Trojan.MulDrop5.5843

Техническая информация

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\attrib.exe' "%HOMEPATH%\Locals~1\Applic~1\*bookmark*" -s -h -r -a /s /d
'<SYSTEM32>\cacls.exe' "..\..\winsks_safe" /d everyone
'<SYSTEM32>\attrib.exe' "%APPDATA%\*fav*" -s -h -r -a /s /d
'<SYSTEM32>\attrib.exe' "%APPDATA%\..\Local\*bookmark*" -s -h -r -a /s /d
'<SYSTEM32>\cacls.exe' "%TEMP%\winsks_safe" /d everyone
'<SYSTEM32>\cacls.exe' "%APPDATA%\winsks_data" /c /t /p Everyone:f
'<SYSTEM32>\taskkill.exe' /f /im +++
'<SYSTEM32>\cacls.exe' "%APPDATA%\winsks_data" /d everyone
'<SYSTEM32>\cacls.exe' "<SYSTEM32>\winsks" /d everyone
'<SYSTEM32>\attrib.exe' "does_data\Invisible\*.*" +s +r +h /s
'<SYSTEM32>\attrib.exe' "%APPDATA%\winsks_data" +s +h +r +a
'<SYSTEM32>\attrib.exe' "<SYSTEM32>\winsks" +s +h +r +a
'<SYSTEM32>\attrib.exe' "..\..\winsks_safe" +s +h +r +a
'<SYSTEM32>\attrib.exe' "%TEMP%\winsks_safe" +s +h +r +a
'<SYSTEM32>\attrib.exe' "<SYSTEM32>\sekout" +s +h +r +a
'<SYSTEM32>\attrib.exe' "%APPDATA%\..\Local" +s +h +r +a
'<SYSTEM32>\attrib.exe' "<Имя диска съемного носителя>:\akfc_data" +s +h +r +a
'<SYSTEM32>\attrib.exe' "%APPDATA%\SecMain" +s +h +r +a
'<SYSTEM32>\attrib.exe' "%APPDATA%\KuTiansoft" +s +h +r +a

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\aut43.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\360se6\User Data\Default\Preferences
%TEMP%\aut42.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Baidu\browser\UserData\0A73B7929C9546628F097CEEACA6E079410064006d0069006e006900730074007200610074006f007200\userpref_v2
%TEMP%\aut44.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Baidu\browser\SysData\browserpref_v2
%TEMP%\aut40.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\2345Explorer\Users\Default\Default.cfg
%TEMP%\aut3F.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\360se6\apps\data\users\login.ini
%TEMP%\aut41.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\360se\login.ini
%TEMP%\aut4A.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\gsie\setting.ini
%TEMP%\aut49.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\KuTian_54\Program\kavmain_mas.exe
%TEMP%\aut4B.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Kingsoft\BroPlugVer.ini
%TEMP%\aut47.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Baidu\hao123Browser\UserData\0A73B7929C9546628F097CEEACA6E079410064006d0069006e006900730074007200610074006f007200\userpref_v2
%TEMP%\aut46.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Brmas\setting.ini
%TEMP%\aut48.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\BlueView\setting.ini
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\UpAlax\upsever\about.pfc
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IElnk\Program\最新设计酷.lnk
%TEMP%\aut36.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IElnk\Options\Internet Explorer.lnk
%TEMP%\aut38.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IElnk\Program\酷狗音乐web.lnk
%TEMP%\aut37.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IElnk\Hight\Internet Explorer.lnk
%TEMP%\aut33.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IElnk\DriverD\winsks.lnk
%TEMP%\aut35.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IElnk\KuMain\kavmain.lnk
%TEMP%\aut34.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IEsever\BakGen\Chage_IE.pfc
%TEMP%\aut3C.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IEsever\SekRun.pfc
%TEMP%\aut3E.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\SecAlax\360main.pfc
%TEMP%\aut3D.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IEsever\Hight.pfc
%TEMP%\aut39.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IEsever\Chage.pfc
%TEMP%\aut3B.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IEsever\Homepage.pfc
%TEMP%\aut3A.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\ksafe\kusrtrst.dat
%TEMP%\aut5C.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat
%TEMP%\aut5E.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\SekBrmas\setting.ini
%TEMP%\aut5D.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\360\360sd\sl2.db
%TEMP%\aut59.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\360\360Safe\deepscan\speedmem2.hg0
%TEMP%\aut5B.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\kingsoft\kingsoft antivirus\ressrc\chs\uplive.svr
%TEMP%\aut5A.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\UpLoad\KuData\kavmain_fav.exe
%TEMP%\aut62.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\UpLoad\KuData\kavmain_bit.exe
%TEMP%\winsks_safe\winsks_ok\does_data\PorTable\variety.sek
%TEMP%\winsks_safe\winsks_ok\does_data\UpLoad\KuData\Main\kudown.pfc
%TEMP%\aut63.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\PorTable\variety.pfc
%TEMP%\aut5F.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\UsersAppData\Tencent\QQPCMgr\TrustArea.db
%TEMP%\aut61.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\UpLoad\KuData\kavmain.exe
%TEMP%\aut60.tmp
%TEMP%\aut58.tmp
%TEMP%\aut50.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\mybrowser\setting.ini
%TEMP%\aut4F.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\SogouExplorer\config.xml
%TEMP%\aut51.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\SekBrmas\setting.ini
%TEMP%\aut4D.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\LanGuang\setting.ini
%TEMP%\aut4C.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Mozilla\Firefox\Profiles\6hq8vmhx.default\prefs.js
%TEMP%\aut4E.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Maxthon3\Users\guest\Config\config.dat
%TEMP%\aut56.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\liebao\User Data\Default\Preferences
%TEMP%\aut55.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\360\360Safe\360ss2.dat
%TEMP%\aut57.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\TaoBrowser\User Data\Default\Preferences
%TEMP%\aut53.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\2345Chrome\User Data\Default\Preferences
%TEMP%\aut52.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\Google\Chrome\User Data\Default\Preferences
%TEMP%\aut54.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\360Chrome\Chrome\User Data\Default\Preferences
%TEMP%\aut32.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\2345\2345all\Driver_D\2345智能浏览器.lnk
%TEMP%\aut11.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\2345\2345all\Driver_D\2345加速浏览器.lnk
%TEMP%\aut13.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\360se\360cse6\Driver_C\360极速浏览器.lnk
%TEMP%\aut12.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\2345\2345all\Driver_C\2345加速浏览器.lnk
%TEMP%\autE.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\Tianlnk\hao123u.url
%TEMP%\aut10.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\2345\2345all\Driver_C\2345智能浏览器.lnk
%TEMP%\autF.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\baidu\bdall\Driver_D\百度浏览器.lnk
%TEMP%\aut17.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\baidu\bdall\Driver_C\百度浏览器.lnk
%TEMP%\aut19.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\blueview\bluevall\Driver_C\蓝光浏览器.lnk
%TEMP%\aut18.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\360se\360se35\Driver_D\360安全浏览器.lnk
%TEMP%\aut14.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\360se\360se35\Driver_C\360安全浏览器.lnk
%TEMP%\aut16.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\360se\360se6\Driver_C\360安全浏览器6.lnk
%TEMP%\aut15.tmp
%TEMP%\autD.tmp
%TEMP%\aut5.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\TianIco\2345me.ico
%TEMP%\aut4.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\TianIco\dubaweb.ico
%TEMP%\aut6.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\TianIco\duba123.ico
%TEMP%\aut2.tmp
%TEMP%\winsks_safe\winsks_ok\winsks.bat
%TEMP%\aut1.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\Asekbit\DoBest\ShortCut.exe
%TEMP%\aut3.tmp
%TEMP%\winsks_safe\winsks_ok\winsks.html
%TEMP%\autB.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\Tianlnk\2345u.url
%TEMP%\autA.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\Tianlnk\dubawebu.url
%TEMP%\autC.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\Tianlnk\duba123u.url
%TEMP%\aut8.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\TianIco\favicon.ico
%TEMP%\aut7.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\TianIco\kumain.ico
%TEMP%\aut9.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\DeskAlax\TianIco\hao123.ico
%TEMP%\aut2A.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\qqbrowser\qqall\Driver_D\QQ浏览器.lnk
%TEMP%\aut29.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\sogou\sgall\Driver_D\搜狗高速浏览器.lnk
%TEMP%\aut2B.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\sogou\sgall\Driver_C\搜狗高速浏览器.lnk
%TEMP%\aut27.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\maxthon\maxthonall\Driver_C\傲游云浏览器.lnk
%TEMP%\aut26.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\qqbrowser\qqall\Driver_C\QQ浏览器.lnk
%TEMP%\aut28.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\maxthon\maxthonall\Driver_D\傲游云浏览器.lnk
%TEMP%\aut30.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IEhosts\ReadTian.txt
%TEMP%\aut2F.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IElnk\Biger\winsks.lnk
%TEMP%\aut31.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IEhosts\drivers_etc\hosts
%TEMP%\aut2D.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\taobao\tball\Driver_C\淘宝浏览器.lnk
%TEMP%\aut2C.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\IEAlax\IEexe\Internet Explorer.bak
%TEMP%\aut2E.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\taobao\tball\Driver_D\淘宝浏览器.lnk
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\liebao\lball\Driver_D\猎豹浏览器.lnk
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\firefox\firefoxall\Driver_D\Mozilla Firefox.lnk
%TEMP%\aut1D.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\firefox\firefoxall\Driver_C\Mozilla Firefox.lnk
%TEMP%\aut1F.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\gsie\gsieall\Driver_C\光速浏览器.lnk
%TEMP%\aut1E.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\chrome\chromeall\Driver_C\Google Chrome.lnk
%TEMP%\aut1A.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\blueview\bluevall\Driver_D\蓝光浏览器.lnk
%TEMP%\aut1C.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\chrome\chromeall\Driver_D\Google Chrome.lnk
%TEMP%\aut1B.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\languang\lgall\Driver_D\蓝光浏览器2.lnk
%TEMP%\aut23.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\languang\lgall\Driver_C\蓝光浏览器2.lnk
%TEMP%\aut25.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\liebao\lball\Driver_C\猎豹浏览器.lnk
%TEMP%\aut24.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\hao123\hao123all\Driver_C\百度浏览器hao123专版.lnk
%TEMP%\aut20.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\gsie\gsieall\Driver_D\光速浏览器.lnk
%TEMP%\aut22.tmp
%TEMP%\winsks_safe\winsks_ok\does_data\ForAlax\ExpAleax\hao123\hao123all\Driver_D\百度浏览器hao123专版.lnk
%TEMP%\aut21.tmp

Присваивает атрибут 'скрытый' для следующих файлов:

%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\Google\Chrome\User Data\Default\Preferences
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\liebao\User Data\Default\Preferences
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\TaoBrowser\User Data\Default\Preferences
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\360Chrome\Chrome\User Data\Default\Preferences
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\SekBrmas\setting.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\SogouExplorer\config.xml
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\LocalAppData\2345Chrome\User Data\Default\Preferences
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\360\360Safe\deepscan\speedmem2.hg0
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\ksafe\kusrtrst.dat
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\SekBrmas\setting.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\UsersAppData\Tencent\QQPCMgr\TrustArea.db
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\kingsoft\kingsoft antivirus\security\kxescan\kusrtrst.dat
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\360\360Safe\360ss2.dat
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\360\360sd\sl2.db
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\ProgramFiles\kingsoft\kingsoft antivirus\ressrc\chs\uplive.svr
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\mybrowser\setting.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Baidu\browser\SysData\browserpref_v2
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Baidu\browser\UserData\0A73B7929C9546628F097CEEACA6E079410064006d0069006e006900730074007200610074006f007200\userpref_v2
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Baidu\hao123Browser\UserData\0A73B7929C9546628F097CEEACA6E079410064006d0069006e006900730074007200610074006f007200\userpref_v2
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\360se6\User Data\Default\Preferences
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\2345Explorer\Users\Default\Default.cfg
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\360se\login.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\360se6\apps\data\users\login.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\BlueView\setting.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\LanGuang\setting.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Maxthon3\Users\guest\Config\config.dat
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Mozilla\Firefox\Profiles\6hq8vmhx.default\prefs.js
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\KuTian_54\Program\kavmain_mas.exe
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Brmas\setting.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\gsie\setting.ini
%TEMP%\winsks_safe\winsks_ok\does_data\Invisible\Driver_Data\AppData\Kingsoft\BroPlugVer.ini

Удаляет следующие файлы:

%TEMP%\aut41.tmp
%TEMP%\aut42.tmp
%TEMP%\aut43.tmp
%TEMP%\aut3E.tmp
%TEMP%\aut3F.tmp
%TEMP%\aut40.tmp
%TEMP%\aut48.tmp
%TEMP%\aut49.tmp
%TEMP%\aut4A.tmp
%TEMP%\aut44.tmp
%TEMP%\aut46.tmp
%TEMP%\aut47.tmp
%TEMP%\aut35.tmp
%TEMP%\aut36.tmp
%TEMP%\aut37.tmp
%TEMP%\aut32.tmp
%TEMP%\aut33.tmp
%TEMP%\aut34.tmp
%TEMP%\aut3B.tmp
%TEMP%\aut3C.tmp
%TEMP%\aut3D.tmp
%TEMP%\aut38.tmp
%TEMP%\aut39.tmp
%TEMP%\aut3A.tmp
%TEMP%\aut4B.tmp
%TEMP%\aut5B.tmp
%TEMP%\aut5C.tmp
%TEMP%\aut5D.tmp
%TEMP%\aut58.tmp
%TEMP%\aut59.tmp
%TEMP%\aut5A.tmp
%TEMP%\aut61.tmp
%TEMP%\aut62.tmp
%TEMP%\aut63.tmp
%TEMP%\aut5E.tmp
%TEMP%\aut5F.tmp
%TEMP%\aut60.tmp
%TEMP%\aut4F.tmp
%TEMP%\aut50.tmp
%TEMP%\aut51.tmp
%TEMP%\aut4C.tmp
%TEMP%\aut4D.tmp
%TEMP%\aut4E.tmp
%TEMP%\aut55.tmp
%TEMP%\aut56.tmp
%TEMP%\aut57.tmp
%TEMP%\aut52.tmp
%TEMP%\aut53.tmp
%TEMP%\aut54.tmp
%TEMP%\aut10.tmp
%TEMP%\aut11.tmp
%TEMP%\aut12.tmp
%TEMP%\autD.tmp
%TEMP%\autE.tmp
%TEMP%\autF.tmp
%TEMP%\aut16.tmp
%TEMP%\aut17.tmp
%TEMP%\aut18.tmp
%TEMP%\aut13.tmp
%TEMP%\aut14.tmp
%TEMP%\aut15.tmp
%TEMP%\aut4.tmp
%TEMP%\aut5.tmp
%TEMP%\aut6.tmp
%TEMP%\aut1.tmp
%TEMP%\aut2.tmp
%TEMP%\aut3.tmp
%TEMP%\autA.tmp
%TEMP%\autB.tmp
%TEMP%\autC.tmp
%TEMP%\aut7.tmp
%TEMP%\aut8.tmp
%TEMP%\aut9.tmp
%TEMP%\aut19.tmp
%TEMP%\aut29.tmp
%TEMP%\aut2A.tmp
%TEMP%\aut2B.tmp
%TEMP%\aut26.tmp
%TEMP%\aut27.tmp
%TEMP%\aut28.tmp
%TEMP%\aut2F.tmp
%TEMP%\aut30.tmp
%TEMP%\aut31.tmp
%TEMP%\aut2C.tmp
%TEMP%\aut2D.tmp
%TEMP%\aut2E.tmp
%TEMP%\aut1D.tmp
%TEMP%\aut1E.tmp
%TEMP%\aut1F.tmp
%TEMP%\aut1A.tmp
%TEMP%\aut1B.tmp
%TEMP%\aut1C.tmp
%TEMP%\aut23.tmp
%TEMP%\aut24.tmp
%TEMP%\aut25.tmp
%TEMP%\aut20.tmp
%TEMP%\aut21.tmp
%TEMP%\aut22.tmp

Перемещает следующие файлы:

%TEMP%\winsks_safe\winsks_ok\does_data\PorTable\variety.sek в %TEMP%\winsks_safe\winsks_ok\does_data\PorTable\variety.sek

Другое:

Ищет следующие окна:

ClassName: '(null)' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней