Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKCU>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'Chrome32.exe' = '%APPDATA%\Google (x86)\Chrome32.exe'
Вредоносные функции
Читает файлы, отвечающие за хранение паролей сторонними программами
- %HOMEPATH%\desktop\adhd_and_obesity.docx
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
- %HOMEPATH%\desktop\archer.avi
- %HOMEPATH%\desktop\delete.avi
- %HOMEPATH%\desktop\hadac_newsletter_july_2010_final.docx
- %HOMEPATH%\desktop\hanni_umami_chapter.doc
- %HOMEPATH%\desktop\join.avi
- %HOMEPATH%\desktop\lisp_success.doc
- %HOMEPATH%\desktop\nwfieldnotes1966.docx
- %HOMEPATH%\desktop\sdszfo.docx
- %HOMEPATH%\desktop\split.avi
Изменения в файловой системе
Создает следующие файлы
- %APPDATA%\google (x86)\chrome32.exe
- %ProgramFiles(x86)%\steam\resource\overlay_polish.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_norwegian.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_koreana.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_korean.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_japanese.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_italian.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_hungarian.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_greek.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_german.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_french.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_finnish.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_english.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_dutch.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_danish.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_czech.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_brazilian.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_bulgarian.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_portuguese.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_romanian.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_french.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_finnish.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_english.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_dutch.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_danish.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_czech.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_bulgarian.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_ukrainian.txt.v315
- %ProgramFiles(x86)%\steam\public\url_list.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_turkish.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_thai.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_tchinese.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_swedish.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_spanish.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_schinese.txt.v315
- %ProgramFiles(x86)%\steam\resource\overlay_russian.txt.v315
- %ProgramFiles(x86)%\steam\resource\camera1.wav.v315
- %ProgramFiles(x86)%\steam\public\steamui_ukrainian.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_greek.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_german.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_english.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_dutch.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_danish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_czech.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_bulgarian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_brazilian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_ukrainian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_turkish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_thai.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_tchinese.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_swedish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_spanish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_schinese.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_russian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_greek.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_hungarian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_turkish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_postlogon_greek.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_romanian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_thai.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_tchinese.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_swedish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_spanish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_schinese.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_russian.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_brazilian.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_german.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_finnish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_polish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_norwegian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_koreana.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_korean.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_japanese.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_italian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_portuguese.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_thai.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_hungarian.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_finnish.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_english.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_dutch.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_danish.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_czech.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_bulgarian.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_brazilian.txt.v315
- %ProgramFiles(x86)%\steam\servers\game_ready.wav.v315
- %ProgramFiles(x86)%\steam\resource\warning.wav.v315
- %ProgramFiles(x86)%\steam\resource\voice_ringing.wav.v315
- %ProgramFiles(x86)%\steam\resource\voice_dialing.wav.v315
- %ProgramFiles(x86)%\steam\resource\voice_busy.wav.v315
- %ProgramFiles(x86)%\steam\resource\vgui_ukrainian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_turkish.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_thai.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_french.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_german.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_greek.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_hungarian.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_ukrainian.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_turkish.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_thai.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_tchinese.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_swedish.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_spanish.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_schinese.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_tchinese.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_romanian.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_portuguese.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_polish.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_norwegian.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_koreana.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_korean.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_japanese.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_italian.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_romanian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_swedish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamui_french.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_schinese.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_japanese.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_turkish.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_thai.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_tchinese.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_swedish.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_spanish.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_schinese.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_russian.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_romanian.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_portuguese.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_polish.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_norwegian.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_koreana.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_korean.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_japanese.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_brazilian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_bulgarian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_czech.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_danish.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_russian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_romanian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_portuguese.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_polish.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_norwegian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_koreana.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_korean.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_spanish.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_italian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_hungarian.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_greek.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_german.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_french.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_finnish.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_english.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_dutch.txt.v315
- %ProgramFiles(x86)%\steam\resource\vgui_italian.txt.v315
- %ProgramFiles(x86)%\steam\resource\platform_ukrainian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_portuguese.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_polish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_norwegian.txt.v315
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\groovemui.xml.v315
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\infopathmui.xml.v315
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\office32mui.xml.v315
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proofing.xml.v315
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml.v315
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml.v315
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml.v315
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml.v315
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\branding.xml.v315
- %ProgramFiles%\microsoft office\office14\sketchpadtestschema.xml.v315
- %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme.txt.v315
- %ProgramFiles%\microsoft office\office14\microsoft.businessdata.xml.v315
- %ProgramFiles%\microsoft office\office14\microsoft.sharepoint.businessdata.administration.client.xml.v315
- %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.xml.xml.v315
- %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.semitrust.xml.v315
- %ProgramFiles%\microsoft office\office14\microsoft.office.businessdata.xml.v315
- %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtimeui.xml.v315
- %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtime.xml.v315
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\far2\documentation\rus\far_faq.txt.v315
- %ProgramFiles%\java\jre1.8.0_45\readme.txt.v315
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\accessmuiset.xml.v315
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\setup.xml.v315
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemuiset.xml.v315
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\officemui.xml.v315
- %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.v315
- %ProgramFiles(x86)%\steam\skins\skins_readme.txt.v315
- %ProgramFiles%\microsoft office\office14\splashscreen.bmp.v315
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.xml.v315
- %ProgramFiles(x86)%\qip 2012\unins000.dat.v315
- %ProgramFiles(x86)%\opera\launcher.visualelementsmanifest.xml.v315
- %ProgramFiles(x86)%\opera\installation_status.xml.v315
- %ProgramFiles(x86)%\mozilla thunderbird\blocklist.xml.v315
- %ProgramFiles(x86)%\mirc\versions.txt.v315
- %ProgramFiles(x86)%\mirc\readme.txt.v315
- %ProgramFiles(x86)%\k-lite codec pack\unins000.dat.v315
- %ProgramFiles%\winrar\zipnew.dat.v315
- %ProgramFiles%\winrar\whatsnew.txt.v315
- %ProgramFiles%\winrar\readme.txt.v315
- %ProgramFiles%\winrar\rarnew.dat.v315
- %ProgramFiles%\winrar\rar.txt.v315
- %ProgramFiles%\winrar\license.txt.v315
- %LOCALAPPDATA%\adobe (x86)\acrord32.exe
- %ProgramFiles(x86)%\steam\thirdpartylegalnotices.doc.v315
- %ProgramFiles(x86)%\winamp\whatsnew.txt.v315
- %ProgramFiles(x86)%\qip 2012\unins000.msg.v315
- %ALLUSERSPROFILE%\microsoft toolkit\settings.xml.v315
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml.v315
- C:\far2\documentation\eng\arc_support.txt.v315
- C:\far2\plugins\ftp\notes_rus.txt.v315
- C:\far2\plugins\ftp\notes.txt.v315
- C:\far2\plugins\ftp\ftpcmds_rus.txt.v315
- C:\far2\plugins\ftp\ftpcmds.txt.v315
- C:\far2\documentation\rus\techinfo.txt.v315
- C:\far2\documentation\rus\plugins_review.txt.v315
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml.v315
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\setup.xml.v315
- C:\far2\documentation\rus\bug_report.txt.v315
- C:\far2\documentation\rus\arc_support.txt.v315
- C:\far2\documentation\eng\techinfo.txt.v315
- C:\far2\documentation\eng\plugins_review.txt.v315
- C:\far2\documentation\eng\plugins_install.txt.v315
- C:\far2\documentation\eng\far_faq.txt.v315
- C:\far2\documentation\eng\bug_report.txt.v315
- C:\far2\documentation\rus\plugins_install.txt.v315
- %ProgramFiles(x86)%\steam\servers\serverbrowser_russian.txt.v315
- %ProgramFiles(x86)%\k-lite codec pack\icaros\ffmpeg license.txt.v315
- %ProgramFiles(x86)%\steam\friends\friend_online.wav.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_korean.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_japanese.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_italian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_hungarian.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_greek.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_german.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_french.txt.v315
- %ProgramFiles(x86)%\k-lite codec pack\icaros\icaros license.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_dutch.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_danish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_czech.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_brazilian.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt.v315
- %ProgramFiles(x86)%\steam\public\steamclean_finnish.txt.v315
- %ProgramFiles(x86)%\steam\friends\friend_join.wav.v315
- %ProgramFiles(x86)%\steam\public\steamclean_english.txt.v315
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\onenotemui.xml.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_korean.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_japanese.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_italian.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_hungarian.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_greek.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_german.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_french.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_finnish.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_english.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_dutch.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_danish.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_czech.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_bulgarian.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_brazilian.txt.v315
- %ProgramFiles(x86)%\steam\friends\message.wav.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_koreana.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_norwegian.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_polish.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_portuguese.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt.v315
- %ProgramFiles(x86)%\steam\logs\content_log.txt.v315
- %ProgramFiles(x86)%\steam\logs\connection_log.txt.v315
- %ProgramFiles(x86)%\steam\logs\configstore_log.txt.v315
- %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt.v315
- %ProgramFiles(x86)%\steam\html5app\keybinds.cfg.v315
- %ProgramFiles(x86)%\steam\friends\voice_hang_up.wav.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_ukrainian.txt.v315
- %ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_tchinese.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_swedish.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_spanish.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_schinese.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_russian.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_romanian.txt.v315
- %ProgramFiles(x86)%\steam\friends\trackerui_turkish.txt.v315
- %ProgramFiles(x86)%\winamp\plugins\winampflv.swf.v315
Самоудаляется.
Изменяет расширения файлов пользовательских данных (Trojan.Encoder).
Другое
Создает и запускает на исполнение
- '%LOCALAPPDATA%\adobe (x86)\acrord32.exe' <Полный путь к файлу>
