Trojan.Crossrider.46916

Техническая информация

Для обеспечения автозапуска и распространения

Создает или изменяет следующие файлы

%WINDIR%\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-10_user.job
<SYSTEM32>\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-10_user
%WINDIR%\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-3.job
<SYSTEM32>\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-3
%WINDIR%\tasks\globalupdateupdatetaskmachinecore.job
<SYSTEM32>\tasks\globalupdateupdatetaskmachinecore
%WINDIR%\tasks\globalupdateupdatetaskmachineua.job
<SYSTEM32>\tasks\globalupdateupdatetaskmachineua
%WINDIR%\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-11.job
<SYSTEM32>\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-11
%WINDIR%\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-7.job
<SYSTEM32>\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-7
%WINDIR%\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-6.job
<SYSTEM32>\tasks\6ee4d918-cb94-480f-a0ab-3c8275baf07b-6

Устанавливает следующие настройки сервисов

[<HKLM>\System\CurrentControlSet\Services\globalUpdate] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\globalUpdate] 'ImagePath' = '%ProgramFiles(x86)%\globalUpdate\Update\GoogleUpdate.exe /svc'
[<HKLM>\System\CurrentControlSet\Services\globalUpdatem] 'ImagePath' = '%ProgramFiles(x86)%\globalUpdate\Update\GoogleUpdate.exe /medsvc'

Создает следующие сервисы

'globalUpdate' %ProgramFiles(x86)%\globalUpdate\Update\GoogleUpdate.exe /svc
'globalUpdatem' %ProgramFiles(x86)%\globalUpdate\Update\GoogleUpdate.exe /medsvc

Вредоносные функции

Завершает или пытается завершить

следующие пользовательские процессы:

firefox.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\nswe003.tmp
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\manifest.xml
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\339.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\180.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\273.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\192.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\253.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\354.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\200.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\378.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\93.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\91.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\manifest.json
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins.json
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\390.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\376.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\345.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\7.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\337.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\195.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\19.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\9.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\391.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\14.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\380.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\289.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\281.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\4.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\icons\icon128.png
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\icons\icon16.png
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\icons\actions\1.png
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\popupresource\newpopup.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\85dfff4d0bbb176badf318f20a9ba2c3.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\d50f9c2d23adc33d7bfe4b61804ab46f.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\82154ed1505113a06a684af92c2c77a6.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\app_api.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\cd358f03c0a0d436356713ed29cdfa06.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\ea29fcd5d0c56d627ca7f1195e17098e.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\4ed56c470e0b48a6518408a8719a0988.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\b3c9509e4aa5201dc46272c47ee19716.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\installer.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\e86aaaf28193e1e12c0adf6d2f0cb83b.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\af4960508ecf41356aa5ecbfa09fd23d.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\popupresource\popup.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\f0d0d89198b72a4b60910610fa69273c.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\91f09d87386a9359970914a7a3eeb32c.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\d31e66dd78069ac6c605e9a0e0bbd7b6.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\pageaction.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\c82abefe5419be160c87292930a2b6aa.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\d0a76ce2889885f7dcb3368298e1336c.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\a89f8033239e92703490002478396dc9.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\980370a6b2c1d62985b1e68c84eec359.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\e620a350967a8d5226b8bbd954b0139f.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\popup.html
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\chromecorefilesindex.txt
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\background.html
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\icons\icon48.png
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\fd4efb5e02bc8048778679be7caa1949.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\334.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\220.js
%ProgramFiles(x86)%\0e172a34-23a6-445e-8dab-219c4d6bdc36\51f5d9b0-26da-45b0-8af3-5649c5093066.dll
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\97.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\334.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\338.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\339.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\345.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\349.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\354.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\376.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\378.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\380.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\390.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\391.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\288.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\289.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\4.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\93.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\usercode\background.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\usercode\extension.js
%TEMP%\nsle061.tmp\6ee4d918-cb94-480f-a0ab-3c8275baf07b-7.dll
%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-6.exe
%ProgramFiles(x86)%\i - cinema\b2c8c29d-cfd7-4baa-94e1-4c5c25e3a442.dll
%ProgramFiles(x86)%\0e172a34-23a6-445e-8dab-219c4d6bdc36\d16195e2-f8da-4e66-8cd1-5e2e2a42300a.dll
%CommonProgramFiles(x86)%\51aa00f1-68c2-4ace-88db-7be7c4504cb0.dll
%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-7.exe
%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-64.exe
%ProgramFiles(x86)%\i - cinema\f938dd4d-fdb5-497c-bdcf-6a85ccc63635.dll
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\78.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\91.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\281.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\277.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\273.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\223.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\80.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\288.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\102.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\78.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\17.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\47.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\13.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\usercode\extension.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\usercode\background.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\settings.json
%TEMP%\nsle061.tmp\6ee4d918-cb94-480f-a0ab-3c8275baf07b-11.dll
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\64.js
%ProgramFiles(x86)%\i - cinema\bgnova.html
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins.json
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\102.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\14.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\180.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\192.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\200.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\223.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\246.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\249.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\250.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\251.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\plugins\253.js
%TEMP%\nsle061.tmp\{bbb34c27-a06b-455c-b3fb-38001441471b}\manifest.xml
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\21102f77ea9ae31f3fed23dd771d82c6.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\246.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\55e59a1696545f82baf30d63f99c7b84.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\pageaction.js
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\googleupdatebroker.exe
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\googleupdateondemand.exe
%ProgramFiles(x86)%\i - cinema\b2c8c29d-cfd7-4baa-94e1-4c5c25e3a442.crx
%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-3.exe
%TEMP%\nsle061.tmp\vopyuuu.dll
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\4ece79847705542eb0ef504f09b86130.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\main.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\55e59a1696545f82baf30d63f99c7b84.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\21102f77ea9ae31f3fed23dd771d82c6.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\popupresource\popup.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\popupresource\newpopup.js
%ProgramFiles(x86)%\globalupdate\update\googleupdate.exe
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\npgoogleupdate4.dll
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\85dfff4d0bbb176badf318f20a9ba2c3.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\app_api.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\cd358f03c0a0d436356713ed29cdfa06.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\ea29fcd5d0c56d627ca7f1195e17098e.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\4ed56c470e0b48a6518408a8719a0988.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\b3c9509e4aa5201dc46272c47ee19716.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\installer.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\e86aaaf28193e1e12c0adf6d2f0cb83b.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\af4960508ecf41356aa5ecbfa09fd23d.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\f0d0d89198b72a4b60910610fa69273c.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\fd4efb5e02bc8048778679be7caa1949.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\91f09d87386a9359970914a7a3eeb32c.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\d50f9c2d23adc33d7bfe4b61804ab46f.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\82154ed1505113a06a684af92c2c77a6.js
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\psmachine.dll
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\psuser.dll
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\googleupdatehelper.msi
%TEMP%\nsle061.tmp\fcebyp.dll
%TEMP%\nsle061.tmp\gpiaw.dll
%TEMP%\nsle061.tmp\kgqstmuf.dll
%TEMP%\nsle061.tmp\fgvcbv.dll
%TEMP%\nsle061.tmp\dwlqs.dll
%TEMP%\nsle061.tmp\system.dll
%TEMP%\nsle061.tmp\poxyqyas.dll
%ProgramFiles(x86)%\i - cinema\utils.exe
%TEMP%\nsle061.tmp\128590
%TEMP%\nsle061.tmp\8334
%ProgramFiles(x86)%\i - cinema\uninstall.exe
%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-10.exe
%TEMP%\nsle061.tmp\jjfxkflre.dll
%TEMP%\comh.51851\googlecrashhandler.exe
%TEMP%\comh.51851\googleupdatebroker.exe
%TEMP%\comh.51851\googleupdatehelper.msi
%TEMP%\comh.51851\googleupdateondemand.exe
%TEMP%\comh.51851\goopdate.dll
%TEMP%\comh.51851\goopdateres_en.dll
%TEMP%\comh.51851\npgoogleupdate4.dll
%TEMP%\comh.51851\psmachine.dll
%TEMP%\comh.51851\psuser.dll
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\googleupdate.exe
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\goopdate.dll
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\googlecrashhandler.exe
%ProgramFiles(x86)%\globalupdate\update\1.3.25.0\goopdateres_en.dll
%TEMP%\comh.51851\googleupdate.exe
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\lib\d31e66dd78069ac6c605e9a0e0bbd7b6.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\c82abefe5419be160c87292930a2b6aa.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\4ece79847705542eb0ef504f09b86130.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\d0a76ce2889885f7dcb3368298e1336c.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\9.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\391.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\14.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\380.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\289.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\334.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\246.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\220.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\97.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\64.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\223.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\195.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\19.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\80.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\78.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\17.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\47.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\13.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\usercode\extension.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\usercode\background.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\settings.json
%TEMP%\msid02a.log
%TEMP%\nsle061.tmp\6ee4d918-cb94-480f-a0ab-3c8275baf07b-3.dll
%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b.crx
%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-11.exe
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\288.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\102.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\337.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\7.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\345.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\980370a6b2c1d62985b1e68c84eec359.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\e620a350967a8d5226b8bbd954b0139f.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\popup.html
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\chromecorefilesindex.txt
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\background.html
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\icons\icon48.png
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\icons\actions\1.png
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\icons\icon16.png
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\icons\icon128.png
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\manifest.json
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins.json
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\manifest.xml
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\api\a89f8033239e92703490002478396dc9.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\339.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\273.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\192.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\253.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\354.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\200.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\378.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\93.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\91.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\390.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\281.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\4.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\376.js
%LOCALAPPDATA%\google\chrome\user data\default\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\extensiondata\plugins\180.js
%APPDATA%\opera software\opera stable\extensions\dimfohdigjaffdaanhmbocfkpolglnjk\1.26.125_0\js\main.js
%CommonProgramFiles(x86)%\0e172a34-23a6-445e-8dab-219c4d6bdc36.dll

