Техническая информация
Вредоносные функции
Для затруднения выявления своего присутствия в системе
удаляет теневые копии разделов.
Изменения в файловой системе
Создает следующие файлы
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\d6fcf2dc98970dba7d1fd20210e26ad2_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
- %HOMEPATH%\desktop\kas.tn
- %HOMEPATH%\desktop\!!ГЄГ ГЄ--ГўГҐГ°ГГіГІГј--ôà éëû!!.jpg
- %HOMEPATH%\documents\kas.tn
- %HOMEPATH%\documents\!!ГЄГ ГЄ--ГўГҐГ°ГГіГІГј--ôà éëû!!.jpg
Удаляет следующие файлы
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\d6fcf2dc98970dba7d1fd20210e26ad2_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
Перемещает следующие файлы
- %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip в %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01332u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01332u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph00780u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph00780u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01035u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01035u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01235u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01235u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01236u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01236u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01247u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01247u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01265u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01265u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01478u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01478u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02755u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02755u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02756u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02756u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02757u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02757u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02758u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02758u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03011u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03011u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03012u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03012u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02753u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02753u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02754u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02754u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg.su4g9
- %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg в %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg.su4g9
- %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg в %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg.su4g9
- %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg в %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg.su4g9
- %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg в %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg.su4g9
- %ProgramFiles%\microsoft office\office14\splashscreen.bmp в %ProgramFiles%\microsoft office\office14\splashscreen.bmp.su4g9
- %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets в %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets.su4g9
- %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets в %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets.su4g9
- %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\installer\chrome.7z в %ProgramFiles(x86)%\google\chrome\application\42.0.2311.135\installer\chrome.7z.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01607u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01607u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01562u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01562u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02039u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02039u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02040u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02040u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02058u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02058u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02062u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02062u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02071u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02071u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02074u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02074u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02208u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02208u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02223u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02223u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02291u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02291u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02466u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02466u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02470u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02470u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02503u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02503u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02738u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02738u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02398u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02398u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02417u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02417u.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101864.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101864.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101865.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101865.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101866.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101866.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101867.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101867.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101862.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101862.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101861.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101861.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101859.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101859.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101860.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101860.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101857.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101857.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101858.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101858.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101863.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101863.bmp.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg.su4g9
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg.su4g9
- %ProgramFiles(x86)%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets в %ProgramFiles(x86)%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets.su4g9
- %ProgramFiles(x86)%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets в %ProgramFiles(x86)%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets.su4g9
Изменяет множество файлов пользовательских данных (Trojan.Encoder).
Изменяет расширения файлов пользовательских данных (Trojan.Encoder).
Другое
Создает и запускает на исполнение
- '<SYSTEM32>\vssadmin.exe' Delete Shadows /All /Quiet' (со скрытым окном)
Запускает на исполнение
- '<SYSTEM32>\cmd.exe' /C net view
- '<SYSTEM32>\net.exe' view
- '<SYSTEM32>\vssvc.exe'
- '<SYSTEM32>\svchost.exe' -k swprv
