Техническая информация
- '<SYSTEM32>\regsvr32.exe' /n /s /i:"" 6Bd27.dll
- iexplore.exe
- firefox.exe
- chrome.exe
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\o1ayaert@hwa-dme.co.uk\bootstrap.js
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\o1ayaert@hwa-dme.co.uk\chrome.manifest
- %TEMP%\7zS1.tmp\o1ayaert@hwa-dme.co.uk\install.rdf
- %TEMP%\7zS1.tmp\Y8nuF.tlb
- %TEMP%\7zS1.tmp\lccleekfdofjgmgellknjkobofanmije\manifest.json
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\o1ayaert@hwa-dme.co.uk\content\bg.js
- %ALLUSERSPROFILE%\Application Data\CostMin\Y8nuF.tlb
- %ALLUSERSPROFILE%\Application Data\CostMin\6Bd27.dll
- %ALLUSERSPROFILE%\Application Data\CostMin\settings.ini
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions\staged\o1ayaert@hwa-dme.co.uk\install.rdf
- %ALLUSERSPROFILE%\Application Data\CostMin\Y8nuF.dll
- %TEMP%\7zS1.tmp\o1ayaert@hwa-dme.co.uk\bootstrap.js
- %TEMP%\7zS1.tmp\lccleekfdofjgmgellknjkobofanmije\content.js
- %TEMP%\7zS1.tmp\o1ayaert@hwa-dme.co.uk\content\bg.js
- %TEMP%\7zS1.tmp\o1ayaert@hwa-dme.co.uk\chrome.manifest
- %TEMP%\7zS1.tmp\lccleekfdofjgmgellknjkobofanmije\background.html
- %TEMP%\7zS1.tmp\lccleekfdofjgmgellknjkobofanmije\lsdb.js
- %TEMP%\7zS1.tmp\6Bd27.dll
- %TEMP%\7zS1.tmp\Y8nuF.dll
- %TEMP%\7zS1.tmp\settings.ini
- %TEMP%\7zS1.tmp\lccleekfdofjgmgellknjkobofanmije\sqlite.js
- %TEMP%\7zS1.tmp\lccleekfdofjgmgellknjkobofanmije\Zf7_wQ.js