Техническая информация
Вредоносные функции
Для затруднения выявления своего присутствия в системе
удаляет теневые копии разделов.
Изменения в файловой системе
Создает следующие файлы
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-3691498038-2086406363-2140527554-1000\b916acdcf9461b1365f920deab089f98_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814
- %HOMEPATH%\desktop\key.res
- %HOMEPATH%\desktop\!----readme----!.jpg
- %HOMEPATH%\documents\key.res
- %HOMEPATH%\documents\!----readme----!.jpg
Удаляет следующие файлы
- %APPDATA%\microsoft\crypto\rsa\s-1-5-21-3691498038-2086406363-2140527554-1000\b916acdcf9461b1365f920deab089f98_0cb67e2f-dc95-45ca-8fb8-69bde8e3f814
Перемещает следующие файлы
- %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip в %ProgramFiles%\java\jre1.8.0_45\lib\deploy\ffjcext.zip.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386267.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386270.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386485.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386764.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387337.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387578.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387591.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387604.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387882.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0387895.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0390072.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400001.png.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400003.png.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01265u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01265u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400004.png.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400005.png.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph00780u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph00780u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01035u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01035u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01046j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01179j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01213k.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01221k.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01235u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01235u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01236u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01236u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01239k.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01247u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01247u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0386120.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png в %ProgramFiles%\microsoft office\clipart\pub60cor\j0400002.png.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384900.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382958.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382931.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382938.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382939.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382942.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382944.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382947.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382948.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382950.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382952.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382954.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382955.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382957.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382959.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384888.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382960.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382961.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382962.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382963.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382965.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382966.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382967.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382968.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382969.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382970.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384862.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384885.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0384895.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02291u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02291u.bmp.crptd
- %ProgramFiles(x86)%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets в %ProgramFiles(x86)%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01562u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01562u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02753u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02753u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02754u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02754u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02755u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02755u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02756u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02756u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02757u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02757u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02758u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02758u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02759j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02810j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02829j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02897j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03011u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03011u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03012u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03012u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03143i.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01478u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01478u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03205i.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03224i.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03379i.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03380i.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03425i.jpg.crptd
- %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg в %ProgramFiles%\microsoft office\media\cagcat10\j0284916.jpg.crptd
- %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg в %ProgramFiles%\microsoft office\media\cagcat10\j0302827.jpg.crptd
- %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg в %ProgramFiles%\microsoft office\media\cagcat10\j0302953.jpg.crptd
- %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg в %ProgramFiles%\microsoft office\media\cagcat10\j0315447.jpg.crptd
- %ProgramFiles%\microsoft office\office14\splashscreen.bmp в %ProgramFiles%\microsoft office\office14\splashscreen.bmp.crptd
- %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets в %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.targets.crptd
- %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets в %ProgramFiles%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02752u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382930.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02750u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02223u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02223u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01607u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01607u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01931j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02028k.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02039u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02039u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02040u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02040u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02053j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02058u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02058u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02062u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02062u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02069j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02071u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02071u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02074u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02074u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02208u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02208u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph01332u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph01332u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02748u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02398u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02398u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02412k.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02417u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02417u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02466u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02466u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02470u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02470u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02503u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02503u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02567j.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02736u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02738u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02738u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02740u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02742u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02746u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749u.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\ph02749u.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\ph03041i.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382927.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341534.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101863.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101863.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101864.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101864.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101865.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101865.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101866.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101866.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101867.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101867.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0144773.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145168.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145212.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145272.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145361.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145373.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145669.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145810.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0175428.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145879.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145895.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145904.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0146142.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0148309.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0148757.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0148798.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0149018.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0149118.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0164153.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0174952.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0175361.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101862.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101862.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0145707.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101861.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101861.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099165.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099145.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099147.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099148.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099150.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099152.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099154.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099155.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099156.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099157.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099160.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099161.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099162.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099166.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101859.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101859.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099167.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099168.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099185.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099186.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099187.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099188.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099189.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099190.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0099191.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101856.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101857.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101857.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101858.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101858.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0101860.bmp в %ProgramFiles%\microsoft office\clipart\pub60cor\j0101860.bmp.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287641.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382925.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178348.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0315580.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0315612.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0321179.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0337280.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341328.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341344.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341439.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341447.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341448.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341455.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341475.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341499.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341551.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0177806.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341554.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341557.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341559.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341561.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341634.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341636.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341645.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341653.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341654.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341738.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0341742.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382836.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0314068.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0382926.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0313974.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0227558.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178459.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178460.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178523.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178632.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178639.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0178932.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0179963.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0182689.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0202045.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0216112.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0216153.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0227419.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0177257.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0313965.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287642.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287643.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287644.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0287645.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0289430.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309480.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309567.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309585.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309598.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309664.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0309705.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0313896.jpg.crptd
- %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg в %ProgramFiles%\microsoft office\clipart\pub60cor\j0313970.jpg.crptd
- %ProgramFiles(x86)%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets в %ProgramFiles(x86)%\msbuild\microsoft\windows workflow foundation\v3.0\workflow.visualbasic.targets.crptd
Изменяет следующие файлы
- %CommonProgramFiles%\microsoft shared\themes14\aftrnoon\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\pixel\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\papyrus\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\network\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\level\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\layers\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\journal\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\iris\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\indust\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\ice\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\expeditn\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\evrgreen\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\edge\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\eclipse\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\echo\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\deepblue\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\concrete\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\compass\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\cascade\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\capsules\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\canyon\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\breeze\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\boldstri\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\blueprnt\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\bluecalm\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\blends\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\axis\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\arctic\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\profile\thmbnail.png
- %CommonProgramFiles%\microsoft shared\themes14\quad\thmbnail.png
Изменяет множество файлов.
Изменяет множество файлов пользовательских данных (Trojan.Encoder).
Изменяет расширения файлов пользовательских данных (Trojan.Encoder).
Другое
Запускает на исполнение
- '<SYSTEM32>\cmd.exe' /C net view
- '<SYSTEM32>\net.exe' view
- '<SYSTEM32>\vssadmin.exe' Delete Shadows /All /Quiet (со скрытым окном)
