Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\1a157c39\j_38tvvra01.dat
- C:\users\administrator\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\aspnet\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\guest\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\administrator\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\homegroupuser$\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\guest\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\administrator\appdata\local\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- %LOCALAPPDATA%\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- %LOCALAPPDATA%\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\homegroupuser$\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- %WINDIR%\syswow64\grouppolicy\gpt.ini
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\uyoi0oyai@u-wka.net\bootstrap.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\uyoi0oyai@u-wka.net\chrome.manifest
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\uyoi0oyai@u-wka.net\content\bg.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- %LOCALAPPDATA%\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- %LOCALAPPDATA%\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- %LOCALAPPDATA%\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- %LOCALAPPDATA%\torch\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\aspnet\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\guest\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\administrator\appdata\local\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\guest\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\manifest.json
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\guest\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\homegroupuser$\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions\staged\uyoi0oyai@u-wka.net\install.rdf
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\administrator\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\c9b5nr.js
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\background.html
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\content.js
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\lsdb.js
- %TEMP%\1a157c39\uyoi0oyai@u-wka.net\bootstrap.js
- %TEMP%\1a157c39\uyoi0oyai@u-wka.net\chrome.manifest
- %TEMP%\1a157c39\uyoi0oyai@u-wka.net\install.rdf
- %TEMP%\1a157c39\uyoi0oyai@u-wka.net\content\bg.js
- %TEMP%\1a157c39\j_38tvvra01.exe
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- %LOCALAPPDATA%\chromatic browser\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- %LOCALAPPDATA%\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- %LOCALAPPDATA%\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\aspnet\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\administrator\appdata\local\google\chrome sxs\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\aspnet\appdata\local\google\chrome\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\administrator\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\homegroupuser$\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\background.html
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\c9b5nr.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\lsdb.js
- C:\users\guest\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\content.js
- C:\users\aspnet\appdata\local\comodo\dragon\user data\default\extensions\hklmiednaddegkmglpcbphkeakahclim\1.3\manifest.json
- %ALLUSERSPROFILE%\8469791c9fc75ce0\{681002c6-5019-81a2-7871-a43754f71e56}.20220606215701
Удаляет следующие файлы
- %TEMP%\1a157c39\j_38tvvra01.dat
- %TEMP%\1a157c39\j_38tvvra01.exe
- %TEMP%\1a157c39\uyoi0oyai@u-wka.net\content\bg.js
- %TEMP%\1a157c39\uyoi0oyai@u-wka.net\install.rdf
- %TEMP%\1a157c39\uyoi0oyai@u-wka.net\chrome.manifest
- %TEMP%\1a157c39\uyoi0oyai@u-wka.net\bootstrap.js
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\lsdb.js
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\content.js
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\manifest.json
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\background.html
- %TEMP%\1a157c39\hklmiednaddegkmglpcbphkeakahclim\c9b5nr.js
Изменяет следующие файлы
- %LOCALAPPDATA%\google\chrome\user data\local state
- %LOCALAPPDATA%\google\chrome\user data\default\preferences
Подменяет следующие файлы
- %ALLUSERSPROFILE%\ntuser.pol
Другое
Создает и запускает на исполнение
- '%TEMP%\1a157c39\j_38tvvra01.exe'
Запускает на исполнение
- '<SYSTEM32>\raserver.exe' /offerraupdate
