Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'firefox.exe' = '%APPDATA%\Frfx\firefox.exe'
Вредоносные функции
Читает файлы, отвечающие за хранение паролей сторонними программами
- %HOMEPATH%\desktop\168.jpeg
- %HOMEPATH%\desktop\region-north-karelia.jpeg
- %HOMEPATH%\desktop\parnas_01.jpg
- %HOMEPATH%\desktop\ovp25012015.doc
- %HOMEPATH%\desktop\join.avi
- %HOMEPATH%\desktop\issi2013_template_for_posters.docx
- %HOMEPATH%\desktop\glidescope_review_rev_010.docx
- %HOMEPATH%\desktop\file_p_00000000_1371597592.docx
- %HOMEPATH%\desktop\dial.bmp
- %HOMEPATH%\desktop\default.bmp
- %HOMEPATH%\desktop\dashborder_144.bmp
- %HOMEPATH%\desktop\dashborder_120.bmp
- %HOMEPATH%\desktop\coffee.bmp
- %HOMEPATH%\desktop\4f0bf7ff71f28.jpg
- %HOMEPATH%\desktop\3.jpeg
- %HOMEPATH%\desktop\210252809.jpeg
- %HOMEPATH%\desktop\2.jpg
- %HOMEPATH%\desktop\168.jpg
- %HOMEPATH%\desktop\sdszfo.docx
- %HOMEPATH%\desktop\uep_form_786_bulletin_1726i602.doc
Изменения в файловой системе
Создает следующие файлы
- %APPDATA%\frfx\firefox.exe
- %ProgramFiles(x86)%\steam\resource\overlay_polish.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_norwegian.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_koreana.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_korean.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_japanese.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_italian.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_hungarian.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_portuguese.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_greek.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_french.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_finnish.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_english.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_dutch.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_danish.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_czech.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_bulgarian.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_german.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_romanian.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_russian.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_schinese.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_hungarian.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_greek.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_german.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_french.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_finnish.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_english.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_dutch.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_danish.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_czech.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_bulgarian.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_brazilian.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_ukrainian.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_turkish.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_thai.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_tchinese.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_swedish.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_spanish.txt.die
- %ProgramFiles(x86)%\steam\resource\overlay_brazilian.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_norwegian.txt.die
- %ProgramFiles(x86)%\steam\resource\camera1.wav.die
- %ProgramFiles(x86)%\steam\public\steamui_ukrainian.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_english.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_dutch.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_danish.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_czech.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_bulgarian.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_brazilian.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_ukrainian.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_finnish.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_turkish.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_tchinese.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_swedish.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_spanish.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_schinese.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_russian.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_romanian.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_portuguese.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_thai.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_french.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_german.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_greek.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_turkish.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_thai.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_tchinese.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_swedish.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_spanish.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_schinese.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_russian.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_romanian.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_postlogon_greek.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_portuguese.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_polish.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_norwegian.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_koreana.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_korean.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_japanese.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_italian.txt.die
- %ProgramFiles(x86)%\steam\public\steamui_hungarian.txt.die
