Trojan.Encoder.41999

Техническая информация

Для обеспечения автозапуска и распространения

Создает следующие файлы на съемном носителе

<Имя диска съемного носителя>:\readme.txt

Изменения в файловой системе

Создает следующие файлы

C:\readme.txt
%ProgramFiles(x86)%\microsoft\readme.txt
%ProgramFiles(x86)%\microsoft analysis services\readme.txt
%ProgramFiles(x86)%\microsoft office\readme.txt
%ProgramFiles(x86)%\microsoft visual studio 8\readme.txt
%ProgramFiles(x86)%\microsoft.net\readme.txt
%ProgramFiles(x86)%\msbuild\readme.txt
%ProgramFiles(x86)%\opera\readme.txt
%ProgramFiles(x86)%\reference assemblies\readme.txt
%ProgramFiles(x86)%\steam\readme.txt
%ProgramFiles%\dvd maker\readme.txt
%ProgramFiles(x86)%\uninstall information\readme.txt
%ALLUSERSPROFILE%\microsoft\readme.txt
%ALLUSERSPROFILE%\microsoft help\readme.txt
%ALLUSERSPROFILE%\mozilla\readme.txt
%ALLUSERSPROFILE%\oracle\readme.txt
%ALLUSERSPROFILE%\package cache\readme.txt
%ALLUSERSPROFILE%\sun\readme.txt
C:\recovery\4d53d3aa-5835-11ef-baad-8f07b80b2fb5\readme.txt
C:\users\default\readme.txt
C:\users\public\readme.txt
%CommonProgramFiles(x86)%\readme.txt
%ProgramFiles(x86)%\internet explorer\readme.txt
%ProgramFiles(x86)%\adobe\readme.txt
%ProgramFiles%\uninstall information\readme.txt
%ProgramFiles%\reference assemblies\readme.txt
C:\msocache\readme.txt
%ProgramFiles%\readme.txt
%ProgramFiles(x86)%\readme.txt
D:\readme.txt
%ALLUSERSPROFILE%\readme.txt
<Текущая директория>\readme.txt
C:\recovery\readme.txt
C:\users\readme.txt
C:\msocache\all users\readme.txt
%HOMEPATH%\readme.txt
%ALLUSERSPROFILE%\adobe\readme.txt
%CommonProgramFiles%\readme.txt
%ProgramFiles%\java\readme.txt
%ProgramFiles%\microsoft analysis services\readme.txt
%ProgramFiles%\microsoft office\readme.txt
%ProgramFiles%\microsoft sql server compact edition\readme.txt
%ProgramFiles%\microsoft sync framework\readme.txt
%ProgramFiles%\microsoft synchronization services\readme.txt
%ProgramFiles%\mozilla firefox\readme.txt
%ProgramFiles%\mozilla thunderbird\readme.txt
%ProgramFiles%\msbuild\readme.txt
C:\kms\readme.txt
%ProgramFiles%\internet explorer\readme.txt
C:\msocache\all users\{90140000-0011-0000-1000-0000000ff1ce}-c\readme.txt

Перемещает следующие файлы

%ProgramFiles%\desktop.ini в %ProgramFiles%\desktop.ini.exten
%ProgramFiles%\microsoft office\office14\mspub.tlb в %ProgramFiles%\microsoft office\office14\mspub.tlb.exten
%ProgramFiles%\microsoft office\office14\msword.olb в %ProgramFiles%\microsoft office\office14\msword.olb.exten
%ProgramFiles%\microsoft office\office14\mysl.ico в %ProgramFiles%\microsoft office\office14\mysl.ico.exten
%ProgramFiles%\microsoft office\office14\ocrhc.dat в %ProgramFiles%\microsoft office\office14\ocrhc.dat.exten
%ProgramFiles%\microsoft office\office14\ocrvc.dat в %ProgramFiles%\microsoft office\office14\ocrvc.dat.exten
%ProgramFiles%\microsoft office\office14\oemprint.cat в %ProgramFiles%\microsoft office\office14\oemprint.cat.exten
%ProgramFiles%\microsoft office\office14\olkirm.xml в %ProgramFiles%\microsoft office\office14\olkirm.xml.exten
%ProgramFiles%\microsoft office\office14\olkirmv.xml в %ProgramFiles%\microsoft office\office14\olkirmv.xml.exten
%ProgramFiles%\microsoft office\office14\omml2mml.xsl в %ProgramFiles%\microsoft office\office14\omml2mml.xsl.exten
%ProgramFiles%\microsoft office\office14\onenoteirm.xml в %ProgramFiles%\microsoft office\office14\onenoteirm.xml.exten
%ProgramFiles%\microsoft office\office14\msoutl.olb в %ProgramFiles%\microsoft office\office14\msoutl.olb.exten
%ProgramFiles%\microsoft office\office14\msppt.olb в %ProgramFiles%\microsoft office\office14\msppt.olb.exten
%ProgramFiles%\microsoft office\office14\ospp.htm в %ProgramFiles%\microsoft office\office14\ospp.htm.exten
%ProgramFiles%\microsoft office\office14\pptirm.xml в %ProgramFiles%\microsoft office\office14\pptirm.xml.exten
%ProgramFiles%\microsoft office\office14\pptirmv.xml в %ProgramFiles%\microsoft office\office14\pptirmv.xml.exten
%ProgramFiles%\microsoft office\office14\reminder.wav в %ProgramFiles%\microsoft office\office14\reminder.wav.exten
%ProgramFiles%\microsoft office\office14\rswop.icm в %ProgramFiles%\microsoft office\office14\rswop.icm.exten
%ProgramFiles%\microsoft office\office14\segoechess.ttf в %ProgramFiles%\microsoft office\office14\segoechess.ttf.exten
%ProgramFiles%\microsoft office\office14\sketchpadtestschema.xml в %ProgramFiles%\microsoft office\office14\sketchpadtestschema.xml.exten
%ProgramFiles%\microsoft office\office14\slerror.xml в %ProgramFiles%\microsoft office\office14\slerror.xml.exten
%ProgramFiles%\microsoft office\office14\spanish.lng в %ProgramFiles%\microsoft office\office14\spanish.lng.exten
%ProgramFiles%\microsoft office\office14\subscription.xsd в %ProgramFiles%\microsoft office\office14\subscription.xsd.exten
%ProgramFiles%\microsoft office\office14\thocr.psp в %ProgramFiles%\microsoft office\office14\thocr.psp.exten
%ProgramFiles%\microsoft office\office14\ospp.vbs в %ProgramFiles%\microsoft office\office14\ospp.vbs.exten
%ProgramFiles%\microsoft office\office14\outlfltr.dat в %ProgramFiles%\microsoft office\office14\outlfltr.dat.exten
%ProgramFiles%\microsoft office\office14\mso0127.acl в %ProgramFiles%\microsoft office\office14\mso0127.acl.exten
%ProgramFiles%\microsoft office\office14\msn.ico в %ProgramFiles%\microsoft office\office14\msn.ico.exten
%ProgramFiles%\microsoft office\office14\mset7jp.kic в %ProgramFiles%\microsoft office\office14\mset7jp.kic.exten
%ProgramFiles%\microsoft office\office14\lookup.dat в %ProgramFiles%\microsoft office\office14\lookup.dat.exten
%ProgramFiles%\microsoft office\office14\microsoft.businessdata.xml в %ProgramFiles%\microsoft office\office14\microsoft.businessdata.xml.exten
%ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtime.xml в %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtime.xml.exten
%ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtimeui.xml в %ProgramFiles%\microsoft office\office14\microsoft.office.businessapplications.runtimeui.xml.exten
%ProgramFiles%\microsoft office\office14\microsoft.office.businessdata.xml в %ProgramFiles%\microsoft office\office14\microsoft.office.businessdata.xml.exten
%ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.semitrust.xml в %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.semitrust.xml.exten
%ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.xml.xml в %ProgramFiles%\microsoft office\office14\microsoft.office.interop.infopath.xml.xml.exten
%ProgramFiles%\microsoft office\office14\microsoft.sharepoint.businessdata.administration.client.xml в %ProgramFiles%\microsoft office\office14\microsoft.sharepoint.businessdata.administration.client.xml.exten
%ProgramFiles%\microsoft office\office14\mlcfg32.cpl в %ProgramFiles%\microsoft office\office14\mlcfg32.cpl.exten
%ProgramFiles%\microsoft office\office14\mml2omml.xsl в %ProgramFiles%\microsoft office\office14\mml2omml.xsl.exten
%ProgramFiles%\microsoft office\office14\msacc.olb в %ProgramFiles%\microsoft office\office14\msacc.olb.exten
%ProgramFiles%\microsoft office\office14\latin1.shp в %ProgramFiles%\microsoft office\office14\latin1.shp.exten
%ProgramFiles%\microsoft office\office14\mscol11.inf в %ProgramFiles%\microsoft office\office14\mscol11.inf.exten
%ProgramFiles%\microsoft office\office14\mscss7cm_en.dub в %ProgramFiles%\microsoft office\office14\mscss7cm_en.dub.exten
%ProgramFiles%\microsoft office\office14\mscss7cm_es.dub в %ProgramFiles%\microsoft office\office14\mscss7cm_es.dub.exten
%ProgramFiles%\microsoft office\office14\mscss7cm_fr.dub в %ProgramFiles%\microsoft office\office14\mscss7cm_fr.dub.exten
%ProgramFiles%\microsoft office\office14\mscss7wre_en.dub в %ProgramFiles%\microsoft office\office14\mscss7wre_en.dub.exten
%ProgramFiles%\microsoft office\office14\mscss7wre_es.dub в %ProgramFiles%\microsoft office\office14\mscss7wre_es.dub.exten
%ProgramFiles%\microsoft office\office14\mscss7wre_fr.dub в %ProgramFiles%\microsoft office\office14\mscss7wre_fr.dub.exten
%ProgramFiles%\microsoft office\office14\mset7db.kic в %ProgramFiles%\microsoft office\office14\mset7db.kic.exten
%ProgramFiles%\microsoft office\office14\mset7en.kic в %ProgramFiles%\microsoft office\office14\mset7en.kic.exten
%ProgramFiles%\microsoft office\office14\mset7es.kic в %ProgramFiles%\microsoft office\office14\mset7es.kic.exten
%ProgramFiles%\microsoft office\office14\mset7fr.kic в %ProgramFiles%\microsoft office\office14\mset7fr.kic.exten
%ProgramFiles%\microsoft office\office14\mset7ge.kic в %ProgramFiles%\microsoft office\office14\mset7ge.kic.exten
%ProgramFiles%\microsoft office\office14\mscol11.ppd в %ProgramFiles%\microsoft office\office14\mscol11.ppd.exten
%ProgramFiles%\microsoft office\office14\wordcnvpxy.cnv в %ProgramFiles%\microsoft office\office14\wordcnvpxy.cnv.exten
%ProgramFiles%\microsoft office\office14\xml2word.xsl в %ProgramFiles%\microsoft office\office14\xml2word.xsl.exten
%ProgramFiles%\microsoft office\office14\xocr3.psp в %ProgramFiles%\microsoft office\office14\xocr3.psp.exten
%ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini в %ProgramFiles%\mozilla firefox\browser\crashreporter-override.ini.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_czech.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_danish.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_dutch.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_english.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_finnish.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_french.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_german.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_greek.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_hungarian.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_italian.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_japanese.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_korean.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_koreana.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_latam.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_latam.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_norwegian.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_polish.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_portuguese.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_romanian.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_russian.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_schinese.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_spanish.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_swedish.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_tchinese.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_thai.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_turkish.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_bulgarian.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_bulgarian.txt.exten
%ProgramFiles(x86)%\steam\logs\bootstrap_log.txt в %ProgramFiles(x86)%\steam\logs\bootstrap_log.txt.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_brazilian.txt.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin в %ProgramFiles(x86)%\opera\29.0.1795.47\snapshot_blob.bin.exten
%ProgramFiles%\mozilla firefox\browser\omni.ja в %ProgramFiles%\mozilla firefox\browser\omni.ja.exten
%ProgramFiles%\mozilla firefox\browser\override.ini в %ProgramFiles%\mozilla firefox\browser\override.ini.exten
%ProgramFiles%\mozilla firefox\distibution\policies.json в %ProgramFiles%\mozilla firefox\distibution\policies.json.exten
%ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf в %ProgramFiles%\mozilla firefox\fonts\twemojimozilla.ttf.exten
%ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini в %ProgramFiles%\mozilla firefox\uninstall\shortcuts_log.ini.exten
%ProgramFiles%\mozilla firefox\uninstall\uninstall.log в %ProgramFiles%\mozilla firefox\uninstall\uninstall.log.exten
%ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi в %ProgramFiles%\mozilla thunderbird\features\wetransfer@extensions.thunderbird.net.xpi.exten
%ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf в %ProgramFiles%\mozilla thunderbird\fonts\twemojimozilla.ttf.exten
%ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd в %ProgramFiles%\mozilla thunderbird\isp\bogofilter.sfd.exten
%ProgramFiles%\mozilla thunderbird\isp\dspam.sfd в %ProgramFiles%\mozilla thunderbird\isp\dspam.sfd.exten
%ProgramFiles%\mozilla thunderbird\isp\popfile.sfd в %ProgramFiles%\mozilla thunderbird\isp\popfile.sfd.exten
%ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd в %ProgramFiles%\mozilla thunderbird\isp\spamassassin.sfd.exten
%ProgramFiles%\mozilla thunderbird\isp\spampal.sfd в %ProgramFiles%\mozilla thunderbird\isp\spampal.sfd.exten
%ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini в %ProgramFiles%\mozilla thunderbird\uninstall\shortcuts_log.ini.exten
%ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log в %ProgramFiles%\mozilla thunderbird\uninstall\uninstall.log.exten
%ProgramFiles(x86)%\internet explorer\signup\install.ins в %ProgramFiles(x86)%\internet explorer\signup\install.ins.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin в %ProgramFiles(x86)%\opera\29.0.1795.47\natives_blob.bin.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera.pak.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_100_percent.pak.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_125_percent.pak.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_150_percent.pak.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_200_percent.pak.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_250_percent.pak.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_autoupdate.licenses в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_autoupdate.licenses.exten
%ProgramFiles(x86)%\opera\29.0.1795.47\opera_autoupdate.version в %ProgramFiles(x86)%\opera\29.0.1795.47\opera_autoupdate.version.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_ukrainian.txt.exten
%ProgramFiles%\microsoft office\office14\jfont.dat в %ProgramFiles%\microsoft office\office14\jfont.dat.exten
%ProgramFiles%\microsoft office\office14\ipirmv.xml в %ProgramFiles%\microsoft office\office14\ipirmv.xml.exten
%ProgramFiles%\microsoft office\office14\ipirm.xml в %ProgramFiles%\microsoft office\office14\ipirm.xml.exten
%ProgramFiles%\winrar\rar.txt в %ProgramFiles%\winrar\rar.txt.exten
%ProgramFiles%\winrar\rarfiles.lst в %ProgramFiles%\winrar\rarfiles.lst.exten
%ProgramFiles%\winrar\rarnew.dat в %ProgramFiles%\winrar\rarnew.dat.exten
%ProgramFiles%\winrar\uninstall.lst в %ProgramFiles%\winrar\uninstall.lst.exten
%ProgramFiles%\winrar\whatsnew.txt в %ProgramFiles%\winrar\whatsnew.txt.exten
%ProgramFiles%\winrar\wincon.sfx в %ProgramFiles%\winrar\wincon.sfx.exten
%ProgramFiles%\winrar\wincon64.sfx в %ProgramFiles%\winrar\wincon64.sfx.exten
%ProgramFiles%\winrar\winrar.chm в %ProgramFiles%\winrar\winrar.chm.exten
%ProgramFiles%\winrar\zip.sfx в %ProgramFiles%\winrar\zip.sfx.exten
%ProgramFiles%\winrar\zip64.sfx в %ProgramFiles%\winrar\zip64.sfx.exten
%ProgramFiles%\winrar\license.txt в %ProgramFiles%\winrar\license.txt.exten
%ProgramFiles%\winrar\order.htm в %ProgramFiles%\winrar\order.htm.exten
%ProgramFiles%\winrar\zipnew.dat в %ProgramFiles%\winrar\zipnew.dat.exten
%ProgramFiles(x86)%\opera\installer_prefs.json в %ProgramFiles(x86)%\opera\installer_prefs.json.exten
%ProgramFiles(x86)%\opera\launcher.visualelementsmanifest.xml в %ProgramFiles(x86)%\opera\launcher.visualelementsmanifest.xml.exten
%ProgramFiles(x86)%\opera\resources.pri в %ProgramFiles(x86)%\opera\resources.pri.exten
%ProgramFiles(x86)%\steam\steam.cfg в %ProgramFiles(x86)%\steam\steam.cfg.exten
%ProgramFiles%\internet explorer\signup\install.ins в %ProgramFiles%\internet explorer\signup\install.ins.exten
%ProgramFiles%\java\jre1.8.0_45\copyright в %ProgramFiles%\java\jre1.8.0_45\copyright.exten
%ProgramFiles%\java\jre1.8.0_45\license в %ProgramFiles%\java\jre1.8.0_45\license.exten
%ProgramFiles%\java\jre1.8.0_45\release в %ProgramFiles%\java\jre1.8.0_45\release.exten
%ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt в %ProgramFiles%\java\jre1.8.0_45\thirdpartylicensereadme-javafx.txt.exten
%ProgramFiles%\java\jre1.8.0_45\welcome.html в %ProgramFiles%\java\jre1.8.0_45\welcome.html.exten
%ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets в %ProgramFiles(x86)%\msbuild\microsoft.office.infopath.targets.exten
%ProgramFiles(x86)%\opera\installation_status.xml в %ProgramFiles(x86)%\opera\installation_status.xml.exten
%ProgramFiles%\winrar\descript.ion в %ProgramFiles%\winrar\descript.ion.exten
%ProgramFiles%\winrar\default64.sfx в %ProgramFiles%\winrar\default64.sfx.exten
%ProgramFiles%\winrar\default.sfx в %ProgramFiles%\winrar\default.sfx.exten
%ProgramFiles%\mozilla firefox\accessible.tlb в %ProgramFiles%\mozilla firefox\accessible.tlb.exten
%ProgramFiles%\mozilla firefox\application.ini в %ProgramFiles%\mozilla firefox\application.ini.exten
%ProgramFiles%\mozilla firefox\crashreporter.ini в %ProgramFiles%\mozilla firefox\crashreporter.ini.exten
%ProgramFiles%\mozilla firefox\dependentlibs.list в %ProgramFiles%\mozilla firefox\dependentlibs.list.exten
%ProgramFiles%\mozilla firefox\firefox.visualelementsmanifest.xml в %ProgramFiles%\mozilla firefox\firefox.visualelementsmanifest.xml.exten
%ProgramFiles%\mozilla firefox\install.log в %ProgramFiles%\mozilla firefox\install.log.exten
%ProgramFiles%\mozilla firefox\omni.ja в %ProgramFiles%\mozilla firefox\omni.ja.exten
%ProgramFiles%\mozilla firefox\platform.ini в %ProgramFiles%\mozilla firefox\platform.ini.exten
%ProgramFiles%\mozilla firefox\precomplete в %ProgramFiles%\mozilla firefox\precomplete.exten
%ProgramFiles%\mozilla firefox\removed-files в %ProgramFiles%\mozilla firefox\removed-files.exten
%ProgramFiles%\mozilla firefox\update-settings.ini в %ProgramFiles%\mozilla firefox\update-settings.ini.exten
%ProgramFiles(x86)%\desktop.ini в %ProgramFiles(x86)%\desktop.ini.exten
%ProgramFiles%\mozilla firefox\updater.ini в %ProgramFiles%\mozilla firefox\updater.ini.exten
%ProgramFiles%\mozilla thunderbird\application.ini в %ProgramFiles%\mozilla thunderbird\application.ini.exten
%ProgramFiles%\mozilla thunderbird\crashreporter.ini в %ProgramFiles%\mozilla thunderbird\crashreporter.ini.exten
%ProgramFiles%\mozilla thunderbird\dependentlibs.list в %ProgramFiles%\mozilla thunderbird\dependentlibs.list.exten
%ProgramFiles%\mozilla thunderbird\install.log в %ProgramFiles%\mozilla thunderbird\install.log.exten
%ProgramFiles%\mozilla thunderbird\omni.ja в %ProgramFiles%\mozilla thunderbird\omni.ja.exten
%ProgramFiles%\mozilla thunderbird\platform.ini в %ProgramFiles%\mozilla thunderbird\platform.ini.exten
%ProgramFiles%\mozilla thunderbird\precomplete в %ProgramFiles%\mozilla thunderbird\precomplete.exten
%ProgramFiles%\mozilla thunderbird\removed-files в %ProgramFiles%\mozilla thunderbird\removed-files.exten
%ProgramFiles%\mozilla thunderbird\thunderbird.visualelementsmanifest.xml в %ProgramFiles%\mozilla thunderbird\thunderbird.visualelementsmanifest.xml.exten
%ProgramFiles%\mozilla thunderbird\update-settings.ini в %ProgramFiles%\mozilla thunderbird\update-settings.ini.exten
%ProgramFiles%\mozilla thunderbird\updater.ini в %ProgramFiles%\mozilla thunderbird\updater.ini.exten
%ProgramFiles%\mozilla thunderbird\accessible.tlb в %ProgramFiles%\mozilla thunderbird\accessible.tlb.exten
%ProgramFiles%\microsoft office\document themes 14\adjacency.thmx в %ProgramFiles%\microsoft office\document themes 14\adjacency.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\angles.thmx в %ProgramFiles%\microsoft office\document themes 14\angles.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\apex.thmx в %ProgramFiles%\microsoft office\document themes 14\apex.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\apothecary.thmx в %ProgramFiles%\microsoft office\document themes 14\apothecary.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\technic.thmx в %ProgramFiles%\microsoft office\document themes 14\technic.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\thatch.thmx в %ProgramFiles%\microsoft office\document themes 14\thatch.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\trek.thmx в %ProgramFiles%\microsoft office\document themes 14\trek.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\urban.thmx в %ProgramFiles%\microsoft office\document themes 14\urban.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\verve.thmx в %ProgramFiles%\microsoft office\document themes 14\verve.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\waveform.thmx в %ProgramFiles%\microsoft office\document themes 14\waveform.thmx.exten
%ProgramFiles%\microsoft office\office14\advcmp.dic в %ProgramFiles%\microsoft office\office14\advcmp.dic.exten
%ProgramFiles%\microsoft office\office14\advtel.dic в %ProgramFiles%\microsoft office\office14\advtel.dic.exten
%ProgramFiles%\microsoft office\office14\advzip.dic в %ProgramFiles%\microsoft office\office14\advzip.dic.exten
%ProgramFiles%\microsoft office\office14\asciieng.lng в %ProgramFiles%\microsoft office\office14\asciieng.lng.exten
%ProgramFiles%\microsoft office\office14\bcsclientmanifest.man в %ProgramFiles%\microsoft office\office14\bcsclientmanifest.man.exten
%ProgramFiles%\microsoft office\office14\bcsevents.man в %ProgramFiles%\microsoft office\office14\bcsevents.man.exten
%ProgramFiles%\microsoft office\office14\bdcmetadata.xsd в %ProgramFiles%\microsoft office\office14\bdcmetadata.xsd.exten
%ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd в %ProgramFiles%\microsoft office\office14\bdcmetadataresource.xsd.exten
%ProgramFiles%\microsoft office\office14\cgmimp32.hlp в %ProgramFiles%\microsoft office\office14\cgmimp32.hlp.exten
%ProgramFiles%\microsoft office\office14\charsettable.chr в %ProgramFiles%\microsoft office\office14\charsettable.chr.exten
%ProgramFiles%\microsoft office\office14\custom.propdesc в %ProgramFiles%\microsoft office\office14\custom.propdesc.exten
%ProgramFiles%\microsoft office\office14\engdic.dat в %ProgramFiles%\microsoft office\office14\engdic.dat.exten
%ProgramFiles%\microsoft office\office14\engidx.dat в %ProgramFiles%\microsoft office\office14\engidx.dat.exten
%ProgramFiles%\microsoft office\office14\english.lng в %ProgramFiles%\microsoft office\office14\english.lng.exten
%ProgramFiles%\microsoft office\office14\exlirm.xml в %ProgramFiles%\microsoft office\office14\exlirm.xml.exten
%ProgramFiles%\microsoft office\office14\exlirmv.xml в %ProgramFiles%\microsoft office\office14\exlirmv.xml.exten
%ProgramFiles%\microsoft office\office14\french.lng в %ProgramFiles%\microsoft office\office14\french.lng.exten
%ProgramFiles%\microsoft office\office14\graph.ico в %ProgramFiles%\microsoft office\office14\graph.ico.exten
%ProgramFiles%\microsoft office\office14\installed_resources14.xss в %ProgramFiles%\microsoft office\office14\installed_resources14.xss.exten
%ProgramFiles%\microsoft office\document themes 14\solstice.thmx в %ProgramFiles%\microsoft office\document themes 14\solstice.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\pushpin.thmx в %ProgramFiles%\microsoft office\document themes 14\pushpin.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\slipstream.thmx в %ProgramFiles%\microsoft office\document themes 14\slipstream.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\perspective.thmx в %ProgramFiles%\microsoft office\document themes 14\perspective.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\aspect.thmx в %ProgramFiles%\microsoft office\document themes 14\aspect.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\austin.thmx в %ProgramFiles%\microsoft office\document themes 14\austin.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\black tie.thmx в %ProgramFiles%\microsoft office\document themes 14\black tie.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\civic.thmx в %ProgramFiles%\microsoft office\document themes 14\civic.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\clarity.thmx в %ProgramFiles%\microsoft office\document themes 14\clarity.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\composite.thmx в %ProgramFiles%\microsoft office\document themes 14\composite.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\concourse.thmx в %ProgramFiles%\microsoft office\document themes 14\concourse.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\couture.thmx в %ProgramFiles%\microsoft office\document themes 14\couture.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\elemental.thmx в %ProgramFiles%\microsoft office\document themes 14\elemental.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\equity.thmx в %ProgramFiles%\microsoft office\document themes 14\equity.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\essential.thmx в %ProgramFiles%\microsoft office\document themes 14\essential.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\executive.thmx в %ProgramFiles%\microsoft office\document themes 14\executive.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\flow.thmx в %ProgramFiles%\microsoft office\document themes 14\flow.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\foundry.thmx в %ProgramFiles%\microsoft office\document themes 14\foundry.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\grid.thmx в %ProgramFiles%\microsoft office\document themes 14\grid.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\hardcover.thmx в %ProgramFiles%\microsoft office\document themes 14\hardcover.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\horizon.thmx в %ProgramFiles%\microsoft office\document themes 14\horizon.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\median.thmx в %ProgramFiles%\microsoft office\document themes 14\median.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\metro.thmx в %ProgramFiles%\microsoft office\document themes 14\metro.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\module.thmx в %ProgramFiles%\microsoft office\document themes 14\module.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\newsprint.thmx в %ProgramFiles%\microsoft office\document themes 14\newsprint.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\opulent.thmx в %ProgramFiles%\microsoft office\document themes 14\opulent.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\oriel.thmx в %ProgramFiles%\microsoft office\document themes 14\oriel.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\origin.thmx в %ProgramFiles%\microsoft office\document themes 14\origin.thmx.exten
%ProgramFiles%\microsoft office\document themes 14\paper.thmx в %ProgramFiles%\microsoft office\document themes 14\paper.thmx.exten
%ProgramFiles%\microsoft office\office14\installed_schemas14.xss в %ProgramFiles%\microsoft office\office14\installed_schemas14.xss.exten
%ProgramFiles(x86)%\steam\public\steambootstrapper_vietnamese.txt в %ProgramFiles(x86)%\steam\public\steambootstrapper_vietnamese.txt.exten

Изменяет следующие файлы

%ProgramFiles%\desktop.ini
%ProgramFiles%\mozilla thunderbird\updater.ini
%ProgramFiles%\mozilla thunderbird\update-settings.ini
%ProgramFiles%\mozilla thunderbird\thunderbird.visualelementsmanifest.xml
%ProgramFiles%\mozilla thunderbird\removed-files
%ProgramFiles%\mozilla thunderbird\precomplete
%ProgramFiles%\mozilla thunderbird\platform.ini
%ProgramFiles%\mozilla thunderbird\omni.ja
%ProgramFiles%\mozilla thunderbird\install.log
%ProgramFiles%\mozilla thunderbird\dependentlibs.list
%ProgramFiles%\mozilla thunderbird\crashreporter.ini
%ProgramFiles%\mozilla thunderbird\application.ini
%ProgramFiles%\mozilla thunderbird\accessible.tlb
%ProgramFiles%\mozilla firefox\updater.ini
%ProgramFiles%\mozilla firefox\update-settings.ini
%ProgramFiles%\mozilla firefox\removed-files
%ProgramFiles%\mozilla firefox\precomplete
%ProgramFiles%\mozilla firefox\platform.ini
%ProgramFiles%\mozilla firefox\omni.ja
%ProgramFiles%\mozilla firefox\install.log
%ProgramFiles%\mozilla firefox\firefox.visualelementsmanifest.xml
%ProgramFiles%\mozilla firefox\dependentlibs.list
%ProgramFiles%\mozilla firefox\crashreporter.ini
%ProgramFiles%\mozilla firefox\application.ini
%ProgramFiles%\mozilla firefox\accessible.tlb
C:\users\desktop.ini
<Имя диска съемного носителя>:\delete.avi
%ProgramFiles(x86)%\desktop.ini
%ProgramFiles%\winrar\readme.txt
%ProgramFiles%\winrar\descript.ion

Изменяет множество файлов.

Изменяет расширения файлов пользовательских данных (Trojan.Encoder).

Сетевая активность

Подключается к

'<LOCALNET>.21.0':445
'<LOCALNET>.21.161':445
'<LOCALNET>.21.162':445
'<LOCALNET>.21.163':445
'<LOCALNET>.21.164':445
'<LOCALNET>.21.165':445
'<LOCALNET>.21.166':445
'<LOCALNET>.21.167':445
'<LOCALNET>.21.168':445
'<LOCALNET>.21.169':445
'<LOCALNET>.21.170':445
'<LOCALNET>.21.171':445
'<LOCALNET>.21.172':445
'<LOCALNET>.21.173':445
'<LOCALNET>.21.175':445
'<LOCALNET>.21.189':445
'<LOCALNET>.21.176':445
'<LOCALNET>.21.177':445
'<LOCALNET>.21.178':445
'<LOCALNET>.21.179':445
'<LOCALNET>.21.180':445
'<LOCALNET>.21.181':445
'<LOCALNET>.21.182':445
'<LOCALNET>.21.183':445
'<LOCALNET>.21.184':445
'<LOCALNET>.21.185':445
'<LOCALNET>.21.186':445
'<LOCALNET>.21.187':445
'<LOCALNET>.21.188':445
'<LOCALNET>.21.160':445
'<LOCALNET>.21.174':445
'<LOCALNET>.21.159':445
'<LOCALNET>.21.142':445
'<LOCALNET>.21.129':445
'<LOCALNET>.21.130':445
'<LOCALNET>.21.131':445
'<LOCALNET>.21.132':445
'<LOCALNET>.21.133':445
'<LOCALNET>.21.134':445
'<LOCALNET>.21.135':445
'<LOCALNET>.21.136':445
'<LOCALNET>.21.137':445
'<LOCALNET>.21.138':445
'<LOCALNET>.21.139':445
'<LOCALNET>.21.140':445
'<LOCALNET>.21.141':445
'<LOCALNET>.21.143':445
'<LOCALNET>.21.157':445
'<LOCALNET>.21.144':445
'<LOCALNET>.21.145':445
'<LOCALNET>.21.146':445
'<LOCALNET>.21.147':445
'<LOCALNET>.21.148':445
'<LOCALNET>.21.149':445
'<LOCALNET>.21.150':445
'<LOCALNET>.21.151':445
'<LOCALNET>.21.152':445
'<LOCALNET>.21.153':445
'<LOCALNET>.21.154':445
'<LOCALNET>.21.155':445
'<LOCALNET>.21.156':445
'<LOCALNET>.21.158':445
'<LOCALNET>.21.207':445
'<LOCALNET>.21.253':445
'<LOCALNET>.21.192':445
'<LOCALNET>.21.225':445
'<LOCALNET>.21.226':445
'<LOCALNET>.21.227':445
'<LOCALNET>.21.228':445
'<LOCALNET>.21.229':445
'<LOCALNET>.21.230':445
'<LOCALNET>.21.231':445
'<LOCALNET>.21.232':445
'<LOCALNET>.21.233':445
'<LOCALNET>.21.234':445
'<LOCALNET>.21.235':445
'<LOCALNET>.21.236':445
'<LOCALNET>.21.237':445
'<LOCALNET>.21.239':445
'<LOCALNET>.21.191':445
'<LOCALNET>.21.240':445
'<LOCALNET>.21.241':445
'<LOCALNET>.21.242':445
'<LOCALNET>.21.243':445
'<LOCALNET>.21.244':445
'<LOCALNET>.21.245':445
'<LOCALNET>.21.246':445
'<LOCALNET>.21.247':445
'<LOCALNET>.21.248':445
'<LOCALNET>.21.249':445
'<LOCALNET>.21.250':445
'<LOCALNET>.21.251':445
'<LOCALNET>.21.252':445
'<LOCALNET>.21.224':445
'<LOCALNET>.21.128':445
'<LOCALNET>.21.223':445
'<LOCALNET>.21.206':445
'<LOCALNET>.21.193':445
'<LOCALNET>.21.194':445
'<LOCALNET>.21.195':445
'<LOCALNET>.21.196':445
'<LOCALNET>.21.197':445
'<LOCALNET>.21.198':445
'<LOCALNET>.21.199':445
'<LOCALNET>.21.200':445
'<LOCALNET>.21.201':445
'<LOCALNET>.21.202':445
'<LOCALNET>.21.203':445
'<LOCALNET>.21.204':445
'<LOCALNET>.21.205':445
'<LOCALNET>.21.190':445
'<LOCALNET>.21.221':445
'<LOCALNET>.21.208':445
'<LOCALNET>.21.209':445
'<LOCALNET>.21.210':445
'<LOCALNET>.21.211':445
'<LOCALNET>.21.212':445
'<LOCALNET>.21.213':445
'<LOCALNET>.21.214':445
'<LOCALNET>.21.215':445
'<LOCALNET>.21.216':445
'<LOCALNET>.21.217':445
'<LOCALNET>.21.218':445
'<LOCALNET>.21.219':445
'<LOCALNET>.21.220':445
'<LOCALNET>.21.222':445
'<LOCALNET>.21.238':445
'<LOCALNET>.21.127':445
'<LOCALNET>.21.110':445
'<LOCALNET>.21.33':445
'<LOCALNET>.21.34':445
'<LOCALNET>.21.35':445
'<LOCALNET>.21.36':445
'<LOCALNET>.21.37':445
'<LOCALNET>.21.38':445
'<LOCALNET>.21.39':445
'<LOCALNET>.21.40':445
'<LOCALNET>.21.41':445
'<LOCALNET>.21.42':445
'<LOCALNET>.21.43':445
'<LOCALNET>.21.44':445
'<LOCALNET>.21.45':445
'<LOCALNET>.21.47':445
'<LOCALNET>.21.61':445
'<LOCALNET>.21.48':445
'<LOCALNET>.21.49':445
'<LOCALNET>.21.50':445
'<LOCALNET>.21.51':445
'<LOCALNET>.21.52':445
'<LOCALNET>.21.53':445
'<LOCALNET>.21.54':445
'<LOCALNET>.21.55':445
'<LOCALNET>.21.56':445
'<LOCALNET>.21.57':445
'<LOCALNET>.21.58':445
'<LOCALNET>.21.59':445
'<LOCALNET>.21.60':445
'<LOCALNET>.21.32':445
'<LOCALNET>.21.46':445
'<LOCALNET>.21.31':445
'<LOCALNET>.21.14':445
'<LOCALNET>.21.1':445
'<LOCALNET>.21.2':445
'<LOCALNET>.21.3':445
'<LOCALNET>.21.4':445
'<LOCALNET>.21.5':445
'<LOCALNET>.21.6':445
'<LOCALNET>.21.7':445
'<LOCALNET>.21.8':445
'<LOCALNET>.21.9':445
'<LOCALNET>.21.10':445
'<LOCALNET>.21.11':445
'<LOCALNET>.21.12':445
'<LOCALNET>.21.13':445
'<LOCALNET>.21.15':445
'<LOCALNET>.21.29':445
'<LOCALNET>.21.16':445
'<LOCALNET>.21.17':445
'<LOCALNET>.21.18':445
'<LOCALNET>.21.19':445
'<LOCALNET>.21.20':445
'<LOCALNET>.21.21':445
'<LOCALNET>.21.22':445
'<LOCALNET>.21.23':445
'<LOCALNET>.21.24':445
'<LOCALNET>.21.25':445
'<LOCALNET>.21.26':445
'<LOCALNET>.21.27':445
'<LOCALNET>.21.28':445
'<LOCALNET>.21.30':445
'<LOCALNET>.21.79':445
'<LOCALNET>.21.125':445
'<LOCALNET>.21.64':445
'<LOCALNET>.21.97':445
'<LOCALNET>.21.98':445
'<LOCALNET>.21.99':445
'<LOCALNET>.21.100':445
'<LOCALNET>.21.101':445
'<LOCALNET>.21.102':445
'<LOCALNET>.21.103':445
'<LOCALNET>.21.104':445
'<LOCALNET>.21.105':445
'<LOCALNET>.21.106':445
'<LOCALNET>.21.107':445
'<LOCALNET>.21.108':445
'<LOCALNET>.21.109':445
'<LOCALNET>.21.111':445
'<LOCALNET>.21.63':445
'<LOCALNET>.21.112':445
'<LOCALNET>.21.113':445
'<LOCALNET>.21.114':445
'<LOCALNET>.21.115':445
'<LOCALNET>.21.116':445
'<LOCALNET>.21.117':445
'<LOCALNET>.21.118':445
'<LOCALNET>.21.119':445
'<LOCALNET>.21.120':445
'<LOCALNET>.21.121':445
'<LOCALNET>.21.122':445
'<LOCALNET>.21.123':445
'<LOCALNET>.21.124':445
'<LOCALNET>.21.96':445
'<LOCALNET>.21.126':445
'<LOCALNET>.21.95':445
'<LOCALNET>.21.78':445
'<LOCALNET>.21.65':445
'<LOCALNET>.21.66':445
'<LOCALNET>.21.67':445
'<LOCALNET>.21.68':445
'<LOCALNET>.21.69':445
'<LOCALNET>.21.70':445
'<LOCALNET>.21.71':445
'<LOCALNET>.21.72':445
'<LOCALNET>.21.73':445
'<LOCALNET>.21.74':445
'<LOCALNET>.21.75':445
'<LOCALNET>.21.76':445
'<LOCALNET>.21.77':445
'<LOCALNET>.21.62':445
'<LOCALNET>.21.93':445
'<LOCALNET>.21.80':445
'<LOCALNET>.21.81':445
'<LOCALNET>.21.82':445
'<LOCALNET>.21.83':445
'<LOCALNET>.21.84':445
'<LOCALNET>.21.85':445
'<LOCALNET>.21.86':445
'<LOCALNET>.21.87':445
'<LOCALNET>.21.88':445
'<LOCALNET>.21.89':445
'<LOCALNET>.21.90':445
'<LOCALNET>.21.91':445
'<LOCALNET>.21.92':445
'<LOCALNET>.21.94':445
'<LOCALNET>.21.254':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней