Техническая информация
Для обеспечения автозапуска и распространения:
Создает или изменяет следующие файлы:
- %ALLUSERSPROFILE%\Start Menu\Programs\Startup\WARNING.txt
- %HOMEPATH%\Start Menu\Programs\Startup\jDpMF1BsCsCjneNAsbCBOAsrJPscdScN.exe
Изменения в файловой системе:
Создает следующие файлы:
- %APPDATA%\WARNING.txt
- %APPDATA%\Mozilla\WARNING.txt
- %HOMEPATH%\Desktop\WARNING.txt
- %HOMEPATH%\Cookies\WARNING.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\WARNING.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\WARNING.txt
- %APPDATA%\Mozilla\Firefox\WARNING.txt
- %APPDATA%\Mozilla\Firefox\Profiles\WARNING.txt
- %HOMEPATH%\Favorites\Links\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\2\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\1\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\4\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\3\WARNING.txt
- <LS_APPDATA>\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\WARNING.txt
- %HOMEPATH%\Favorites\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\0\WARNING.txt
- <LS_APPDATA>\Identities\WARNING.txt
- %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarkbackups\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temp\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\History\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\WARNING.txt
- C:\Documents and Settings\NetworkService\Cookies\WARNING.txt
- C:\Documents and Settings\NetworkService\Application Data\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\History\History.IE5\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\Application Data\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\WARNING.txt
- %APPDATA%\Identities\{5518F2FB-DB74-45A3-BEC1-4575D8D9DC84}\WARNING.txt
- C:\Documents and Settings\NetworkService\WARNING.txt
- %APPDATA%\Mozilla\Extensions\WARNING.txt
- %APPDATA%\Identities\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\WARNING.txt
- C:\Documents and Settings\NetworkService\Local Settings\Temporary Internet Files\WARNING.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\WARNING.txt
- %TEMP%\WARNING.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\WARNING.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\WARNING.txt
- %HOMEPATH%\Local Settings\History\History.IE5\MSHist012011111020111111\WARNING.txt
- <LS_APPDATA>\WARNING.txt
- %HOMEPATH%\Local Settings\History\WARNING.txt
- %HOMEPATH%\Local Settings\History\History.IE5\WARNING.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\WARNING.txt
- %HOMEPATH%\My Documents\My Received Files\WARNING.txt
- %HOMEPATH%\My Documents\My Pictures\WARNING.txt
- %HOMEPATH%\NetHood\WARNING.txt
- %HOMEPATH%\My Documents\WARNING.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\WARNING.txt
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\WARNING.txt
- %HOMEPATH%\My Documents\My Music\WARNING.txt
- %HOMEPATH%\Local Settings\WARNING.txt
- <LS_APPDATA>\VMware\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\A\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\9\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\C\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\B\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\6\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\5\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\8\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\7\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\D\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\WARNING.txt
- <LS_APPDATA>\Mozilla\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\F\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\E\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\startupCache\WARNING.txt
- <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\Cache\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Games\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Administrative Tools\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Entertainment\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Communications\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\System Tools\WARNING.txt
- %ALLUSERSPROFILE%\Templates\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\Application Data\WARNING.txt
- C:\Documents and Settings\Default User\Favorites\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\History\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\History\History.IE5\WARNING.txt
- C:\Documents and Settings\Default User\Application Data\WARNING.txt
- %ALLUSERSPROFILE%\WARNING.txt
- C:\Documents and Settings\Default User\Desktop\WARNING.txt
- C:\Documents and Settings\Default User\Cookies\WARNING.txt
- %ALLUSERSPROFILE%\Start Menu\Programs\Accessories\Accessibility\WARNING.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Music\WARNING.txt
- %ALLUSERSPROFILE%\Documents\My Music\My Playlists\WARNING.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\WARNING.txt
- %ALLUSERSPROFILE%\Documents\My Music\Sample Playlists\0338E140\WARNING.txt
- <Текущая директория>\WARNING.txt
- %APPDATA%\k.key
- %ALLUSERSPROFILE%\Desktop\WARNING.txt
- %ALLUSERSPROFILE%\Application Data\WARNING.txt
- %ALLUSERSPROFILE%\Documents\My Music\WARNING.txt
- %ALLUSERSPROFILE%\Documents\WARNING.txt
- %ALLUSERSPROFILE%\Documents\My Videos\WARNING.txt
- %ALLUSERSPROFILE%\Favorites\WARNING.txt
- %ALLUSERSPROFILE%\DRM\WARNING.txt
- %APPDATA%\encryptedFiles.txt
- %TEMP%\tempfolderdragoncrypt
- %ALLUSERSPROFILE%\Documents\My Pictures\WARNING.txt
- %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\Application Data\WARNING.txt
- C:\Documents and Settings\LocalService\Cookies\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\History\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\WARNING.txt
- C:\Documents and Settings\Default User\Templates\WARNING.txt
- C:\Documents and Settings\Default User\Start Menu\WARNING.txt
- C:\Documents and Settings\LocalService\Application Data\WARNING.txt
- C:\Documents and Settings\Default User\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\Temp\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\WARNING.txt
- C:\Documents and Settings\LocalService\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\CJCTQ25G\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\BGGTYMH1\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\MOE00UY1\WARNING.txt
- C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\LBMMC3H3\WARNING.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\YPORKZYZ\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\Temp\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\WARNING.txt
- C:\Documents and Settings\Default User\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\WARNING.txt
- C:\Documents and Settings\Default User\My Documents\WARNING.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Entertainment\WARNING.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\Accessibility\WARNING.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Startup\WARNING.txt
- C:\Documents and Settings\Default User\Start Menu\Programs\Accessories\WARNING.txt
- C:\Documents and Settings\Default User\PrintHood\WARNING.txt
- C:\Documents and Settings\Default User\NetHood\WARNING.txt
- C:\Documents and Settings\Default User\SendTo\WARNING.txt
- C:\Documents and Settings\Default User\Recent\WARNING.txt
Удаляет следующие файлы:
- %APPDATA%\encryptedFiles.txt
Перемещает следующие файлы:
- %TEMP%\tempfolderdragoncrypt в C:\Documents and Settings\Default User\Templates\winword2.doc
- %TEMP%\tempfolderdragoncrypt в C:\Documents and Settings\Default User\Templates\winword.doc
- %TEMP%\tempfolderdragoncrypt в C:\Documents and Settings\Default User\Templates\quattro.wb2
- %TEMP%\tempfolderdragoncrypt в %APPDATA%\encryptedFiles.txt
- %TEMP%\tempfolderdragoncrypt в %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.css
- %TEMP%\tempfolderdragoncrypt в %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.css
- %TEMP%\tempfolderdragoncrypt в %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\bookmarks.html
- %TEMP%\tempfolderdragoncrypt в %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.jpg
- %TEMP%\tempfolderdragoncrypt в %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.jpg
- %TEMP%\tempfolderdragoncrypt в %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.jpg
- %TEMP%\tempfolderdragoncrypt в %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.jpg
- %TEMP%\tempfolderdragoncrypt в C:\Documents and Settings\Default User\Templates\powerpnt.ppt
- %TEMP%\tempfolderdragoncrypt в C:\Documents and Settings\Default User\Templates\excel4.xls
- %TEMP%\tempfolderdragoncrypt в C:\Documents and Settings\Default User\Templates\excel.xls
