Trojan.Encoder.29411

Техническая информация

Для обеспечения автозапуска и распространения

Создает следующие файлы на съемном носителе

<Имя диска съемного носителя>:\_nemty_2uwlb3f_-decrypt.txt
<Имя диска съемного носителя>:\correct.avi

Изменения в файловой системе

Создает следующие файлы

C:\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdswitch\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdwizreg\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\blackd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\blackice\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\blindman\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\btini\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\btinint\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cabalmain\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cafix\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavapp\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavasm\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavaud\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavemsrv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavmr\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavmud\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavoar\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavq\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavscons\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavse\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavsn\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavsub\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavsubmit\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavumas\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavuserupd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cavvl\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ccapp\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ccevtmgr\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdsurvey\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ccleaner\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdsubmitwiz\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdss\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgemc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgfwsrv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avginet\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgnpdln\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgnpsvc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgrssvc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgscan\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgupden\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgupsvc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgvv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgw\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgwizfw\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avinitnt\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avkserv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avkservice\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avkwctl\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avnotify\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avpcc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avpm\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avscan\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avsynmgr\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\b2\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\backweb-4476822\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdagent\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdmcon\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdnews\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdoesrv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\bdsubmit\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dislite\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\resizingpanels\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cemrep\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drvctl\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drvirus\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drvmap\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drwadins\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drweb\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drweb32w\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drweb386\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drwebscd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drwebupw\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drwebwcl\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\drwreg\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\en-us\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\flippage\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\full\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\huecycle\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\layeredtitles\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\memories\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\oldage\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\performance\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\pets\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\push\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\rectangles\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dpatrolq\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgdiag\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dnf\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\directftp\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\chrome\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\clamscan\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\clamtray\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\clamwin\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\claw95\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\claw95cf\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cleaner\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cleaner3\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\clisvc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\clrcche\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cmain\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cmgrdian\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\copyx64\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\courier\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cpd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\csendto\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cssexc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\custinstall\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\custsetup\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\cuteftp\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dbconvert\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dbtool\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\defensewall\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\defwatch\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dekaron\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\digsby\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\digsby-app\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ccproxy\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ccsetmgr\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgcc\_nemty_2uwlb3f_-decrypt.txt
C:\perflogs\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\ftp\lib\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\hlfviewer\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\macroview\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\network\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\proclist\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\tmppanel\_nemty_2uwlb3f_-decrypt.txt
C:\far2\pluginsdk\_nemty_2uwlb3f_-decrypt.txt
C:\far2\pluginsdk\headers.c\_nemty_2uwlb3f_-decrypt.txt
C:\far2\pluginsdk\headers.pas\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\ftp\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\filecase\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\emenu\_nemty_2uwlb3f_-decrypt.txt
<Текущая директория>\_nemty_2uwlb3f_-decrypt.txt
C:\documents and settings\_nemty_2uwlb3f_-decrypt.txt
C:\far2\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\colors\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\colors\custom_highlighting\_nemty_2uwlb3f_-decrypt.txt
D:\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\colors\default_highlighting\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\macros\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\setup\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\shell\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\xlat\_nemty_2uwlb3f_-decrypt.txt
C:\far2\addons\xlat\russian\_nemty_2uwlb3f_-decrypt.txt
C:\far2\documentation\_nemty_2uwlb3f_-decrypt.txt
C:\far2\documentation\eng\_nemty_2uwlb3f_-decrypt.txt
C:\far2\documentation\rus\_nemty_2uwlb3f_-decrypt.txt
C:\far2\encyclopedia\_nemty_2uwlb3f_-decrypt.txt
C:\far2\encyclopedia\tap\_nemty_2uwlb3f_-decrypt.txt
C:\far2\fexcept\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\align\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\arclite\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\autowrap\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\brackets\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\compare\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\drawline\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\editcase\_nemty_2uwlb3f_-decrypt.txt
C:\far2\plugins\farcmds\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\armorsurf\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avconsol\_nemty_2uwlb3f_-decrypt.txt
C:\perflogs\admin\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashavsrv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashchest\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashdisp\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashdug\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashenhcd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashlogv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashmaisv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashpopwz\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashquick\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashserv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashsimp2\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashsimpl\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashskpcc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashskpck\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashupd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashwebsv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ash_updatemediator\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\aswregsvr\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\aswupdsv\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\autodown\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\autostartexplorer\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\autotrace\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avadmin\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avcenter\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avciman\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avcmd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avconfig\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ashavast\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\avgamsvr\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ash\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\armor2net\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\360tray\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\a2cmd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\a2guard\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\a2hijackfree\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\a2scan\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\a2service\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\a2start\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\a2upd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\a2wizard\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\aavshield\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\about\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ackwin32\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\admunch\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\agb5\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ageofconan\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\ahnsd\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\aim6\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\aimpro\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\airdefense\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\almon\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\alsvc\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\amon\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\amsn\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\anti-trojan\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\antivirus\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\aoltbserver\_nemty_2uwlb3f_-decrypt.txt
C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\_nemty_2uwlb3f_-decrypt.txt
%ProgramFiles%\dvd maker\shared\dvdstyles\shatter\_nemty_2uwlb3f_-decrypt.txt

Изменяет следующие файлы

%APPDATA%\microsoft\crypto\rsa\s-1-5-21-1960123792-2022915161-3775307078-1001\f58155b4b1d5a524ca0261c3ee99fb50_36d1130a-ac2e-44f7-9dc1-e424fbcbe0ee
C:\far2\addons\colors\default_highlighting\greenmile.reg
C:\far2\addons\colors\default_highlighting\farcolors242.reg
C:\far2\addons\colors\default_highlighting\dn_like.reg
C:\far2\addons\colors\default_highlighting\descript.ion
C:\far2\addons\colors\default_highlighting\colors_from_sadovoj.reg
C:\far2\addons\colors\default_highlighting\colors_from_gernichenko.reg
C:\far2\addons\colors\default_highlighting\colors_from_admin_essp_ru.reg
<Имя диска съемного носителя>:\000814251_video_01.avi
C:\far2\addons\colors\default_highlighting\black_from_myodov.reg
<Имя диска съемного носителя>:\correct.avi
C:\far2\addons\colors\default_highlighting\black_from_july.reg
C:\far2\addons\colors\default_highlighting\black_from_fonarev.reg
C:\far2\addons\colors\custom_highlighting\vaxcolors.reg
C:\far2\addons\colors\custom_highlighting\rodion_doroshkevich.reg
C:\far2\addons\colors\custom_highlighting\nc5pal2.reg
C:\far2\addons\colors\custom_highlighting\import_colors.bat
C:\far2\addons\colors\custom_highlighting\hell.reg
C:\far2\addons\colors\custom_highlighting\greenmile.reg
C:\far2\addons\colors\custom_highlighting\farcolors242.reg
C:\far2\addons\colors\custom_highlighting\dn_like.reg
C:\far2\addons\colors\custom_highlighting\descript.ion
C:\far2\addons\colors\custom_highlighting\colors_from_sadovoj.reg
C:\far2\addons\colors\custom_highlighting\colors_from_gernichenko.reg
C:\far2\addons\colors\custom_highlighting\colors_from_admin_essp_ru.reg
C:\far2\addons\colors\custom_highlighting\black_from_myodov.reg
C:\far2\addons\colors\custom_highlighting\black_from_july.reg
C:\far2\addons\colors\custom_highlighting\black_from_fonarev.reg
C:\far2\addons\colors\default_highlighting\hell.reg
C:\far2\addons\colors\default_highlighting\import_colors.bat

Изменяет множество файлов.

Сетевая активность

Подключается к

'ap#.#pify.org':80
'ap#.#b-ip.com':80

TCP

Запросы HTTP GET

http://ap#.#pify.org/
http://ap#.#b-ip.com/v2/free/95.211.190.199/countryName

UDP

DNS ASK ap#.#pify.org
DNS ASK ap#.#b-ip.com

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней