Поддержка
Круглосуточная поддержка

Позвоните

Бесплатно по России:
8-800-333-79-32

ЧаВо | Форум

Ваши запросы

  • Все: -
  • Незакрытые: -
  • Последний: -

Позвоните

Бесплатно по России:
8-800-333-79-32

Свяжитесь с нами Незакрытые запросы: 

Профиль

Профиль

Trojan.PWS.Siggen1.56509

Добавлен в вирусную базу Dr.Web: 2016-09-03

Описание добавлено:

Техническая информация

Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'ydjhjmhq' = '%ALLUSERSPROFILE%\Documents\mjzpfswn.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'ydjhjmhq' = '%ALLUSERSPROFILE%\Documents\mjzpfswn.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'izrmuyok' = '%ALLUSERSPROFILE%\Documents\My Videos\wxudrxzd.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'pxjnswfl' = '%HOMEPATH%\My Documents\My Music\mmokxrml.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'utmpfdaa' = '%HOMEPATH%\My Documents\jwiilzdn.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'utmpfdaa' = '%HOMEPATH%\My Documents\jwiilzdn.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'pxjnswfl' = '%HOMEPATH%\My Documents\My Music\mmokxrml.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'bnupvxmn' = '%ALLUSERSPROFILE%\Documents\My Music\lojthaod.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'mtjudugc' = '<Полный путь к вирусу>'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'mtjudugc' = '<Полный путь к вирусу>'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'bnupvxmn' = '%ALLUSERSPROFILE%\Documents\My Music\lojthaod.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'izrmuyok' = '%ALLUSERSPROFILE%\Documents\My Videos\wxudrxzd.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\RunOnce] 'wenjnsvy' = '%ALLUSERSPROFILE%\Documents\My Pictures\hwmtgbgi.exe'
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'wenjnsvy' = '%ALLUSERSPROFILE%\Documents\My Pictures\hwmtgbgi.exe'
Создает или изменяет следующие файлы:
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\mjzpfswn.exe
  • %WINDIR%\Tasks\ydjhjmhq.job
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\wxudrxzd.exe
  • %WINDIR%\Tasks\pxjnswfl.job
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\jwiilzdn.exe
  • %WINDIR%\Tasks\utmpfdaa.job
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\mmokxrml.exe
  • %WINDIR%\Tasks\bnupvxmn.job
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\<Имя вируса>.exe
  • %WINDIR%\Tasks\mtjudugc.job
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\lojthaod.exe
  • %WINDIR%\Tasks\izrmuyok.job
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\hwmtgbgi.exe
  • %WINDIR%\Tasks\wenjnsvy.job
Изменения в файловой системе:
Создает следующие файлы:
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\history-panel.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\history-panel.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\organizer.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\organizer.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\controller.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\controller.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\browserPlacesViews.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\browserPlacesViews.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\cookies.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\cookies.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\fonts.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\languages.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\languages.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\fonts.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\treeView.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\treeView.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.ap19
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.sdf.new
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.a19
  • %ProgramFiles%\FireFox\blocklist.a19
  • %ProgramFiles%\FireFox\blocklist.ap19
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.ap19
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.ap19
  • <SYSTEM32>\dllcache\sam.sdf.new
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\main.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSyncTabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSyncTabs.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSessionRestore.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutPrivateBrowsing.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSessionRestore.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\browser.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe-ui.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe-ui.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\engineManager.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\browser.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\engineManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\utilityOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\utilityOverlay.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutCertError.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutPrivateBrowsing.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutCertError.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\applications.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\applications.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\places.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\organizer.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\places.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\preferences.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\searchbar.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\searchbar.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sanitizeDialog.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\preferences.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sanitizeDialog.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\fullscreen-video.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\inspector.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\fullscreen-video.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\inspector.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\editBookmarkOverlay.ap19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\organizer.