Trojan.DownLoad3.31544

Техническая информация

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\rundll32.exe' shell32.dll,Control_RunDLL "%WINDIR%\amor2014.cpl",
'<SYSTEM32>\rundll32.exe' <SYSTEM32>\shell32.dll,OpenAs_RunDLL %WINDIR%\abracos.pps
'<SYSTEM32>\cmd.exe' /c ""%WINDIR%\live.bat" "

Изменения в файловой системе:

Создает следующие файлы:

%APPDATA%\6c6F6i0K8h6N7H\3Y7y7X.3a6S7H
%APPDATA%\6c6F6i0K8h6N7H\5F0G1X.4P8C2T
%APPDATA%\6c6F6i0K8h6N7H\8Y4J3B.3C7v6G
%APPDATA%\6c6F6i0K8h6N7H\5P6e7k.0o8b7Q
%APPDATA%\6c6F6i0K8h6N7H\1r1X0a.6t1A5Z
%APPDATA%\6c6F6i0K8h6N7H\2c0O3G.8I1C2W
%APPDATA%\6c6F6i0K8h6N7H\6D7e1G.0i7E0S
%APPDATA%\6c6F6i0K8h6N7H\2L1y5u.8y0z5a
%APPDATA%\6c6F6i0K8h6N7H\3l6t5M.1z1O0C
%APPDATA%\6c6F6i0K8h6N7H\6U1v1A.8W5n0B
%APPDATA%\6c6F6i0K8h6N7H\0g7i5O.6V3j5U
%APPDATA%\6c6F6i0K8h6N7H\7c3y2b.5H2Z7u
%APPDATA%\6c6F6i0K8h6N7H\0s4k8H.6Y5t8W
%APPDATA%\6c6F6i0K8h6N7H\6D8r4i.0Q6D6n
%APPDATA%\6c6F6i0K8h6N7H\4q0v1C.0C1Z6S
%APPDATA%\6c6F6i0K8h6N7H\4h6p6y.0P7w3b
%APPDATA%\6c6F6i0K8h6N7H\0J6o1K.6T0t5e
%APPDATA%\6c6F6i0K8h6N7H\3D4R1b.6V4V8L
%APPDATA%\6c6F6i0K8h6N7H\1V2j1u.1u2X2Q
%APPDATA%\6c6F6i0K8h6N7H\6m7k8t.4B8s3p
%APPDATA%\6c6F6i0K8h6N7H\3P4x7j.4V6Z8f
%APPDATA%\6c6F6i0K8h6N7H\3b7T0c.7A5i8U
%APPDATA%\6c6F6i0K8h6N7H\0u5Y2O.8M0l7r
%APPDATA%\6c6F6i0K8h6N7H\6Z6o8X.0Y7U1U
%APPDATA%\6c6F6i0K8h6N7H\7p2A1L.3a4T6z
%APPDATA%\6c6F6i0K8h6N7H\4l4A8m.1E5c4D
%APPDATA%\6c6F6i0K8h6N7H\2I1I4G.8S3Y2v
%APPDATA%\6c6F6i0K8h6N7H\7h1n6k.5D0S6p
%APPDATA%\6c6F6i0K8h6N7H\6e5k4O.1q5s5j
%APPDATA%\6c6F6i0K8h6N7H\1e0F8N.8T8A8M
%APPDATA%\6c6F6i0K8h6N7H\6p0s2C.4b1d5X
%APPDATA%\6c6F6i0K8h6N7H\2g4S7Q.8S0o4f
%APPDATA%\6c6F6i0K8h6N7H\8v4C5N.5W7W7r
%APPDATA%\6c6F6i0K8h6N7H\3k3x2k.3j6U5K
%APPDATA%\6c6F6i0K8h6N7H\6x8V0g.3E5f3b
%APPDATA%\6c6F6i0K8h6N7H\3d8N5X.1o7q4W
%APPDATA%\6c6F6i0K8h6N7H\2S6u8y.5U2X4c
%APPDATA%\6c6F6i0K8h6N7H\5p5l7C.4x4j6s
%APPDATA%\6c6F6i0K8h6N7H\3R5z3L.8L2I4G
%APPDATA%\6c6F6i0K8h6N7H\3p6N1w.8G8o7V
%APPDATA%\6c6F6i0K8h6N7H\2u4s5j.3m6q8h
%APPDATA%\6c6F6i0K8h6N7H\6a4B8v.0N1r3I
%APPDATA%\6c6F6i0K8h6N7H\5N3b5k.6R3y7z
%APPDATA%\6c6F6i0K8h6N7H\8Z7r5T.1x7n1q
%APPDATA%\6c6F6i0K8h6N7H\1K8j7U.2E3Y3M
%APPDATA%\6c6F6i0K8h6N7H\2o5K4V.7D1l5b
%APPDATA%\6c6F6i0K8h6N7H\2D5F5a.5E7K3M
%APPDATA%\6c6F6i0K8h6N7H\8K0k3I.4o0B4h
%APPDATA%\6c6F6i0K8h6N7H\7z1x7q.4g7D5t
%APPDATA%\6c6F6i0K8h6N7H\7w4O2I.1e4q8q
%APPDATA%\6c6F6i0K8h6N7H\5b2G4l.1v8z6r
%APPDATA%\6c6F6i0K8h6N7H\7G0S5V.5n6P7Y
%APPDATA%\6c6F6i0K8h6N7H\7Q7x7H.7A5G1l
%APPDATA%\6c6F6i0K8h6N7H\3o7m0s.8P1Y8G
%APPDATA%\6c6F6i0K8h6N7H\4y8a2Z.5Y3Q6A
%APPDATA%\6c6F6i0K8h6N7H\6J6x1n.7d1h7E
%APPDATA%\6c6F6i0K8h6N7H\8B7Y7g.0l6Y2H
%APPDATA%\6c6F6i0K8h6N7H\2d7O6m.8f7r3J
%APPDATA%\6c6F6i0K8h6N7H\2Q6k5i.2C3F4S
%APPDATA%\6c6F6i0K8h6N7H\8j2B6Z.5G0j3c
%APPDATA%\6c6F6i0K8h6N7H\0Y1O0H.1N7H5j
%APPDATA%\6c6F6i0K8h6N7H\3y0b8p.7k1o7K
%APPDATA%\6c6F6i0K8h6N7H\7l3f1v.6I0B1S
%APPDATA%\6c6F6i0K8h6N7H\1k6w3K.3H4x5E
%APPDATA%\6c6F6i0K8h6N7H\4f7J4A.3C4k7g
%APPDATA%\6c6F6i0K8h6N7H\7b7v6B.6J3G1U
%APPDATA%\6c6F6i0K8h6N7H\8o6Z4W.6e5Q6U
%APPDATA%\6c6F6i0K8h6N7H\1i0Z2W.5s3i0H
%APPDATA%\6c6F6i0K8h6N7H\1t4n2r.3e2l2D
%APPDATA%\6c6F6i0K8h6N7H\6V6u5P.2s8t4O
%APPDATA%\6c6F6i0K8h6N7H\7H5L2g.2A4l5Z
%APPDATA%\6c6F6i0K8h6N7H\6Z7n5J.4B2L3Z
%APPDATA%\6c6F6i0K8h6N7H\1K7x6K.8w8s1S
%APPDATA%\6c6F6i0K8h6N7H\8J4s5S.3c0H2G
%APPDATA%\6c6F6i0K8h6N7H\7p2l3r.7q6g3I
%APPDATA%\6c6F6i0K8h6N7H\8T7Q2h.6O5D7M
%APPDATA%\6c6F6i0K8h6N7H\6I0g6l.1X3k7D
%APPDATA%\6c6F6i0K8h6N7H\4H1P6i.1R5H5C
%APPDATA%\6c6F6i0K8h6N7H\6W0z3p.8q3L3T
%APPDATA%\6c6F6i0K8h6N7H\6q3q3D.8p1I7u
%APPDATA%\6c6F6i0K8h6N7H\6q3X1W.7q8b3w
%APPDATA%\6c6F6i0K8h6N7H\7F4m2A.7i5l4C
%APPDATA%\6c6F6i0K8h6N7H\2o1Q2H.1c2U8f
%APPDATA%\6c6F6i0K8h6N7H\8Z1j5h.2s6f7V
%APPDATA%\6c6F6i0K8h6N7H\2B3e2j.1z6W2Z
%APPDATA%\6c6F6i0K8h6N7H\4E7j8c.3B4K5R
%APPDATA%\6c6F6i0K8h6N7H\0r5W6q.0N8t7j
%APPDATA%\6c6F6i0K8h6N7H\5E5U8r.3q6h1i
%APPDATA%\6c6F6i0K8h6N7H\5N5U5J.2I8K1Q
%APPDATA%\6c6F6i0K8h6N7H\0o3v7R.2f8P3m
%APPDATA%\6c6F6i0K8h6N7H\6k5B0x.8A7z7A
%APPDATA%\6c6F6i0K8h6N7H\8j5A8t.4l5H5y
%APPDATA%\6c6F6i0K8h6N7H\0a2a6F.5z8X1Z
%APPDATA%\6c6F6i0K8h6N7H\4t7u3e.8x2h0T
%APPDATA%\6c6F6i0K8h6N7H\7n0X3h.1e5x5U
%APPDATA%\6c6F6i0K8h6N7H\6i6j2J.2D0H3Q
%APPDATA%\6c6F6i0K8h6N7H\4i2W5I.2y3m7C
%APPDATA%\6c6F6i0K8h6N7H\2o4r1n.2x6R0e
%APPDATA%\6c6F6i0K8h6N7H\4o2K3y.8i0t6a
%APPDATA%\6c6F6i0K8h6N7H\2y0M4S.4l0l3D
%APPDATA%\6c6F6i0K8h6N7H\8F3M3D.2U8v4b
%APPDATA%\6c6F6i0K8h6N7H\5S4b3w.7U4d0C
%APPDATA%\6c6F6i0K8h6N7H\2i5n1g.7K6R1M
%APPDATA%\6c6F6i0K8h6N7H\1H6H0y.5R2c5O
%APPDATA%\6c6F6i0K8h6N7H\6i3f5G.3f2i3I
%APPDATA%\6c6F6i0K8h6N7H\7D0a6M.2a7l3Y
%APPDATA%\6c6F6i0K8h6N7H\5L0y0J.6w5R4I
%APPDATA%\6c6F6i0K8h6N7H\0r6B6U.1i1z4G
%APPDATA%\6c6F6i0K8h6N7H\8A6B3d.0O2D7h
%APPDATA%\6c6F6i0K8h6N7H\3m6b4o.0M7s0X
%WINDIR%\abracos.pps
%WINDIR%\live.bat
%WINDIR%\amor2014.cpl
%APPDATA%\6c6F6i0K8h6N7H\3p4w2u.4j3U8B
%APPDATA%\6c6F6i0K8h6N7H\4z1o3q.3z0M7t
%APPDATA%\6c6F6i0K8h6N7H\2B8l4w.7t6v0A
%APPDATA%\6c6F6i0K8h6N7H\3P8U4Y.4p5X8E
%APPDATA%\6c6F6i0K8h6N7H\5j5r1W.5P5q1p
%APPDATA%\6c6F6i0K8h6N7H\2h6q0E.3D1b6Y
%APPDATA%\6c6F6i0K8h6N7H\3P3l3D.1I2z4t
%APPDATA%\6c6F6i0K8h6N7H\8V8p5S.4n3u2y
%APPDATA%\6c6F6i0K8h6N7H\2v2O6w.1S8k4K
%APPDATA%\6c6F6i0K8h6N7H\6O2v0I.8G4t3G
%APPDATA%\6c6F6i0K8h6N7H\8r1S7G.5Q7q2o
%APPDATA%\6c6F6i0K8h6N7H\1R7l7y.0A6P1I
%APPDATA%\6c6F6i0K8h6N7H\2X5m0k.7d0T2a
%APPDATA%\6c6F6i0K8h6N7H\8L7L6R.2W3X0X
%APPDATA%\6c6F6i0K8h6N7H\1Y8U8j.2t4P6h
%APPDATA%\6c6F6i0K8h6N7H\6N4i8P.2N7C4d
%APPDATA%\6c6F6i0K8h6N7H\6Q1e1l.4h0Q2z
%APPDATA%\6c6F6i0K8h6N7H\5U4D6g.2w3e0D
%APPDATA%\6c6F6i0K8h6N7H\8Q6l0Q.8n3e8W
%APPDATA%\6c6F6i0K8h6N7H\3o6E8l.6a3z0R
%APPDATA%\6c6F6i0K8h6N7H\1W8x6K.3F8Q5M
%APPDATA%\6c6F6i0K8h6N7H\1H1L2E.1j7F2s
%APPDATA%\6c6F6i0K8h6N7H\5t2i7W.6u7L8k
%APPDATA%\6c6F6i0K8h6N7H\4H6G6n.6g1J0m
%APPDATA%\6c6F6i0K8h6N7H\7y3z1T.2V1S0w
%APPDATA%\6c6F6i0K8h6N7H\3E7a2N.2t0e4r
%APPDATA%\6c6F6i0K8h6N7H\0T3O3y.7u2c5S
%APPDATA%\6c6F6i0K8h6N7H\0O4q1F.3b7g3m
%APPDATA%\6c6F6i0K8h6N7H\0q2R6p.5G4o8x
%APPDATA%\6c6F6i0K8h6N7H\4C8j3N.5W1h5h
%APPDATA%\6c6F6i0K8h6N7H\2m7V0K.4b0O3k
%APPDATA%\6c6F6i0K8h6N7H\4o4a7b.1k0y8e
%APPDATA%\6c6F6i0K8h6N7H\3U2n5y.7M7w4j
%APPDATA%\6c6F6i0K8h6N7H\0n5f4N.7d5R0P
%APPDATA%\6c6F6i0K8h6N7H\3B0Q0v.7X7O1I
%APPDATA%\6c6F6i0K8h6N7H\7N1W6y.2d5s6u
%APPDATA%\6c6F6i0K8h6N7H\8D0D8T.5r4O3W
%APPDATA%\6c6F6i0K8h6N7H\1J0H6z.1X1V3x
%APPDATA%\6c6F6i0K8h6N7H\6s3V1x.3s6R5e
%APPDATA%\6c6F6i0K8h6N7H\0a0f5q.3L1O8U
%APPDATA%\6c6F6i0K8h6N7H\7z2S7a.4U1S6w
%APPDATA%\6c6F6i0K8h6N7H\1X2Y4u.6D1b7v
%APPDATA%\6c6F6i0K8h6N7H\7i2R1R.0L2o8w
%APPDATA%\6c6F6i0K8h6N7H\7H0j8z.4J5q6z
%APPDATA%\6c6F6i0K8h6N7H\2B6y0S.4T1x0c
%APPDATA%\6c6F6i0K8h6N7H\3X3Y6O.6v3Z7D
%APPDATA%\6c6F6i0K8h6N7H\1Z5r3n.5x1X6u
%APPDATA%\6c6F6i0K8h6N7H\3M2Q8p.7R0o5M
%APPDATA%\6c6F6i0K8h6N7H\8b5p8p.3o2B3V
%APPDATA%\6c6F6i0K8h6N7H\0m2K7Y.5k5V1s
%APPDATA%\6c6F6i0K8h6N7H\4H1l0k.0O5L4d
%APPDATA%\6c6F6i0K8h6N7H\6D2e3l.8L8I6N
%APPDATA%\6c6F6i0K8h6N7H\6W5s0j.0f5y7T
%APPDATA%\6c6F6i0K8h6N7H\3A3s5V.4r1h0N
%APPDATA%\6c6F6i0K8h6N7H\2e5L1d.4S2b1h

Удаляет следующие файлы:

%APPDATA%\6c6F6i0K8h6N7H\1r1X0a.6t1A5Z
%APPDATA%\6c6F6i0K8h6N7H\8Y4J3B.3C7v6G
%APPDATA%\6c6F6i0K8h6N7H\5P6e7k.0o8b7Q
%APPDATA%\6c6F6i0K8h6N7H\3D4R1b.6V4V8L
%APPDATA%\6c6F6i0K8h6N7H\0g7i5O.6V3j5U
%APPDATA%\6c6F6i0K8h6N7H\6U1v1A.8W5n0B
%APPDATA%\6c6F6i0K8h6N7H\2L1y5u.8y0z5a
%APPDATA%\6c6F6i0K8h6N7H\3l6t5M.1z1O0C
%APPDATA%\6c6F6i0K8h6N7H\3Y7y7X.3a6S7H
%APPDATA%\6c6F6i0K8h6N7H\5F0G1X.4P8C2T
%APPDATA%\6c6F6i0K8h6N7H\6D8r4i.0Q6D6n
%APPDATA%\6c6F6i0K8h6N7H\7c3y2b.5H2Z7u
%APPDATA%\6c6F6i0K8h6N7H\4h6p6y.0P7w3b
%APPDATA%\6c6F6i0K8h6N7H\6V6u5P.2s8t4O
%APPDATA%\6c6F6i0K8h6N7H\4q0v1C.0C1Z6S
%APPDATA%\6c6F6i0K8h6N7H\1V2j1u.1u2X2Q
%APPDATA%\6c6F6i0K8h6N7H\0J6o1K.6T0t5e
%APPDATA%\6c6F6i0K8h6N7H\3P4x7j.4V6Z8f
%APPDATA%\6c6F6i0K8h6N7H\0s4k8H.6Y5t8W
%APPDATA%\6c6F6i0K8h6N7H\6m7k8t.4B8s3p
%APPDATA%\6c6F6i0K8h6N7H\2c0O3G.8I1C2W
%APPDATA%\6c6F6i0K8h6N7H\4l4A8m.1E5c4D
%APPDATA%\6c6F6i0K8h6N7H\6Z6o8X.0Y7U1U
%APPDATA%\6c6F6i0K8h6N7H\7p2A1L.3a4T6z
%APPDATA%\6c6F6i0K8h6N7H\3R5z3L.8L2I4G
%APPDATA%\6c6F6i0K8h6N7H\2g4S7Q.8S0o4f
%APPDATA%\6c6F6i0K8h6N7H\6p0s2C.4b1d5X
%APPDATA%\6c6F6i0K8h6N7H\6e5k4O.1q5s5j
%APPDATA%\6c6F6i0K8h6N7H\1e0F8N.8T8A8M
%APPDATA%\6c6F6i0K8h6N7H\3b7T0c.7A5i8U
%APPDATA%\6c6F6i0K8h6N7H\0u5Y2O.8M0l7r
%APPDATA%\6c6F6i0K8h6N7H\6x8V0g.3E5f3b
%APPDATA%\6c6F6i0K8h6N7H\8v4C5N.5W7W7r
%APPDATA%\6c6F6i0K8h6N7H\2S6u8y.5U2X4c
%APPDATA%\6c6F6i0K8h6N7H\6D7e1G.0i7E0S
%APPDATA%\6c6F6i0K8h6N7H\3d8N5X.1o7q4W
%APPDATA%\6c6F6i0K8h6N7H\3p6N1w.8G8o7V
%APPDATA%\6c6F6i0K8h6N7H\5p5l7C.4x4j6s
%APPDATA%\6c6F6i0K8h6N7H\6a4B8v.0N1r3I
%APPDATA%\6c6F6i0K8h6N7H\3k3x2k.3j6U5K
%APPDATA%\6c6F6i0K8h6N7H\2u4s5j.3m6q8h
%APPDATA%\6c6F6i0K8h6N7H\1K8j7U.2E3Y3M
%APPDATA%\6c6F6i0K8h6N7H\5N3b5k.6R3y7z
%APPDATA%\6c6F6i0K8h6N7H\2D5F5a.5E7K3M
%APPDATA%\6c6F6i0K8h6N7H\7Q7x7H.7A5G1l
%APPDATA%\6c6F6i0K8h6N7H\2o5K4V.7D1l5b
%APPDATA%\6c6F6i0K8h6N7H\7w4O2I.1e4q8q
%APPDATA%\6c6F6i0K8h6N7H\8K0k3I.4o0B4h
%APPDATA%\6c6F6i0K8h6N7H\7G0S5V.5n6P7Y
%APPDATA%\6c6F6i0K8h6N7H\8Z7r5T.1x7n1q
%APPDATA%\6c6F6i0K8h6N7H\5b2G4l.1v8z6r
%APPDATA%\6c6F6i0K8h6N7H\3o7m0s.8P1Y8G
%APPDATA%\6c6F6i0K8h6N7H\4y8a2Z.5Y3Q6A
%APPDATA%\6c6F6i0K8h6N7H\6J6x1n.7d1h7E
%APPDATA%\6c6F6i0K8h6N7H\8B7Y7g.0l6Y2H
%APPDATA%\6c6F6i0K8h6N7H\2d7O6m.8f7r3J
%APPDATA%\6c6F6i0K8h6N7H\2Q6k5i.2C3F4S
%APPDATA%\6c6F6i0K8h6N7H\8j2B6Z.5G0j3c
%APPDATA%\6c6F6i0K8h6N7H\0Y1O0H.1N7H5j
%APPDATA%\6c6F6i0K8h6N7H\3y0b8p.7k1o7K
%APPDATA%\6c6F6i0K8h6N7H\7l3f1v.6I0B1S
%APPDATA%\6c6F6i0K8h6N7H\7z1x7q.4g7D5t
%APPDATA%\6c6F6i0K8h6N7H\7b7v6B.6J3G1U
%APPDATA%\6c6F6i0K8h6N7H\1k6w3K.3H4x5E
%APPDATA%\6c6F6i0K8h6N7H\1i0Z2W.5s3i0H
%APPDATA%\6c6F6i0K8h6N7H\8J4s5S.3c0H2G
%APPDATA%\6c6F6i0K8h6N7H\8o6Z4W.6e5Q6U
%APPDATA%\6c6F6i0K8h6N7H\7H5L2g.2A4l5Z
%APPDATA%\6c6F6i0K8h6N7H\1t4n2r.3e2l2D
%APPDATA%\6c6F6i0K8h6N7H\1K7x6K.8w8s1S
%APPDATA%\6c6F6i0K8h6N7H\4f7J4A.3C4k7g
%APPDATA%\6c6F6i0K8h6N7H\6Z7n5J.4B2L3Z
%APPDATA%\6c6F6i0K8h6N7H\7p2l3r.7q6g3I
%APPDATA%\6c6F6i0K8h6N7H\8T7Q2h.6O5D7M
%APPDATA%\6c6F6i0K8h6N7H\6I0g6l.1X3k7D
%APPDATA%\6c6F6i0K8h6N7H\4H1P6i.1R5H5C
%APPDATA%\6c6F6i0K8h6N7H\6W0z3p.8q3L3T
%APPDATA%\6c6F6i0K8h6N7H\6q3q3D.8p1I7u
%APPDATA%\6c6F6i0K8h6N7H\6q3X1W.7q8b3w
%APPDATA%\6c6F6i0K8h6N7H\7F4m2A.7i5l4C
%APPDATA%\6c6F6i0K8h6N7H\2o1Q2H.1c2U8f
%APPDATA%\6c6F6i0K8h6N7H\8Z1j5h.2s6f7V
%APPDATA%\6c6F6i0K8h6N7H\2I1I4G.8S3Y2v
%APPDATA%\6c6F6i0K8h6N7H\5E5U8r.3q6h1i
%APPDATA%\6c6F6i0K8h6N7H\5N5U5J.2I8K1Q
%APPDATA%\6c6F6i0K8h6N7H\7n0X3h.1e5x5U
%APPDATA%\6c6F6i0K8h6N7H\8F3M3D.2U8v4b
%APPDATA%\6c6F6i0K8h6N7H\5S4b3w.7U4d0C
%APPDATA%\6c6F6i0K8h6N7H\0a2a6F.5z8X1Z
%APPDATA%\6c6F6i0K8h6N7H\4t7u3e.8x2h0T
%APPDATA%\6c6F6i0K8h6N7H\4E7j8c.3B4K5R
%APPDATA%\6c6F6i0K8h6N7H\0r5W6q.0N8t7j
%APPDATA%\6c6F6i0K8h6N7H\2B3e2j.1z6W2Z
%APPDATA%\6c6F6i0K8h6N7H\2y0M4S.4l0l3D
%APPDATA%\6c6F6i0K8h6N7H\2o4r1n.2x6R0e
%APPDATA%\6c6F6i0K8h6N7H\4o2K3y.8i0t6a
%APPDATA%\6c6F6i0K8h6N7H\0a0f5q.3L1O8U
%APPDATA%\6c6F6i0K8h6N7H\7z2S7a.4U1S6w
%APPDATA%\6c6F6i0K8h6N7H\6i3f5G.3f2i3I
%APPDATA%\6c6F6i0K8h6N7H\2i5n1g.7K6R1M
%APPDATA%\6c6F6i0K8h6N7H\1H6H0y.5R2c5O
%APPDATA%\6c6F6i0K8h6N7H\6i6j2J.2D0H3Q
%APPDATA%\6c6F6i0K8h6N7H\4i2W5I.2y3m7C
%APPDATA%\6c6F6i0K8h6N7H\8j5A8t.4l5H5y
%APPDATA%\6c6F6i0K8h6N7H\8A6B3d.0O2D7h
%APPDATA%\6c6F6i0K8h6N7H\3m6b4o.0M7s0X
%APPDATA%\6c6F6i0K8h6N7H\2B8l4w.7t6v0A
%APPDATA%\6c6F6i0K8h6N7H\2v2O6w.1S8k4K
%APPDATA%\6c6F6i0K8h6N7H\6O2v0I.8G4t3G
%APPDATA%\6c6F6i0K8h6N7H\3p4w2u.4j3U8B
%APPDATA%\6c6F6i0K8h6N7H\4z1o3q.3z0M7t
%APPDATA%\6c6F6i0K8h6N7H\5L0y0J.6w5R4I
%APPDATA%\6c6F6i0K8h6N7H\0r6B6U.1i1z4G
%APPDATA%\6c6F6i0K8h6N7H\7D0a6M.2a7l3Y
%APPDATA%\6c6F6i0K8h6N7H\8V8p5S.4n3u2y
%APPDATA%\6c6F6i0K8h6N7H\2h6q0E.3D1b6Y
%APPDATA%\6c6F6i0K8h6N7H\3P3l3D.1I2z4t
%APPDATA%\6c6F6i0K8h6N7H\0o3v7R.2f8P3m
%APPDATA%\6c6F6i0K8h6N7H\6k5B0x.8A7z7A
%APPDATA%\6c6F6i0K8h6N7H\2X5m0k.7d0T2a
%APPDATA%\6c6F6i0K8h6N7H\8r1S7G.5Q7q2o
%APPDATA%\6c6F6i0K8h6N7H\1R7l7y.0A6P1I
%APPDATA%\6c6F6i0K8h6N7H\3P8U4Y.4p5X8E
%APPDATA%\6c6F6i0K8h6N7H\5j5r1W.5P5q1p
%APPDATA%\6c6F6i0K8h6N7H\5U4D6g.2w3e0D
%APPDATA%\6c6F6i0K8h6N7H\6N4i8P.2N7C4d
%APPDATA%\6c6F6i0K8h6N7H\6Q1e1l.4h0Q2z
%APPDATA%\6c6F6i0K8h6N7H\2m7V0K.4b0O3k
%APPDATA%\6c6F6i0K8h6N7H\4H6G6n.6g1J0m
%APPDATA%\6c6F6i0K8h6N7H\5t2i7W.6u7L8k
%APPDATA%\6c6F6i0K8h6N7H\1W8x6K.3F8Q5M
%APPDATA%\6c6F6i0K8h6N7H\1H1L2E.1j7F2s
%APPDATA%\6c6F6i0K8h6N7H\8L7L6R.2W3X0X
%APPDATA%\6c6F6i0K8h6N7H\1Y8U8j.2t4P6h
%APPDATA%\6c6F6i0K8h6N7H\0T3O3y.7u2c5S
%APPDATA%\6c6F6i0K8h6N7H\7y3z1T.2V1S0w
%APPDATA%\6c6F6i0K8h6N7H\0q2R6p.5G4o8x
%APPDATA%\6c6F6i0K8h6N7H\7h1n6k.5D0S6p
%APPDATA%\6c6F6i0K8h6N7H\0O4q1F.3b7g3m
%APPDATA%\6c6F6i0K8h6N7H\4o4a7b.1k0y8e
%APPDATA%\6c6F6i0K8h6N7H\4C8j3N.5W1h5h
%APPDATA%\6c6F6i0K8h6N7H\0n5f4N.7d5R0P
%APPDATA%\6c6F6i0K8h6N7H\3E7a2N.2t0e4r
%APPDATA%\6c6F6i0K8h6N7H\3U2n5y.7M7w4j
%APPDATA%\6c6F6i0K8h6N7H\8Q6l0Q.8n3e8W
%APPDATA%\6c6F6i0K8h6N7H\6s3V1x.3s6R5e
%APPDATA%\6c6F6i0K8h6N7H\8D0D8T.5r4O3W
%APPDATA%\6c6F6i0K8h6N7H\1J0H6z.1X1V3x
%APPDATA%\6c6F6i0K8h6N7H\6D2e3l.8L8I6N
%APPDATA%\6c6F6i0K8h6N7H\2B6y0S.4T1x0c
%APPDATA%\6c6F6i0K8h6N7H\7H0j8z.4J5q6z
%APPDATA%\6c6F6i0K8h6N7H\1X2Y4u.6D1b7v
%APPDATA%\6c6F6i0K8h6N7H\7i2R1R.0L2o8w
%APPDATA%\6c6F6i0K8h6N7H\3B0Q0v.7X7O1I
%APPDATA%\6c6F6i0K8h6N7H\7N1W6y.2d5s6u
%APPDATA%\6c6F6i0K8h6N7H\3M2Q8p.7R0o5M
%APPDATA%\6c6F6i0K8h6N7H\3X3Y6O.6v3Z7D
%APPDATA%\6c6F6i0K8h6N7H\0m2K7Y.5k5V1s
%APPDATA%\6c6F6i0K8h6N7H\3o6E8l.6a3z0R
%APPDATA%\6c6F6i0K8h6N7H\8b5p8p.3o2B3V
%APPDATA%\6c6F6i0K8h6N7H\6W5s0j.0f5y7T
%APPDATA%\6c6F6i0K8h6N7H\4H1l0k.0O5L4d
%APPDATA%\6c6F6i0K8h6N7H\2e5L1d.4S2b1h
%APPDATA%\6c6F6i0K8h6N7H\1Z5r3n.5x1X6u
%APPDATA%\6c6F6i0K8h6N7H\3A3s5V.4r1h0N

Сетевая активность:

Подключается к:

'lo####wmylife.com':80

TCP:

Запросы HTTP GET:

lo####wmylife.com/00006/teca10.pdf

UDP:

DNS ASK lo####wmylife.com

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'
ClassName: 'EDIT' WindowName: '(null)'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней