Техническая информация
- %WINDIR%\Microsoft.NET\Framework\v3.5\AddInProcess.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\AddInProcess.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe
- %WINDIR%\twunk_32.exe файлом %WINDIR%\twunk_32.exe.new
- %WINDIR%\Microsoft.NET\Framework\v3.5\AddInProcess32.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\AddInProcess32.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
- %WINDIR%\TASKMAN.EXE файлом %WINDIR%\taskman.exe.new
- %WINDIR%\Microsoft.NET\Framework\v3.5\MSBuild.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\MSBuild.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\EdmGen.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\EdmGen.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\vbc.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\vbc.exe
- <SYSTEM32>\dllcache\migrate.exe файлом <SYSTEM32>\dllcache\migrate.exe.new
- %WINDIR%\Microsoft.NET\Framework\v3.5\csc.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\csc.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\AddInUtil.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\AddInUtil.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe
- %WINDIR%\winhlp32.exe файлом %WINDIR%\winhlp32.exe.new
- %WINDIR%\regedit.exe файлом %WINDIR%\regedit.exe.new
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe
- %WINDIR%\hh.exe файлом %WINDIR%\hh.exe.new
- %WINDIR%\NOTEPAD.EXE файлом %WINDIR%\notepad.exe.new
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe
- <SYSTEM32>\dllcache\oemig50.exe файлом <SYSTEM32>\dllcache\oemig50.exe.new
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ngen.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ngen.exe
- <SYSTEM32>\dllcache\wabmig.exe файлом <SYSTEM32>\dllcache\wabmig.exe.new
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe
- <SYSTEM32>\dllcache\setup50.exe файлом <SYSTEM32>\dllcache\setup50.exe.new
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe
- <SYSTEM32>\dllcache\wab.exe файлом <SYSTEM32>\dllcache\wab.exe.new
- <SYSTEM32>\dllcache\wordpad.exe файлом <SYSTEM32>\dllcache\wordpad.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\csc.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\csc.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\DataSvcUtil.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\DataSvcUtil.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\cvtres.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\cvtres.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\CasPol.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\CasPol.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe
- <SYSTEM32>\dllcache\dialer.exe файлом <SYSTEM32>\dllcache\dialer.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ComSvcConfig.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ComSvcConfig.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\jsc.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\jsc.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.Workflow.Compiler.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.Workflow.Compiler.exe
- <SYSTEM32>\dllcache\hh.exe файлом <SYSTEM32>\dllcache\hh.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe
- <SYSTEM32>\dllcache\pinball.exe файлом <SYSTEM32>\dllcache\pinball.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ilasm.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ilasm.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\EdmGen.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\EdmGen.exe
- <SYSTEM32>\dllcache\wmplayer.exe файлом <SYSTEM32>\dllcache\wmplayer.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe
- %WINDIR%\Help\Tours\mmTour\tour.exe файлом %WINDIR%\Help\Tours\mmTour\tour.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe
- <SYSTEM32>\dllcache\mplayer2.exe файлом <SYSTEM32>\dllcache\mplayer2.exe.new
- %WINDIR%\Microsoft.NET\Framework\v3.5\WFServicesReg.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad180 файлом %WINDIR%\Microsoft.NET\Framework\v3.5\WFServicesReg.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe файлом %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe
- <SYSTEM32>\dllcache\setup_wm.exe файлом <SYSTEM32>\dllcache\setup_wm.exe.new
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe файлом %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe
- <SYSTEM32>\dllcache\bckgzm.exe файлом <SYSTEM32>\dllcache\bckgzm.exe.new
- %WINDIR%\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe файлом %WINDIR%\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe
- %WINDIR%\Microsoft.NET\Framework\NETFXSBS10.exe файлом %WINDIR%\Microsoft.NET\Framework\NETFXSBS10.exe
- <SYSTEM32>\dllcache\chkrzm.exe файлом <SYSTEM32>\dllcache\chkrzm.exe.new
- %WINDIR%\winhlp32.exe файлом %WINDIR%\winhlp32.exe
- %WINDIR%\twunk_32.exe файлом %WINDIR%\twunk_32.exe
- %WINDIR%\Microsoft.NET\NETFXRepair.exe файлом %WINDIR%\Microsoft.NET\NETFXRepair.exe
- %WINDIR%\Help\Tours\mmTour\tour.exe файлом %WINDIR%\Help\Tours\mmTour\tour.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe
- <SYSTEM32>\dllcache\hrtzzm.exe файлом <SYSTEM32>\dllcache\hrtzzm.exe.new
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\cvtres.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\cvtres.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\csc.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\csc.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\CasPol.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\CasPol.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe
- <SYSTEM32>\dllcache\moviemk.exe файлом <SYSTEM32>\dllcache\moviemk.exe.new
- <SYSTEM32>\dllcache\icwconn2.exe файлом <SYSTEM32>\dllcache\icwconn2.exe.new
- <SYSTEM32>\dllcache\icwconn1.exe файлом <SYSTEM32>\dllcache\icwconn1.exe.new
- <SYSTEM32>\dllcache\icwtutor.exe файлом <SYSTEM32>\dllcache\icwtutor.exe.new
- <SYSTEM32>\dllcache\icwrmind.exe файлом <SYSTEM32>\dllcache\icwrmind.exe.new
- <SYSTEM32>\dllcache\sapisvr.exe файлом <SYSTEM32>\dllcache\sapisvr.exe.new
- <SYSTEM32>\dllcache\msinfo32.exe файлом <SYSTEM32>\dllcache\msinfo32.exe.new
- <SYSTEM32>\dllcache\iexplore.exe файлом <SYSTEM32>\dllcache\iexplore.exe.new
- <SYSTEM32>\dllcache\iedw.exe файлом <SYSTEM32>\dllcache\iedw.exe.new
- %WINDIR%\sfk.exe файлом %WINDIR%\sfk.exe
- %WINDIR%\regedit.exe файлом %WINDIR%\regedit.exe
- %WINDIR%\TASKMAN.EXE файлом %WINDIR%\TASKMAN.EXE
- %WINDIR%\sleep.exe файлом %WINDIR%\sleep.exe
- <SYSTEM32>\dllcache\isignup.exe файлом <SYSTEM32>\dllcache\isignup.exe.new
- <SYSTEM32>\dllcache\inetwiz.exe файлом <SYSTEM32>\dllcache\inetwiz.exe.new
- %WINDIR%\NOTEPAD.EXE файлом %WINDIR%\NOTEPAD.EXE
- %WINDIR%\hh.exe файлом %WINDIR%\hh.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\CasPol.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\CasPol.exe
- <SYSTEM32>\dllcache\conf.exe файлом <SYSTEM32>\dllcache\conf.exe.new
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\csc.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\csc.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad181 файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\csc.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ilasm.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ilasm.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\jsc.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\jsc.exe
- <SYSTEM32>\dllcache\msimn.exe файлом <SYSTEM32>\dllcache\msimn.exe.new
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\cvtres.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\cvtres.exe
- <SYSTEM32>\dllcache\wb32.exe файлом <SYSTEM32>\dllcache\wb32.exe.new
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\IEExec.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\IEExec.exe
- <SYSTEM32>\dllcache\cb32.exe файлом <SYSTEM32>\dllcache\cb32.exe.new
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\MigPol.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\MigPol.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\jsc.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\jsc.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe
- <SYSTEM32>\dllcache\shvlzm.exe файлом <SYSTEM32>\dllcache\shvlzm.exe.new
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\IEExec.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\IEExec.exe
- <SYSTEM32>\dllcache\rvsezm.exe файлом <SYSTEM32>\dllcache\rvsezm.exe.new
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ilasm.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ilasm.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\vbc.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\vbc.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe файлом %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ngen.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ngen.exe
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe файлом %WINDIR%\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe
- <SYSTEM32>\dllcache\zclientm.exe файлом <SYSTEM32>\dllcache\zclientm.exe.new
- C:\boot00.exe
- <Полный путь к вирусу>.exe
- C:\boot00.exe (загружен из сети Интернет)
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\zClientm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\shvlzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\Rvsezm.exe
- %PROGRAM_FILES%\NetMeeting\cb32.exe
- %PROGRAM_FILES%\Outlook Express\msimn.exe
- %PROGRAM_FILES%\NetMeeting\wb32.exe
- %PROGRAM_FILES%\NetMeeting\conf.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\msnsusii.exe
- %PROGRAM_FILES%\Movie Maker\moviemk.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\hrtzzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\chkrzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\bckgzm.exe
- %PROGRAM_FILES%\Windows NT\hypertrm.exe
- %PROGRAM_FILES%\Windows NT\dialer.exe
- %PROGRAM_FILES%\Windows Media Player\wmplayer.exe
- %PROGRAM_FILES%\Windows NT\Accessories\wordpad.exe
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\RP15\RestorePointSize
- <Служебный элемент>
- %PROGRAM_FILES%\Windows NT\Pinball\PINBALL.EXE
- %PROGRAM_FILES%\Outlook Express\wab.exe
- %PROGRAM_FILES%\Outlook Express\setup50.exe
- %PROGRAM_FILES%\Outlook Express\oemig50.exe
- %PROGRAM_FILES%\Outlook Express\wabmig.exe
- %PROGRAM_FILES%\Windows Media Player\setup_wm.exe
- %PROGRAM_FILES%\Windows Media Player\mplayer2.exe
- %PROGRAM_FILES%\Windows Media Player\migrate.exe
- %PROGRAM_FILES%\FireFox\mangle.exe
- %PROGRAM_FILES%\FireFox\js.exe
- %PROGRAM_FILES%\FireFox\firefox.exe
- %PROGRAM_FILES%\FireFox\nsinstall.exe
- %PROGRAM_FILES%\FireFox\updater.exe
- %PROGRAM_FILES%\FireFox\shlibsign.exe
- %PROGRAM_FILES%\FireFox\plugin-container.exe
- %CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE
- C:\Far2\Far.exe
- C:\boot00.exe
- %CommonProgramFiles%\Microsoft Shared\DW\DWTRIG20.EXE
- %PROGRAM_FILES%\FireFox\crashreporter.exe
- %CommonProgramFiles%\Microsoft Shared\Speech\sapisvr.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwrmind.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwtutor.exe
- %PROGRAM_FILES%\Messenger\msmsgs.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\isignup.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\inetwiz.exe
- %PROGRAM_FILES%\FireFox\xpt_dump.exe
- %PROGRAM_FILES%\FireFox\xpidl.exe
- %PROGRAM_FILES%\FireFox\xpcshell.exe
- %PROGRAM_FILES%\FireFox\xpt_link.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %PROGRAM_FILES%\Internet Explorer\iedw.exe
- %PROGRAM_FILES%\FireFox\uninstall\helper.exe
- <Текущая директория>\bad12
- C:\boot00.exe
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad65
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad191
- %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\bad197
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\bad173
- %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\bad92
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad5
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad100
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad129
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad79
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad40
- %WINDIR%\Microsoft.NET\Framework\v3.5\bad180
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad12
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad172
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad183
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad97
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad160
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad148
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad127
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad104
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad159
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad23
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad122
- %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\bad198
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad36
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad129
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad126
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad119
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad167
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad163
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad26
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad66
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad162
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad18
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad39
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad75
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad30
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad11
- %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\bad83
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad174
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad133
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad32
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad93
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad135
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad193
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad46
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad24
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad115
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad181
- %WINDIR%\Microsoft.NET\Framework\bad134
- %WINDIR%\Microsoft.NET\bad0
- %WINDIR%\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\bad55
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad27
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad25
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad147
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad77
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad119
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad62
- %WINDIR%\bad63
- %WINDIR%\bad164
- %WINDIR%\bad142
- %WINDIR%\bad131
- %WINDIR%\bad108
- %WINDIR%\bad176
- %WINDIR%\bad116
- %WINDIR%\Help\Tours\mmTour\bad79
- %WINDIR%\bad138
- %WINDIR%\bad158
- %WINDIR%\bad122
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad143
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad72
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad69
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad70
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad137
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad181
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad99
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad161
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad196
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad33
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad121
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad88
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad110
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad12
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad131
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad154
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad135
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad170
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad93
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad110
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad130
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad169
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad43
- %WINDIR%\Microsoft.NET\Framework\v3.5\AddInProcess32.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\bad191
- %WINDIR%\Microsoft.NET\Framework\v3.5\AddInUtil.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\bad5
- %WINDIR%\Microsoft.NET\Framework\v3.5\AddInProcess.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\bad65
- %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe в %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\bad92
- %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\XamlViewer_v0300.exe в %WINDIR%\Microsoft.NET\Framework\v3.0\WPF\XamlViewer\bad197
- %WINDIR%\Microsoft.NET\Framework\v3.5\csc.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\bad40
- %WINDIR%\Microsoft.NET\Framework\v3.5\vbc.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\bad129
- %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\DeleteTemp.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\bad198
- %WINDIR%\Microsoft.NET\Framework\v3.5\MSBuild.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\bad100
- %WINDIR%\Microsoft.NET\Framework\v3.5\DataSvcUtil.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\bad180
- %WINDIR%\Microsoft.NET\Framework\v3.5\EdmGen.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\bad79
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\PerformanceCounterInstaller.exe в %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Workflow Foundation\bad173
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegSvcs.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad12
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\regtlibv12.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad172
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\RegAsm.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad183
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad97
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ngen.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad160
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\vbc.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad148
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe в %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad127
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\WsatConfig.exe в %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad104
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ServiceModelReg.exe в %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad159
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\ComSvcConfig.exe в %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad23
- %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe в %WINDIR%\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\bad122
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\DataSvcUtil.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad129
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\dfsvc.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad163
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\cvtres.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad36
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ComSvcConfig.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad167
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\csc.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad126
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\EdmGen.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad18
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\Microsoft.Workflow.Compiler.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad66
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\MSBuild.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad148
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\jsc.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad26
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\ilasm.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad39
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\InstallUtil.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad162
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\CasPol.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad119
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInUtil.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad75
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AppLaunch.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad30
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInProcess32.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad11
- %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\setup.exe в %WINDIR%\Microsoft.NET\Framework\v3.5\Microsoft .NET Framework 3.5 SP1\bad83
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\AddInProcess.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad174
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_compiler.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad133
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad32
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_wp.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad93
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regsql.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad135
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regbrowsers.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad193
- %WINDIR%\Microsoft.NET\Framework\v4.0.30319\aspnet_regiis.exe в %WINDIR%\Microsoft.NET\Framework\v4.0.30319\bad46
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_state.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad181
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_wp.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad27
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\aspnet_regiis.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad115
- %WINDIR%\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\Microsoft.Workflow.Compiler.exe в %WINDIR%\WinSxS\MSIL_Microsoft.Workflow.Compiler_31bf3856ad364e35_4.0.0.0_x-ww_97359ba5\bad55
- %WINDIR%\Microsoft.NET\Framework\NETFXSBS10.exe в %WINDIR%\Microsoft.NET\Framework\bad134
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\CasPol.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad119
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\IEExec.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad147
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ilasm.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad143
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\cvtres.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad25
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ConfigWizards.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad62
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\csc.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad77
- %WINDIR%\Microsoft.NET\NETFXRepair.exe в %WINDIR%\Microsoft.NET\bad0
- %WINDIR%\sfk.exe в %WINDIR%\bad63
- %WINDIR%\sleep.exe в %WINDIR%\bad164
- %WINDIR%\regedit.exe в %WINDIR%\bad142
- %WINDIR%\hh.exe в %WINDIR%\bad131
- %WINDIR%\NOTEPAD.EXE в %WINDIR%\bad108
- %WINDIR%\TASKMAN.EXE в %WINDIR%\bad176
- %WINDIR%\winhlp32.exe в %WINDIR%\bad116
- %WINDIR%\Help\Tours\mmTour\tour.exe в %WINDIR%\Help\Tours\mmTour\bad79
- %WINDIR%\winhelp.exe в %WINDIR%\bad138
- %WINDIR%\twunk_16.exe в %WINDIR%\bad158
- %WINDIR%\twunk_32.exe в %WINDIR%\bad122
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\CasPol.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad69
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\cvtres.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad99
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_wp.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad72
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regsql.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad181
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_state.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad70
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\dfsvc.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad121
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\jsc.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad196
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\MSBuild.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad24
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\InstallUtil.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad161
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\IEExec.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad88
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\ilasm.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad33
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regiis.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad137
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\MigPolWin.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad110
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\ngen.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad12
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\MigPol.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad131
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\InstallUtil.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad154
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\jsc.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad135
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\RegAsm.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad170
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_compiler.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad93
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\aspnet_regbrowsers.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad110
- %WINDIR%\Microsoft.NET\Framework\v2.0.50727\AppLaunch.exe в %WINDIR%\Microsoft.NET\Framework\v2.0.50727\bad130
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\RegSvcs.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad169
- %WINDIR%\Microsoft.NET\Framework\v1.1.4322\vbc.exe в %WINDIR%\Microsoft.NET\Framework\v1.1.4322\bad43
- %PROGRAM_FILES%\Outlook Express\wab.exe.new в %PROGRAM_FILES%\Outlook Express\wab.exe
- %PROGRAM_FILES%\Outlook Express\setup50.exe.new в %PROGRAM_FILES%\Outlook Express\setup50.exe
- %PROGRAM_FILES%\Windows Media Player\migrate.exe.new в %PROGRAM_FILES%\Windows Media Player\migrate.exe
- %PROGRAM_FILES%\Outlook Express\wabmig.exe.new в %PROGRAM_FILES%\Outlook Express\wabmig.exe
- %PROGRAM_FILES%\Outlook Express\oemig50.exe.new в %PROGRAM_FILES%\Outlook Express\oemig50.exe
- %PROGRAM_FILES%\NetMeeting\conf.exe.new в %PROGRAM_FILES%\NetMeeting\conf.exe
- %PROGRAM_FILES%\NetMeeting\cb32.exe.new в %PROGRAM_FILES%\NetMeeting\cb32.exe
- %PROGRAM_FILES%\Outlook Express\msimn.exe.new в %PROGRAM_FILES%\Outlook Express\msimn.exe
- %PROGRAM_FILES%\NetMeeting\wb32.exe.new в %PROGRAM_FILES%\NetMeeting\wb32.exe
- <SYSTEM32>\dllcache\rvsezm.exe.new в <SYSTEM32>\dllcache\rvsezm.exe
- %PROGRAM_FILES%\Windows NT\Pinball\pinball.exe.new в %PROGRAM_FILES%\Windows NT\Pinball\pinball.exe
- <SYSTEM32>\dllcache\pinball.exe.new в <SYSTEM32>\dllcache\pinball.exe
- <SYSTEM32>\dllcache\zclientm.exe.new в <SYSTEM32>\dllcache\zclientm.exe
- %PROGRAM_FILES%\Windows NT\Accessories\wordpad.exe.new в %PROGRAM_FILES%\Windows NT\Accessories\wordpad.exe
- %PROGRAM_FILES%\Windows Media Player\setup_wm.exe.new в %PROGRAM_FILES%\Windows Media Player\setup_wm.exe
- %PROGRAM_FILES%\Windows Media Player\mplayer2.exe.new в %PROGRAM_FILES%\Windows Media Player\mplayer2.exe
- %PROGRAM_FILES%\Windows NT\dialer.exe.new в %PROGRAM_FILES%\Windows NT\dialer.exe
- %PROGRAM_FILES%\Windows Media Player\wmplayer.exe.new в %PROGRAM_FILES%\Windows Media Player\wmplayer.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\zclientm.exe.new в %PROGRAM_FILES%\MSN Gaming Zone\Windows\zclientm.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe.new в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe.new в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwtutor.exe.new в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwtutor.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwrmind.exe.new в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwrmind.exe
- %PROGRAM_FILES%\Internet Explorer\iexplore.exe.new в %PROGRAM_FILES%\Internet Explorer\iexplore.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe.new в %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe
- <Полный путь к вирусу>.exe в <Текущая директория>\bad12
- %PROGRAM_FILES%\Internet Explorer\iedw.exe.new в %PROGRAM_FILES%\Internet Explorer\iedw.exe
- %CommonProgramFiles%\Microsoft Shared\Speech\sapisvr.exe.new в %CommonProgramFiles%\Microsoft Shared\Speech\sapisvr.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\hrtzzm.exe.new в %PROGRAM_FILES%\MSN Gaming Zone\Windows\hrtzzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\chkrzm.exe.new в %PROGRAM_FILES%\MSN Gaming Zone\Windows\chkrzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\shvlzm.exe.new в %PROGRAM_FILES%\MSN Gaming Zone\Windows\shvlzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\rvsezm.exe.new в %PROGRAM_FILES%\MSN Gaming Zone\Windows\rvsezm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\bckgzm.exe.new в %PROGRAM_FILES%\MSN Gaming Zone\Windows\bckgzm.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\isignup.exe.new в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\isignup.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\inetwiz.exe.new в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\inetwiz.exe
- <SYSTEM32>\dllcache\iexplore.exe.new в <SYSTEM32>\dllcache\iexplore.exe
- %PROGRAM_FILES%\Movie Maker\moviemk.exe.new в %PROGRAM_FILES%\Movie Maker\moviemk.exe
- 'www.vi###192.h18.ru':80
- www.vi###192.h18.ru/1.exe
- DNS ASK www.vi###192.h18.ru