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\editBookmarkOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pageInfo.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pageInfo.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\tabs.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\sb-loader.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\tabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sync.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sync.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\sb-loader.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissionsutils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissionsutils.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissions.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\main.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissions.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\privacy.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\selectBookmark.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\selectBookmark.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\security.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\privacy.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\security.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncUtils.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncUtils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\search.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\search.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\engineManager.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\engineManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\searchbarBindings.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\searchbarBindings.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
  • %HOMEPATH%\Templates\powerpnt.ap19
  • %HOMEPATH%\Templates\quattro.a19
  • %HOMEPATH%\Templates\powerpnt.a19
  • %HOMEPATH%\Templates\excel4.a19
  • %HOMEPATH%\Templates\excel4.ap19
  • %HOMEPATH%\Templates\quattro.ap19
  • %HOMEPATH%\Templates\winword2.ap19
  • C:\Far2\Addons\README.a19
  • %HOMEPATH%\Templates\winword2.a19
  • %HOMEPATH%\Templates\winword.a19
  • %HOMEPATH%\Templates\winword.ap19
  • <LS_APPDATA>\IconCache.a19
  • <LS_APPDATA>\IconCache.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
  • <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
  • %HOMEPATH%\Templates\excel.a19
  • %HOMEPATH%\Templates\excel.ap19
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.ap19
  • <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.ap19
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.ap19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.ap19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.ap19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
  • C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
  • C:\Documents and Settings\Default User\Templates\excel.a19
  • C:\Documents and Settings\Default User\Templates\excel.ap19
  • C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.ap19
  • C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.ap19
  • C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
  • %ALLUSERSPROFILE%\Documents\My Videos\wxudrxzd.exe
  • %ALLUSERSPROFILE%\Documents\mjzpfswn.exe
  • %ALLUSERSPROFILE%\Documents\My Pictures\hwmtgbgi.exe
  • <Текущая директория>\bg.log
  • %ALLUSERSPROFILE%\Documents\My Music\lojthaod.exe
  • %HOMEPATH%\My Documents\My Music\mmokxrml.exe
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.ap19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
  • %HOMEPATH%\My Documents\jwiilzdn.exe
  • %HOMEPATH%\My Documents\!!! Readme For Decrypt !!!.txt
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.ap19
  • %APPDATA%\Microsoft\Internet Explorer\brndlog.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
  • C:\Documents and Settings\Default User\Templates\powerpnt.ap19
  • C:\Documents and Settings\Default User\Templates\quattro.a19
  • C:\Documents and Settings\Default User\Templates\powerpnt.a19
  • C:\Documents and Settings\Default User\Templates\excel4.a19
  • C:\Documents and Settings\Default User\Templates\excel4.ap19
  • C:\Documents and Settings\Default User\Templates\quattro.ap19
  • C:\Documents and Settings\Default User\Templates\winword2.ap19
  • %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
  • C:\Documents and Settings\Default User\Templates\winword2.a19
  • C:\Documents and Settings\Default User\Templates\winword.a19
  • C:\Documents and Settings\Default User\Templates\winword.ap19
  • C:\Far2\Addons\README.ap19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.ap19
  • C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.ap19
  • C:\Far2\Plugins\ExtSearch\sources\PLUGIN.ap19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.ap19
  • C:\Far2\Plugins\FTP\FtpCmds.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.ap19
  • C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.ap19
  • C:\Far2\Plugins\ExtSearch\sources\ExtChCase.ap19
  • C:\Far2\Plugins\ExtSearch\doc\RUS_READ.ap19
  • C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearch.ap19
  • C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.ap19
  • C:\Far2\Plugins\ExtSearch\sources\ExtMenu.ap19
  • C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
  • C:\Far2\PluginSDK\Headers.c\plugin.a19
  • C:\Far2\PluginSDK\Headers.c\plugin.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.ap19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.ap19
  • C:\Far2\Plugins\FTP\Notes.a19
  • C:\Far2\Plugins\FTP\Notes.ap19
  • C:\Far2\Plugins\FTP\FtpCmds_rus.ap19
  • C:\Far2\Plugins\FTP\FtpCmds.ap19
  • C:\Far2\Plugins\FTP\FtpCmds_rus.a19
  • C:\Far2\Plugins\FTP\Notes_rus.a19
  • C:\Far2\PluginSDK\Headers.c\farkeys.a19
  • C:\Far2\PluginSDK\Headers.c\farkeys.ap19
  • C:\Far2\PluginSDK\Headers.c\farcolor.ap19
  • C:\Far2\Plugins\FTP\Notes_rus.ap19
  • C:\Far2\PluginSDK\Headers.c\farcolor.a19
  • C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
  • C:\Far2\Documentation\rus\Bug.Report.a19
  • C:\Far2\Documentation\rus\Bug.Report.ap19
  • C:\Far2\Documentation\rus\Arc.Support.ap19
  • C:\Far2\Documentation\eng\TechInfo.ap19
  • C:\Far2\Documentation\rus\Arc.Support.a19
  • C:\Far2\Documentation\rus\Far.FAQ.a19
  • C:\Far2\Documentation\rus\Plugins.Review.a19
  • C:\Far2\Documentation\rus\Plugins.Review.ap19
  • C:\Far2\Documentation\rus\Plugins.Install.ap19
  • C:\Far2\Documentation\rus\Far.FAQ.ap19
  • C:\Far2\Documentation\rus\Plugins.Install.a19
  • C:\Far2\Documentation\eng\Bug.Report.ap19
  • C:\Far2\Documentation\eng\Far.FAQ.a19
  • C:\Far2\Documentation\eng\Bug.Report.a19
  • C:\Far2\Documentation\eng\Arc.Support.a19
  • C:\Far2\Documentation\eng\Arc.Support.ap19
  • C:\Far2\Documentation\eng\Far.FAQ.ap19
  • C:\Far2\Documentation\eng\Plugins.Review.ap19
  • C:\Far2\Documentation\eng\TechInfo.a19
  • C:\Far2\Documentation\eng\Plugins.Review.a19
  • C:\Far2\Documentation\eng\Plugins.Install.a19
  • C:\Far2\Documentation\eng\Plugins.Install.ap19
  • C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
  • C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.ap19
  • C:\Far2\Plugins\Colorer\hrd\catalog-text.ap19
  • C:\Far2\Plugins\Colorer\hrd\catalog-rgb.ap19
  • C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
  • C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
  • C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
  • C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.ap19
  • C:\Far2\Plugins\ExtSearch\doc\REGEXPS.ap19
  • C:\Far2\Plugins\ExtSearch\doc\ENG_READ.ap19
  • C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
  • C:\Far2\Plugins\7-Zip\far7z.ap19
  • C:\Far2\Plugins\Colorer\catalog.a19
  • C:\Far2\Plugins\7-Zip\far7z.a19
  • C:\Far2\Documentation\rus\TechInfo.a19
  • C:\Far2\Documentation\rus\TechInfo.ap19
  • C:\Far2\Plugins\Colorer\catalog.ap19
  • C:\Far2\Plugins\Colorer\hrd\catalog-console.ap19
  • C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
  • C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
  • C:\Far2\Plugins\Colorer\hrc\changes.a19
  • C:\Far2\Plugins\Colorer\hrc\changes.ap19
Присваивает атрибут 'скрытый' для следующих файлов:
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\controller.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\browserPlacesViews.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\history-panel.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\fonts.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\cookies.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\organizer.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\treeView.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.a19
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.a19
  • %ProgramFiles%\FireFox\blocklist.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSessionRestore.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutPrivateBrowsing.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSyncTabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\engineManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\browser.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutCertError.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\utilityOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe-ui.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\applications.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\places.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\preferences.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\searchbar.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sanitizeDialog.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\organizer.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\fullscreen-video.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\inspector.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\editBookmarkOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pageInfo.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sync.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\selectBookmark.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\tabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\sb-loader.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\security.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\main.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\languages.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissions.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\privacy.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissionsutils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncUtils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\engineManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\search.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\searchbarBindings.a19
  • C:\Far2\PluginSDK\Headers.c\plugin.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
  • C:\Documents and Settings\Default User\Templates\winword2.a19
  • C:\Documents and Settings\Default User\Templates\winword.a19
  • %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
  • <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
  • <LS_APPDATA>\IconCache.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
  • %ALLUSERSPROFILE%\Documents\mjzpfswn.exe
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\wxudrxzd.exe
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\mjzpfswn.exe
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\mmokxrml.exe
  • %HOMEPATH%\My Documents\My Music\mmokxrml.exe
  • %ALLUSERSPROFILE%\Documents\My Videos\wxudrxzd.exe
  • %ALLUSERSPROFILE%\Documents\My Music\lojthaod.exe
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\<Имя вируса>.exe
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\lojthaod.exe
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\hwmtgbgi.exe
  • %ALLUSERSPROFILE%\Documents\My Pictures\hwmtgbgi.exe
  • %HOMEPATH%\My Documents\jwiilzdn.exe
  • C:\Documents and Settings\Default User\Templates\excel.a19
  • C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
  • C:\Documents and Settings\Default User\Templates\excel4.a19
  • C:\Documents and Settings\Default User\Templates\quattro.a19
  • C:\Documents and Settings\Default User\Templates\powerpnt.a19
  • C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
  • %ALLUSERSPROFILE%\Start Menu\Programs\Startup\jwiilzdn.exe
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
  • C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
  • C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
  • C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
  • C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
  • C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
  • C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
  • C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
  • C:\Far2\Plugins\FTP\Notes.a19
  • C:\Far2\Plugins\FTP\FtpCmds_rus.a19
  • C:\Far2\Plugins\FTP\Notes_rus.a19
  • C:\Far2\PluginSDK\Headers.c\farkeys.a19
  • C:\Far2\PluginSDK\Headers.c\farcolor.a19
  • C:\Far2\Plugins\FTP\FtpCmds.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
  • C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
  • C:\Far2\Documentation\eng\Arc.Support.a19
  • C:\Far2\Addons\README.a19
  • C:\Far2\Documentation\eng\Bug.Report.a19
  • C:\Far2\Documentation\eng\Plugins.Install.a19
  • C:\Far2\Documentation\eng\Far.FAQ.a19
  • %HOMEPATH%\Templates\winword2.a19
  • %HOMEPATH%\Templates\excel4.a19
  • %HOMEPATH%\Templates\excel.a19
  • %HOMEPATH%\Templates\powerpnt.a19
  • %HOMEPATH%\Templates\winword.a19
  • %HOMEPATH%\Templates\quattro.a19
  • C:\Far2\Documentation\eng\Plugins.Review.a19
  • C:\Far2\Plugins\7-Zip\far7z.a19
  • C:\Far2\Documentation\rus\TechInfo.a19
  • C:\Far2\Plugins\Colorer\catalog.a19
  • C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
  • C:\Far2\Plugins\Colorer\hrc\changes.a19
  • C:\Far2\Documentation\rus\Plugins.Review.a19
  • C:\Far2\Documentation\rus\Arc.Support.a19
  • C:\Far2\Documentation\eng\TechInfo.a19
  • C:\Far2\Documentation\rus\Bug.Report.a19
  • C:\Far2\Documentation\rus\Plugins.Install.a19
  • C:\Far2\Documentation\rus\Far.FAQ.a19
Удаляет следующие файлы:
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\moveBookmarks.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\menu.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\organizer.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\tree.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\browserPlacesViews.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\bookmarkProperties.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\controller.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\history-panel.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\editBookmarkOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\treeView.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\fonts.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\cookies.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\main.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\languages.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applicationManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\advanced.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\applications.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\content.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\connection.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\security.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSessionRestore.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs-bindings.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\bookmarksPanel.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Sunflower Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Pie Charts Bkgrd.a19
  • %CommonProgramFiles%\SpeechEngines\Microsoft\TTS\1033\sam.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.a19
  • %ProgramFiles%\FireFox\blocklist.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\sidebarUtils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\openLocation.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\nsContextMenu.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\permissions.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser-tabPreviews.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\aboutCertError.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\migration.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissions.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSyncTabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutSessionRestore.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\browser.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe-ui.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\engineManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\utilityOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\urlbarBindings.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\web-panels.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutPrivateBrowsing.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\aboutCertError.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\subscribe.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\applications.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\places.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\preferences.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\searchbar.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\sanitizeDialog.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\inspector.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\fullscreen-video.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\pageInfo.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\organizer.a19
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\editBookmarkOverlay.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\sb-loader.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\tabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safeMode.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitize.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\privacy.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\permissionsutils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\security.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\sync.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\selectBookmark.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\engineManager.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncQuota.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncNotification.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncSetup.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncUtils.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\searchbarBindings.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\search.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\setDesktopBackground.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncGenericChange.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\syncAddDevice.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\secmod.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\signons.a19
  • <LS_APPDATA>\IconCache.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\webappsstore.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\permissions.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\key3.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\places.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\search.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\prefs.a19
  • <LS_APPDATA>\Microsoft\Windows Media\9.0\WMSDKNS.a19
  • %HOMEPATH%\Templates\winword2.a19
  • %HOMEPATH%\Templates\winword.a19
  • C:\Far2\Addons\README.a19
  • C:\Far2\Documentation\eng\Bug.Report.a19
  • C:\Far2\Documentation\eng\Arc.Support.a19
  • %HOMEPATH%\Templates\excel.a19
  • <LS_APPDATA>\Mozilla\Firefox\Profiles\cwdgt0y8.default\urlclassifier3.a19
  • %HOMEPATH%\Templates\excel4.a19
  • %HOMEPATH%\Templates\quattro.a19
  • %HOMEPATH%\Templates\powerpnt.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\formhistory.a19
  • C:\Documents and Settings\Default User\Templates\excel.a19
  • C:\Documents and Settings\Default User\Local Settings\Application Data\Microsoft\Windows Media\9.0\WMSDKNS.a19
  • C:\Documents and Settings\Default User\Templates\excel4.a19
  • C:\Documents and Settings\Default User\Templates\quattro.a19
  • C:\Documents and Settings\Default User\Templates\powerpnt.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Sunset.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Blue hills.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Water lilies.a19
  • C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
  • %ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\Winter.a19
  • C:\Documents and Settings\Default User\Templates\winword.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\content-prefs.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chromeappsstore.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cookies.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\extensions.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\downloads.a19
  • %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
  • C:\Documents and Settings\Default User\Templates\winword2.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\cert8.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userContent-example.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\chrome\userChrome-example.a19
  • C:\Far2\Documentation\eng\Far.FAQ.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
  • C:\Far2\Plugins\ExtSearch\sources\PLUGIN.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
  • C:\Far2\Plugins\FTP\FtpCmds_rus.a19
  • C:\Far2\Plugins\FTP\FtpCmds.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtRegExp.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtMenu.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearchReg.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearchMix.a19
  • C:\Far2\Plugins\FTP\Notes.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Glacier Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Fiesta Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Leaves Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Nature Bkgrd.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Maize Bkgrd.a19
  • C:\Far2\PluginSDK\Headers.c\farcolor.a19
  • C:\Far2\Plugins\FTP\Notes_rus.a19
  • C:\Far2\PluginSDK\Headers.c\farkeys.a19
  • %CommonProgramFiles%\Microsoft Shared\Stationery\Clear Day Bkgrd.a19
  • C:\Far2\PluginSDK\Headers.c\plugin.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtClipBoard.a19
  • C:\Far2\Documentation\rus\Plugins.Install.a19
  • C:\Far2\Documentation\rus\Far.FAQ.a19
  • C:\Far2\Documentation\rus\Plugins.Review.a19
  • C:\Far2\Plugins\7-Zip\far7z.a19
  • C:\Far2\Documentation\rus\TechInfo.a19
  • C:\Far2\Documentation\eng\Plugins.Review.a19
  • C:\Far2\Documentation\eng\Plugins.Install.a19
  • C:\Far2\Documentation\eng\TechInfo.a19
  • C:\Far2\Documentation\rus\Bug.Report.a19
  • C:\Far2\Documentation\rus\Arc.Support.a19
  • C:\Far2\Plugins\Colorer\catalog.a19
  • C:\Far2\Plugins\ExtSearch\doc\REGEXPS.a19
  • C:\Far2\Plugins\ExtSearch\doc\ENG_READ.a19
  • C:\Far2\Plugins\ExtSearch\doc\RUS_NEWS.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtChCase.a19
  • C:\Far2\Plugins\ExtSearch\doc\RUS_READ.a19
  • C:\Far2\Plugins\Colorer\hrd\catalog-console.a19
  • C:\Far2\Plugins\Colorer\hrc\changes.a19
  • C:\Far2\Plugins\Colorer\hrd\catalog-rgb.a19
  • C:\Far2\Plugins\ExtSearch\doc\ENG_NEWS.a19
  • C:\Far2\Plugins\Colorer\hrd\catalog-text.a19
Подменяет следующие файлы:
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\pageInfo.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\feeds.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\browser.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\subscribe.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabbrowser.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\tabview.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\places.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\sanitizeDialog.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\handlers.ap19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearch.a19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.ap19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.a19
  • C:\Far2\Plugins\ExtSearch\sources\ExtSearch.ap19
  • %APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\sessionstore.a19
  • C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.ap19
  • C:\Documents and Settings\Default User\Application Data\Microsoft\Internet Explorer\brndlog.a19
  • %APPDATA%\Microsoft\Internet Explorer\brndlog.ap19
  • %APPDATA%\Microsoft\Internet Explorer\brndlog.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutHome.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutSyncTabs.a19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.ap19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CLOCALE.ap19
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\aboutDialog.a19
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\CREGEXP.ap19

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке