Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.DownLoader38.48082

Добавлен в вирусную базу Dr.Web: 2021-05-06

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения
Создает или изменяет следующие файлы
  • <SYSTEM32>\tasks\services
Вредоносные функции
Внедряет код в
следующие системные процессы:
  • <SYSTEM32>\svchost.exe
Изменения в файловой системе
Создает следующие файлы
  • %TEMP%\_mei23882\vcruntime140.dll
  • %TEMP%\_mei23882\tcl\tzdata\canada\newfoundland
  • %TEMP%\_mei23882\tcl\tzdata\canada\pacific
  • %TEMP%\_mei23882\tcl\tzdata\canada\saskatchewan
  • %TEMP%\_mei23882\tcl\tzdata\canada\yukon
  • %TEMP%\_mei23882\tcl\tzdata\chile\continental
  • %TEMP%\_mei23882\tcl\tzdata\chile\easterisland
  • %TEMP%\_mei23882\tcl\tzdata\cuba
  • %TEMP%\_mei23882\tcl\tzdata\eet
  • %TEMP%\_mei23882\tcl\tzdata\est
  • %TEMP%\_mei23882\tcl\tzdata\est5edt
  • %TEMP%\_mei23882\tcl\tzdata\egypt
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+9
  • %TEMP%\_mei23882\tcl\tzdata\eire
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+0
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+1
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+10
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+11
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+12
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+2
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+3
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+4
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+5
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+6
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+7
  • %TEMP%\_mei23882\tcl\tzdata\canada\eastern
  • %TEMP%\_mei23882\tcl\tzdata\canada\mountain
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt+8
  • %TEMP%\_mei23882\tcl\tzdata\canada\atlantic
  • %TEMP%\_mei23882\tcl\tzdata\australia\darwin
  • %TEMP%\_mei23882\tcl\tzdata\australia\eucla
  • %TEMP%\_mei23882\tcl\tzdata\australia\hobart
  • %TEMP%\_mei23882\tcl\tzdata\australia\lhi
  • %TEMP%\_mei23882\tcl\tzdata\australia\lindeman
  • %TEMP%\_mei23882\tcl\tzdata\australia\lord_howe
  • %TEMP%\_mei23882\tcl\tzdata\australia\melbourne
  • %TEMP%\_mei23882\tcl\tzdata\australia\nsw
  • %TEMP%\_mei23882\tcl\tzdata\australia\north
  • %TEMP%\_mei23882\tcl\tzdata\australia\perth
  • %TEMP%\_mei23882\tcl\tzdata\australia\queensland
  • %TEMP%\_mei23882\tcl\tzdata\australia\south
  • %TEMP%\_mei23882\tcl\tzdata\australia\sydney
  • %TEMP%\_mei23882\tcl\tzdata\australia\tasmania
  • %TEMP%\_mei23882\tcl\tzdata\australia\victoria
  • %TEMP%\_mei23882\tcl\tzdata\australia\west
  • %TEMP%\_mei23882\tcl\tzdata\australia\yancowinna
  • %TEMP%\_mei23882\tcl\tzdata\brazil\acre
  • %TEMP%\_mei23882\tcl\tzdata\brazil\denoronha
  • %TEMP%\_mei23882\tcl\tzdata\brazil\east
  • %TEMP%\_mei23882\tcl\tzdata\brazil\west
  • %TEMP%\_mei23882\tcl\tzdata\cet
  • %TEMP%\_mei23882\tcl\tzdata\cst6cdt
  • %TEMP%\_mei23882\tcl\tzdata\canada\central
  • %TEMP%\_mei23882\tcl\tzdata\australia\canberra
  • %TEMP%\_mei23882\tcl\tzdata\canada\east-saskatchewan
  • %TEMP%\_mei23882\tcl\tzdata\asia\qyzylorda
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-0
  • %TEMP%\_mei23882\tcl\tzdata\europe\busingen
  • %TEMP%\_mei23882\tcl\tzdata\europe\copenhagen
  • %TEMP%\_mei23882\tcl\tzdata\europe\dublin
  • %TEMP%\_mei23882\tcl\tzdata\europe\gibraltar
  • %TEMP%\_mei23882\tcl\tzdata\europe\guernsey
  • %TEMP%\_mei23882\tcl\tzdata\europe\helsinki
  • %TEMP%\_mei23882\tcl\tzdata\europe\isle_of_man
  • %TEMP%\_mei23882\tcl\tzdata\europe\istanbul
  • %TEMP%\_mei23882\tcl\tzdata\europe\jersey
  • %TEMP%\_mei23882\tcl\tzdata\europe\kaliningrad
  • %TEMP%\_mei23882\tcl\tzdata\europe\kiev
  • %TEMP%\_mei23882\tcl\tzdata\europe\kirov
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-1
  • %TEMP%\_mei23882\tcl\tzdata\europe\lisbon
  • %TEMP%\_mei23882\tcl\tzdata\europe\london
  • %TEMP%\_mei23882\tcl\tzdata\europe\luxembourg
  • %TEMP%\_mei23882\tcl\tzdata\europe\madrid
  • %TEMP%\_mei23882\tcl\tzdata\europe\malta
  • %TEMP%\_mei23882\tcl\tzdata\europe\mariehamn
  • %TEMP%\_mei23882\tcl\tzdata\europe\minsk
  • %TEMP%\_mei23882\tcl\tzdata\europe\monaco
  • %TEMP%\_mei23882\tcl\tzdata\europe\moscow
  • %TEMP%\_mei23882\tcl\tzdata\europe\nicosia
  • %TEMP%\_mei23882\tcl\tzdata\europe\oslo
  • %TEMP%\_mei23882\tcl\tzdata\europe\budapest
  • %TEMP%\_mei23882\tcl\tzdata\europe\bucharest
  • %TEMP%\_mei23882\tcl\tzdata\europe\chisinau
  • %TEMP%\_mei23882\tcl\tzdata\europe\brussels
  • %TEMP%\_mei23882\tcl\tzdata\europe\bratislava
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-10
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-12
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-13
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-14
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-2
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-3
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-4
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-5
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-6
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-7
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-8
  • %TEMP%\_mei23882\tcl\tzdata\australia\broken_hill
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-9
  • %TEMP%\_mei23882\tcl\tzdata\australia\currie
  • %TEMP%\_mei23882\tcl\tzdata\etc\greenwich
  • %TEMP%\_mei23882\tcl\tzdata\etc\utc
  • %TEMP%\_mei23882\tcl\tzdata\etc\universal
  • %TEMP%\_mei23882\tcl\tzdata\etc\zulu
  • %TEMP%\_mei23882\tcl\tzdata\europe\amsterdam
  • %TEMP%\_mei23882\tcl\tzdata\europe\andorra
  • %TEMP%\_mei23882\tcl\tzdata\europe\astrakhan
  • %TEMP%\_mei23882\tcl\tzdata\europe\athens
  • %TEMP%\_mei23882\tcl\tzdata\europe\belfast
  • %TEMP%\_mei23882\tcl\tzdata\europe\belgrade
  • %TEMP%\_mei23882\tcl\tzdata\europe\berlin
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt0
  • %TEMP%\_mei23882\tcl\tzdata\etc\gmt-11
  • %TEMP%\_mei23882\tcl\tzdata\etc\uct
  • %TEMP%\_mei23882\tcl\tzdata\australia\brisbane
  • %TEMP%\_mei23882\tcl\tzdata\australia\adelaide
  • %TEMP%\_mei23882\tcl\tzdata\australia\act
  • %TEMP%\_mei23882\tcl\tzdata\asia\dushanbe
  • %TEMP%\_mei23882\tcl\tzdata\asia\famagusta
  • %TEMP%\_mei23882\tcl\tzdata\asia\gaza
  • %TEMP%\_mei23882\tcl\tzdata\asia\harbin
  • %TEMP%\_mei23882\tcl\tzdata\asia\hebron
  • %TEMP%\_mei23882\tcl\tzdata\asia\ho_chi_minh
  • %TEMP%\_mei23882\tcl\tzdata\asia\hong_kong
  • %TEMP%\_mei23882\tcl\tzdata\asia\hovd
  • %TEMP%\_mei23882\tcl\tzdata\asia\irkutsk
  • %TEMP%\_mei23882\tcl\tzdata\asia\istanbul
  • %TEMP%\_mei23882\tcl\tzdata\asia\jakarta
  • %TEMP%\_mei23882\tcl\tzdata\asia\jayapura
  • %TEMP%\_mei23882\tcl\tzdata\asia\jerusalem
  • %TEMP%\_mei23882\tcl\tzdata\asia\kabul
  • %TEMP%\_mei23882\tcl\tzdata\asia\kamchatka
  • %TEMP%\_mei23882\tcl\tzdata\asia\karachi
  • %TEMP%\_mei23882\tcl\tzdata\asia\kashgar
  • %TEMP%\_mei23882\tcl\tzdata\asia\kathmandu
  • %TEMP%\_mei23882\tcl\tzdata\asia\katmandu
  • %TEMP%\_mei23882\tcl\tzdata\asia\khandyga
  • %TEMP%\_mei23882\tcl\tzdata\asia\kolkata
  • %TEMP%\_mei23882\tcl\tzdata\asia\krasnoyarsk
  • %TEMP%\_mei23882\tcl\tzdata\asia\kuala_lumpur
  • %TEMP%\_mei23882\tcl\tzdata\asia\dhaka
  • %TEMP%\_mei23882\tcl\tzdata\asia\dacca
  • %TEMP%\_mei23882\tcl\tzdata\asia\dubai
  • %TEMP%\_mei23882\tcl\tzdata\asia\damascus
  • %TEMP%\_mei23882\tcl\tzdata\asia\colombo
  • %TEMP%\_mei23882\tcl\tzdata\asia\baghdad
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\troll
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\vostok
  • %TEMP%\_mei23882\tcl\tzdata\arctic\longyearbyen
  • %TEMP%\_mei23882\tcl\tzdata\asia\aden
  • %TEMP%\_mei23882\tcl\tzdata\asia\almaty
  • %TEMP%\_mei23882\tcl\tzdata\asia\amman
  • %TEMP%\_mei23882\tcl\tzdata\asia\anadyr
  • %TEMP%\_mei23882\tcl\tzdata\asia\aqtau
  • %TEMP%\_mei23882\tcl\tzdata\asia\aqtobe
  • %TEMP%\_mei23882\tcl\tzdata\asia\ashgabat
  • %TEMP%\_mei23882\tcl\tzdata\asia\ashkhabad
  • %TEMP%\_mei23882\tcl\tzdata\asia\kuching
  • %TEMP%\_mei23882\tcl\tzdata\europe\paris
  • %TEMP%\_mei23882\tcl\tzdata\asia\atyrau
  • %TEMP%\_mei23882\tcl\tzdata\asia\baku
  • %TEMP%\_mei23882\tcl\tzdata\asia\bangkok
  • %TEMP%\_mei23882\tcl\tzdata\asia\barnaul
  • %TEMP%\_mei23882\tcl\tzdata\asia\beirut
  • %TEMP%\_mei23882\tcl\tzdata\asia\bishkek
  • %TEMP%\_mei23882\tcl\tzdata\asia\brunei
  • %TEMP%\_mei23882\tcl\tzdata\asia\calcutta
  • %TEMP%\_mei23882\tcl\tzdata\asia\chita
  • %TEMP%\_mei23882\tcl\tzdata\asia\choibalsan
  • %TEMP%\_mei23882\tcl\tzdata\asia\chongqing
  • %TEMP%\_mei23882\tcl\tzdata\asia\chungking
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\syowa
  • %TEMP%\_mei23882\tcl\tzdata\asia\bahrain
  • %TEMP%\_mei23882\tcl\tzdata\europe\ljubljana
  • %TEMP%\_mei23882\tcl\tzdata\asia\kuwait
  • %TEMP%\_mei23882\tcl\tzdata\asia\makassar
  • %TEMP%\_mei23882\tcl\tzdata\asia\ujung_pandang
  • %TEMP%\_mei23882\tcl\tzdata\asia\ulaanbaatar
  • %TEMP%\_mei23882\tcl\tzdata\asia\ulan_bator
  • %TEMP%\_mei23882\tcl\tzdata\asia\urumqi
  • %TEMP%\_mei23882\tcl\tzdata\asia\ust-nera
  • %TEMP%\_mei23882\tcl\tzdata\asia\vientiane
  • %TEMP%\_mei23882\tcl\tzdata\asia\vladivostok
  • %TEMP%\_mei23882\tcl\tzdata\asia\yakutsk
  • %TEMP%\_mei23882\tcl\tzdata\asia\yangon
  • %TEMP%\_mei23882\tcl\tzdata\asia\yekaterinburg
  • %TEMP%\_mei23882\tcl\tzdata\asia\dili
  • %TEMP%\_mei23882\tcl\tzdata\asia\yerevan
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\bermuda
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\canary
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\cape_verde
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\faeroe
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\faroe
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\jan_mayen
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\madeira
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\reykjavik
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\south_georgia
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\st_helena
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\stanley
  • %TEMP%\_mei23882\tcl\tzdata\asia\thimphu
  • %TEMP%\_mei23882\tcl\tzdata\atlantic\azores
  • %TEMP%\_mei23882\tcl\tzdata\asia\tomsk
  • %TEMP%\_mei23882\tcl\tzdata\asia\tokyo
  • %TEMP%\_mei23882\tcl\tzdata\asia\thimbu
  • %TEMP%\_mei23882\tcl\tzdata\asia\tel_aviv
  • %TEMP%\_mei23882\tcl\tzdata\asia\manila
  • %TEMP%\_mei23882\tcl\tzdata\asia\muscat
  • %TEMP%\_mei23882\tcl\tzdata\asia\nicosia
  • %TEMP%\_mei23882\tcl\tzdata\asia\novokuznetsk
  • %TEMP%\_mei23882\tcl\tzdata\asia\novosibirsk
  • %TEMP%\_mei23882\tcl\tzdata\asia\omsk
  • %TEMP%\_mei23882\tcl\tzdata\asia\oral
  • %TEMP%\_mei23882\tcl\tzdata\asia\phnom_penh
  • %TEMP%\_mei23882\tcl\tzdata\asia\pontianak
  • %TEMP%\_mei23882\tcl\tzdata\asia\pyongyang
  • %TEMP%\_mei23882\tcl\tzdata\asia\macao
  • %TEMP%\_mei23882\tcl\tzdata\asia\qatar
  • %TEMP%\_mei23882\tcl\tzdata\asia\macau
  • %TEMP%\_mei23882\tcl\tzdata\asia\rangoon
  • %TEMP%\_mei23882\tcl\tzdata\asia\saigon
  • %TEMP%\_mei23882\tcl\tzdata\asia\sakhalin
  • %TEMP%\_mei23882\tcl\tzdata\asia\samarkand
  • %TEMP%\_mei23882\tcl\tzdata\asia\seoul
  • %TEMP%\_mei23882\tcl\tzdata\asia\shanghai
  • %TEMP%\_mei23882\tcl\tzdata\asia\singapore
  • %TEMP%\_mei23882\tcl\tzdata\asia\srednekolymsk
  • %TEMP%\_mei23882\tcl\tzdata\asia\taipei
  • %TEMP%\_mei23882\tcl\tzdata\asia\tashkent
  • %TEMP%\_mei23882\tcl\tzdata\asia\tbilisi
  • %TEMP%\_mei23882\tcl\tzdata\asia\magadan
  • %TEMP%\_mei23882\tcl\tzdata\asia\tehran
  • %TEMP%\_mei23882\tcl\tzdata\asia\riyadh
  • %TEMP%\_mei23882\tcl\tzdata\europe\podgorica
  • %TEMP%\_mei23882\tcl\tzdata\europe\prague
  • %TEMP%\_mei23882\tcl\tzdata\europe\riga
  • %TEMP%\_mei23882\tk\dialog.tcl
  • %TEMP%\_mei23882\tk\entry.tcl
  • %TEMP%\_mei23882\tk\focus.tcl
  • %TEMP%\_mei23882\tk\fontchooser.tcl
  • %TEMP%\_mei23882\tk\iconlist.tcl
  • %TEMP%\_mei23882\tk\icons.tcl
  • %TEMP%\_mei23882\tk\images\readme
  • %TEMP%\_mei23882\tk\images\logo.eps
  • %TEMP%\_mei23882\tk\images\logo100.gif
  • %TEMP%\_mei23882\tk\images\logo64.gif
  • %TEMP%\_mei23882\tk\images\logolarge.gif
  • %TEMP%\_mei23882\tcl\tzdata\us\indiana-starke
  • %TEMP%\_mei23882\tk\images\logomed.gif
  • %TEMP%\_mei23882\tk\images\pwrdlogo100.gif
  • %TEMP%\_mei23882\tk\images\pwrdlogo150.gif
  • %TEMP%\_mei23882\tk\images\pwrdlogo175.gif
  • %TEMP%\_mei23882\tk\images\pwrdlogo200.gif
  • %TEMP%\_mei23882\tk\images\pwrdlogo75.gif
  • %TEMP%\_mei23882\tk\images\tai-ku.gif
  • %TEMP%\_mei23882\tk\license.terms
  • %TEMP%\_mei23882\tk\listbox.tcl
  • %TEMP%\_mei23882\tk\megawidget.tcl
  • %TEMP%\_mei23882\tk\menu.tcl
  • %TEMP%\_mei23882\tk\mkpsenc.tcl
  • %TEMP%\_mei23882\tk\comdlg.tcl
  • %TEMP%\_mei23882\tk\console.tcl
  • %TEMP%\_mei23882\tk\clrpick.tcl
  • %TEMP%\_mei23882\tk\choosedir.tcl
  • %TEMP%\_mei23882\tk\button.tcl
  • %TEMP%\_mei23882\tcl\tzdata\systemv\pst8pdt
  • %TEMP%\_mei23882\tcl\tzdata\systemv\yst9
  • %TEMP%\_mei23882\tcl\tzdata\systemv\yst9ydt
  • %TEMP%\_mei23882\tcl\tzdata\turkey
  • %TEMP%\_mei23882\tcl\tzdata\uct
  • %TEMP%\_mei23882\tcl\tzdata\us\alaska
  • %TEMP%\_mei23882\tcl\tzdata\us\aleutian
  • %TEMP%\_mei23882\tcl\tzdata\us\arizona
  • %TEMP%\_mei23882\tcl\tzdata\us\central
  • %TEMP%\_mei23882\tcl\tzdata\us\east-indiana
  • %TEMP%\_mei23882\tcl\tzdata\us\eastern
  • %TEMP%\_mei23882\tk\msgbox.tcl
  • %TEMP%\_mei23882\tk\images\pwrdlogo.eps
  • %TEMP%\_mei23882\tcl\tzdata\us\hawaii
  • %TEMP%\_mei23882\tcl\tzdata\us\mountain
  • %TEMP%\_mei23882\tcl\tzdata\us\pacific
  • %TEMP%\_mei23882\tcl\tzdata\us\pacific-new
  • %TEMP%\_mei23882\tcl\tzdata\us\samoa
  • %TEMP%\_mei23882\tcl\tzdata\utc
  • %TEMP%\_mei23882\tcl\tzdata\universal
  • %TEMP%\_mei23882\tcl\tzdata\w-su
  • %TEMP%\_mei23882\tcl\tzdata\wet
  • %TEMP%\_mei23882\tcl\tzdata\zulu
  • %TEMP%\_mei23882\tcl\word.tcl
  • %TEMP%\_mei23882\tk\bgerror.tcl
  • %TEMP%\_mei23882\tcl\tzdata\systemv\pst8
  • %TEMP%\_mei23882\tcl\tzdata\us\michigan
  • %TEMP%\_mei23882\tk\obsolete.tcl
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\south_pole
  • %TEMP%\_mei23882\tk\msgs\de.msg
  • %TEMP%\_mei23882\tk\ttk\classictheme.tcl
  • %TEMP%\_mei23882\tk\ttk\combobox.tcl
  • %TEMP%\_mei23882\tk\ttk\cursors.tcl
  • %TEMP%\_mei23882\tk\ttk\defaults.tcl
  • %TEMP%\_mei23882\tk\ttk\entry.tcl
  • %TEMP%\_mei23882\tk\ttk\fonts.tcl
  • %TEMP%\_mei23882\tk\ttk\menubutton.tcl
  • %TEMP%\_mei23882\tk\ttk\notebook.tcl
  • %TEMP%\_mei23882\tk\ttk\panedwindow.tcl
  • %TEMP%\_mei23882\tk\ttk\progress.tcl
  • %TEMP%\_mei23882\tk\ttk\scale.tcl
  • %TEMP%\_mei23882\tk\msgs\cs.msg
  • %TEMP%\_mei23882\tk\ttk\scrollbar.tcl
  • %TEMP%\_mei23882\tk\ttk\spinbox.tcl
  • %TEMP%\_mei23882\tk\ttk\treeview.tcl
  • %TEMP%\_mei23882\tk\ttk\ttk.tcl
  • %TEMP%\_mei23882\tk\ttk\utils.tcl
  • %TEMP%\_mei23882\tk\ttk\vistatheme.tcl
  • %TEMP%\_mei23882\tk\ttk\wintheme.tcl
  • %TEMP%\_mei23882\tk\ttk\xptheme.tcl
  • %TEMP%\_mei23882\tk\unsupported.tcl
  • %TEMP%\_mei23882\tk\xmfbox.tcl
  • %APPDATA%\onetap\popo.exe
  • %TEMP%\services.exe
  • %TEMP%\_mei23882\tk\ttk\button.tcl
  • %TEMP%\_mei23882\tk\ttk\clamtheme.tcl
  • %TEMP%\_mei23882\tk\ttk\aquatheme.tcl
  • %TEMP%\_mei23882\tk\ttk\alttheme.tcl
  • %TEMP%\_mei23882\tk\tkfbox.tcl
  • %TEMP%\_mei23882\tk\msgs\en.msg
  • %TEMP%\_mei23882\tk\msgs\en_gb.msg
  • %TEMP%\_mei23882\tk\msgs\eo.msg
  • %TEMP%\_mei23882\tk\msgs\es.msg
  • %TEMP%\_mei23882\tk\msgs\fr.msg
  • %TEMP%\_mei23882\tk\msgs\hu.msg
  • %TEMP%\_mei23882\tk\msgs\it.msg
  • %TEMP%\_mei23882\tk\msgs\nl.msg
  • %TEMP%\_mei23882\tk\msgs\pl.msg
  • %TEMP%\_mei23882\tk\msgs\pt.msg
  • %TEMP%\_mei23882\tk\msgs\ru.msg
  • %TEMP%\_mei23882\tk\msgs\da.msg
  • %TEMP%\_mei23882\tcl\tzdata\systemv\mst7mdt
  • %TEMP%\_mei23882\tk\msgs\sv.msg
  • %TEMP%\_mei23882\tk\palette.tcl
  • %TEMP%\_mei23882\tk\panedwindow.tcl
  • %TEMP%\_mei23882\tk\pkgindex.tcl
  • %TEMP%\_mei23882\tk\safetk.tcl
  • %TEMP%\_mei23882\tk\scale.tcl
  • %TEMP%\_mei23882\tk\scrlbar.tcl
  • %TEMP%\_mei23882\tk\spinbox.tcl
  • %TEMP%\_mei23882\tk\tclindex
  • %TEMP%\_mei23882\tk\tearoff.tcl
  • %TEMP%\_mei23882\tk\text.tcl
  • %TEMP%\_mei23882\tk\tk.tcl
  • %TEMP%\_mei23882\tk\msgs\el.msg
  • %TEMP%\_mei23882\tk\optmenu.tcl
  • %TEMP%\_mei23882\tcl\tzdata\pacific\galapagos
  • %TEMP%\_mei23882\tcl\tzdata\systemv\mst7
  • %TEMP%\_mei23882\tcl\tzdata\pacific\wallis
  • %TEMP%\_mei23882\tcl\tzdata\hongkong
  • %TEMP%\_mei23882\tcl\tzdata\iceland
  • %TEMP%\_mei23882\tcl\tzdata\indian\antananarivo
  • %TEMP%\_mei23882\tcl\tzdata\indian\chagos
  • %TEMP%\_mei23882\tcl\tzdata\indian\christmas
  • %TEMP%\_mei23882\tcl\tzdata\indian\cocos
  • %TEMP%\_mei23882\tcl\tzdata\indian\comoro
  • %TEMP%\_mei23882\tcl\tzdata\indian\kerguelen
  • %TEMP%\_mei23882\tcl\tzdata\indian\mahe
  • %TEMP%\_mei23882\tcl\tzdata\indian\maldives
  • %TEMP%\_mei23882\tcl\tzdata\indian\mauritius
  • %TEMP%\_mei23882\tcl\tzdata\europe\uzhgorod
  • %TEMP%\_mei23882\tcl\tzdata\indian\mayotte
  • %TEMP%\_mei23882\tcl\tzdata\iran
  • %TEMP%\_mei23882\tcl\tzdata\israel
  • %TEMP%\_mei23882\tcl\tzdata\jamaica
  • %TEMP%\_mei23882\tcl\tzdata\japan
  • %TEMP%\_mei23882\tcl\tzdata\kwajalein
  • %TEMP%\_mei23882\tcl\tzdata\libya
  • %TEMP%\_mei23882\tcl\tzdata\met
  • %TEMP%\_mei23882\tcl\tzdata\mst
  • %TEMP%\_mei23882\tcl\tzdata\mst7mdt
  • %TEMP%\_mei23882\tcl\tzdata\mexico\bajanorte
  • %TEMP%\_mei23882\tcl\tzdata\mexico\bajasur
  • %TEMP%\_mei23882\tcl\tzdata\greenwich
  • %TEMP%\_mei23882\tcl\tzdata\hst
  • %TEMP%\_mei23882\tcl\tzdata\gmt0
  • %TEMP%\_mei23882\tcl\tzdata\gmt-0
  • %TEMP%\_mei23882\tcl\tzdata\gmt+0
  • %TEMP%\_mei23882\tcl\tzdata\europe\samara
  • %TEMP%\_mei23882\tcl\tzdata\europe\san_marino
  • %TEMP%\_mei23882\tcl\tzdata\europe\sarajevo
  • %TEMP%\_mei23882\tcl\tzdata\europe\saratov
  • %TEMP%\_mei23882\tcl\tzdata\europe\simferopol
  • %TEMP%\_mei23882\tcl\tzdata\europe\skopje
  • %TEMP%\_mei23882\tcl\tzdata\europe\sofia
  • %TEMP%\_mei23882\tcl\tzdata\europe\stockholm
  • %TEMP%\_mei23882\tcl\tzdata\europe\tallinn
  • %TEMP%\_mei23882\tcl\tzdata\europe\tirane
  • %TEMP%\_mei23882\tcl\tzdata\europe\tiraspol
  • %TEMP%\_mei23882\tcl\tzdata\mexico\general
  • %TEMP%\_mei23882\tcl\tzdata\indian\reunion
  • %TEMP%\_mei23882\tcl\tzdata\europe\ulyanovsk
  • %TEMP%\_mei23882\tcl\tzdata\europe\vatican
  • %TEMP%\_mei23882\tcl\tzdata\europe\vienna
  • %TEMP%\_mei23882\tcl\tzdata\europe\vilnius
  • %TEMP%\_mei23882\tcl\tzdata\europe\volgograd
  • %TEMP%\_mei23882\tcl\tzdata\europe\warsaw
  • %TEMP%\_mei23882\tcl\tzdata\europe\zagreb
  • %TEMP%\_mei23882\tcl\tzdata\europe\zaporozhye
  • %TEMP%\_mei23882\tcl\tzdata\europe\zurich
  • %TEMP%\_mei23882\tcl\tzdata\gb
  • %TEMP%\_mei23882\tcl\tzdata\gb-eire
  • %TEMP%\_mei23882\tcl\tzdata\gmt
  • %TEMP%\_mei23882\tcl\tzdata\europe\rome
  • %TEMP%\_mei23882\tcl\tzdata\europe\vaduz
  • %APPDATA%\microsoft\libs\sihost64.exe
  • %TEMP%\_mei23882\tcl\tzdata\systemv\est5edt
  • %TEMP%\_mei23882\tcl\tzdata\navajo
  • %TEMP%\_mei23882\tcl\tzdata\pacific\pitcairn
  • %TEMP%\_mei23882\tcl\tzdata\pacific\pohnpei
  • %TEMP%\_mei23882\tcl\tzdata\pacific\ponape
  • %TEMP%\_mei23882\tcl\tzdata\pacific\port_moresby
  • %TEMP%\_mei23882\tcl\tzdata\pacific\rarotonga
  • %TEMP%\_mei23882\tcl\tzdata\pacific\saipan
  • %TEMP%\_mei23882\tcl\tzdata\pacific\samoa
  • %TEMP%\_mei23882\tcl\tzdata\pacific\tahiti
  • %TEMP%\_mei23882\tcl\tzdata\pacific\tarawa
  • %TEMP%\_mei23882\tcl\tzdata\pacific\tongatapu
  • %TEMP%\_mei23882\tcl\tzdata\pacific\truk
  • %TEMP%\_mei23882\tcl\tzdata\nz
  • %TEMP%\_mei23882\tcl\tzdata\pacific\wake
  • %TEMP%\_mei23882\tcl\tzdata\pacific\yap
  • %TEMP%\_mei23882\tcl\tzdata\poland
  • %TEMP%\_mei23882\tcl\tzdata\portugal
  • %TEMP%\_mei23882\tcl\tzdata\roc
  • %TEMP%\_mei23882\tcl\tzdata\rok
  • %TEMP%\_mei23882\tcl\tzdata\singapore
  • %TEMP%\_mei23882\tcl\tzdata\systemv\ast4
  • %TEMP%\_mei23882\tcl\tzdata\systemv\ast4adt
  • %TEMP%\_mei23882\tcl\tzdata\systemv\cst6
  • %TEMP%\_mei23882\tcl\tzdata\systemv\cst6cdt
  • %TEMP%\_mei23882\tcl\tzdata\systemv\est5
  • %TEMP%\_mei23882\tcl\tzdata\pacific\pago_pago
  • %TEMP%\_mei23882\tcl\tzdata\pacific\palau
  • %TEMP%\_mei23882\tcl\tzdata\pacific\noumea
  • %TEMP%\_mei23882\tcl\tzdata\pacific\norfolk
  • %TEMP%\_mei23882\tcl\tzdata\pacific\niue
  • %TEMP%\_mei23882\tcl\tzdata\pst8pdt
  • %TEMP%\_mei23882\tcl\tzdata\pacific\apia
  • %TEMP%\_mei23882\tcl\tzdata\pacific\auckland
  • %TEMP%\_mei23882\tcl\tzdata\pacific\bougainville
  • %TEMP%\_mei23882\tcl\tzdata\pacific\chatham
  • %TEMP%\_mei23882\tcl\tzdata\pacific\chuuk
  • %TEMP%\_mei23882\tcl\tzdata\pacific\easter
  • %TEMP%\_mei23882\tcl\tzdata\pacific\efate
  • %TEMP%\_mei23882\tcl\tzdata\pacific\enderbury
  • %TEMP%\_mei23882\tcl\tzdata\pacific\fakaofo
  • %TEMP%\_mei23882\tcl\tzdata\pacific\fiji
  • %TEMP%\_mei23882\tcl\tzdata\nz-chat
  • %TEMP%\_mei23882\tcl\tzdata\systemv\hst10
  • %TEMP%\_mei23882\tcl\tzdata\pacific\funafuti
  • %TEMP%\_mei23882\tcl\tzdata\pacific\guadalcanal
  • %TEMP%\_mei23882\tcl\tzdata\pacific\guam
  • %TEMP%\_mei23882\tcl\tzdata\pacific\honolulu
  • %TEMP%\_mei23882\tcl\tzdata\pacific\johnston
  • %TEMP%\_mei23882\tcl\tzdata\pacific\kiritimati
  • %TEMP%\_mei23882\tcl\tzdata\pacific\kosrae
  • %TEMP%\_mei23882\tcl\tzdata\pacific\kwajalein
  • %TEMP%\_mei23882\tcl\tzdata\pacific\majuro
  • %TEMP%\_mei23882\tcl\tzdata\pacific\marquesas
  • %TEMP%\_mei23882\tcl\tzdata\pacific\midway
  • %TEMP%\_mei23882\tcl\tzdata\pacific\nauru
  • %TEMP%\_mei23882\tcl\tzdata\prc
  • %TEMP%\_mei23882\tcl\tzdata\pacific\gambier
  • %TEMP%\_mei23882\tk\ttk\sizegrip.tcl
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\rothera
  • %TEMP%\_mei23882\tcl\tzdata\america\tortola
  • %TEMP%\_mei23882\tcl\msgs\es_gt.msg
  • %TEMP%\_mei23882\tcl\msgs\es_hn.msg
  • %TEMP%\_mei23882\tcl\msgs\es_mx.msg
  • %TEMP%\_mei23882\tcl\msgs\es_ni.msg
  • %TEMP%\_mei23882\tcl\msgs\es_pa.msg
  • %TEMP%\_mei23882\tcl\msgs\es_pe.msg
  • %TEMP%\_mei23882\tcl\msgs\es_pr.msg
  • %TEMP%\_mei23882\tcl\msgs\es_py.msg
  • %TEMP%\_mei23882\tcl\msgs\es_sv.msg
  • %TEMP%\_mei23882\tcl\msgs\es_uy.msg
  • %TEMP%\_mei23882\tcl\msgs\es_ve.msg
  • %TEMP%\_mei23882\tcl\msgs\ga_ie.msg
  • %TEMP%\_mei23882\tcl\msgs\et.msg
  • %TEMP%\_mei23882\tcl\msgs\eu_es.msg
  • %TEMP%\_mei23882\tcl\msgs\fa.msg
  • %TEMP%\_mei23882\tcl\msgs\fa_in.msg
  • %TEMP%\_mei23882\tcl\msgs\fa_ir.msg
  • %TEMP%\_mei23882\tcl\msgs\fi.msg
  • %TEMP%\_mei23882\tcl\msgs\fo.msg
  • %TEMP%\_mei23882\tcl\msgs\fo_fo.msg
  • %TEMP%\_mei23882\tcl\msgs\fr.msg
  • %TEMP%\_mei23882\tcl\msgs\fr_be.msg
  • %TEMP%\_mei23882\tcl\msgs\fr_ca.msg
  • %TEMP%\_mei23882\tcl\msgs\fr_ch.msg
  • %TEMP%\_mei23882\tcl\msgs\es_do.msg
  • %TEMP%\_mei23882\tcl\msgs\es_ec.msg
  • %TEMP%\_mei23882\tcl\msgs\eu.msg
  • %TEMP%\_mei23882\tcl\msgs\ga.msg
  • %TEMP%\_mei23882\tcl\msgs\es_cl.msg
  • %TEMP%\_mei23882\tcl\msgs\cs.msg
  • %TEMP%\_mei23882\tcl\msgs\da.msg
  • %TEMP%\_mei23882\tcl\msgs\de.msg
  • %TEMP%\_mei23882\tcl\msgs\de_at.msg
  • %TEMP%\_mei23882\tcl\msgs\de_be.msg
  • %TEMP%\_mei23882\tcl\msgs\el.msg
  • %TEMP%\_mei23882\tcl\msgs\en_au.msg
  • %TEMP%\_mei23882\tcl\msgs\en_be.msg
  • %TEMP%\_mei23882\tcl\msgs\en_bw.msg
  • %TEMP%\_mei23882\tcl\msgs\en_ca.msg
  • %TEMP%\_mei23882\tcl\msgs\en_gb.msg
  • %TEMP%\_mei23882\tcl\msgs\en_hk.msg
  • %TEMP%\_mei23882\tcl\msgs\en_ie.msg
  • %TEMP%\_mei23882\tcl\msgs\en_in.msg
  • %TEMP%\_mei23882\tcl\msgs\en_nz.msg
  • %TEMP%\_mei23882\tcl\msgs\en_ph.msg
  • %TEMP%\_mei23882\tcl\msgs\en_sg.msg
  • %TEMP%\_mei23882\tcl\msgs\en_za.msg
  • %TEMP%\_mei23882\tcl\msgs\en_zw.msg
  • %TEMP%\_mei23882\tcl\msgs\eo.msg
  • %TEMP%\_mei23882\tcl\msgs\es.msg
  • %TEMP%\_mei23882\tcl\msgs\es_ar.msg
  • %TEMP%\_mei23882\tcl\msgs\es_bo.msg
  • %TEMP%\_mei23882\tcl\msgs\es_co.msg
  • %TEMP%\_mei23882\tcl\msgs\bn_in.msg
  • %TEMP%\_mei23882\tcl\msgs\es_cr.msg
  • %TEMP%\_mei23882\tcl\encoding\iso8859-14.enc
  • %TEMP%\_mei23882\tcl\msgs\gl.msg
  • %TEMP%\_mei23882\tcl\msgs\nl.msg
  • %TEMP%\_mei23882\tcl\msgs\nn.msg
  • %TEMP%\_mei23882\tcl\msgs\pl.msg
  • %TEMP%\_mei23882\tcl\msgs\pt.msg
  • %TEMP%\_mei23882\tcl\msgs\pt_br.msg
  • %TEMP%\_mei23882\tcl\msgs\ro.msg
  • %TEMP%\_mei23882\tcl\msgs\ru.msg
  • %TEMP%\_mei23882\tcl\msgs\ru_ua.msg
  • %TEMP%\_mei23882\tcl\msgs\sh.msg
  • %TEMP%\_mei23882\tcl\msgs\sk.msg
  • %TEMP%\_mei23882\tcl\msgs\sl.msg
  • %TEMP%\_mei23882\tcl\msgs\sq.msg
  • %TEMP%\_mei23882\tcl\msgs\gl_es.msg
  • %TEMP%\_mei23882\tcl\msgs\sr.msg
  • %TEMP%\_mei23882\tcl\msgs\sw.msg
  • %TEMP%\_mei23882\tcl\msgs\ta.msg
  • %TEMP%\_mei23882\tcl\msgs\ta_in.msg
  • %TEMP%\_mei23882\tcl\msgs\te.msg
  • %TEMP%\_mei23882\tcl\msgs\te_in.msg
  • %TEMP%\_mei23882\tcl\msgs\th.msg
  • %TEMP%\_mei23882\tcl\msgs\tr.msg
  • %TEMP%\_mei23882\tcl\msgs\uk.msg
  • %TEMP%\_mei23882\tcl\msgs\vi.msg
  • %TEMP%\_mei23882\tcl\msgs\zh.msg
  • %TEMP%\_mei23882\tcl\msgs\nb.msg
  • %TEMP%\_mei23882\tcl\msgs\mt.msg
  • %TEMP%\_mei23882\tcl\msgs\nl_be.msg
  • %TEMP%\_mei23882\tcl\msgs\ms_my.msg
  • %TEMP%\_mei23882\tcl\msgs\ms.msg
  • %TEMP%\_mei23882\tcl\msgs\gv.msg
  • %TEMP%\_mei23882\tcl\msgs\he.msg
  • %TEMP%\_mei23882\tcl\msgs\hi.msg
  • %TEMP%\_mei23882\tcl\msgs\hi_in.msg
  • %TEMP%\_mei23882\tcl\msgs\hr.msg
  • %TEMP%\_mei23882\tcl\msgs\hu.msg
  • %TEMP%\_mei23882\tcl\msgs\id.msg
  • %TEMP%\_mei23882\tcl\msgs\id_id.msg
  • %TEMP%\_mei23882\tcl\msgs\is.msg
  • %TEMP%\_mei23882\tcl\msgs\it.msg
  • %TEMP%\_mei23882\tcl\msgs\it_ch.msg
  • %TEMP%\_mei23882\tcl\msgs\bn.msg
  • %TEMP%\_mei23882\tcl\msgs\ja.msg
  • %TEMP%\_mei23882\tcl\msgs\ca.msg
  • %TEMP%\_mei23882\tcl\msgs\kl_gl.msg
  • %TEMP%\_mei23882\tcl\msgs\ko_kr.msg
  • %TEMP%\_mei23882\tcl\msgs\kok.msg
  • %TEMP%\_mei23882\tcl\msgs\kok_in.msg
  • %TEMP%\_mei23882\tcl\msgs\kw.msg
  • %TEMP%\_mei23882\tcl\msgs\kw_gb.msg
  • %TEMP%\_mei23882\tcl\msgs\lt.msg
  • %TEMP%\_mei23882\tcl\msgs\lv.msg
  • %TEMP%\_mei23882\tcl\msgs\mk.msg
  • %TEMP%\_mei23882\tcl\msgs\mr.msg
  • %TEMP%\_mei23882\tcl\msgs\mr_in.msg
  • %TEMP%\_mei23882\tcl\msgs\kl.msg
  • %TEMP%\_mei23882\tcl\msgs\gv_gb.msg
  • %TEMP%\_mei23882\tcl\msgs\ko.msg
  • %TEMP%\_mei23882\tcl\msgs\bg.msg
  • %TEMP%\_mei23882\tcl\msgs\be.msg
  • %TEMP%\_mei23882\tcl\msgs\ar_sy.msg
  • %TEMP%\_mei23882\tcl\encoding\cp1254.enc
  • %TEMP%\_mei23882\tcl\encoding\cp1255.enc
  • %TEMP%\_mei23882\tcl\encoding\cp1256.enc
  • %TEMP%\_mei23882\tcl\encoding\cp1257.enc
  • %TEMP%\_mei23882\tcl\encoding\cp1258.enc
  • %TEMP%\_mei23882\tcl\encoding\cp437.enc
  • %TEMP%\_mei23882\tcl\encoding\cp737.enc
  • %TEMP%\_mei23882\tcl\encoding\cp775.enc
  • %TEMP%\_mei23882\tcl\encoding\cp850.enc
  • %TEMP%\_mei23882\tcl\encoding\cp852.enc
  • %TEMP%\_mei23882\tcl\encoding\cp855.enc
  • %TEMP%\_mei23882\tcl\encoding\cp857.enc
  • %TEMP%\_mei23882\tcl\encoding\cp860.enc
  • %TEMP%\_mei23882\tcl\encoding\cp861.enc
  • %TEMP%\_mei23882\tcl\encoding\cp862.enc
  • %TEMP%\_mei23882\tcl\encoding\cp863.enc
  • %TEMP%\_mei23882\tcl\encoding\cp864.enc
  • %TEMP%\_mei23882\tcl\encoding\cp865.enc
  • %TEMP%\_mei23882\tcl\encoding\cp866.enc
  • %TEMP%\_mei23882\tcl\encoding\cp869.enc
  • %TEMP%\_mei23882\tcl\encoding\cp874.enc
  • %TEMP%\_mei23882\tcl\encoding\cp932.enc
  • %TEMP%\_mei23882\tcl\encoding\cp936.enc
  • %TEMP%\_mei23882\tcl\encoding\cp1251.enc
  • %TEMP%\_mei23882\tcl\encoding\big5.enc
  • %TEMP%\_mei23882\tcl\encoding\cp1253.enc
  • %TEMP%\_mei23882\tcl\encoding\cp1250.enc
  • %TEMP%\_mei23882\tcl\encoding\ascii.enc
  • %TEMP%\_mei23882\setproctitle.cp37-win_amd64.pyd
  • %TEMP%\_mei23882\_hashlib.pyd
  • %TEMP%\_mei23882\_lzma.pyd
  • %TEMP%\_mei23882\_queue.pyd
  • %TEMP%\_mei23882\_socket.pyd
  • %TEMP%\_mei23882\_ssl.pyd
  • %TEMP%\_mei23882\_tkinter.pyd
  • %TEMP%\_mei23882\libcrypto-1_1-x64.dll
  • %TEMP%\_mei23882\libssl-1_1-x64.dll
  • %TEMP%\_mei23882\lol.exe.manifest
  • %TEMP%\_mei23882\pyexpat.pyd
  • %TEMP%\_mei23882\python37.dll
  • %TEMP%\_mei23882\tcl\encoding\cp949.enc
  • %TEMP%\_mei23882\tcl\msgs\zh_cn.msg
  • %TEMP%\_mei23882\select.pyd
  • %TEMP%\_mei23882\tk86t.dll
  • %TEMP%\_mei23882\unicodedata.pyd
  • %TEMP%\_mei23882\base_library.zip
  • %TEMP%\_mei23882\certifi\cacert.pem
  • %TEMP%\_mei23882\tcl8\8.4\platform-1.0.14.tm
  • %TEMP%\_mei23882\tcl8\8.4\platform\shell-1.1.4.tm
  • %TEMP%\_mei23882\tcl8\8.5\msgcat-1.6.1.tm
  • %TEMP%\_mei23882\tcl8\8.5\tcltest-2.4.1.tm
  • %TEMP%\_mei23882\tcl8\8.6\http-2.8.12.tm
  • %TEMP%\_mei23882\tcl\auto.tcl
  • %TEMP%\_mei23882\tcl\clock.tcl
  • %TEMP%\_mei23882\_bz2.pyd
  • %TEMP%\_mei23882\tcl86t.dll
  • %TEMP%\_mei23882\tcl\msgs\sv.msg
  • %TEMP%\_mei23882\tcl\encoding\cp950.enc
  • %TEMP%\_mei23882\tcl\encoding\euc-jp.enc
  • %TEMP%\_mei23882\tcl\encoding\maccyrillic.enc
  • %TEMP%\_mei23882\tcl\encoding\macdingbats.enc
  • %TEMP%\_mei23882\tcl\encoding\macgreek.enc
  • %TEMP%\_mei23882\tcl\encoding\maciceland.enc
  • %TEMP%\_mei23882\tcl\encoding\macjapan.enc
  • %TEMP%\_mei23882\tcl\encoding\macroman.enc
  • %TEMP%\_mei23882\tcl\encoding\macromania.enc
  • %TEMP%\_mei23882\tcl\encoding\macthai.enc
  • %TEMP%\_mei23882\tcl\encoding\macturkish.enc
  • %TEMP%\_mei23882\tcl\encoding\macukraine.enc
  • %TEMP%\_mei23882\tcl\encoding\cp1252.enc
  • %TEMP%\_mei23882\tcl\encoding\shiftjis.enc
  • %TEMP%\_mei23882\tcl\encoding\tis-620.enc
  • %TEMP%\_mei23882\tcl\history.tcl
  • %TEMP%\_mei23882\tcl\http1.0\http.tcl
  • %TEMP%\_mei23882\tcl\http1.0\pkgindex.tcl
  • %TEMP%\_mei23882\tcl\init.tcl
  • %TEMP%\_mei23882\tcl\msgs\af.msg
  • %TEMP%\_mei23882\tcl\msgs\af_za.msg
  • %TEMP%\_mei23882\tcl\msgs\ar.msg
  • %TEMP%\_mei23882\tcl\msgs\ar_in.msg
  • %TEMP%\_mei23882\tcl\msgs\ar_jo.msg
  • %TEMP%\_mei23882\tcl\msgs\ar_lb.msg
  • %TEMP%\_mei23882\tcl\encoding\ksc5601.enc
  • %TEMP%\_mei23882\tcl\encoding\symbol.enc
  • %TEMP%\_mei23882\tcl\encoding\maccroatian.enc
  • %TEMP%\_mei23882\tcl\encoding\maccenteuro.enc
  • %TEMP%\_mei23882\tcl\encoding\koi8-u.enc
  • %TEMP%\_mei23882\tcl\encoding\koi8-r.enc
  • %TEMP%\_mei23882\tcl\encoding\euc-kr.enc
  • %TEMP%\_mei23882\tcl\encoding\gb12345.enc
  • %TEMP%\_mei23882\tcl\encoding\gb1988.enc
  • %TEMP%\_mei23882\tcl\encoding\gb2312-raw.enc
  • %TEMP%\_mei23882\tcl\encoding\gb2312.enc
  • %TEMP%\_mei23882\tcl\encoding\iso2022-jp.enc
  • %TEMP%\_mei23882\tcl\encoding\iso2022-kr.enc
  • %TEMP%\_mei23882\tcl\encoding\iso2022.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-1.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-10.enc
  • %TEMP%\_mei23882\tcl\encoding\dingbats.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-13.enc
  • %TEMP%\_mei23882\tcl\encoding\ebcdic.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-15.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-2.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-3.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-4.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-5.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-6.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-7.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-8.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-9.enc
  • %TEMP%\_mei23882\tcl\encoding\jis0201.enc
  • %TEMP%\_mei23882\tcl\encoding\jis0208.enc
  • %TEMP%\_mei23882\tcl\encoding\euc-cn.enc
  • %TEMP%\_mei23882\tcl\encoding\jis0212.enc
  • %TEMP%\_mei23882\tcl\encoding\iso8859-16.enc
  • %TEMP%\_mei23882\tcl\msgs\zh_hk.msg
  • %TEMP%\_mei23882\tcl\msgs\zh_sg.msg
  • %TEMP%\_mei23882\tcl\msgs\zh_tw.msg
  • %TEMP%\_mei23882\tcl\tzdata\america\knox_in
  • %TEMP%\_mei23882\tcl\tzdata\america\kralendijk
  • %TEMP%\_mei23882\tcl\tzdata\america\la_paz
  • %TEMP%\_mei23882\tcl\tzdata\america\lima
  • %TEMP%\_mei23882\tcl\tzdata\america\los_angeles
  • %TEMP%\_mei23882\tcl\tzdata\america\louisville
  • %TEMP%\_mei23882\tcl\tzdata\america\lower_princes
  • %TEMP%\_mei23882\tcl\tzdata\america\maceio
  • %TEMP%\_mei23882\tcl\tzdata\america\managua
  • %TEMP%\_mei23882\tcl\tzdata\america\manaus
  • %TEMP%\_mei23882\tcl\tzdata\america\marigot
  • %TEMP%\_mei23882\tcl\tzdata\america\havana
  • %TEMP%\_mei23882\tcl\tzdata\america\martinique
  • %TEMP%\_mei23882\tcl\tzdata\america\mazatlan
  • %TEMP%\_mei23882\tcl\tzdata\america\mendoza
  • %TEMP%\_mei23882\tcl\tzdata\america\menominee
  • %TEMP%\_mei23882\tcl\tzdata\america\merida
  • %TEMP%\_mei23882\tcl\tzdata\america\metlakatla
  • %TEMP%\_mei23882\tcl\tzdata\america\mexico_city
  • %TEMP%\_mei23882\tcl\tzdata\america\miquelon
  • %TEMP%\_mei23882\tcl\tzdata\america\moncton
  • %TEMP%\_mei23882\tcl\tzdata\america\monterrey
  • %TEMP%\_mei23882\tcl\tzdata\america\montevideo
  • %TEMP%\_mei23882\tcl\tzdata\america\montreal
  • %TEMP%\_mei23882\tcl\tzdata\america\kentucky\louisville
  • %TEMP%\_mei23882\tcl\tzdata\america\kentucky\monticello
  • %TEMP%\_mei23882\tcl\tzdata\america\juneau
  • %TEMP%\_mei23882\tcl\tzdata\america\jujuy
  • %TEMP%\_mei23882\tcl\tzdata\america\jamaica
  • %TEMP%\_mei23882\tcl\tzdata\america\fort_wayne
  • %TEMP%\_mei23882\tcl\tzdata\america\fortaleza
  • %TEMP%\_mei23882\tcl\tzdata\america\glace_bay
  • %TEMP%\_mei23882\tcl\tzdata\america\godthab
  • %TEMP%\_mei23882\tcl\tzdata\america\goose_bay
  • %TEMP%\_mei23882\tcl\tzdata\america\grand_turk
  • %TEMP%\_mei23882\tcl\tzdata\america\grenada
  • %TEMP%\_mei23882\tcl\tzdata\america\guadeloupe
  • %TEMP%\_mei23882\tcl\tzdata\america\guatemala
  • %TEMP%\_mei23882\tcl\tzdata\america\guayaquil
  • %TEMP%\_mei23882\tcl\tzdata\america\guyana
  • %TEMP%\_mei23882\tcl\tzdata\america\montserrat
  • %TEMP%\_mei23882\tcl\tzdata\america\matamoros
  • %TEMP%\_mei23882\tcl\tzdata\america\halifax
  • %TEMP%\_mei23882\tcl\tzdata\america\indiana\indianapolis
  • %TEMP%\_mei23882\tcl\tzdata\america\indiana\knox
  • %TEMP%\_mei23882\tcl\tzdata\america\indiana\marengo
  • %TEMP%\_mei23882\tcl\tzdata\america\indiana\petersburg
  • %TEMP%\_mei23882\tcl\tzdata\america\indiana\tell_city
  • %TEMP%\_mei23882\tcl\tzdata\america\indiana\vevay
  • %TEMP%\_mei23882\tcl\tzdata\america\indiana\vincennes
  • %TEMP%\_mei23882\tcl\tzdata\america\indiana\winamac
  • %TEMP%\_mei23882\tcl\tzdata\america\indianapolis
  • %TEMP%\_mei23882\tcl\tzdata\america\inuvik
  • %TEMP%\_mei23882\tcl\tzdata\america\iqaluit
  • %TEMP%\_mei23882\tcl\tzdata\america\fort_nelson
  • %TEMP%\_mei23882\tcl\tzdata\america\hermosillo
  • %TEMP%\_mei23882\tcl\tzdata\america\porto_velho
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\palmer
  • %TEMP%\_mei23882\tcl\tzdata\america\nipigon
  • %TEMP%\_mei23882\tcl\tzdata\america\st_barthelemy
  • %TEMP%\_mei23882\tcl\tzdata\america\st_johns
  • %TEMP%\_mei23882\tcl\tzdata\america\st_kitts
  • %TEMP%\_mei23882\tcl\tzdata\america\st_lucia
  • %TEMP%\_mei23882\tcl\tzdata\america\st_thomas
  • %TEMP%\_mei23882\tcl\tzdata\america\st_vincent
  • %TEMP%\_mei23882\tcl\tzdata\america\swift_current
  • %TEMP%\_mei23882\tcl\tzdata\america\tegucigalpa
  • %TEMP%\_mei23882\tcl\tzdata\america\thule
  • %TEMP%\_mei23882\tcl\tzdata\america\thunder_bay
  • %TEMP%\_mei23882\tcl\tzdata\america\tijuana
  • %TEMP%\_mei23882\tcl\tzdata\america\nassau
  • %TEMP%\_mei23882\tcl\tzdata\america\toronto
  • %TEMP%\_mei23882\tcl\tzdata\america\vancouver
  • %TEMP%\_mei23882\tcl\tzdata\america\virgin
  • %TEMP%\_mei23882\tcl\tzdata\america\whitehorse
  • %TEMP%\_mei23882\tcl\tzdata\america\winnipeg
  • %TEMP%\_mei23882\tcl\tzdata\america\yakutat
  • %TEMP%\_mei23882\tcl\tzdata\america\yellowknife
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\casey
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\davis
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\dumontdurville
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\macquarie
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\mawson
  • %TEMP%\_mei23882\tcl\tzdata\america\shiprock
  • %TEMP%\_mei23882\tcl\tzdata\america\sitka
  • %TEMP%\_mei23882\tcl\tzdata\america\scoresbysund
  • %TEMP%\_mei23882\tcl\tzdata\america\sao_paulo
  • %TEMP%\_mei23882\tcl\tzdata\america\santo_domingo
  • %TEMP%\_mei23882\tcl\tzdata\america\noronha
  • %TEMP%\_mei23882\tcl\tzdata\america\north_dakota\beulah
  • %TEMP%\_mei23882\tcl\tzdata\america\north_dakota\center
  • %TEMP%\_mei23882\tcl\tzdata\america\north_dakota\new_salem
  • %TEMP%\_mei23882\tcl\tzdata\america\ojinaga
  • %TEMP%\_mei23882\tcl\tzdata\america\panama
  • %TEMP%\_mei23882\tcl\tzdata\america\pangnirtung
  • %TEMP%\_mei23882\tcl\tzdata\america\paramaribo
  • %TEMP%\_mei23882\tcl\tzdata\america\phoenix
  • %TEMP%\_mei23882\tcl\tzdata\america\port-au-prince
  • %TEMP%\_mei23882\tcl\tzdata\america\port_of_spain
  • %TEMP%\_mei23882\tcl\tzdata\america\new_york
  • %TEMP%\_mei23882\tcl\tzdata\america\ensenada
  • %TEMP%\_mei23882\tcl\tzdata\america\porto_acre
  • %TEMP%\_mei23882\tcl\tzdata\america\punta_arenas
  • %TEMP%\_mei23882\tcl\tzdata\america\rainy_river
  • %TEMP%\_mei23882\tcl\tzdata\america\rankin_inlet
  • %TEMP%\_mei23882\tcl\tzdata\america\recife
  • %TEMP%\_mei23882\tcl\tzdata\america\regina
  • %TEMP%\_mei23882\tcl\tzdata\america\resolute
  • %TEMP%\_mei23882\tcl\tzdata\america\rio_branco
  • %TEMP%\_mei23882\tcl\tzdata\america\rosario
  • %TEMP%\_mei23882\tcl\tzdata\america\santa_isabel
  • %TEMP%\_mei23882\tcl\tzdata\america\santarem
  • %TEMP%\_mei23882\tcl\tzdata\america\santiago
  • %TEMP%\_mei23882\tcl\tzdata\america\nome
  • %TEMP%\_mei23882\tcl\tzdata\america\puerto_rico
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\mendoza
  • %TEMP%\_mei23882\tcl\tzdata\america\el_salvador
  • %TEMP%\_mei23882\tcl\tzdata\america\coral_harbour
  • %TEMP%\_mei23882\tcl\tzdata\africa\harare
  • %TEMP%\_mei23882\tcl\tzdata\africa\johannesburg
  • %TEMP%\_mei23882\tcl\tzdata\africa\juba
  • %TEMP%\_mei23882\tcl\tzdata\africa\kampala
  • %TEMP%\_mei23882\tcl\tzdata\africa\khartoum
  • %TEMP%\_mei23882\tcl\tzdata\africa\kigali
  • %TEMP%\_mei23882\tcl\tzdata\africa\kinshasa
  • %TEMP%\_mei23882\tcl\tzdata\africa\lagos
  • %TEMP%\_mei23882\tcl\tzdata\africa\libreville
  • %TEMP%\_mei23882\tcl\tzdata\africa\lome
  • %TEMP%\_mei23882\tcl\tzdata\africa\luanda
  • %TEMP%\_mei23882\tcl\tzdata\africa\bamako
  • %TEMP%\_mei23882\tcl\tzdata\africa\lubumbashi
  • %TEMP%\_mei23882\tcl\tzdata\africa\malabo
  • %TEMP%\_mei23882\tcl\tzdata\africa\maputo
  • %TEMP%\_mei23882\tcl\tzdata\africa\maseru
  • %TEMP%\_mei23882\tcl\tzdata\africa\mbabane
  • %TEMP%\_mei23882\tcl\tzdata\africa\mogadishu
  • %TEMP%\_mei23882\tcl\tzdata\africa\monrovia
  • %TEMP%\_mei23882\tcl\tzdata\africa\nairobi
  • %TEMP%\_mei23882\tcl\tzdata\africa\ndjamena
  • %TEMP%\_mei23882\tcl\tzdata\africa\niamey
  • %TEMP%\_mei23882\tcl\tzdata\africa\nouakchott
  • %TEMP%\_mei23882\tcl\tzdata\africa\ouagadougou
  • %TEMP%\_mei23882\tcl\tzdata\africa\freetown
  • %TEMP%\_mei23882\tcl\tzdata\africa\gaborone
  • %TEMP%\_mei23882\tcl\tzdata\africa\el_aaiun
  • %TEMP%\_mei23882\tcl\tzdata\africa\douala
  • %TEMP%\_mei23882\tcl\tzdata\africa\djibouti
  • %TEMP%\_mei23882\tcl\opt0.4\pkgindex.tcl
  • %TEMP%\_mei23882\tcl\package.tcl
  • %TEMP%\_mei23882\tcl\parray.tcl
  • %TEMP%\_mei23882\tcl\safe.tcl
  • %TEMP%\_mei23882\tcl\tclindex
  • %TEMP%\_mei23882\tcl\tm.tcl
  • %TEMP%\_mei23882\tcl\tzdata\africa\abidjan
  • %TEMP%\_mei23882\tcl\tzdata\africa\accra
  • %TEMP%\_mei23882\tcl\tzdata\africa\addis_ababa
  • %TEMP%\_mei23882\tcl\tzdata\africa\algiers
  • %TEMP%\_mei23882\tcl\tzdata\africa\asmara
  • %TEMP%\_mei23882\tcl\tzdata\africa\porto-novo
  • %TEMP%\_mei23882\tcl\tzdata\africa\lusaka
  • %TEMP%\_mei23882\tcl\tzdata\africa\asmera
  • %TEMP%\_mei23882\tcl\tzdata\africa\banjul
  • %TEMP%\_mei23882\tcl\tzdata\africa\bissau
  • %TEMP%\_mei23882\tcl\tzdata\africa\blantyre
  • %TEMP%\_mei23882\tcl\tzdata\africa\brazzaville
  • %TEMP%\_mei23882\tcl\tzdata\africa\bujumbura
  • %TEMP%\_mei23882\tcl\tzdata\africa\cairo
  • %TEMP%\_mei23882\tcl\tzdata\africa\casablanca
  • %TEMP%\_mei23882\tcl\tzdata\africa\ceuta
  • %TEMP%\_mei23882\tcl\tzdata\africa\conakry
  • %TEMP%\_mei23882\tcl\tzdata\africa\dakar
  • %TEMP%\_mei23882\tcl\tzdata\africa\dar_es_salaam
  • %TEMP%\_mei23882\tcl\opt0.4\optparse.tcl
  • %TEMP%\_mei23882\tcl\tzdata\africa\bangui
  • %TEMP%\_mei23882\tcl\tzdata\antarctica\mcmurdo
  • %TEMP%\_mei23882\tcl\tzdata\america\edmonton
  • %TEMP%\_mei23882\tcl\tzdata\africa\tripoli
  • %TEMP%\_mei23882\tcl\tzdata\america\bogota
  • %TEMP%\_mei23882\tcl\tzdata\america\boise
  • %TEMP%\_mei23882\tcl\tzdata\america\buenos_aires
  • %TEMP%\_mei23882\tcl\tzdata\america\cambridge_bay
  • %TEMP%\_mei23882\tcl\tzdata\america\campo_grande
  • %TEMP%\_mei23882\tcl\tzdata\america\cancun
  • %TEMP%\_mei23882\tcl\tzdata\america\caracas
  • %TEMP%\_mei23882\tcl\tzdata\america\catamarca
  • %TEMP%\_mei23882\tcl\tzdata\america\cayenne
  • %TEMP%\_mei23882\tcl\tzdata\america\cayman
  • %TEMP%\_mei23882\tcl\tzdata\america\chicago
  • %TEMP%\_mei23882\tcl\tzdata\africa\sao_tome
  • %TEMP%\_mei23882\tcl\tzdata\america\chihuahua
  • %TEMP%\_mei23882\tcl\tzdata\america\cordoba
  • %TEMP%\_mei23882\tcl\tzdata\america\costa_rica
  • %TEMP%\_mei23882\tcl\tzdata\america\creston
  • %TEMP%\_mei23882\tcl\tzdata\america\cuiaba
  • %TEMP%\_mei23882\tcl\tzdata\america\curacao
  • %TEMP%\_mei23882\tcl\tzdata\america\danmarkshavn
  • %TEMP%\_mei23882\tcl\tzdata\america\dawson
  • %TEMP%\_mei23882\tcl\tzdata\america\dawson_creek
  • %TEMP%\_mei23882\tcl\tzdata\america\denver
  • %TEMP%\_mei23882\tcl\tzdata\america\detroit
  • %TEMP%\_mei23882\tcl\tzdata\america\dominica
  • %TEMP%\_mei23882\tcl\tzdata\america\blanc-sablon
  • %TEMP%\_mei23882\tcl\tzdata\america\boa_vista
  • %TEMP%\_mei23882\tcl\tzdata\america\belize
  • %TEMP%\_mei23882\tcl\tzdata\america\belem
  • %TEMP%\_mei23882\tcl\tzdata\america\barbados
  • %TEMP%\_mei23882\tcl\tzdata\africa\windhoek
  • %TEMP%\_mei23882\tcl\tzdata\america\adak
  • %TEMP%\_mei23882\tcl\tzdata\america\anchorage
  • %TEMP%\_mei23882\tcl\tzdata\america\anguilla
  • %TEMP%\_mei23882\tcl\tzdata\america\antigua
  • %TEMP%\_mei23882\tcl\tzdata\america\araguaina
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\buenos_aires
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\catamarca
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\comodrivadavia
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\cordoba
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\jujuy
  • %TEMP%\_mei23882\tcl\tzdata\africa\timbuktu
  • %TEMP%\_mei23882\tcl\tzdata\america\eirunepe
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\la_rioja
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\salta
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\san_juan
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\san_luis
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\tucuman
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\ushuaia
  • %TEMP%\_mei23882\tcl\tzdata\america\aruba
  • %TEMP%\_mei23882\tcl\tzdata\america\asuncion
  • %TEMP%\_mei23882\tcl\tzdata\america\atikokan
  • %TEMP%\_mei23882\tcl\tzdata\america\atka
  • %TEMP%\_mei23882\tcl\tzdata\america\bahia
  • %TEMP%\_mei23882\tcl\tzdata\america\bahia_banderas
  • %TEMP%\_mei23882\tcl\tzdata\africa\tunis
  • %TEMP%\_mei23882\tcl\tzdata\america\argentina\rio_gallegos
  • %APPDATA%\microsoft\libs\wr64.sys
Сетевая активность
Подключается к
  • 'tr##sfer.sh':80
  • 'ap#.#ailjet.com':443
TCP
  • 'ap#.#ailjet.com':443
UDP
  • DNS ASK tr##sfer.sh
  • DNS ASK ap#.#ailjet.com
Другое
Создает и запускает на исполнение
  • '%APPDATA%\onetap\popo.exe'
  • '%APPDATA%\microsoft\libs\sihost64.exe'
  • '%TEMP%\services.exe'
  • '<SYSTEM32>\cmd.exe' /c schtasks /create /f /sc onlogon /rl highest /tn "Services" /tr '"%TEMP%\Services.exe"' & exit' (со скрытым окном)
Запускает на исполнение
  • '<SYSTEM32>\cmd.exe' /c C:/users/user/AppData/Roaming/onetap/popo.exe
  • '<SYSTEM32>\cmd.exe' /c schtasks /create /f /sc onlogon /rl highest /tn "Services" /tr '"%TEMP%\Services.exe"' & exit
  • '<SYSTEM32>\schtasks.exe' /create /f /sc onlogon /rl highest /tn "Services" /tr '"%TEMP%\Services.exe"'
  • '<SYSTEM32>\svchost.exe' -B --coin=monero --asm=auto --cpu-memory-pool=1 --randomx-mode=auto --randomx-no-rdmsr --cuda-bfactor-hint=12 --cuda-bsleep-hint=100 --url=xmrvsbeast.com:4242 --user=494AW7D4LacTHrtpDJfo1vdk1G...

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке