Техническая информация
Для обеспечения автозапуска и распространения:
Создает или изменяет следующие файлы:
- %HOMEPATH%\Windows\UpdateOffice.exe
Вредоносные функции:
Создает и запускает на исполнение:
- %HOMEPATH%\PrintHood\UpdateOffice.exe
- %HOMEPATH%\Windows\UpdateOffice.exe
Запускает на исполнение:
- <SYSTEM32>\cmd.exe /c ""%HOMEPATH%\PrintHood\700.bat" "
Изменения в файловой системе:
Создает следующие файлы:
- %HOMEPATH%\PrintHood\~82mQHbiFeLurGySYt7u7.TMP
- %HOMEPATH%\PrintHood\~QdHazuiu9e7lNE3YRS4h.TMP
- %HOMEPATH%\PrintHood\~kRr307lFSS8pBO5qrREf.TMP
- %HOMEPATH%\PrintHood\~9SkmjNvr5ljTMFgE0mY5.TMP
- %HOMEPATH%\PrintHood\~SZgihi8fhAmddLbDJzEC.TMP
- %HOMEPATH%\PrintHood\~rFlHbRHaWgbSqkmhGbWK.TMP
- %HOMEPATH%\PrintHood\~KtcqSnRFymBqdeYHnmPz.TMP
- %HOMEPATH%\PrintHood\~Y5hugSe5Dwo5HA96UoZt.TMP
- %HOMEPATH%\PrintHood\~DvnSU6P1QPBFio6zb6OC.TMP
- %HOMEPATH%\PrintHood\~7Fe4sqIaRp78JoGQ6RjU.TMP
- %HOMEPATH%\PrintHood\~PH8lOgCb2zdzwl5CUwoT.TMP
- %HOMEPATH%\PrintHood\~akaphAIPPwx7tvS3CPsM.TMP
- %HOMEPATH%\PrintHood\~VuRfd20PQlIBARpANHJt.TMP
- %HOMEPATH%\PrintHood\~xITiKQN6ELlX4mc9MKBQ.TMP
- %HOMEPATH%\PrintHood\~sSiJNlMC9AEileYz1m3H.TMP
- %HOMEPATH%\PrintHood\~DnwwPiz72uSXLlmSffHp.TMP
- %HOMEPATH%\PrintHood\~6PA5kYdrgQO2XyksW8i9.TMP
- %HOMEPATH%\PrintHood\~91p6NxfR87RvWKOtutxf.TMP
- %HOMEPATH%\PrintHood\~VGVAtLtPllzDSOMm9Fjg.TMP
- %HOMEPATH%\PrintHood\~z72OazR6ukRUJuPeeA3q.TMP
- %HOMEPATH%\PrintHood\~c2uo7Lu571r4v1wAxxGC.TMP
- %HOMEPATH%\PrintHood\~FjU61p2G1PHsTn2dqSg6.TMP
- %HOMEPATH%\PrintHood\~D7iJyY1htTG5xmxlTLRr.TMP
- %HOMEPATH%\PrintHood\~9x7CatYTiXPRyskD7jVn.TMP
- %HOMEPATH%\PrintHood\~pB0RumDBYp9oio0G9A6k.TMP
- %HOMEPATH%\PrintHood\~zBmr3aRhUb4N16YF681c.TMP
- %HOMEPATH%\PrintHood\~qsdCLDSGbnPEeQ0gzc3u.TMP
- %HOMEPATH%\PrintHood\~ckR8V2DyY2Sa3IJDWrzx.TMP
- %HOMEPATH%\PrintHood\~kGOnVjV4hhWELv8a0LCo.TMP
- %HOMEPATH%\PrintHood\~cYr5KfhancF7qb92puaw.TMP
- %HOMEPATH%\PrintHood\~yanecB44rKfcwmDh1mVj.TMP
- %HOMEPATH%\PrintHood\~IJxXZzIN883fUDfeECF0.TMP
- %HOMEPATH%\PrintHood\~rCT2sau1IetPU7lBd0Dx.TMP
- %HOMEPATH%\PrintHood\~R225qrK48yodCEsgfgs7.TMP
- %HOMEPATH%\PrintHood\~wfhkTmAXQkwhD5FJEp28.TMP
- %HOMEPATH%\PrintHood\~c9wJPkNIc3zKxFa7CEyJ.TMP
- %HOMEPATH%\PrintHood\~EYbrUr6jYfAuvB89agZS.TMP
- %HOMEPATH%\PrintHood\~qGLC4vbbReJOjtSmdgD4.TMP
- %HOMEPATH%\PrintHood\~wT7cb6nz6Ncx6X7idO6N.TMP
- %HOMEPATH%\PrintHood\~XEoeC1S35ChppHn7Cs0R.TMP
- %HOMEPATH%\PrintHood\~fQ6HW8pR2Acf82KAmOQX.TMP
- %HOMEPATH%\PrintHood\~gndnImqJ0Lp0VesEkF4m.TMP
- %HOMEPATH%\PrintHood\~jPOidox20hhjIwV4v0Be.TMP
- %HOMEPATH%\PrintHood\~psqkpIXpJZukBvreO2XQ.TMP
- %HOMEPATH%\PrintHood\~cvEQJTI1S6VIR7jrDlku.TMP
- %HOMEPATH%\PrintHood\~GejP6bqpVGMUbjd38rKc.TMP
- %HOMEPATH%\PrintHood\~gwisjNjsAH8JZSVxCCwE.TMP
- %HOMEPATH%\PrintHood\~2vSb8XvEXQoiSkKCT2F1.TMP
- %HOMEPATH%\PrintHood\~1cvv2NWKChrg0vjuLZ5j.TMP
- %HOMEPATH%\PrintHood\~z9Rcad51ABTpZndNr7Ak.TMP
- %HOMEPATH%\PrintHood\datikal.dll
- %HOMEPATH%\PrintHood\~4mIyAe5ajxprLR88VxBe.TMP
- %HOMEPATH%\PrintHood\UpdateOffice.exe
- %HOMEPATH%\PrintHood\700.bat
- %HOMEPATH%\PrintHood\~OCwtjwl74ngO9hz1E8BD.TMP
- %HOMEPATH%\PrintHood\~64N209vlqIT1s1N0lFh6.TMP
- %HOMEPATH%\PrintHood\~tDp91Jnj99h3VBjMSrJD.TMP
- %HOMEPATH%\PrintHood\~9OdfNpz8ivAtjPJOpz4r.TMP
- %HOMEPATH%\PrintHood\~LRBoQjOQ2iX5mkNeOnaK.TMP
- %HOMEPATH%\PrintHood\~X1YDxlvJwORQgfYSe3ou.TMP
- %HOMEPATH%\PrintHood\~aameMG2NMiqPy4ybg1NI.TMP
- %HOMEPATH%\PrintHood\~oslyJceN34d2PmfogbQc.TMP
- %HOMEPATH%\PrintHood\~3qROvG0T6MvqIE4uXPLy.TMP
- %HOMEPATH%\PrintHood\~oBcbrf0jPEGx9pazrVw4.TMP
- %HOMEPATH%\PrintHood\~omJS5KhCeKAZKURX7sNL.TMP
- %HOMEPATH%\PrintHood\~GC2l8Ck3eRw6Lho25iwb.TMP
- %HOMEPATH%\PrintHood\~M6LI6p2SohKlUy8vCBcA.TMP
- %HOMEPATH%\PrintHood\~C7M45S0B4FPSO4sBY30z.TMP
- %HOMEPATH%\PrintHood\~rAICnU6uOdG9cD1ftsgd.TMP
- %HOMEPATH%\PrintHood\~sKJYrYCvM8AYJky9hdm7.TMP
- %HOMEPATH%\PrintHood\~nchpBj7Rf7zUZZDmv1ir.TMP
- %HOMEPATH%\PrintHood\~eUcy4z9SwEHYPnynasdq.TMP
- %HOMEPATH%\PrintHood\~jOH1HwjJ9mbPtmfO25LQ.TMP
- %HOMEPATH%\PrintHood\~g2LvYk5vFquFcXx6udhM.TMP
- %HOMEPATH%\PrintHood\~kRO3uOLNjXW31K4xLdKY.TMP
- %HOMEPATH%\PrintHood\~nmQrrOkdPWnYWgT0qpag.TMP
- %HOMEPATH%\PrintHood\~ShfFLquZNGIKLc4uk4ie.TMP
- %HOMEPATH%\PrintHood\~ufOpgtulP2Kddpj640xr.TMP
- %HOMEPATH%\PrintHood\~fk6ryz1RBt5HKSyPhpXs.TMP
