%HOMEPATH%\PrintHood\~uOrR42RyPaoW6drDRRjt.TMP
%HOMEPATH%\PrintHood\~sA51kaPZ89wa5x2jOQbk.TMP
%HOMEPATH%\PrintHood\~jt539c8UpxpoeK7XU8so.TMP
%HOMEPATH%\PrintHood\~bWpMKCyHnKOonsj1Z4TG.TMP
%HOMEPATH%\PrintHood\~XhEDR9odKcHBMMnFmP0Z.TMP
%HOMEPATH%\PrintHood\~ppzvTRADA6pBcSzuL2BV.TMP
%HOMEPATH%\PrintHood\~ZrYGFFm3HY9kVOdwqMwV.TMP
%HOMEPATH%\PrintHood\~1eQNJtMdLVniCpQbO5UU.TMP
%HOMEPATH%\PrintHood\~rgZcRFp9x2tCuvj7D56x.TMP
%HOMEPATH%\PrintHood\~MfvYeHkSvjVsF2nntGDh.TMP
%HOMEPATH%\PrintHood\~QHLDGyerTSHnn9qFK27X.TMP
%HOMEPATH%\PrintHood\~OSvQU4BloOfHcAAuNRGv.TMP
%HOMEPATH%\PrintHood\~eNwbFwkyIVJJdes9tga8.TMP
%HOMEPATH%\PrintHood\~B1gyNM8iuYoehaEWpYbY.TMP
%HOMEPATH%\PrintHood\~RHi6vfwDYXzz9xPLWAsE.TMP
%HOMEPATH%\PrintHood\~SWiwlrXF9Tmg0VmnLYKB.TMP
%HOMEPATH%\PrintHood\~PpIUFwV4k1QNUsjF6WE7.TMP
%HOMEPATH%\PrintHood\~n3KrlQpi6Lb2IDZr5emE.TMP
%HOMEPATH%\PrintHood\~w0qvWzU4R8yz2fauH3ri.TMP
%HOMEPATH%\PrintHood\~j5aiVXEtkh8kHTYtRn8R.TMP
%HOMEPATH%\PrintHood\~pEE7gRc2zsmqKXPPVr8k.TMP
%HOMEPATH%\PrintHood\~He61fxtIeWNk8rMeYXba.TMP
%HOMEPATH%\PrintHood\~HYAhNxfCyuUYrYq7z6WN.TMP
%HOMEPATH%\PrintHood\~ZOVn1RptOuagqiuazY9H.TMP
%HOMEPATH%\PrintHood\~jErpZPrAQUStISKBunxh.TMP
%HOMEPATH%\PrintHood\~qkgUQ7qpZ1oakFsaeamS.TMP
%HOMEPATH%\PrintHood\~VLndvhjV4Keu2WTSVVv6.TMP
%HOMEPATH%\PrintHood\~nJCtMlCtYLOzvdDwqMOk.TMP
%HOMEPATH%\PrintHood\~s57DOJqVWFIkV8sFY5pn.TMP
%HOMEPATH%\PrintHood\~VcZZAROysMlSba7B6IA7.TMP
%HOMEPATH%\PrintHood\~zCjVBlbBCVrcB9u094D0.TMP
%HOMEPATH%\PrintHood\~UGXcqbRDrPlhkFcYojJg.TMP
%HOMEPATH%\PrintHood\~MfcPLUwNyTgoeTdE8fnR.TMP
%HOMEPATH%\PrintHood\~U5VeDFs0jLWaOho63lSE.TMP
%HOMEPATH%\PrintHood\~1QIbOviYmoiyksGdpim1.TMP
%HOMEPATH%\PrintHood\~wIWWrF8hIFLlRpdfJurR.TMP
%HOMEPATH%\PrintHood\sk9nD82DiL.dll
%HOMEPATH%\PrintHood\x2qXxT7IUb.dll
%HOMEPATH%\PrintHood\v2aefz9Iu4.dll
%HOMEPATH%\PrintHood\x3ou5h9CFk.dll
%HOMEPATH%\PrintHood\f8NU9vVTvL.dll
%HOMEPATH%\PrintHood\A1iPmHdgiK.dll
%HOMEPATH%\PrintHood\O3cgprSId9.dll
%HOMEPATH%\PrintHood\5mfv4XznuG.dll
%HOMEPATH%\PrintHood\26HW4zThp6.dll
%HOMEPATH%\PrintHood\hIButqzDWD.dll
%HOMEPATH%\PrintHood\rsNk3fF7Qy.dll
%HOMEPATH%\PrintHood\120IGqRGfT.dll
%HOMEPATH%\PrintHood\Cb92dPvOG3.dll
%HOMEPATH%\PrintHood\k1ALhSbQs0.dll
%HOMEPATH%\PrintHood\ct7T7mt5Tv.dll
%HOMEPATH%\PrintHood\fWrkOLeapO.dll
%HOMEPATH%\PrintHood\tRBHJFkjmh.dll
%HOMEPATH%\PrintHood\cS65tGHMzP.dll
%HOMEPATH%\PrintHood\st9QYqzHZy.dll
%HOMEPATH%\PrintHood\tf6iWmdVBv.dll
%HOMEPATH%\PrintHood\hWYBA3ZTBG.dll
%HOMEPATH%\PrintHood\dTnhwIk4KG.dll
%HOMEPATH%\PrintHood\7g0y4bBwYq.dll
%HOMEPATH%\PrintHood\MoeBOXt3fd.dll
%HOMEPATH%\PrintHood\pangtip.bat
%HOMEPATH%\PrintHood\UPDATE~1.EXE.pkxm
%HOMEPATH%\PrintHood\TyxSkvqpMf.dll
%HOMEPATH%\Templates\nam.dll
%HOMEPATH%\PrintHood\pFmEyzBzAn.dll
%HOMEPATH%\PrintHood\BSOmYLT9bI.dll
%HOMEPATH%\PrintHood\1q01L7nxjr.dll
%HOMEPATH%\PrintHood\g8VV01xdeQ.dll
%HOMEPATH%\PrintHood\qMbvCWgjw4.dll
%HOMEPATH%\PrintHood\45IkbER5XM.dll
%HOMEPATH%\PrintHood\g9za3LaRBn.dll
%HOMEPATH%\PrintHood\rBOU7aJKuK.dll
%HOMEPATH%\PrintHood\eJGHNmKFUK.dll
%HOMEPATH%\PrintHood\Dsm0EWGwzA.dll
%HOMEPATH%\PrintHood\fkgLXIkv4Y.dll
%HOMEPATH%\PrintHood\AWbxOZKWln.PRI
%HOMEPATH%\PrintHood\rhc9An0ZS0.PRI
%HOMEPATH%\PrintHood\bWzHCde3Y4.PRI
%HOMEPATH%\PrintHood\mmfTneM9cH.PRI
%HOMEPATH%\PrintHood\hSLrGahLbm.PRI
%HOMEPATH%\PrintHood\kMtd0PCfVC.PRI
%HOMEPATH%\PrintHood\6LYDur5esj.PRI
%HOMEPATH%\PrintHood\vTb6PCqdOj.PRI
%HOMEPATH%\PrintHood\nXj0z0ma5M.PRI
%HOMEPATH%\PrintHood\Lqd2eWlZVF.PRI
%HOMEPATH%\PrintHood\5OjE9H1jO1.PRI
%HOMEPATH%\PrintHood\gItsJqR38U.PRI
%HOMEPATH%\PrintHood\amOfyM72NN.PRI
%HOMEPATH%\PrintHood\FP12HHcfy4.PRI
%HOMEPATH%\PrintHood\ttavw3PviI.PRI
%HOMEPATH%\PrintHood\JKizvR3GkR.PRI
%HOMEPATH%\PrintHood\pHeUZH5h52.PRI
%HOMEPATH%\PrintHood\kjZynAoET8.PRI
%HOMEPATH%\PrintHood\qGZVKcfIQz.PRI
%HOMEPATH%\PrintHood\66udrAT55h.dll
%HOMEPATH%\PrintHood\IGFd3OTfRH.dll
%HOMEPATH%\PrintHood\AQA5aMPWRM.dll
%HOMEPATH%\PrintHood\hcvyVDCZFJ.dll
%HOMEPATH%\PrintHood\ujqXP1KO3d.dll
%HOMEPATH%\PrintHood\ykW2eiNYpA.dll
%HOMEPATH%\PrintHood\1mizvi3DHU.dll
%HOMEPATH%\PrintHood\OyUMPD5iwZ.dll
%HOMEPATH%\PrintHood\WwKqKcnkPk.dll