Удаляет следующие файлы

%TEMP%\nsle061.tmp\8334
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\bzjx5bke\financeflick_com[1]

Подменяет следующие файлы

%TEMP%\nsle061.tmp\8334
%LOCALAPPDATA%\Google\Chrome\User Data\Default\Cookies-journal
%APPDATA%\Opera Software\Opera Stable\Cookies-journal

Сетевая активность

TCP

Запросы HTTP GET

http://er####.#ropopenobject.com/utility.gif?re##########################################################################
http://js.####openobject.com/plugin/apps/61365/manifest/1_36_01_22/nova/manifest.xml?ve##############
http://er####.#ropopenobject.com/utility.gif?re#################################################################################
http://lo##.##opopenobject.com/monetization.gif?ra###############################################################################################################################################...
http://up####.#ropopenobject.com/omaha/DF262D06-B8AC-4B5F-B970-0939E2155C4F/1/update.xml?ra#######
http://oc##.thawte.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBQwF4prw9S7mCbCEHD%2Fyl6nWPkczAQUe1tFz6%2FOy3r9MZIaarbzRutXSFACEEeXTXhzpbyrDS%2BzcBkvzl4%3D
http://up####.#ropopenobject.com/omaha/DF262D06-B8AC-4B5F-B970-0939E2155C4F/1/update.xml?ra######################################################################################################...
http://up####.#ropopenobject.com/omaha/430FD4D0-B729-4F61-AA34-91526481799D/1/ping.xml?ra#######
http://er####.#ropopenobject.com/utility.gif?re###############################################################################
http://er####.#ropopenobject.com/utility.gif?re##################################################################################
http://er####.#ropopenobject.com/utility.gif?re#########################################################################################
http://er####.#ropopenobject.com/utility.gif?re#####################################################################################
http://er####.#ropopenobject.com/utility.gif?re############################################################################
http://er####.#ropopenobject.com/utility.gif?re########################################################################
http://lo##.##opopenobject.com/monetization.gif?ev###############################################################################################################################################...
http://er####.#ropopenobject.com/installer-error.gif?ac##########################################################################################################################################...
http://st###.##opopenobject.com/installer.gif?ac#################################################################################################################################################...
http://su####-smiles.com/
http://ip###api.com/
http://www.microsoft.com/pki/certs/MicRooCerAut_2010-06-23.crt
http://up####.#ropopenobject.com/omaha/DF262D06-B8AC-4B5F-B970-0939E2155C4F/1/ping.xml?ra#######
http://st###.##opopenobject.com/stats.gif?ac#####################################################################################################################################################...

'st###search.com':443

'fi####eflick.com':443

'we###esszap.com':443

'go###eapis.com':443

UDP

DNS ASK er####.#ropopenobject.com
DNS ASK st###search.com
DNS ASK microsoft.com
DNS ASK ip###api.com
DNS ASK su####-smiles.com
DNS ASK st###.##opopenobject.com
DNS ASK fi####eflick.com
DNS ASK lo##.##opopenobject.com
DNS ASK we###esszap.com
DNS ASK go###eapis.com
DNS ASK up####.#ropopenobject.com
DNS ASK oc##.thawte.com
DNS ASK js.####openobject.com

Другое

Создает и запускает на исполнение

'%TEMP%\comh.51851\googleupdate.exe' /silent /install "appguid={df262d06-b8ac-4b5f-b970-0939e2155c4f}&appname=a9d30bc1-b9de-44ac-baab-d2ef2054fc4f&needsadmin=True&lang=en"
'%ProgramFiles(x86)%\globalupdate\update\googleupdate.exe' /regsvc
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-3.exe' /rawdata=xWD+qzNf61XeKnvUDrc823vshDIPK5VwSzaahWeVvyPU7uFc/Vhse7RWn+Wq2IwXYzzFYdeb/hjALp9DyNgEjFAtqIi55fEFyI9BosEj9mRBtnCmCinS4JscEUe4RvMNkoCDP2imE3hlZgNtQRhOtg+df4NNzRUMuLPcZFh3cN4r7ABe/MRalkFj...
'%ProgramFiles(x86)%\globalupdate\update\googleupdate.exe' /regserver
'%ProgramFiles(x86)%\globalupdate\update\googleupdate.exe' /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB2ZXJzaW9uPSIxLjMuMjUuMCIgaXNtYWNoaW5lPSIxIiBzZXNzaW9uaWQ9Ins5QzE0NTBEOC1DRTc0LTQ5RTAtOTMyOS02MzEyNjhEM0I...
'%ProgramFiles(x86)%\globalupdate\update\googleupdate.exe' /handoff "appguid={df262d06-b8ac-4b5f-b970-0939e2155c4f}&appname=a9d30bc1-b9de-44ac-baab-d2ef2054fc4f&needsadmin=True&lang=en" /installsource otherinstallcmd /sessionid "{9C1450D8-CE74-49E0-932...
'%ProgramFiles(x86)%\globalupdate\update\googleupdate.exe' /svc
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-11.exe' /rawdata=UWnMRVdml5kiFWtGg9HoGe500/r7H7W73Nh4WCL0vNuSctdOk49qFtE4e+UyuuC+ea6sBzvv6C16p78T8G4XAdxEq4M6lyzbTRZn4V410S4MX+FHG+/f2X3MI9+0s2Q+9dg+1CinUZxHl9Y0RfAfK66bDxZkROy3DjXFppb1UNwMQ6K0AiX78bx2...
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-7.exe' /rawdata=goCS9GtBzB1pLsKvnZkEJpFDD6nXt4JM2bjhnY/ZvOD/przJ1ZLnM3SL/ioWp15Ga2tD/DUu+mvY1hw6h3zT/2uZKip9fFo10xxKK2hafZfmLhpjL+cOy/KktEi7Gw2AA9gJZBxMKtlM2R+AOnaqGMdhbvClNNG289a9INCdx24p/OUIUpsq022z...
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-7.exe' /rawdata=tWuo7FHLJd9/i+mjfO+cF6MDC90nb+ywwKwnAxtfGIkn9v4QjRyeYgWIPXqLUIyaAdLiV6OkKxgdSMzpdNYP7x4syBLSdTUL1SGP3x+l2fFUERwfa+dA706hLFE45FrIDdExQ7/uSQgpEkSLHOUBx9de89bmvrh7fnH6+pwmp3QuT83F+SYYGRqq...
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-6.exe' /rawdata=wUzCfDgmD71S1jko09AcztDen2GyXC7tRHI2ULNmMioVH43I1M17qTmTtsC0bn0yG6PvJRNXzk+LadLEzZKwzL2fxFMe5MRIROofU+TkP1OeyaYwiRekwipYUvRg1Ug0DcvJya+8YjnXWARQ6m1PvDIVvTZ8DFiatcGgxVIA8xEpUIWQsXQS4JOQ...
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-3.exe' /rawdata=xWD+qzNf61XeKnvUDrc823vshDIPK5VwSzaahWeVvyPU7uFc/Vhse7RWn+Wq2IwXYzzFYdeb/hjALp9DyNgEjFAtqIi55fEFyI9BosEj9mRBtnCmCinS4JscEUe4RvMNkoCDP2imE3hlZgNtQRhOtg+df4NNzRUMuLPcZFh3cN4r7ABe/MRalkFj...' (со скрытым окном)
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-11.exe' /rawdata=UWnMRVdml5kiFWtGg9HoGe500/r7H7W73Nh4WCL0vNuSctdOk49qFtE4e+UyuuC+ea6sBzvv6C16p78T8G4XAdxEq4M6lyzbTRZn4V410S4MX+FHG+/f2X3MI9+0s2Q+9dg+1CinUZxHl9Y0RfAfK66bDxZkROy3DjXFppb1UNwMQ6K0AiX78bx2...' (со скрытым окном)
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-7.exe' /rawdata=goCS9GtBzB1pLsKvnZkEJpFDD6nXt4JM2bjhnY/ZvOD/przJ1ZLnM3SL/ioWp15Ga2tD/DUu+mvY1hw6h3zT/2uZKip9fFo10xxKK2hafZfmLhpjL+cOy/KktEi7Gw2AA9gJZBxMKtlM2R+AOnaqGMdhbvClNNG289a9INCdx24p/OUIUpsq022z...' (со скрытым окном)
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-7.exe' /rawdata=tWuo7FHLJd9/i+mjfO+cF6MDC90nb+ywwKwnAxtfGIkn9v4QjRyeYgWIPXqLUIyaAdLiV6OkKxgdSMzpdNYP7x4syBLSdTUL1SGP3x+l2fFUERwfa+dA706hLFE45FrIDdExQ7/uSQgpEkSLHOUBx9de89bmvrh7fnH6+pwmp3QuT83F+SYYGRqq...' (со скрытым окном)
'%ProgramFiles(x86)%\i - cinema\6ee4d918-cb94-480f-a0ab-3c8275baf07b-6.exe' /rawdata=wUzCfDgmD71S1jko09AcztDen2GyXC7tRHI2ULNmMioVH43I1M17qTmTtsC0bn0yG6PvJRNXzk+LadLEzZKwzL2fxFMe5MRIROofU+TkP1OeyaYwiRekwipYUvRg1Ug0DcvJya+8YjnXWARQ6m1PvDIVvTZ8DFiatcGgxVIA8xEpUIWQsXQS4JOQ...' (со скрытым окном)

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней