Техническая информация
Вредоносные функции
Завершает или пытается завершить
следующие пользовательские процессы:
- firefox.exe
Читает файлы, отвечающие за хранение паролей сторонними программами
- %HOMEPATH%\desktop\168.jpeg
- %HOMEPATH%\desktop\testcertificate.cer
- %HOMEPATH%\desktop\sdksampleunprivdeveloper.cer
- %HOMEPATH%\desktop\pushkin.jpeg
- %HOMEPATH%\desktop\parnas_01.jpeg
- %HOMEPATH%\desktop\join.avi
- %HOMEPATH%\desktop\ituneshelpunavailable.html
- %HOMEPATH%\desktop\holycrosschurchinstructions.docx
- %HOMEPATH%\desktop\garden.htm
- %HOMEPATH%\desktop\delete.avi
- %HOMEPATH%\desktop\dashborder_120.bmp
- %HOMEPATH%\desktop\testee.cer
- %HOMEPATH%\desktop\correct.avi
- %HOMEPATH%\desktop\contosoroot.cer
- %HOMEPATH%\desktop\coffee.bmp
- %HOMEPATH%\desktop\applicantform_en.doc
- %HOMEPATH%\desktop\api-hashmap.html
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx
- %HOMEPATH%\desktop\alert.html
- %HOMEPATH%\desktop\adadsi.html
- %HOMEPATH%\desktop\about.htm
- %HOMEPATH%\desktop\64bit_notes.htm
- %HOMEPATH%\desktop\210252809.jpeg
- %HOMEPATH%\desktop\contoso_1.cer
- %APPDATA%\opera software\opera stable\login data
Изменения в файловой системе
Создает следующие файлы
- %ALLUSERSPROFILE%\mpzrtg7at.ico
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.3\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.5.3\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\healthreport\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\minidumps\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.files\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\idb\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\mpzrtg7at.readme.txt
- %APPDATA%\mra\base\mpzrtg7at.readme.txt
- %APPDATA%\mra\update\splash_banner\mpzrtg7at.readme.txt
- %APPDATA%\mra\update\mpzrtg7at.readme.txt
- %APPDATA%\mra\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\databases\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\dictionaries\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\events\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\bookmarkbackups\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\static_png\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\statuses\aim\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\statuses\gtalk\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\statuses\icq\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\statuses\jabber\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\statuses\set01\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\statuses\vk\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\statuses\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\sounds\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\translation\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\video\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\mpzrtg7at.readme.txt
- %APPDATA%\media center programs\mpzrtg7at.readme.txt
- %APPDATA%\mirc\scripts\mpzrtg7at.readme.txt
- %APPDATA%\mirc\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\extensions\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\crash reports\events\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\crash reports\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\extension state\mpzrtg7at.readme.txt
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\jump list icons\mpzrtg7at.readme.txt
- %APPDATA%\winamp\plugins\ml\mpzrtg7at.readme.txt
- %APPDATA%\winamp\mpzrtg7at.readme.txt
- %APPDATA%\mpzrtg7at.readme.txt
- %HOMEPATH%\appdata\mpzrtg7at.readme.txt
- %HOMEPATH%\contacts\mpzrtg7at.readme.txt
- %HOMEPATH%\desktop\mpzrtg7at.readme.txt
- %HOMEPATH%\documents\mpzrtg7at.readme.txt
- %HOMEPATH%\downloads\mpzrtg7at.readme.txt
- %HOMEPATH%\favorites\links\mpzrtg7at.readme.txt
- %HOMEPATH%\favorites\links for united states\mpzrtg7at.readme.txt
- %HOMEPATH%\favorites\microsoft websites\mpzrtg7at.readme.txt
- %HOMEPATH%\favorites\msn websites\mpzrtg7at.readme.txt
- %HOMEPATH%\favorites\windows live\mpzrtg7at.readme.txt
- %HOMEPATH%\favorites\mpzrtg7at.readme.txt
- %HOMEPATH%\links\mpzrtg7at.readme.txt
- %HOMEPATH%\music\mpzrtg7at.readme.txt
- %HOMEPATH%\pictures\mpzrtg7at.readme.txt
- %HOMEPATH%\saved games\mpzrtg7at.readme.txt
- %HOMEPATH%\searches\mpzrtg7at.readme.txt
- %HOMEPATH%\videos\mpzrtg7at.readme.txt
- %HOMEPATH%\voip\mpzrtg7at.readme.txt
- %HOMEPATH%\mpzrtg7at.readme.txt
- C:\users\mpzrtg7at.readme.txt
- C:\mpzrtg7at.readme.txt
- %APPDATA%\winamp\plugins\mpzrtg7at.readme.txt
- %APPDATA%\winamp\plugins\milkdrop2\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\local storage\mpzrtg7at.readme.txt
- %APPDATA%\thunderbird\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\databases\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\storage\ext\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\storage\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\sync extension settings\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\mpzrtg7at.readme.txt
- %APPDATA%\opera software\mpzrtg7at.readme.txt
- %APPDATA%\qip\profiles\logs\mpzrtg7at.readme.txt
- %APPDATA%\qip\profiles\mpzrtg7at.readme.txt
- %APPDATA%\qip\mpzrtg7at.readme.txt
- %APPDATA%\qipguard\mpzrtg7at.readme.txt
- %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\mpzrtg7at.readme.txt
- %APPDATA%\telegram desktop\tdata\dumps\mpzrtg7at.readme.txt
- %APPDATA%\telegram desktop\tdata\mpzrtg7at.readme.txt
- %APPDATA%\telegram desktop\mpzrtg7at.readme.txt
- %APPDATA%\thunderbird\crash reports\mpzrtg7at.readme.txt
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\crashes\mpzrtg7at.readme.txt
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\minidumps\mpzrtg7at.readme.txt
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\mpzrtg7at.readme.txt
- %APPDATA%\thunderbird\profiles\mpzrtg7at.readme.txt
- %APPDATA%\opera software\opera stable\jump list iconsold\mpzrtg7at.readme.txt
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\mpzrtg7at.readme.txt
Перемещает следующие файлы
- %APPDATA%\winamp\demo.mp3 в %APPDATA%\winamp\demo.mp3.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\store.json.mozlz4 в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\crashes\store.json.mozlz4.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\bookmarkbackups\bookmarks-2022-08-24_14_x5qkry9yysawyostzmcdfa==.jsonlz4 в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\bookmarkbackups\bookmarks-2022-08-24_14_x5qkry9yysawyostzmcdfa==.jsonlz4.mpzrtg7at
- %APPDATA%\mozilla\firefox\crash reports\installtime20150415140819 в %APPDATA%\mozilla\firefox\crash reports\installtime20150415140819.mpzrtg7at
- %APPDATA%\mirc\mirc.ini в %APPDATA%\mirc\mirc.ini.mpzrtg7at
- %APPDATA%\mirc\servers.ini в %APPDATA%\mirc\servers.ini.mpzrtg7at
- %APPDATA%\mirc\urls.ini в %APPDATA%\mirc\urls.ini.mpzrtg7at
- %APPDATA%\mirc\scripts\aliases.ini в %APPDATA%\mirc\scripts\aliases.ini.mpzrtg7at
- %APPDATA%\mirc\scripts\popups.ini в %APPDATA%\mirc\scripts\popups.ini.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\video\video.swf в %APPDATA%\mail.ru\agent\mra\video\video.swf.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\auth.wav в %APPDATA%\mail.ru\agent\mra\sounds\auth.wav.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\prefs.js.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\busy.wav в %APPDATA%\mail.ru\agent\mra\sounds\busy.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\call_waiting.wav в %APPDATA%\mail.ru\agent\mra\sounds\call_waiting.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\conference.wav в %APPDATA%\mail.ru\agent\mra\sounds\conference.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\error.wav в %APPDATA%\mail.ru\agent\mra\sounds\error.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\letter.wav в %APPDATA%\mail.ru\agent\mra\sounds\letter.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\message.wav в %APPDATA%\mail.ru\agent\mra\sounds\message.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\no_answer.wav в %APPDATA%\mail.ru\agent\mra\sounds\no_answer.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\otprav.wav в %APPDATA%\mail.ru\agent\mra\sounds\otprav.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\ring.wav в %APPDATA%\mail.ru\agent\mra\sounds\ring.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\start.wav в %APPDATA%\mail.ru\agent\mra\sounds\start.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\test_sound.wav в %APPDATA%\mail.ru\agent\mra\sounds\test_sound.wav.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\voiceend.wav в %APPDATA%\mail.ru\agent\mra\sounds\voiceend.wav.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.5.3\gmpopenh264.info в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.5.3\gmpopenh264.info.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\sounds\call_in.wav в %APPDATA%\mail.ru\agent\mra\sounds\call_in.wav.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\state.json в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\datareporting\state.json.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.3\gmpopenh264.info в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\gmp-gmpopenh264\1.3\gmpopenh264.info.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\upgrade.js-20150415140819 в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\upgrade.js-20150415140819.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\recovery.js в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\recovery.js.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cookies.sqlite в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cookies.sqlite.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cookies.sqlite-shm в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cookies.sqlite-shm.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cookies.sqlite-wal в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\cookies.sqlite-wal.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.ini в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.ini.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.json в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\extensions.json.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\formhistory.sqlite в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\formhistory.sqlite.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\healthreport.sqlite в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\healthreport.sqlite.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\permissions.sqlite в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\permissions.sqlite.