%HOMEPATH%\PrintHood\MLwOGsNHgD.dll
%HOMEPATH%\PrintHood\jAZt41J9QV.PRI
%HOMEPATH%\PrintHood\7McNj1BseR.PRI
%HOMEPATH%\PrintHood\haB1Mnlt2I.PRI
%HOMEPATH%\PrintHood\L47jMrhcrm.PRI
%HOMEPATH%\PrintHood\qclVdyLI0k.dll
%HOMEPATH%\PrintHood\Tv56YvDyDB.dll
%HOMEPATH%\PrintHood\OFkzboaQop.dll
%HOMEPATH%\PrintHood\KiNNlPUPaK.dll
%HOMEPATH%\PrintHood\PJyJUqPPfl.dll
%HOMEPATH%\PrintHood\~UexScPXWFF1l3LqTdHnz.TMP
%HOMEPATH%\PrintHood\~d1OpWbjWRxrlgyW1Szv7.TMP
%HOMEPATH%\PrintHood\~y6PcUzbF15mYrtdHQafM.TMP
%HOMEPATH%\PrintHood\~3X2i9lRBTRQyAI0IGNow.TMP
%HOMEPATH%\PrintHood\~d50jvXWiQOUn7vl8Vgq7.TMP
%HOMEPATH%\PrintHood\~DSYbegTjHoaH6aeCHkYc.TMP
%HOMEPATH%\PrintHood\~XHfAvGKpYFN3FCRRf3f6.TMP
%HOMEPATH%\PrintHood\~xhx7yfUvnpBj2v2FDKdo.TMP
%HOMEPATH%\PrintHood\~OMTKfv694CSK6T3NXNRG.TMP
%HOMEPATH%\PrintHood\~sx6eu959tnxovZ0Lx5ND.TMP
%HOMEPATH%\PrintHood\~epfgflQnMjAknlkn4Mig.TMP
%HOMEPATH%\PrintHood\~ZMo2IniXFRv3tofsrvCW.TMP
%HOMEPATH%\PrintHood\~mpKgbRQ4cirCTaxFCoQC.TMP
%HOMEPATH%\PrintHood\~q31ZumOxTl9raPPtpSzo.TMP
%HOMEPATH%\PrintHood\~zwIk8xc4yC7sJF75HWSX.TMP
%HOMEPATH%\PrintHood\~pGF73bwftp1tRnxPoCJ4.TMP
%HOMEPATH%\PrintHood\~uapN6ZErGllN69G0T7fY.TMP
%HOMEPATH%\PrintHood\~3CCVlUDbOOwcfymbp7E1.TMP
%HOMEPATH%\PrintHood\~IBP0WEuOVRroIpweIXa4.TMP
%HOMEPATH%\PrintHood\~Rom0UTxTn99fdAY3l7nz.TMP
%HOMEPATH%\PrintHood\~7JmEjOiEUWZOVLOiE50E.TMP
%HOMEPATH%\PrintHood\~3ij684fLSLVdSqKnh6ig.TMP
%HOMEPATH%\PrintHood\~p1Y2H7uyanehtf7Q3qs7.TMP
%HOMEPATH%\PrintHood\~fJFN2OQ6mN6TOpfhi8NZ.TMP
%HOMEPATH%\PrintHood\~wqEuTvoZAUYHf56PJhxg.TMP
%HOMEPATH%\PrintHood\~TgPWVxCe7VXOa3nJhUeq.TMP
%HOMEPATH%\PrintHood\~P42ESJ73AXYIy2wWSlMY.TMP
%HOMEPATH%\PrintHood\~BUCtXz80UAxE6a9Uqgm6.TMP
%HOMEPATH%\PrintHood\~yYDPscuEStO4sPLWCHoD.TMP
%HOMEPATH%\PrintHood\~gB2YF7Wz9WrPzWMwaWMr.TMP
%HOMEPATH%\PrintHood\~RmctEMVll9hYa1kESION.TMP
%HOMEPATH%\PrintHood\~PNfHo4OVzE4pyZ7zgcLE.TMP
%HOMEPATH%\PrintHood\~Xfb8fEfDcIn7joBB81tA.TMP
%HOMEPATH%\PrintHood\~B9h7myO2PYIaNN3I2UVS.TMP
%HOMEPATH%\PrintHood\~ntLdoJ4cW5CM6MNOXAo5.TMP
%HOMEPATH%\PrintHood\~Q7JiW2lW3OY2TAewVIfr.TMP
%HOMEPATH%\PrintHood\~bvtjJonfEhG7vbehGJjc.TMP
%HOMEPATH%\PrintHood\~E5eMovy03glIiSSDHwZk.TMP
%HOMEPATH%\PrintHood\~XCkRcfvc58zWKHZnjg22.TMP
%HOMEPATH%\PrintHood\~Cm3BriFMOt9d2sTZCRRT.TMP
%HOMEPATH%\PrintHood\~vixqHsY4gnkYmU1BFeNq.TMP
%HOMEPATH%\PrintHood\~1WhHJDuRuruMjcvTz5VX.TMP
%HOMEPATH%\PrintHood\~dDuRi1GYZjthmm6ibZXK.TMP
%HOMEPATH%\PrintHood\~DACo39rL1G6iGmvwVcIg.TMP
%HOMEPATH%\PrintHood\~NCeGBEd3535XIWbP4Jnn.TMP
%HOMEPATH%\PrintHood\~ltvnJTuSQ0ETeaZbkDC5.TMP
%HOMEPATH%\PrintHood\~fEsFbR9atoNdh01vQlxQ.TMP
%HOMEPATH%\PrintHood\~tyqUQ09LT8wwDmJ6lTgy.TMP
%HOMEPATH%\PrintHood\~x5qtUFF8cI7zKpkNuPhv.TMP
%HOMEPATH%\PrintHood\~tTVMkAayUOkHJ3HZZebl.TMP
%HOMEPATH%\PrintHood\datikal.dll
%HOMEPATH%\PrintHood\~4Y2mR7KweCSDYWdmpYE9.TMP
%HOMEPATH%\PrintHood\UpdateOffice.exe
%HOMEPATH%\PrintHood\700.bat
%HOMEPATH%\PrintHood\~BMSaDltlAK9lalKnC8qU.TMP
%HOMEPATH%\PrintHood\~kbNs1EQbSd5hcM1ogvOR.TMP
%HOMEPATH%\PrintHood\~sTcIxPx27PpdaWl3OzGL.TMP
%HOMEPATH%\PrintHood\~yNoeZHQnbiQnTTNZZtF0.TMP
%HOMEPATH%\PrintHood\~D0bsVlxaEUUzaex1BPWU.TMP
%HOMEPATH%\PrintHood\~8fxLzLtqXnxbNiMhhUD2.TMP
%HOMEPATH%\PrintHood\~OuNtgLHosMaB5HBdFOwP.TMP
%HOMEPATH%\PrintHood\~wq1kFjl0E5gsIfJLpnkS.TMP
%HOMEPATH%\PrintHood\~F6M0U2JtVNnuLl73eTvW.TMP
%HOMEPATH%\PrintHood\~OD3t6mzmNdOa6uAYXmsW.TMP
%HOMEPATH%\PrintHood\~cMAtgyvasY63kJf6XZws.TMP
%HOMEPATH%\PrintHood\~yCHeKldkLqthcjJS0Ry8.TMP
%HOMEPATH%\PrintHood\~aBE0FOUeIxkdhC0PmhLb.TMP
%HOMEPATH%\PrintHood\~WQfm2GadFvC0E5tpnrsp.TMP
%HOMEPATH%\PrintHood\~DD9ilUY82OhZLthRdQSU.TMP
%HOMEPATH%\PrintHood\~OABBwOug2UPnmxv4vdHk.TMP
%HOMEPATH%\PrintHood\~tCNS8tiSrEVEnMROQGda.TMP
%HOMEPATH%\PrintHood\~0nL1lZgtkbPfPE6IFI76.TMP
%HOMEPATH%\PrintHood\~Lf8LgUZb7qhmfzZgaFps.TMP
%HOMEPATH%\PrintHood\~z4zzCST84SsaQ6jPTne6.TMP
%HOMEPATH%\PrintHood\~CSxNkUvmxBGHgrkqKWAo.TMP
%HOMEPATH%\PrintHood\~BQHlcwt2JeVhzhP1KKcx.TMP
%HOMEPATH%\PrintHood\~gFYKzkuvukrn9FpKZsgG.TMP
%HOMEPATH%\PrintHood\~jeKtYXr5gMwYxO2CweJB.TMP
%HOMEPATH%\PrintHood\~00jZLjkvT01lUZqsZMda.TMP
%HOMEPATH%\PrintHood\~fDMDzj9f7wUutTQbyVH3.TMP
%HOMEPATH%\PrintHood\~lR9kSfQeRJPpi9Pytla5.TMP
%HOMEPATH%\PrintHood\~e7zp8L0mjF2eaYC95o2R.TMP
%HOMEPATH%\PrintHood\~uc0yEEUQbRSlF9zRgE2u.TMP
%HOMEPATH%\PrintHood\~TJ92TM6dN5aXDobKbRln.TMP
%HOMEPATH%\PrintHood\~QdGAKwKNYbl4tLHuw55a.TMP
%HOMEPATH%\PrintHood\~LYX2lHzT4uVI5hUFHPgd.TMP
%HOMEPATH%\PrintHood\~QZu1kCy06opBwEjHunkv.TMP
%HOMEPATH%\PrintHood\~JP9NAFX2vhXJBxGC0FVv.TMP
%HOMEPATH%\PrintHood\~qSxku3mfDjXl350SfPZm.TMP
%HOMEPATH%\PrintHood\~lWIvFqcjl2OQWBAVWK17.TMP
%HOMEPATH%\PrintHood\~O4jbB9FsQjPlsRFtbTUD.TMP
%HOMEPATH%\PrintHood\~I2I2CIwiXxYtBJXPISPX.TMP
%HOMEPATH%\PrintHood\~6r6iITbReBK8G0JZW0gS.TMP
%HOMEPATH%\PrintHood\~w3aXetB46cv78z70ryma.TMP
%HOMEPATH%\PrintHood\~wbEMeT2eXn0I6wadQWfJ.TMP
%HOMEPATH%\PrintHood\~douFhxAFz7c4xukjsQqQ.TMP
%HOMEPATH%\PrintHood\~Qc6RbA0ToeVMSJxCdbH0.TMP
%HOMEPATH%\PrintHood\~0mi9XDtfWkjhwYBg2YO9.TMP
%HOMEPATH%\PrintHood\~eTu4iQY88cezvIBYJ4tF.TMP
%HOMEPATH%\PrintHood\~SkRrtDFGUiVsnTP1C6Jo.TMP
%HOMEPATH%\PrintHood\~rhxDedsciZoTHHklTM9j.TMP
%HOMEPATH%\PrintHood\~wXyyBX7s5URdwRist8fh.TMP
%HOMEPATH%\PrintHood\~756vHQwSYByG1EGaYUfU.TMP
%HOMEPATH%\PrintHood\~yAC4yP5v6peeA1dcR7a0.TMP
%HOMEPATH%\PrintHood\~IVnuGUHdnlIAfcxuRTTi.TMP
%HOMEPATH%\PrintHood\~SMvsAiMacilC6ldMrxwB.TMP
%HOMEPATH%\PrintHood\~5Z3Jyq9pIOKICBvmAByJ.TMP
%HOMEPATH%\PrintHood\~8AchJNSGwtnPTDYmCRkP.TMP
%HOMEPATH%\PrintHood\~omeAPaEq75aSO5IVLQHu.TMP
%HOMEPATH%\PrintHood\~p2hsxLos4vIWGrRTnQQJ.TMP
%HOMEPATH%\PrintHood\~qe9W4uSyPgVBKwFdRD5o.TMP
%HOMEPATH%\PrintHood\~zdGy1BFMIR8e7sYzg8XI.TMP
%HOMEPATH%\PrintHood\~Daawe6FJ3lTfkYu3gkbA.TMP
%HOMEPATH%\PrintHood\~D3WVvmzqwi3cq69z1TRv.TMP
%HOMEPATH%\PrintHood\~MSWQYMGVzVfSarFCOMeY.TMP
%HOMEPATH%\PrintHood\~KgRjSuNHUjJ8tmGGcxLW.TMP
%HOMEPATH%\PrintHood\~EiJl7mIQ5ETQTz7FpMs2.TMP
%HOMEPATH%\PrintHood\~cM4Qln6Pu4u2JYNoqPNS.TMP
%HOMEPATH%\PrintHood\~PKJ9O7K9Tnx7L9gyQ3lM.TMP
%HOMEPATH%\PrintHood\~p3BOwxiqpzD5tfIOz8SP.TMP
%HOMEPATH%\PrintHood\~31gidHsQnuULLrKKIi6y.TMP
%HOMEPATH%\PrintHood\~TBj4WCS4x1cdiv2bove3.TMP
%HOMEPATH%\PrintHood\~2Eo9yc1Wt8CDw3KSCIgR.TMP
%HOMEPATH%\PrintHood\~c1o5omVdWroKojoM6veP.TMP
%HOMEPATH%\PrintHood\~r64GlOewMySXuV2JgNU9.TMP
%HOMEPATH%\PrintHood\~ewZS50CTodSeSrO9pszY.TMP
%HOMEPATH%\PrintHood\~vtv4SOgVyRMPcqg6pB2K.TMP
%HOMEPATH%\PrintHood\~8CI6f4sNdxrX20Qf5LJD.TMP
%HOMEPATH%\PrintHood\~3mxjjseQ2Uu5jZgUA0Gh.TMP
%HOMEPATH%\PrintHood\~CW5vmcm08eTKQA5EXIKv.TMP
%HOMEPATH%\PrintHood\~kLpqzUM9UXAW6yC7oUi5.TMP
%HOMEPATH%\PrintHood\~SKddIFMCsCFZbfqwShgP.TMP
%HOMEPATH%\PrintHood\~mMSsk0amFlr322mJfsuD.TMP
%HOMEPATH%\PrintHood\~sXYwDFonQf15zjhOAMv5.TMP
%HOMEPATH%\PrintHood\~25XN2ImnrEScJDswvrIp.TMP
%HOMEPATH%\PrintHood\~NMOpK9Ilxwei6oNRGXZN.TMP
%HOMEPATH%\PrintHood\~ShTsefAqDrGru7zMuGpe.TMP
%HOMEPATH%\PrintHood\~YmYhmOfSoT2sx1vwxsRL.TMP
%HOMEPATH%\PrintHood\~xso0ZGp3uVevFxYbSJo9.TMP
%HOMEPATH%\PrintHood\~qeOumYjL3JTAeqyoFR9Y.TMP
%HOMEPATH%\PrintHood\~cRAmlDUGPSA7cSJLwFDM.TMP
%HOMEPATH%\PrintHood\~9smMG3GI1onDN5s4Tirh.TMP
%HOMEPATH%\PrintHood\~1WKGIoTFqbraJYNSCFQy.TMP
%HOMEPATH%\PrintHood\~mcL4xRfoZuNGJWXPqUlp.TMP
%HOMEPATH%\PrintHood\~hdKqRS8nYbvJLs7IfAzo.TMP
%HOMEPATH%\PrintHood\~UHKDMMBm2vRjAIVpuD9A.TMP
%HOMEPATH%\PrintHood\~McafCv2YSIzxw5jT0iGl.TMP
%HOMEPATH%\PrintHood\~k33inF3wzgXZFIgqklSF.TMP
%HOMEPATH%\PrintHood\~FboHXwiVzeR7wMeUL5WY.TMP
%HOMEPATH%\PrintHood\~3B6ArhaesyedFOZU6xF0.TMP
%HOMEPATH%\PrintHood\~CAL4KDTCSqLXgRyCWsUP.TMP
%HOMEPATH%\PrintHood\~X7ZvolQ5O1q2VxR3onOZ.TMP
%HOMEPATH%\PrintHood\~I4W9phrgoc7lf7q2MMod.TMP
%HOMEPATH%\PrintHood\~7VBGdP7J0gypyMh0yghp.TMP
%HOMEPATH%\PrintHood\~NbYFHMVfNkZvCHKgcRv6.TMP

Удаляет следующие файлы:

%HOMEPATH%\PrintHood\pangtip.bat

Сетевая активность:

Подключается к:

'localhost':1038
'localhost':1037

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: ''
ClassName: '' WindowName: ''
ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: '' WindowName: 'http://174.142.57.28/ - u!u!u!u! - Windows Internet Explorer'
ClassName: '' WindowName: 'u!u!u!u! - Windows Internet Explorer'
ClassName: '' WindowName: 'http://174.142.57.28/ - u!u!u!u! - Microsoft Internet Explorer'
ClassName: '' WindowName: 'u!u!u!u! - Microsoft Internet Explorer'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней