Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.Siggen12.26231

Добавлен в вирусную базу Dr.Web: 2021-03-06

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения
Устанавливает следующие настройки сервисов
  • [<HKLM>\System\CurrentControlSet\Services\ClickToRunSvc] 'Start' = '00000002'
  • [<HKLM>\System\CurrentControlSet\Services\ClickToRunSvc] 'ImagePath' = '"%CommonProgramFiles%\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service'
Создает следующие сервисы
  • 'ClickToRunSvc' "%CommonProgramFiles%\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service
Изменения в файловой системе
Создает следующие файлы
  • %TEMP%\office.validateresult.scratch
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.zh-cn.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.vi-vn.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.uk-ua.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.tr-tr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.th-th.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.sv-se.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.sr-latn-rs.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.sl-si.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.sk-sk.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ru-ru.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ro-ro.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.pt-pt.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.pt-br.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.pl-pl.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.nl-nl.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.nb-no.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ms-my.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.lv-lv.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.lt-lt.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ko-kr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.kk-kz.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ja-jp.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.it-it.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.id-id.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.hu-hu.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.hr-hr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.hi-in.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.fr-fr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.he-il.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.zh-tw.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rui.dll
  • %ProgramFiles%\microsoft office 15\clientx64\officeclicktorun.exe
  • %ProgramFiles%\microsoft office 15\clientx64\integratedoffice.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\vcruntime140.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\vccorlib140.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\ucrtbase.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\subsystemcontroller.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\streamserver.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\sharedperformance.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\servicewatcherschedule.xml
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\repoman.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\offreg.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\officeclicktorun.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\officec2rcom.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\msvcr120.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvmanifest.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\msvcp140.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\msvcp120.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\msix.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\mavinject32.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\integratedoffice.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\inspectorofficegadget.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\i640.hash
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\i640.cab.cat
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\frequentofficeupdateschedule.xml
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\cpprestsdk.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\concrt140.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\clienteventlogmessages.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\clientcapabilities.json
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.fi-fi.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.et-ee.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.es-es.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-process-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-private-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-multibyte-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-math-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-locale-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-heap-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-filesystem-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-environment-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-convert-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-conio-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-xstate-l2-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-timezone-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-synch-l1-2-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-processthreads-l1-1-1.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-localization-l1-2-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-file-l2-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\officec2r49214ed7-bc99-4a40-bbf1-a8ddebf3fa18\bit4405.tmp
  • %TEMP%\bit3860.tmp
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5officec2r7f8c7488-9de7-406c-abb2-6458531a5500\versiondescriptor.xml
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5officec2r7f8c7488-9de7-406c-abb2-6458531a5500\v64.hash
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\bit5add.tmp
  • %TEMP%\bit4eac.tmp
  • %LOCALAPPDATA%\microsoft\office\16.0\<Имя файла>.exe_rules.xml
  • %TEMP%\ghftrytymkr-20210306-1404.log
  • %TEMP%\office.validateerror.scratch
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-stdio-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-string-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-runtime-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-time-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.en-us.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-utility-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.el-gr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.de-de.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.da-dk.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.cs-cz.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.bg-bg.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ar-sa.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rheartbeatconfig.xml
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2r64.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2r32.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvshnotify.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvscripting.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvpolicy.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\officec2rclient.exe
  • <SYSTEM32>\config\systemprofile\appdata\local\microsoft\office\otele\officeclicktorun.exe.db-shm
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvvirtualization.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvsubsystems64.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvsubsystems32.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvsubsystemcontroller.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvstreamingmanager.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvapi.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvintegration.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvfilesystemmetadata.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvclientisv.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvclient.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvcleaner.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvcatalog.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\apiclient.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvorchestration.dll
  • %LOCALAPPDATA%\microsoft\office\otele\officeclicktorun.exe.db-shm
Присваивает атрибут 'скрытый' для следующих файлов
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\bit5add.tmp
  • %TEMP%\officec2r49214ed7-bc99-4a40-bbf1-a8ddebf3fa18\bit4405.tmp
Удаляет следующие файлы
  • %TEMP%\office.validateerror.scratch
  • %TEMP%\office.validateresult.scratch
  • %TEMP%\v64_16.0.12527.21594checkreachable338391dc-6e6a-486a-8b56-9c0fbdb8bd53
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\v64.hash
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\v64_16.0.12527.21594.cab
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\versiondescriptor.xml
  • %TEMP%\i640checkreachable4959b024-94bf-4eed-a181-3a8e3b60c9d7
  • %TEMP%\officec2r49214ed7-bc99-4a40-bbf1-a8ddebf3fa18\i640.cab
Перемещает следующие файлы
  • %TEMP%\bit4eac.tmp в %TEMP%\v64_16.0.12527.21594checkreachable338391dc-6e6a-486a-8b56-9c0fbdb8bd53
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.uk-ua.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.uk-ua.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.tr-tr.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.tr-tr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.th-th.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.th-th.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.sv-se.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.sv-se.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.sr-latn-rs.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.sr-latn-rs.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.sl-si.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.sl-si.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.sk-sk.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.sk-sk.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ru-ru.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.ru-ru.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ro-ro.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.ro-ro.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.pt-pt.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.pt-pt.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.pt-br.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.pt-br.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.pl-pl.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.pl-pl.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.nl-nl.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.nl-nl.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.nb-no.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.nb-no.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ms-my.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.ms-my.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.lv-lv.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.lv-lv.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.lt-lt.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.lt-lt.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ko-kr.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.ko-kr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.kk-kz.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.kk-kz.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ja-jp.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.ja-jp.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.it-it.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.it-it.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.id-id.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.id-id.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.hu-hu.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.hu-hu.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.hr-hr.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.hr-hr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.hi-in.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.hi-in.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.fr-fr.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.fr-fr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.he-il.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.he-il.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.vi-vn.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.vi-vn.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.zh-cn.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.zh-cn.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\ucrtbase.dll в %CommonProgramFiles%\microsoft shared\clicktorun\ucrtbase.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\subsystemcontroller.man в %CommonProgramFiles%\microsoft shared\clicktorun\subsystemcontroller.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\streamserver.dll в %CommonProgramFiles%\microsoft shared\clicktorun\streamserver.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\sharedperformance.man в %CommonProgramFiles%\microsoft shared\clicktorun\sharedperformance.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\servicewatcherschedule.xml в %CommonProgramFiles%\microsoft shared\clicktorun\servicewatcherschedule.xml
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\repoman.dll в %CommonProgramFiles%\microsoft shared\clicktorun\repoman.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\offreg.dll в %CommonProgramFiles%\microsoft shared\clicktorun\offreg.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\officeclicktorun.exe в %CommonProgramFiles%\microsoft shared\clicktorun\officeclicktorun.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\officec2rcom.dll в %CommonProgramFiles%\microsoft shared\clicktorun\officec2rcom.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\officec2rclient.exe в %CommonProgramFiles%\microsoft shared\clicktorun\officec2rclient.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\msvcr120.dll в %CommonProgramFiles%\microsoft shared\clicktorun\msvcr120.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\msvcp140.dll в %CommonProgramFiles%\microsoft shared\clicktorun\msvcp140.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\msix.dll в %CommonProgramFiles%\microsoft shared\clicktorun\msix.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvorchestration.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvorchestration.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\mavinject32.exe в %CommonProgramFiles%\microsoft shared\clicktorun\mavinject32.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\integratedoffice.exe в %CommonProgramFiles%\microsoft shared\clicktorun\integratedoffice.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\inspectorofficegadget.exe в %CommonProgramFiles%\microsoft shared\clicktorun\inspectorofficegadget.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\i640.hash в %CommonProgramFiles%\microsoft shared\clicktorun\i640.hash
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\i640.cab.cat в %CommonProgramFiles%\microsoft shared\clicktorun\i640.cab.cat
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\frequentofficeupdateschedule.xml в %CommonProgramFiles%\microsoft shared\clicktorun\frequentofficeupdateschedule.xml
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\cpprestsdk.dll в %CommonProgramFiles%\microsoft shared\clicktorun\cpprestsdk.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\concrt140.dll в %CommonProgramFiles%\microsoft shared\clicktorun\concrt140.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\clienteventlogmessages.man в %CommonProgramFiles%\microsoft shared\clicktorun\clienteventlogmessages.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\clientcapabilities.json в %CommonProgramFiles%\microsoft shared\clicktorun\clientcapabilities.json
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rui.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rui.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.zh-tw.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.zh-tw.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.fi-fi.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.fi-fi.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.et-ee.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.et-ee.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.es-es.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.es-es.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-stdio-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-stdio-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-runtime-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-runtime-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-process-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-process-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-private-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-private-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-multibyte-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-multibyte-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-math-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-math-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-locale-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-locale-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-heap-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-heap-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-filesystem-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-filesystem-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-environment-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-environment-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-convert-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-convert-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-conio-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-conio-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-xstate-l2-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-core-xstate-l2-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-timezone-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-core-timezone-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-synch-l1-2-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-core-synch-l1-2-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-processthreads-l1-1-1.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-core-processthreads-l1-1-1.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-localization-l1-2-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-core-localization-l1-2-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-file-l2-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-core-file-l2-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-core-file-l1-2-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-core-file-l1-2-0.dll
  • %TEMP%\officec2r49214ed7-bc99-4a40-bbf1-a8ddebf3fa18\bit4405.tmp в %TEMP%\officec2r49214ed7-bc99-4a40-bbf1-a8ddebf3fa18\i640.cab
  • %TEMP%\bit3860.tmp в %TEMP%\i640checkreachable4959b024-94bf-4eed-a181-3a8e3b60c9d7
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5officec2r7f8c7488-9de7-406c-abb2-6458531a5500\versiondescriptor.xml в %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\versiondescriptor.xml
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5officec2r7f8c7488-9de7-406c-abb2-6458531a5500\v64.hash в %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\v64.hash
  • %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\bit5add.tmp в %TEMP%\officec2rcfd8f10c-9116-4e67-8f31-88e47e5bf1e5\v64_16.0.12527.21594.cab
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-time-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-time-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-utility-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-utility-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\api-ms-win-crt-string-l1-1-0.dll в %CommonProgramFiles%\microsoft shared\clicktorun\api-ms-win-crt-string-l1-1-0.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\apiclient.dll в %CommonProgramFiles%\microsoft shared\clicktorun\apiclient.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.en-us.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.en-us.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvcatalog.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvcatalog.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.el-gr.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.el-gr.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.de-de.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.de-de.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.da-dk.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.da-dk.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.cs-cz.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.cs-cz.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.bg-bg.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.bg-bg.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rintl.ar-sa.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2rintl.ar-sa.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2rheartbeatconfig.xml в %CommonProgramFiles%\microsoft shared\clicktorun\c2rheartbeatconfig.xml
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2r64.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2r64.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\c2r32.dll в %CommonProgramFiles%\microsoft shared\clicktorun\c2r32.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvshnotify.exe в %CommonProgramFiles%\microsoft shared\clicktorun\appvshnotify.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvscripting.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvscripting.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\msvcp120.dll в %CommonProgramFiles%\microsoft shared\clicktorun\msvcp120.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\vccorlib140.dll в %CommonProgramFiles%\microsoft shared\clicktorun\vccorlib140.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvmanifest.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvmanifest.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvvirtualization.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvisvvirtualization.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvsubsystems64.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvisvsubsystems64.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvsubsystems32.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvisvsubsystems32.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvsubsystemcontroller.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvisvsubsystemcontroller.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvstreamingmanager.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvisvstreamingmanager.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvisvapi.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvisvapi.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvintegration.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvintegration.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvfilesystemmetadata.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvfilesystemmetadata.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvclientisv.man в %CommonProgramFiles%\microsoft shared\clicktorun\appvclientisv.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvclient.man в %CommonProgramFiles%\microsoft shared\clicktorun\appvclient.man
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvcleaner.exe в %CommonProgramFiles%\microsoft shared\clicktorun\appvcleaner.exe
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\appvpolicy.dll в %CommonProgramFiles%\microsoft shared\clicktorun\appvpolicy.dll
  • %CommonProgramFiles%\microsoft shared\clicktorunofficec2r16b0ad51-5f54-4531-8d02-9030ef293853\vcruntime140.dll в %CommonProgramFiles%\microsoft shared\clicktorun\vcruntime140.dll
Подменяет следующие файлы
  • %TEMP%\office.validateresult.scratch
  • %TEMP%\office.validateerror.scratch
Сетевая активность
Подключается к
  • 'ec#.#ffice.com':443
  • 'ne#######s.officeapps.live.com':443
  • 'mr########gr.officeapps.live.com':443
  • 'officecdn.microsoft.com':80
  • 'of#######.#icrosoft.com.edgesuite.net':80
  • 'ne###.##ficeapps.live.com':443
TCP
Запросы HTTP GET
  • http://of#######.#icrosoft.com.edgesuite.net/pr/64256afe-f5d9-4f86-8936-8840a6a4f5be/Office/Data/v64_16.0.12527.21594.cab
  • http://of#######.#icrosoft.com.edgesuite.net/pr/64256afe-f5d9-4f86-8936-8840a6a4f5be/Office/Data/16.0.12527.21594/i640.cab
  • 'ec#.#ffice.com':443
  • 'mr########gr.officeapps.live.com':443
  • 'ne#######s.officeapps.live.com':443
  • 'ne###.##ficeapps.live.com':443
  • UDP
    • DNS ASK ec#.#ffice.com
    • DNS ASK ne#######s.officeapps.live.com
    • DNS ASK mr########gr.officeapps.live.com
    • DNS ASK officecdn.microsoft.com
    • DNS ASK of#######.#icrosoft.com.edgesuite.net
    • DNS ASK microsoft.com
    • DNS ASK ne###.##ficeapps.live.com
    Другое
    Создает и запускает на исполнение
    • '%CommonProgramFiles%\microsoft shared\clicktorun\officeclicktorun.exe' platform=x64 culture=es-es productstoadd=O365ProPlusRetail.16_es-es_x-none cdnbaseurl.16=http://officecdn.microsoft.com/pr/64256afe-f5d9-4f86-8936-8840a6a4f5be baseurl.16=http://officecdn.micro...
    • '%CommonProgramFiles%\microsoft shared\clicktorun\officeclicktorun.exe' /service
    • '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -NoProfile "$package = Get-AppxPackage Microsoft.Office.Desktop -allUsers; if (!$package) { $Error.Add(\"Package is not installed\")}; if ($error.Count -eq 0) { Out-File -FilePath '%TEMP%\Offic...' (со скрытым окном)
    Запускает на исполнение
    • '%WINDIR%\syswow64\windowspowershell\v1.0\powershell.exe' -NoProfile "$package = Get-AppxPackage Microsoft.Office.Desktop -allUsers; if (!$package) { $Error.Add(\"Package is not installed\")}; if ($error.Count -eq 0) { Out-File -FilePath '%TEMP%\Offic...

    Рекомендации по лечению

    1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
    2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
    Скачать Dr.Web

    По серийному номеру

    Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

    На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

    Скачать Dr.Web

    По серийному номеру

    1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
    2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
      • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
      • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
      • выключите устройство и включите его в обычном режиме.

    Подробнее о Dr.Web для Android

    Демо бесплатно на 14 дней

    Выдаётся при установке