- %ProgramFiles(x86)%\steam\public\url_list.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_polish.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_italian.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_spanish.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_brazilian.txt.die
- %ProgramFiles(x86)%\steam\servers\game_ready.wav.die
- %ProgramFiles(x86)%\steam\resource\warning.wav.die
- %ProgramFiles(x86)%\steam\resource\voice_ringing.wav.die
- %ProgramFiles(x86)%\steam\resource\voice_dialing.wav.die
- %ProgramFiles(x86)%\steam\resource\voice_busy.wav.die
- %ProgramFiles(x86)%\steam\resource\vgui_ukrainian.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_czech.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_german.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt.die
- %PROGRAMDATA%\microsoft\ilscache\ilrcache.xml.die
- %ProgramFiles(x86)%\winamp\plugins\winampflv.swf.die
- %ProgramFiles(x86)%\winamp\plugins\vis_avs.dat.die
- %ProgramFiles(x86)%\steam\skins\skins_readme.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_turkish.txt.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_bulgarian.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_korean.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_japanese.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_swedish.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_swedish.txt.die
- %ProgramFiles(x86)%\steam\resource\sourceinit_macos.dat.die
- %ProgramFiles(x86)%\steam\resource\sourceinit.dat.die
- %ProgramFiles(x86)%\steam\resource\platform_ukrainian.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_turkish.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_thai.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_tchinese.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_danish.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_bulgarian.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_czech.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_russian.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_romanian.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_portuguese.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_polish.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_norwegian.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_koreana.txt.die
- %ProgramFiles(x86)%\steam\resource\platform_schinese.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_dutch.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_spanish.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_tchinese.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_brazilian.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_schinese.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_russian.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_romanian.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_portuguese.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_polish.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_norwegian.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_koreana.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_korean.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_japanese.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_italian.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_hungarian.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_greek.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_german.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_french.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_finnish.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_english.txt.die
- %ProgramFiles(x86)%\steam\resource\vgui_thai.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_korean.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_japanese.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_italian.txt.die
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml.die
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml.die
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml.die
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\branding.xml.die
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.xml.die
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml.die
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml.die
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml.die
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml.die
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml.die
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml.die
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml.die
- %ProgramFiles(x86)%\k-lite codec pack\info\contents.rtf.die
- %ProgramFiles(x86)%\k-lite codec pack\icaros\icaros license.txt.die
- %ProgramFiles(x86)%\k-lite codec pack\icaros\ffmpeg license.txt.die
- %ProgramFiles%\microsoft office\office14\splashscreen.bmp.die
- %ProgramFiles%\microsoft office\office14\sketchpadtestschema.xml.die
- %ProgramFiles%\microsoft office\office14\microsoft.sharepoint.businessdata.administration.client.xml.die
- %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.xml.xml.die
- %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.semitrust.xml.die
- %ProgramFiles%\microsoft office\office14\microsoft.office.businessdata.xml.die
- %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtimeui.xml.die
- %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtime.xml.die
- %ProgramFiles%\microsoft office\office14\microsoft.businessdata.xml.die
- %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.die
- %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.die
- %ProgramFiles%\java\jre1.8.0_45\readme.txt.die
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml.die
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml.die
- %ProgramFiles(x86)%\k-lite codec pack\mpc-hc64\toolbar.bmp.die
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml.die
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml.die
- %ProgramFiles(x86)%\steam\thirdpartylegalnotices.doc.die
- %ProgramFiles(x86)%\qip 2012\unins000.msg.die
- %ProgramFiles(x86)%\qip 2012\unins000.dat.die
- %ProgramFiles(x86)%\opera\launcher.visualelementsmanifest.xml.die
- %ProgramFiles(x86)%\opera\installation_status.xml.die
- %ProgramFiles(x86)%\mozilla thunderbird\blocklist.xml.die
- %ProgramFiles(x86)%\mirc\versions.txt.die
- %ProgramFiles(x86)%\winamp\whatsnew.txt.die
- %ProgramFiles(x86)%\mirc\readme.txt.die
- %ProgramFiles%\winrar\zipnew.dat.die
- %ProgramFiles%\winrar\whatsnew.txt.die
- %ProgramFiles%\winrar\readme.txt.die
- %ProgramFiles%\winrar\rarnew.dat.die
- %ProgramFiles%\winrar\rar.txt.die
- %ProgramFiles%\winrar\license.txt.die
- %LOCALAPPDATA%\drpbx\drpbx.exe
- %ProgramFiles(x86)%\k-lite codec pack\unins000.dat.die
- %PROGRAMDATA%\microsoft toolkit\settings.xml.die
- C:\far2\documentation\eng\arc_support.txt.die
- C:\far2\documentation\eng\bug_report.txt.die
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\setup.xml.die
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.xml.die
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml.die
- C:\far2\plugins\ftp\notes_rus.txt.die
- C:\far2\plugins\ftp\notes.txt.die
- C:\far2\plugins\ftp\ftpcmds_rus.txt.die
- C:\far2\plugins\ftp\ftpcmds.txt.die
- C:\far2\documentation\rus\techinfo.txt.die
- C:\far2\documentation\rus\plugins_review.txt.die
- C:\far2\documentation\rus\plugins_install.txt.die
- C:\far2\documentation\rus\far_faq.txt.die
- C:\far2\documentation\rus\bug_report.txt.die
- C:\far2\documentation\rus\arc_support.txt.die
- C:\far2\documentation\eng\techinfo.txt.die
- C:\far2\documentation\eng\plugins_review.txt.die
- C:\far2\documentation\eng\plugins_install.txt.die
- C:\far2\documentation\eng\far_faq.txt.die
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml.die
- %ProgramFiles(x86)%\k-lite codec pack\tools\xvid_quant_matrices.zip.die
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml.die
- %ProgramFiles(x86)%\microsoft.net\redistlist\assemblylist_4_client.xml.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt.die
- %ProgramFiles(x86)%\steam\logs\content_log.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_hungarian.txt.die
- %ProgramFiles(x86)%\steam\logs\connection_log.txt.die
- %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_greek.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_german.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_french.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_finnish.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_english.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_dutch.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_danish.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_czech.txt.die
- %ProgramFiles(x86)%\steam\public\steamclean_brazilian.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt.die
- %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt.die
- %ProgramFiles(x86)%\steam\logs\configstore_log.txt.die
- %ProgramFiles(x86)%\steam\friends\voice_hang_up.wav.die
- %ProgramFiles(x86)%\microsoft.net\redistlist\assemblylist_4_extended.xml.die
- %ProgramFiles(x86)%\steam\friends\friend_join.wav.die
- %ProgramFiles(x86)%\steam\friends\trackerui_dutch.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_danish.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_czech.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_bulgarian.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_brazilian.txt.die
- %ProgramFiles(x86)%\steam\friends\message.wav.die
- %ProgramFiles(x86)%\steam\friends\friend_online.wav.die
- %ProgramFiles(x86)%\mozilla thunderbird\searchplugins\yahoo.xml.die
- %ProgramFiles(x86)%\steam\friends\trackerui_finnish.txt.die
- %ProgramFiles(x86)%\mozilla thunderbird\searchplugins\wikipedia.xml.die
- %ProgramFiles(x86)%\mozilla thunderbird\searchplugins\twitter.xml.die
- %ProgramFiles(x86)%\mozilla thunderbird\searchplugins\ebay.xml.die
- %ProgramFiles(x86)%\mozilla thunderbird\searchplugins\bing.xml.die
- %ProgramFiles(x86)%\mozilla thunderbird\searchplugins\aol-web-search.xml.die
- %ProgramFiles(x86)%\mozilla thunderbird\searchplugins\amazondotcom.xml.die
- %ProgramFiles(x86)%\mozilla firefox\browser\blocklist.xml.die
- %PROGRAMDATA%\microsoft\ilscache\imcrcache.xml.die
- %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_french.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_hungarian.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_english.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_ukrainian.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_turkish.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_thai.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_tchinese.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_swedish.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_spanish.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_schinese.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_russian.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_romanian.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_portuguese.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_polish.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_norwegian.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_koreana.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_korean.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_japanese.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_italian.txt.die
- %ProgramFiles(x86)%\steam\friends\trackerui_greek.txt.die
- %PROGRAMDATA%\microsoft\user account pictures\user.dat.die
Самоудаляется.
Изменяет расширения файлов пользовательских данных (Trojan.Encoder).
Другое
Создает и запускает на исполнение
- '%LOCALAPPDATA%\drpbx\drpbx.exe' <Полный путь к файлу>
