Техническая информация
Изменения в файловой системе
Создает следующие файлы
- <Текущая директория>\log-22-02-2024-18-15-33.txt
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\breeze\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\canyon\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\capsules\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\cascade\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\compass\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\concrete\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\echo\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\edge\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\ice\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\indust\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\iris\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\journal\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\layers\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\level\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\network\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\papyrus\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\pixel\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\profile\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\blends\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\axis\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\arctic\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\onenote.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\outlook.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\3d9ea1d79275adac711df034e67c3c40.arika
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\powerpoint.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.en\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.es\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proof.fr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proofing.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\proplus\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\publisher.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\quad\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\word.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\13d6584f187c8e91625fa906198b13c7.arika
- %CommonProgramFiles%\microsoft shared\proof\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\1033\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\lists\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\smart tag\lists\1033\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\source engine\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\stationery\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\textconv\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\textconv\en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\266396b641c849dd72fe2c9de058f8ed.arika
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\office32.ww\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\radial\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\rmnsque\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\web folders\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\web folders\1033\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\14\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\1033\akira_readme.txt
- %CommonProgramFiles%\services\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\6e34fe71c6b2a5b4463de32229cc7fac.arika
- %CommonProgramFiles%\speechengines\akira_readme.txt
- %CommonProgramFiles%\speechengines\microsoft\akira_readme.txt
- %CommonProgramFiles%\system\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\vsto\akira_readme.txt
- %CommonProgramFiles%\system\ado\akira_readme.txt
- %CommonProgramFiles%\system\en-us\akira_readme.txt
- %CommonProgramFiles%\system\msadc\akira_readme.txt
- %CommonProgramFiles%\system\msadc\en-us\akira_readme.txt
- %CommonProgramFiles%\system\msmapi\akira_readme.txt
- %CommonProgramFiles%\system\msmapi\1033\akira_readme.txt
- %CommonProgramFiles%\system\ole db\akira_readme.txt
- %CommonProgramFiles%\system\ole db\en-us\akira_readme.txt
- %ProgramFiles%\dvd maker\akira_readme.txt
- %ProgramFiles%\dvd maker\en-us\akira_readme.txt
- %ProgramFiles%\dvd maker\shared\akira_readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\vsto\10.0\1033\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\vba\vba7\e63b7d26bac4bb3382f80a7a7af46598.arika
- %CommonProgramFiles%\microsoft shared\vsto\10.0\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\vgx\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\osknumpad\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\satin\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\sky\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\slate\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\sonora\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\spring\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\strtedge\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\studio\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\sumipntg\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\water\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\watermar\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\refined\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\ripple\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\themes14\ricepapr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\translat\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\translat\esen\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\translat\frar\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\translat\fren\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\translat\449fa81e9f40488de06c56cde5364fd8.arika
