Trojan.DownLoader12.58944

Техническая информация

Изменения в файловой системе:

Создает следующие файлы:

%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6F71.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\7349.tmp
%APPDATA%\Roaming\Microsoft\Windows\Recent\CustomDestinations\7Y1P1LEFRCNGPNAABTV3.temp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6CEF.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\67AB.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\67EC.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6B86.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\LOG
%TEMP%\etilqs_ZNygJM7Osd0e6QX
%TEMP%\etilqs_OCraLujnUJsFNbN
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\000002.dbtmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\MANIFEST-000001
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\000001.dbtmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\MANIFEST-000002
%TEMP%\nsn47CB.tmp\NSISdl.dll
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\MANIFEST-000001
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\000001.dbtmp
%TEMP%\nsn47CB.tmp\Base64.dll
%TEMP%\nsh47AA.tmp
%TEMP%\nsn47CB.tmp\System.dll
%TEMP%\nsn47CB.tmp\Inetc.dll
%TEMP%\etilqs_xjQsRVHk6BtsDve
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6162.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\654A.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\History Provider Cache
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\MANIFEST-000002
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\000002.dbtmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\LOG

Удаляет следующие файлы:

%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6F50.tmp~RF771b5.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6CDE.tmp~RF76d71.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\730A.tmp~RF774b2.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\MANIFEST-000001
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT~RF77cbd.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6B76.tmp~RF76c78.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\MANIFEST-000001
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT~RF742ba.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6132.tmp~RF763c1.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\67CC.tmp~RF769c9.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\650B.tmp~RF7672b.TMP

Перемещает следующие файлы:

%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6F71.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6F50.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6F50.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6F50.tmp~RF771b5.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6CDE.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6CDE.tmp~RF76d71.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6B76.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6B76.tmp~RF76c78.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6CEF.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6CDE.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\7349.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\730A.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\000002.dbtmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT~RF77cbd.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\000001.dbtmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\730A.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\730A.tmp~RF774b2.TMP
%APPDATA%\Roaming\Microsoft\Windows\Recent\CustomDestinations\7Y1P1LEFRCNGPNAABTV3.temp в %APPDATA%\Roaming\Microsoft\Windows\Recent\CustomDestinations\8548f632abe97aa3.customDestinations-ms
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6162.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6132.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6132.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6132.tmp~RF763c1.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT~RF742ba.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\000001.dbtmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT
%APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\000002.dbtmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\654A.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\650B.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\67CC.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\67CC.tmp~RF769c9.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6B86.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\6B76.tmp
%APPDATA%\Roaming\Opera Software\Opera Stable\67AB.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Preferences
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\650B.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\650B.tmp~RF7672b.TMP
%APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\67EC.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\67CC.tmp