Техническая информация
- [HKLM\System\CurrentControlSet\Services\High-quality math calculator 7.1] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\High-quality math calculator 7.1] 'ImagePath' = '%ALLUSERSPROFILE%\High-quality math calculator 7.1\High-quality math calculator 7.1.exe'
- 'High-quality math calculator 7.1' %ALLUSERSPROFILE%\High-quality math calculator 7.1\High-quality math calculator 7.1.exe
- %TEMP%\is-8o4il.tmp\<Имя файла>.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-tluof.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-mkor7.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-dbrl7.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-h4jkj.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-q053j.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-4349u.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\lessmsi\is-2jfht.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-iss30.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-cj86o.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-lug0o.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-nen70.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\plugins\internal\is-543rd.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\plugins\internal\is-q1mbm.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-n4rgd.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-us887.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-bvf0g.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-9vs04.tmp
- %LOCALAPPDATA%\js domainkey lib\stuff\is-41stk.tmp
- %LOCALAPPDATA%\js domainkey lib\stuff\is-dj9da.tmp
- %LOCALAPPDATA%\js domainkey lib\stuff\is-9in91.tmp
- %LOCALAPPDATA%\js domainkey lib\stuff\is-3fhlr.tmp
- %LOCALAPPDATA%\js domainkey lib\is-68716.tmp
- %LOCALAPPDATA%\js domainkey lib\unins000.dat
- %LOCALAPPDATA%\js domainkey lib\jsdomainkeylib.exe
- %ALLUSERSPROFILE%\high-quality math calculator 7.1\high-quality math calculator 7.1.exe
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-oc61b.tmp
- %ALLUSERSPROFILE%\ts71.dat
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-5sp16.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-l9mvi.tmp
- %TEMP%\is-q1n78.tmp\_isetup\_regdll.tmp
- %TEMP%\is-q1n78.tmp\_isetup\_setup64.tmp
- %TEMP%\is-q1n78.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-q1n78.tmp\_isetup\_isdecmp.dll
- %TEMP%\is-q1n78.tmp\_isetup\_iscrypt.dll
- %LOCALAPPDATA%\js domainkey lib\is-jav3t.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-tqeqe.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-htefa.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-e4ad0.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-oribm.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-dafoe.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-almod.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-8p5pf.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-pcl51.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-t6uu1.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-ke8nc.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-m9u3c.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-9t71j.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-3ki3v.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-of980.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-1j3lg.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-7uhn7.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-fnhmv.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-3iqa1.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-8eoei.tmp
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-1uunq.tmp
- %ALLUSERSPROFILE%\resource.dat
- %LOCALAPPDATA%\js domainkey lib\stuff\date.txt
- %LOCALAPPDATA%\js domainkey lib\stuff\tagsreplace.txt
- %LOCALAPPDATA%\js domainkey lib\is-jav3t.tmp в %LOCALAPPDATA%\js domainkey lib\unins000.exe
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-mkor7.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\da.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-dbrl7.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\daiso.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-h4jkj.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\dstt.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-q053j.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\dsd2pcmt.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-4349u.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\pcm2dsd.exe
- %LOCALAPPDATA%\js domainkey lib\bin\x86\lessmsi\is-2jfht.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\lessmsi\lessmsi-v1.6.91.zip
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-iss30.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\d_writer.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-oc61b.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\dsd2.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-tluof.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\lame_enc.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-cj86o.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\libwebp.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\plugins\internal\is-543rd.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\plugins\internal\peak_scanner_plugin_c.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\plugins\internal\is-q1mbm.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\plugins\internal\raw_decode_plugin_c.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-n4rgd.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\copying
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-us887.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\7z.exe
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-bvf0g.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\takdec.exe
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-9vs04.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\tak_deco_lib.dll
- %LOCALAPPDATA%\js domainkey lib\stuff\is-41stk.tmp в %LOCALAPPDATA%\js domainkey lib\stuff\date.txt
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-lug0o.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\libwinpthread-1.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-nen70.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\sd.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-5sp16.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\libdtsdec.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-1uunq.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\utils.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-l9mvi.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\uchardet.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-htefa.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\bassflac.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-e4ad0.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\bassmix.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-oribm.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\bassopus.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-dafoe.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\basswma.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-almod.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\basswv.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-8p5pf.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\bass_fx.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-pcl51.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\bassmidi.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-t6uu1.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\bass_tta.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-tqeqe.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\basscd.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-ke8nc.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\copying.lgplv2.1
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-9t71j.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\gain_analysis.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-3ki3v.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\libflac_dynamic.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-of980.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\bass_ofr.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-1j3lg.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\optimfrog.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-7uhn7.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\mp3gain.exe
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-fnhmv.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\rg_ebur128.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-3iqa1.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\wavpackdll.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-8eoei.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\libsoxr.dll
- %LOCALAPPDATA%\js domainkey lib\bin\x86\is-m9u3c.tmp в %LOCALAPPDATA%\js domainkey lib\bin\x86\ff_helper.dll
- %LOCALAPPDATA%\js domainkey lib\stuff\is-dj9da.tmp в %LOCALAPPDATA%\js domainkey lib\stuff\tagsreplace.txt
- %LOCALAPPDATA%\js domainkey lib\is-68716.tmp в %LOCALAPPDATA%\js domainkey lib\jsdomainkeylib.exe
- %LOCALAPPDATA%\js domainkey lib\stuff\date.txt
- %LOCALAPPDATA%\js domainkey lib\stuff\tagsreplace.txt
- ClassName: '' WindowName: 'n15bcd_JSDKL173FlashFixClass_n15bcd'
- '%TEMP%\is-8o4il.tmp\<Имя файла>.tmp' /SL5="$A024E,4778219,351744,<Полный путь к файлу>"
- '%LOCALAPPDATA%\js domainkey lib\jsdomainkeylib.exe' -i
- '%LOCALAPPDATA%\js domainkey lib\jsdomainkeylib.exe' -s
- '%WINDIR%\syswow64\net.exe' helpmsg 173
- '%WINDIR%\syswow64\net1.exe' helpmsg 173