- %CommonProgramFiles%\microsoft shared\triedit\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\triedit\en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\vba\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\vba\vba7\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\vba\vba7\1033\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\vc\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\translat\arfr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\translat\enes\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\translat\enfr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\infopath.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\groove.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\excel.en-us\akira_readme.txt
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\1e796c058d62e356b07523c734204691.arika
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\1033\akira_readme.txt
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\c2cb4185f98b5038bdbf00930ce011a3.arika
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\akira_readme.txt
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\f3a49aa9314a41a0d662a40419857a4d.arika
- <Текущая директория>\akira_readme.txt
- C:\perflogs\akira_readme.txt
- C:\perflogs\admin\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\bg-bg\akira_readme.txt
- %ProgramFiles%\akira_readme.txt
- %CommonProgramFiles%\designer\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\dw\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\equation\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\equation\1033\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\euro\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\filters\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\grphflt\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\help\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\akira_readme.txt
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\68f899e50ac479b17223ff9c277910ed.arika
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\cbe848a7be7a5f807d4f31988c393758.arika
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\32b82f726d1ee58f991922a10045a43a.arika
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\akira_readme.txt
- C:\kms\akira_readme.txt
- C:\msocache\akira_readme.txt
- C:\msocache\all users\akira_readme.txt
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\f2f3bff04c2404ee96242a718e3c98ef.arika
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\db37b50adea8e2bb4a16f0502106da00.arika
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\c5a77f5a4b276e0bfe46d67d508025c6.arika
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\74cc718391507614c9a3d103718c64bb.arika
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ar-sa\akira_readme.txt
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\465ce1d315a25020498475cd0e470c2b.arika
- %CommonProgramFiles%\akira_readme.txt
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\c7921b27be802a5196f0e25a2d767f0f.arika
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\65f18c22a26d786d58baf03327b3a4b6.arika
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\4e0b2678720cbea7115590fd585dcb1d.arika
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\akira_readme.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\e0ab6679f54a95168d634f7a8952f5f6.arika
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\akira_readme.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\e0ab6679f54a95168d634f7a8952f5f6.arika
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\akira_readme.txt
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\e0ab6679f54a95168d634f7a8952f5f6.arika
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\documents and settings\akira_readme.txt
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\akira_readme.txt
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\cs-cz\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\pt-pt\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ru-ru\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\sk-sk\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\sl-si\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\sr-latn-cs\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\sv-se\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\th-th\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\tr-tr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\uk-ua\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\zh-cn\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\zh-tw\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\pt-br\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\da-dk\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ro-ro\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\msclientdatamgr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\1033\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\1033\4693c292253ca448687098647bbcd539.arika
- %CommonProgramFiles%\microsoft shared\office14\dbf29b2e7ce0bb6aad5a8df7024dfc73.arika
- %CommonProgramFiles%\microsoft shared\office14\cultures\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\eeb162f84f26b66ba8f07f9bb87a7797.arika
- %CommonProgramFiles%\microsoft shared\office14\bffefc39245ad7926b2499b5e39c1e75.arika
- %CommonProgramFiles%\microsoft shared\office14\6a9cf9e066bc4c0d99a76bf63ab54ffd.arika
- %CommonProgramFiles%\microsoft shared\office14\c296cd35d2f45e3f4c93ffa16140d11b.arika
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\access.en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\msinfo\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\msinfo\en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\office14\akira_readme.txt
- %CommonProgramFiles%\system\ado\en-us\akira_readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\babyboy\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\nb-no\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\el-gr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\en-us\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\es-es\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\et-ee\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fi-fi\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fr-fr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\auxpad\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\keypad\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\main\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\numbers\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\nl-nl\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\pl-pl\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskmenu\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\symbols\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\web\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\he-il\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\hr-hr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\hu-hu\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\hwrcustomization\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\it-it\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ja-jp\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\ko-kr\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\lt-lt\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\lv-lv\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\de-de\akira_readme.txt
- %CommonProgramFiles%\microsoft shared\ink\fsdefinitions\oskpred\akira_readme.txt
- %ProgramFiles%\dvd maker\shared\dvdstyles\babygirl\akira_readme.txt
Удаляет следующие файлы
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\f2f3bff04c2404ee96242a718e3c98ef.arika
- %CommonProgramFiles%\microsoft shared\translat\449fa81e9f40488de06c56cde5364fd8.arika
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\266396b641c849dd72fe2c9de058f8ed.arika
- %CommonProgramFiles%\microsoft shared\officesoftwareprotectionplatform\13d6584f187c8e91625fa906198b13c7.arika
- %CommonProgramFiles%\microsoft shared\office14\office setup controller\3d9ea1d79275adac711df034e67c3c40.arika
- %CommonProgramFiles%\microsoft shared\office14\c296cd35d2f45e3f4c93ffa16140d11b.arika
- %CommonProgramFiles%\microsoft shared\office14\6a9cf9e066bc4c0d99a76bf63ab54ffd.arika
- %CommonProgramFiles%\microsoft shared\office14\bffefc39245ad7926b2499b5e39c1e75.arika
- %CommonProgramFiles%\microsoft shared\office14\eeb162f84f26b66ba8f07f9bb87a7797.arika
- %CommonProgramFiles%\microsoft shared\office14\dbf29b2e7ce0bb6aad5a8df7024dfc73.arika
- %CommonProgramFiles%\microsoft shared\office14\1033\4693c292253ca448687098647bbcd539.arika
- C:\msocache\all users\{90140000-0117-0409-1000-0000000ff1ce}-c\access.en-us\f3a49aa9314a41a0d662a40419857a4d.arika
- C:\msocache\all users\{90140000-0115-0409-1000-0000000ff1ce}-c\c2cb4185f98b5038bdbf00930ce011a3.arika
- %CommonProgramFiles%\microsoft shared\vba\vba7\e63b7d26bac4bb3382f80a7a7af46598.arika
- C:\msocache\all users\{90140000-00ba-0409-1000-0000000ff1ce}-c\1e796c058d62e356b07523c734204691.arika
- C:\msocache\all users\{90140000-0044-0409-1000-0000000ff1ce}-c\68f899e50ac479b17223ff9c277910ed.arika
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\e0ab6679f54a95168d634f7a8952f5f6.arika
- C:\msocache\all users\{90140000-0043-0409-1000-0000000ff1ce}-c\32b82f726d1ee58f991922a10045a43a.arika
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\4e0b2678720cbea7115590fd585dcb1d.arika
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\e0ab6679f54a95168d634f7a8952f5f6.arika
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\e0ab6679f54a95168d634f7a8952f5f6.arika
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\65f18c22a26d786d58baf03327b3a4b6.arika
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\465ce1d315a25020498475cd0e470c2b.arika
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\c7921b27be802a5196f0e25a2d767f0f.arika
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\c5a77f5a4b276e0bfe46d67d508025c6.arika
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\74cc718391507614c9a3d103718c64bb.arika
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\db37b50adea8e2bb4a16f0502106da00.arika
- C:\msocache\all users\{90140000-00a1-0409-1000-0000000ff1ce}-c\cbe848a7be7a5f807d4f31988c393758.arika
- %CommonProgramFiles%\microsoft shared\web server extensions\14\bin\6e34fe71c6b2a5b4463de32229cc7fac.arika
Перемещает следующие файлы
- %ProgramFiles%\desktop.ini в %ProgramFiles%\desktop.ini.akira
Изменяет следующие файлы
- C:\kms\kms_vl_all_aio_debug.log
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.xml
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.es\proof.cab
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.xml
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.en\proof.cab
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordmui.xml
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\wordlr.cab
- C:\msocache\all users\{90140000-001b-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlookmui.xml
- C:\msocache\all users\{90140000-001a-0409-1000-0000000ff1ce}-c\outlklr.cab
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publr.cab
- C:\msocache\all users\{90140000-0019-0409-1000-0000000ff1ce}-c\publishermui.xml
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\pptlr.cab
- C:\msocache\all users\{90140000-0018-0409-1000-0000000ff1ce}-c\powerpointmui.xml
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excelmui.xml
- C:\msocache\all users\{90140000-0016-0409-1000-0000000ff1ce}-c\excellr.cab
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\setup.xml
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww2.cab
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\propsww.cab
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\proplusww.xml
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\owow32ww.cab
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\pkeyconfig-office.xrm-ms
- C:\kms\kms_vl_all_aio.cmd
- C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\office32ww.xml
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.cab
- C:\msocache\all users\{90140000-002c-0409-1000-0000000ff1ce}-c\proof.fr\proof.xml
Изменяет множество файлов.
Изменяет множество файлов пользовательских данных (Trojan.Encoder).
Изменяет расширения файлов пользовательских данных (Trojan.Encoder).
Другое
Создает и запускает на исполнение
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject"' (со скрытым окном)
Запускает на исполнение
- '<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -Command "Get-WmiObject Win32_Shadowcopy | Remove-WmiObject"