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite-shm в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite-shm.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\skin.txt в %APPDATA%\mail.ru\agent\mra\smiles\skin.txt.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite-wal в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\places.sqlite-wal.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\addons.json в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\addons.json.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\revocations.txt.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessioncheckpoints.json в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessioncheckpoints.json.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sitesecurityservicestate.txt.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\times.json в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\times.json.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\user.js в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\user.js.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webappsstore.sqlite в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webappsstore.sqlite.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webappsstore.sqlite-shm в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webappsstore.sqlite-shm.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xulstore.json в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\xulstore.json.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\webapps.json в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\webapps\webapps.json.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\.metadata в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\.metadata.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\storage\permanent\moz-safe-about+home\idb\818200132aebmoouht.sqlite.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\compatibility.ini в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\compatibility.ini.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\previous.js в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\sessionstore-backups\previous.js.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\search.json в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\search.json.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\content-prefs.sqlite в %APPDATA%\mozilla\firefox\profiles\gn7ryp3k.default\content-prefs.sqlite.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\s008.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\s008.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\jealousy.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\jealousy.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_right.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_right.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kukes.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kukes.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\laughter.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\laughter.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\live.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\live.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ok.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ok.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\oo.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\oo.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\pig.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\pig.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\plug.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\plug.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\really.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\really.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\rrr.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\rrr.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sceptic.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sceptic.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\heart.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\heart.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\shy.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\shy.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\smile.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\smile.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\tears.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\tears.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\think.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\think.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\vampire.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\vampire.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\victory.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\victory.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\zloradstvo.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\zloradstvo.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s001.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s001.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s002.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s002.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s003.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s003.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s004.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s004.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s006.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s006.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kiss.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\kiss.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_left.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\koza_left.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\hm.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\hm.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fuck.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fuck.gif.mpzrtg7at
- %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.old в %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.old.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kiss.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kiss.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kissed.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\kissed.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\lets_play.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\lets_play.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\on_wings.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\on_wings.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\undress.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\undress.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\want_you.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\want_you.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\aaa.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\aaa.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\amazed.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\amazed.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\angry.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\angry.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ass.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\ass.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\broken_heart.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\broken_heart.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\in_love.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\in_love.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\dont_be_late.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\valentine\dont_be_late.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bazilio.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bazilio.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\blink.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\blink.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bullshit.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bullshit.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\coolguy.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\coolguy.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\crocodile.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\crocodile.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\cry.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\cry.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\detzl.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\detzl.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\devil.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\devil.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\die.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\die.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\disappointed.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\disappointed.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fist.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\fist.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bee.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\bee.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biganger.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biganger.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biggrin.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\biggrin.gif.mpzrtg7at
- %APPDATA%\mozilla\firefox\profiles.ini в %APPDATA%\mozilla\firefox\profiles.ini.mpzrtg7at
- %APPDATA%\mra\base\opt.dbs в %APPDATA%\mra\base\opt.dbs.mpzrtg7at
- %APPDATA%\mra\base\mra.dbs в %APPDATA%\mra\base\mra.dbs.mpzrtg7at
- %APPDATA%\qipguard\cache в %APPDATA%\qipguard\cache.mpzrtg7at
- %APPDATA%\opera software\opera stable\bookmarks в %APPDATA%\opera software\opera stable\bookmarks.mpzrtg7at
- %APPDATA%\opera software\opera stable\bookmarks.bak в %APPDATA%\opera software\opera stable\bookmarks.bak.mpzrtg7at
- %APPDATA%\opera software\opera stable\bookmarksextras в %APPDATA%\opera software\opera stable\bookmarksextras.mpzrtg7at
- %APPDATA%\opera software\opera stable\browser.js в %APPDATA%\opera software\opera stable\browser.js.mpzrtg7at
- %APPDATA%\opera software\opera stable\certificate revocation lists в %APPDATA%\opera software\opera stable\certificate revocation lists.mpzrtg7at
- %APPDATA%\opera software\opera stable\cookies в %APPDATA%\opera software\opera stable\cookies.mpzrtg7at
- %APPDATA%\opera software\opera stable\cookies-journal в %APPDATA%\opera software\opera stable\cookies-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\favicons в %APPDATA%\opera software\opera stable\favicons.mpzrtg7at
- %APPDATA%\opera software\opera stable\favicons-journal в %APPDATA%\opera software\opera stable\favicons-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\favorites.db-journal в %APPDATA%\opera software\opera stable\favorites.db-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\session.db-journal в %APPDATA%\opera software\opera stable\session.db-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\history в %APPDATA%\opera software\opera stable\history.mpzrtg7at
- %APPDATA%\opera software\opera stable\history-journal в %APPDATA%\opera software\opera stable\history-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\local state в %APPDATA%\opera software\opera stable\local state.mpzrtg7at
- %APPDATA%\opera software\opera stable\login data в %APPDATA%\opera software\opera stable\login data.mpzrtg7at
- %APPDATA%\opera software\opera stable\login data-journal в %APPDATA%\opera software\opera stable\login data-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\opera_autoupdate.log в %APPDATA%\opera software\opera stable\opera_autoupdate.log.mpzrtg7at
- %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt в %APPDATA%\opera software\opera stable\opera_shutdown_ms.txt.mpzrtg7at
- %APPDATA%\opera software\opera stable\origin bound certs в %APPDATA%\opera software\opera stable\origin bound certs.mpzrtg7at
- %APPDATA%\opera software\opera stable\origin bound certs-journal в %APPDATA%\opera software\opera stable\origin bound certs-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\preferences в %APPDATA%\opera software\opera stable\preferences.mpzrtg7at
- %APPDATA%\opera software\opera stable\quotamanager в %APPDATA%\opera software\opera stable\quotamanager.mpzrtg7at
- %APPDATA%\telegram desktop\tdata\shortcuts-default.json в %APPDATA%\telegram desktop\tdata\shortcuts-default.json.mpzrtg7at
- %APPDATA%\telegram desktop\tdata\shortcuts-custom.json в %APPDATA%\telegram desktop\tdata\shortcuts-custom.json.mpzrtg7at
- %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0 в %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c\map0.mpzrtg7at
- %APPDATA%\telegram desktop\tdata\settings0 в %APPDATA%\telegram desktop\tdata\settings0.mpzrtg7at
- %APPDATA%\telegram desktop\tdata\prefix в %APPDATA%\telegram desktop\tdata\prefix.mpzrtg7at
- %APPDATA%\winamp\winamp.ini в %APPDATA%\winamp\winamp.ini.mpzrtg7at
- %APPDATA%\winamp\plugins\milkdrop2\milk2_img.ini в %APPDATA%\winamp\plugins\milkdrop2\milk2_img.ini.mpzrtg7at
- %APPDATA%\winamp\plugins\milkdrop2\milk2_msg.ini в %APPDATA%\winamp\plugins\milkdrop2\milk2_msg.ini.mpzrtg7at
- %APPDATA%\thunderbird\profiles.ini в %APPDATA%\thunderbird\profiles.ini.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\abook.mab в %APPDATA%\thunderbird\profiles\wjj9aet2.default\abook.mab.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\blist.sqlite в %APPDATA%\thunderbird\profiles\wjj9aet2.default\blist.sqlite.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\compatibility.ini в %APPDATA%\thunderbird\profiles\wjj9aet2.default\compatibility.ini.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\cookies.sqlite в %APPDATA%\thunderbird\profiles\wjj9aet2.default\cookies.sqlite.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.ini в %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.ini.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.json в %APPDATA%\thunderbird\profiles\wjj9aet2.default\extensions.json.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\foldertree.json в %APPDATA%\thunderbird\profiles\wjj9aet2.default\foldertree.json.mpzrtg7at
- %APPDATA%\opera software\opera stable\quotamanager-journal в %APPDATA%\opera software\opera stable\quotamanager-journal.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\global-messages-db.sqlite в %APPDATA%\thunderbird\profiles\wjj9aet2.default\global-messages-db.sqlite.mpzrtg7at
- %APPDATA%\opera software\opera stable\history provider cache в %APPDATA%\opera software\opera stable\history provider cache.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\permissions.sqlite в %APPDATA%\thunderbird\profiles\wjj9aet2.default\permissions.sqlite.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\prefs.js в %APPDATA%\thunderbird\profiles\wjj9aet2.default\prefs.js.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\session.json в %APPDATA%\thunderbird\profiles\wjj9aet2.default\session.json.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\sessioncheckpoints.json в %APPDATA%\thunderbird\profiles\wjj9aet2.default\sessioncheckpoints.json.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\times.json в %APPDATA%\thunderbird\profiles\wjj9aet2.default\times.json.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\webappsstore.sqlite в %APPDATA%\thunderbird\profiles\wjj9aet2.default\webappsstore.sqlite.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\crashes\store.json.mozlz4 в %APPDATA%\thunderbird\profiles\wjj9aet2.default\crashes\store.json.mozlz4.mpzrtg7at
- %APPDATA%\thunderbird\crash reports\installtime20150330093429 в %APPDATA%\thunderbird\crash reports\installtime20150330093429.mpzrtg7at
- %APPDATA%\telegram desktop\log.txt в %APPDATA%\telegram desktop\log.txt.mpzrtg7at
- %APPDATA%\telegram desktop\tdata\90ef50e22e92cb8c0 в %APPDATA%\telegram desktop\tdata\90ef50e22e92cb8c0.mpzrtg7at
- %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1 в %APPDATA%\telegram desktop\tdata\d877f783d5d3ef8c1.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\history.mab в %APPDATA%\thunderbird\profiles\wjj9aet2.default\history.mab.mpzrtg7at
- %APPDATA%\winamp\winamp.m3u8 в %APPDATA%\winamp\winamp.m3u8.mpzrtg7at
- %APPDATA%\thunderbird\profiles\wjj9aet2.default\places.sqlite в %APPDATA%\thunderbird\profiles\wjj9aet2.default\places.sqlite.mpzrtg7at
- %APPDATA%\telegram desktop\tdata\usertag в %APPDATA%\telegram desktop\tdata\usertag.mpzrtg7at
- %APPDATA%\opera software\opera stable\session.dbak в %APPDATA%\opera software\opera stable\session.dbak.mpzrtg7at
- %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage-journal в %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list iconsold\36a1.tmp в %APPDATA%\opera software\opera stable\jump list iconsold\36a1.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list iconsold\36c3.tmp в %APPDATA%\opera software\opera stable\jump list iconsold\36c3.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list iconsold\3703.tmp в %APPDATA%\opera software\opera stable\jump list iconsold\3703.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list iconsold\3724.tmp в %APPDATA%\opera software\opera stable\jump list iconsold\3724.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list iconsold\3765.tmp в %APPDATA%\opera software\opera stable\jump list iconsold\3765.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list iconsold\3796.tmp в %APPDATA%\opera software\opera stable\jump list iconsold\3796.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list icons\50ed.tmp в %APPDATA%\opera software\opera stable\jump list icons\50ed.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list icons\514d.tmp в %APPDATA%\opera software\opera stable\jump list icons\514d.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list icons\516e.tmp в %APPDATA%\opera software\opera stable\jump list icons\516e.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list icons\51ce.tmp в %APPDATA%\opera software\opera stable\jump list icons\51ce.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage в %APPDATA%\opera software\opera stable\local storage\opera_startpage_0.localstorage.mpzrtg7at
- %APPDATA%\opera software\opera stable\siteprefs.json в %APPDATA%\opera software\opera stable\siteprefs.json.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list iconsold\3651.tmp в %APPDATA%\opera software\opera stable\jump list iconsold\3651.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list icons\51ff.tmp в %APPDATA%\opera software\opera stable\jump list icons\51ff.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\extension state\000006.ldb в %APPDATA%\opera software\opera stable\extension state\000006.ldb.mpzrtg7at
- %APPDATA%\opera software\opera stable\extension state\000007.log в %APPDATA%\opera software\opera stable\extension state\000007.log.mpzrtg7at
- %APPDATA%\opera software\opera stable\extension state\current в %APPDATA%\opera software\opera stable\extension state\current.mpzrtg7at
- %APPDATA%\opera software\opera stable\extension state\log в %APPDATA%\opera software\opera stable\extension state\log.mpzrtg7at
- %APPDATA%\opera software\opera stable\extension state\log.old в %APPDATA%\opera software\opera stable\extension state\log.old.mpzrtg7at
- %APPDATA%\opera software\opera stable\extension state\manifest-000001 в %APPDATA%\opera software\opera stable\extension state\manifest-000001.mpzrtg7at
- %APPDATA%\opera software\opera stable\databases\databases.db-journal в %APPDATA%\opera software\opera stable\databases\databases.db-journal.mpzrtg7at
- %APPDATA%\mra\update\languages.aff в %APPDATA%\mra\update\languages.aff.mpzrtg7at
- %APPDATA%\mra\update\languages.dict в %APPDATA%\mra\update\languages.dict.mpzrtg7at
- %APPDATA%\mra\update\languages.hash в %APPDATA%\mra\update\languages.hash.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list icons\524f.tmp в %APPDATA%\opera software\opera stable\jump list icons\524f.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\jump list icons\529f.tmp в %APPDATA%\opera software\opera stable\jump list icons\529f.tmp.mpzrtg7at
- %APPDATA%\opera software\opera stable\extension state\000003.ldb в %APPDATA%\opera software\opera stable\extension state\000003.ldb.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sleepy.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\smiles\sleepy.gif.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s008.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s008.gif.mpzrtg7at
- %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage-journal в %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\ssdfp2216.0.2078311798 в %APPDATA%\opera software\opera stable\ssdfp2216.0.2078311798.mpzrtg7at
- %APPDATA%\opera software\opera stable\ssdfp2512.4.1739910927 в %APPDATA%\opera software\opera stable\ssdfp2512.4.1739910927.mpzrtg7at
- %APPDATA%\opera software\opera stable\ssdfp2544.3.670597881 в %APPDATA%\opera software\opera stable\ssdfp2544.3.670597881.mpzrtg7at
- %APPDATA%\opera software\opera stable\thumbnails.db-journal в %APPDATA%\opera software\opera stable\thumbnails.db-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\transportsecurity в %APPDATA%\opera software\opera stable\transportsecurity.mpzrtg7at
- %APPDATA%\opera software\opera stable\update_prefs.json в %APPDATA%\opera software\opera stable\update_prefs.json.mpzrtg7at
- %APPDATA%\opera software\opera stable\visited links в %APPDATA%\opera software\opera stable\visited links.mpzrtg7at
- %APPDATA%\opera software\opera stable\web data в %APPDATA%\opera software\opera stable\web data.mpzrtg7at
- %APPDATA%\opera software\opera stable\web data-journal в %APPDATA%\opera software\opera stable\web data-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000003.ldb в %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\000003.ldb.mpzrtg7at
- %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\current в %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\current.mpzrtg7at
- %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage в %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage.mpzrtg7at
- %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage-journal в %APPDATA%\opera software\opera stable\local storage\https_www.yandex.ru_0.localstorage-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log в %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\log.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\cookies в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\cookies.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\cookies-journal в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\cookies-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\quotamanager в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\quotamanager.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\quotamanager-journal в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\quotamanager-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_0 в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_0.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_1 в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_1.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_2 в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_2.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_3 в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\data_3.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\index в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\gpucache\index.mpzrtg7at
- %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\databases\databases.db-journal в %APPDATA%\opera software\opera stable\storage\ext\sync-login\def\databases\databases.db-journal.mpzrtg7at
- %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage в %APPDATA%\opera software\opera stable\local storage\chrome-extension_knohfebhibeknbfioecpdmdkjkjdnjnl_0.localstorage.mpzrtg7at
- %APPDATA%\opera software\opera stable\ssdfp1652.1.1724122967 в %APPDATA%\opera software\opera stable\ssdfp1652.1.1724122967.mpzrtg7at
- %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\manifest-000001 в %APPDATA%\opera software\opera stable\sync extension settings\knohfebhibeknbfioecpdmdkjkjdnjnl\manifest-000001.mpzrtg7at
- %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s009.gif в %APPDATA%\mail.ru\agent\mra\smiles\smiles\set06\s009.gif.mpzrtg7at
Изменяет следующие файлы
- C:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\desktop.ini
- %HOMEPATH%\desktop\api-hashmap.html.mpzrtg7at
- %HOMEPATH%\desktop\aoc_saq_d_v3_merchant.docx.mpzrtg7at
- %HOMEPATH%\desktop\alert.html.mpzrtg7at
- %HOMEPATH%\desktop\adadsi.html.mpzrtg7at
- %HOMEPATH%\desktop\64bit_notes.htm.mpzrtg7at
- %HOMEPATH%\desktop\about.htm.mpzrtg7at
- %HOMEPATH%\desktop\210252809.jpeg.mpzrtg7at
- %HOMEPATH%\desktop\168.jpeg.mpzrtg7at
- %HOMEPATH%\favorites\links\web slice gallery.url.mpzrtg7at
- %HOMEPATH%\favorites\links for united states\usa.gov.url.mpzrtg7at
- %HOMEPATH%\favorites\links for united states\gobiernousa.gov.url.mpzrtg7at
- %HOMEPATH%\favorites\microsoft websites\microsoft store.url.mpzrtg7at
- %HOMEPATH%\favorites\microsoft websites\microsoft at work.url.mpzrtg7at
- %HOMEPATH%\favorites\microsoft websites\microsoft at home.url.mpzrtg7at
- %HOMEPATH%\favorites\microsoft websites\ie site on microsoft.com.url.mpzrtg7at
- %HOMEPATH%\favorites\microsoft websites\ie add-on site.url.mpzrtg7at
- %HOMEPATH%\favorites\msn websites\msnbc news.url.mpzrtg7at
- %HOMEPATH%\favorites\msn websites\msn.url.mpzrtg7at
- %HOMEPATH%\favorites\msn websites\msn sports.url.mpzrtg7at
- %HOMEPATH%\favorites\msn websites\msn money.url.mpzrtg7at
- %HOMEPATH%\favorites\msn websites\msn entertainment.url.mpzrtg7at
- %HOMEPATH%\favorites\msn websites\msn autos.url.mpzrtg7at
- %HOMEPATH%\favorites\windows live\windows live spaces.url.mpzrtg7at
- %HOMEPATH%\favorites\windows live\windows live mail.url.mpzrtg7at
- %HOMEPATH%\favorites\windows live\windows live gallery.url.mpzrtg7at
- %HOMEPATH%\favorites\windows live\get windows live.url.mpzrtg7at
- D:\$recycle.bin\s-1-5-21-1960123792-2022915161-3775307078-1001\desktop.ini
- %HOMEPATH%\contacts\user.contact.mpzrtg7at
- %APPDATA%\winamp\demo.mp3.mpzrtg7at
Изменяет множество файлов.
Изменяет расширения файлов пользовательских данных (Trojan.Encoder).
