Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [<HKLM>\SOFTWARE\Classes\cclaunch\shell\open\command] '' = '"%ProgramFiles%\CCleaner\CCleaner.exe" /%1'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\aut3c15.tmp
- %ProgramFiles%\ccleaner\lang\is-af41j.tmp
- %ProgramFiles%\ccleaner\lang\is-773bp.tmp
- %ProgramFiles%\ccleaner\lang\is-tu8cl.tmp
- %ProgramFiles%\ccleaner\lang\is-3mlk9.tmp
- %ProgramFiles%\ccleaner\lang\is-cldjf.tmp
- %ProgramFiles%\ccleaner\lang\is-l5snv.tmp
- %ProgramFiles%\ccleaner\lang\is-r4ghs.tmp
- %ProgramFiles%\ccleaner\lang\is-gjuut.tmp
- %ProgramFiles%\ccleaner\lang\is-cu3s4.tmp
- %ProgramFiles%\ccleaner\lang\is-3b8v3.tmp
- %ProgramFiles%\ccleaner\lang\is-ffd6h.tmp
- %ProgramFiles%\ccleaner\lang\is-vjgts.tmp
- %ProgramFiles%\ccleaner\lang\is-4fn1p.tmp
- %ProgramFiles%\ccleaner\lang\is-43g2d.tmp
- %ProgramFiles%\ccleaner\lang\is-ic2oh.tmp
- %ProgramFiles%\ccleaner\lang\is-gt4ji.tmp
- %ProgramFiles%\ccleaner\lang\is-jksda.tmp
- %ProgramFiles%\ccleaner\lang\is-7jt47.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\ccleaner\uninstall ccleaner.lnk
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\ccleaner\ccleaner.lnk
- %ProgramFiles%\ccleaner\is-ej75f.tmp
- %ProgramFiles%\ccleaner\is-l2lcn.tmp
- %ProgramFiles%\ccleaner\is-a4ibj.tmp
- %ProgramFiles%\ccleaner\is-4n60k.tmp
- %ProgramFiles%\ccleaner\is-u1793.tmp
- %ProgramFiles%\ccleaner\lang\is-2r1i1.tmp
- %ProgramFiles%\ccleaner\lang\is-7ie8f.tmp
- %ProgramFiles%\ccleaner\lang\is-hgtfq.tmp
- %ProgramFiles%\ccleaner\lang\is-qjpph.tmp
- %ProgramFiles%\ccleaner\lang\is-ej2t4.tmp
- %ProgramFiles%\ccleaner\lang\is-pc539.tmp
- %ProgramFiles%\ccleaner\lang\is-u37rc.tmp
- %ProgramFiles%\ccleaner\lang\is-emp61.tmp
- %ProgramFiles%\ccleaner\lang\is-a4j3p.tmp
- C:\users\public\desktop\ccleaner.lnk
- %ProgramFiles%\ccleaner\lang\is-mbhnh.tmp
- %ProgramFiles%\ccleaner\lang\is-c5bn7.tmp
- %ProgramFiles%\ccleaner\lang\is-p1a4m.tmp
- %ProgramFiles%\ccleaner\lang\is-8opvr.tmp
- %ProgramFiles%\ccleaner\lang\is-i0eab.tmp
- %ProgramFiles%\ccleaner\lang\is-mcpas.tmp
- %ProgramFiles%\ccleaner\lang\is-re30e.tmp
- %ProgramFiles%\ccleaner\lang\is-8qgbj.tmp
- %ProgramFiles%\ccleaner\lang\is-5mfr3.tmp
- %ProgramFiles%\ccleaner\lang\is-lf6t9.tmp
- %ProgramFiles%\ccleaner\lang\is-mfpid.tmp
- %ProgramFiles%\ccleaner\lang\is-25uv0.tmp
- %ProgramFiles%\ccleaner\is-lm5ei.tmp
- %TEMP%\is-t6uhn.tmp\_isetup\_setup64.tmp
- %TEMP%\is-pkg62.tmp\~cwwhdrt.tmp
- %CommonProgramFiles(x86)%\~cwwhdrt.tmp
- %ProgramFiles%\ccleaner\lang\is-pgdpl.tmp
- %ProgramFiles%\ccleaner\lang\is-4rt2f.tmp
- %ProgramFiles%\ccleaner\lang\is-rvqrg.tmp
- %ProgramFiles%\ccleaner\lang\is-bs1ts.tmp
- %ProgramFiles%\ccleaner\lang\is-a2dqv.tmp
- %ProgramFiles%\ccleaner\lang\is-i79co.tmp
- %ProgramFiles%\ccleaner\lang\is-tdvh5.tmp
- %ProgramFiles%\ccleaner\lang\is-onh6m.tmp
- %ProgramFiles%\ccleaner\lang\is-6jpk8.tmp
- %ProgramFiles%\ccleaner\lang\is-u88oq.tmp
- %ProgramFiles%\ccleaner\lang\is-helrc.tmp
- %ProgramFiles%\ccleaner\lang\is-gire4.tmp
- %ProgramFiles%\ccleaner\lang\is-4pjru.tmp
- %ProgramFiles%\ccleaner\lang\is-2t7au.tmp
- %ProgramFiles%\ccleaner\lang\is-3of3j.tmp
- %ProgramFiles%\ccleaner\lang\is-ihkup.tmp
- %ProgramFiles%\ccleaner\lang\is-jdt29.tmp
- %ProgramFiles%\ccleaner\lang\is-plt6d.tmp
- %ProgramFiles%\ccleaner\lang\is-k1843.tmp
- %ProgramFiles%\ccleaner\lang\is-tpfen.tmp
- %ProgramFiles%\ccleaner\unins000.dat
Присваивает атрибут 'скрытый' для следующих файлов
- %CommonProgramFiles(x86)%\~cwwhdrt.tmp
Удаляет следующие файлы
- %TEMP%\aut3c15.tmp
- %TEMP%\is-t6uhn.tmp\_isetup\_setup64.tmp
- %TEMP%\is-pkg62.tmp\~cwwhdrt.tmp
- %CommonProgramFiles(x86)%\~cwwhdrt.tmp
Перемещает следующие файлы
- %ProgramFiles%\ccleaner\is-lm5ei.tmp в %ProgramFiles%\ccleaner\unins000.exe
- %ProgramFiles%\ccleaner\lang\is-4fn1p.tmp в %ProgramFiles%\ccleaner\lang\lang-1081.dll
- %ProgramFiles%\ccleaner\lang\is-vjgts.tmp в %ProgramFiles%\ccleaner\lang\lang-1086.dll
- %ProgramFiles%\ccleaner\lang\is-ffd6h.tmp в %ProgramFiles%\ccleaner\lang\lang-1087.dll
- %ProgramFiles%\ccleaner\lang\is-3b8v3.tmp в %ProgramFiles%\ccleaner\lang\lang-1090.dll
- %ProgramFiles%\ccleaner\lang\is-cu3s4.tmp в %ProgramFiles%\ccleaner\lang\lang-1092.dll
- %ProgramFiles%\ccleaner\lang\is-ic2oh.tmp в %ProgramFiles%\ccleaner\lang\lang-1093.dll
- %ProgramFiles%\ccleaner\lang\is-gjuut.tmp в %ProgramFiles%\ccleaner\lang\lang-1102.dll
- %ProgramFiles%\ccleaner\lang\is-l5snv.tmp в %ProgramFiles%\ccleaner\lang\lang-1104.dll
- %ProgramFiles%\ccleaner\lang\is-cldjf.tmp в %ProgramFiles%\ccleaner\lang\lang-1109.dll
- %ProgramFiles%\ccleaner\lang\is-3mlk9.tmp в %ProgramFiles%\ccleaner\lang\lang-1110.dll
- %ProgramFiles%\ccleaner\lang\is-tu8cl.tmp в %ProgramFiles%\ccleaner\lang\lang-1155.dll
- %ProgramFiles%\ccleaner\lang\is-773bp.tmp в %ProgramFiles%\ccleaner\lang\lang-2052.dll
- %ProgramFiles%\ccleaner\lang\is-a4j3p.tmp в %ProgramFiles%\ccleaner\lang\lang-1071.dll
- %ProgramFiles%\ccleaner\lang\is-43g2d.tmp в %ProgramFiles%\ccleaner\lang\lang-1079.dll
- %ProgramFiles%\ccleaner\lang\is-af41j.tmp в %ProgramFiles%\ccleaner\lang\lang-2070.dll
- %ProgramFiles%\ccleaner\lang\is-jksda.tmp в %ProgramFiles%\ccleaner\lang\lang-5146.dll
- %ProgramFiles%\ccleaner\lang\is-7jt47.tmp в %ProgramFiles%\ccleaner\lang\lang-9999.dll
- %ProgramFiles%\ccleaner\lang\is-emp61.tmp в %ProgramFiles%\ccleaner\lang\lang-1025.dll
- %ProgramFiles%\ccleaner\lang\is-u37rc.tmp в %ProgramFiles%\ccleaner\lang\lang-1026.dll
- %ProgramFiles%\ccleaner\lang\is-pc539.tmp в %ProgramFiles%\ccleaner\lang\lang-1027.dll
- %ProgramFiles%\ccleaner\lang\is-ej2t4.tmp в %ProgramFiles%\ccleaner\lang\lang-1028.dll
- %ProgramFiles%\ccleaner\lang\is-qjpph.tmp в %ProgramFiles%\ccleaner\lang\lang-1029.dll
- %ProgramFiles%\ccleaner\lang\is-hgtfq.tmp в %ProgramFiles%\ccleaner\lang\lang-1030.dll
- %ProgramFiles%\ccleaner\lang\is-7ie8f.tmp в %ProgramFiles%\ccleaner\lang\lang-1031.dll
- %ProgramFiles%\ccleaner\lang\is-2r1i1.tmp в %ProgramFiles%\ccleaner\lang\lang-1032.dll
- %ProgramFiles%\ccleaner\is-u1793.tmp в %ProgramFiles%\ccleaner\branding.dll
- %ProgramFiles%\ccleaner\is-4n60k.tmp в %ProgramFiles%\ccleaner\ccleaner.dat
- %ProgramFiles%\ccleaner\lang\is-r4ghs.tmp в %ProgramFiles%\ccleaner\lang\lang-2074.dll
- %ProgramFiles%\ccleaner\lang\is-gt4ji.tmp в %ProgramFiles%\ccleaner\lang\lang-3098.dll
- %ProgramFiles%\ccleaner\lang\is-mbhnh.tmp в %ProgramFiles%\ccleaner\lang\lang-1068.dll
- %ProgramFiles%\ccleaner\lang\is-tpfen.tmp в %ProgramFiles%\ccleaner\lang\lang-1067.dll
- %ProgramFiles%\ccleaner\lang\is-c5bn7.tmp в %ProgramFiles%\ccleaner\lang\lang-1066.dll
- %ProgramFiles%\ccleaner\lang\is-mfpid.tmp в %ProgramFiles%\ccleaner\lang\lang-1035.dll
- %ProgramFiles%\ccleaner\lang\is-pgdpl.tmp в %ProgramFiles%\ccleaner\lang\lang-1036.dll
- %ProgramFiles%\ccleaner\lang\is-lf6t9.tmp в %ProgramFiles%\ccleaner\lang\lang-1037.dll
- %ProgramFiles%\ccleaner\lang\is-8qgbj.tmp в %ProgramFiles%\ccleaner\lang\lang-1038.dll
- %ProgramFiles%\ccleaner\lang\is-re30e.tmp в %ProgramFiles%\ccleaner\lang\lang-1040.dll
- %ProgramFiles%\ccleaner\lang\is-mcpas.tmp в %ProgramFiles%\ccleaner\lang\lang-1041.dll
- %ProgramFiles%\ccleaner\lang\is-i0eab.tmp в %ProgramFiles%\ccleaner\lang\lang-1042.dll
- %ProgramFiles%\ccleaner\lang\is-8opvr.tmp в %ProgramFiles%\ccleaner\lang\lang-1043.dll
- %ProgramFiles%\ccleaner\lang\is-p1a4m.tmp в %ProgramFiles%\ccleaner\lang\lang-1044.dll
- %ProgramFiles%\ccleaner\lang\is-5mfr3.tmp в %ProgramFiles%\ccleaner\lang\lang-1045.dll
- %ProgramFiles%\ccleaner\lang\is-4rt2f.tmp в %ProgramFiles%\ccleaner\lang\lang-1046.dll
- %ProgramFiles%\ccleaner\lang\is-rvqrg.tmp в %ProgramFiles%\ccleaner\lang\lang-1048.dll
- %ProgramFiles%\ccleaner\lang\is-bs1ts.tmp в %ProgramFiles%\ccleaner\lang\lang-1049.dll
- %ProgramFiles%\ccleaner\lang\is-25uv0.tmp в %ProgramFiles%\ccleaner\lang\lang-1034.dll
- %ProgramFiles%\ccleaner\lang\is-k1843.tmp в %ProgramFiles%\ccleaner\lang\lang-1050.dll
- %ProgramFiles%\ccleaner\lang\is-jdt29.tmp в %ProgramFiles%\ccleaner\lang\lang-1052.dll
- %ProgramFiles%\ccleaner\lang\is-ihkup.tmp в %ProgramFiles%\ccleaner\lang\lang-1053.dll
- %ProgramFiles%\ccleaner\lang\is-3of3j.tmp в %ProgramFiles%\ccleaner\lang\lang-1054.dll
- %ProgramFiles%\ccleaner\lang\is-2t7au.tmp в %ProgramFiles%\ccleaner\lang\lang-1055.dll
- %ProgramFiles%\ccleaner\lang\is-4pjru.tmp в %ProgramFiles%\ccleaner\lang\lang-1056.dll
- %ProgramFiles%\ccleaner\lang\is-gire4.tmp в %ProgramFiles%\ccleaner\lang\lang-1057.dll
- %ProgramFiles%\ccleaner\lang\is-helrc.tmp в %ProgramFiles%\ccleaner\lang\lang-1058.dll
- %ProgramFiles%\ccleaner\lang\is-u88oq.tmp в %ProgramFiles%\ccleaner\lang\lang-1059.dll
- %ProgramFiles%\ccleaner\lang\is-6jpk8.tmp в %ProgramFiles%\ccleaner\lang\lang-1060.dll
- %ProgramFiles%\ccleaner\lang\is-onh6m.tmp в %ProgramFiles%\ccleaner\lang\lang-1061.dll
- %ProgramFiles%\ccleaner\lang\is-tdvh5.tmp в %ProgramFiles%\ccleaner\lang\lang-1062.dll
- %ProgramFiles%\ccleaner\lang\is-i79co.tmp в %ProgramFiles%\ccleaner\lang\lang-1063.dll
- %ProgramFiles%\ccleaner\lang\is-a2dqv.tmp в %ProgramFiles%\ccleaner\lang\lang-1065.dll
- %ProgramFiles%\ccleaner\lang\is-plt6d.tmp в %ProgramFiles%\ccleaner\lang\lang-1051.dll
- %ProgramFiles%\ccleaner\is-l2lcn.tmp в %ProgramFiles%\ccleaner\ccleanerdu.dll
- %ProgramFiles%\ccleaner\is-ej75f.tmp в %ProgramFiles%\ccleaner\hostsedit.exe
Подменяет следующие исполняемые файлы
- %ProgramFiles%\CCleaner\CCleaner.exe
Изменяет файл HOSTS.
Другое
Создает и запускает на исполнение
- '%CommonProgramFiles(x86)%\~cwwhdrt.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 ip-info.ff.avast.com
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 shepherd.ff.avast.concc.avast.com
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 license-api.ccleaner.com
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 license.piriform.com
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 ncc.avast.com.edgesuite.net
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 ipm-provider.ff.avast.com
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 www.cc###ner.com
- '%TEMP%\is-pkg62.tmp\~cwwhdrt.tmp' /SL5="$120228,26609817,847360,%CommonProgramFiles(x86)%\~cwwhdrt.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 analytics.ff.avast.com
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 ncc.avast.com.edgesuite.net' (со скрытым окном)
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 www.cc###ner.com' (со скрытым окном)
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 analytics.ff.avast.com' (со скрытым окном)
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 ipm-provider.ff.avast.com' (со скрытым окном)
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 license.piriform.com' (со скрытым окном)
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 license-api.ccleaner.com' (со скрытым окном)
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 shepherd.ff.avast.concc.avast.com' (со скрытым окном)
- '%ProgramFiles%\ccleaner\hostsedit.exe' /a 0.0.0.0 ip-info.ff.avast.com' (со скрытым окном)
