Техническая информация
Вредоносные функции:
Создает и запускает на исполнение:
- '%TEMP%\mia1\ga.exe' GA_PRVER
- '%TEMP%\mia1\geoloc.exe' ISUS
- '%TEMP%\mia1\ga.exe' GA_WRITEDL
- '%TEMP%\mia251.tmp\WeatherBugSetup.exe' /m="<Полный путь к вирусу>" /k=""
- '%TEMP%\mia1\ga.exe' SOSCHECK
Изменения в файловой системе:
Создает следующие файлы:
- %TEMP%\mia1\license.rtf
- %TEMP%\mia1\licensecheck.dfm
- %TEMP%\mia1\maintenance.dfm
- %TEMP%\mia1\icon.ico
- %TEMP%\mia1\ga.exe.config
- %TEMP%\mia1\geoloc.exe .config
- %TEMP%\mia1\geoloc.htm
- %TEMP%\mia1\registrationwithserial.dfm
- %TEMP%\mia1\startinstallation.dfm
- %TEMP%\mia1\startmenu.dfm
- %TEMP%\mia1\registration.dfm
- %TEMP%\mia1\prereq.dfm
- %TEMP%\mia1\progress.dfm
- %TEMP%\mia1\progressprereq.dfm
- %TEMP%\mia1\finish.dfm
- %TEMP%\mia251.tmp\mia.lib
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\WeatherBug.exe.config
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B16299D3\configuration.json
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\WebResources.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\NLog.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\System.Windows.Interactivity.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\WeatherBugLib.dll
- %TEMP%\mia.tmp
- %TEMP%\mia1\asktoolbar.dfm
- %TEMP%\mia1\destination.dfm
- %TEMP%\mia1\installaware.png
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B16299D3\locations.json
- %TEMP%\mia251.tmp\WeatherBugSetup.res
- %TEMP%\lang.loc
- %TEMP%\mia1\MSICustomActions.dll
- %TEMP%\mia1\mWinRunExec.dll
- %TEMP%\mia1\Offercast2820_WBV7.exe
- %TEMP%\mia1\mMSIExec.dll
- %TEMP%\mia1\mDownExec.dll
- %TEMP%\mia1\mEXEFunc.dll
- %TEMP%\mia1\mFileBagEXE.dll
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\YIF7DGLM\error[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\UEWNTWLX\error[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\23BUYPX5\warning[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\23BUYPX5\jsapi[1]
- %TEMP%\mia1\WeatherBugSetup.msi
- \Device\Mup\BVNSEUHJ*\MAILSLOT\NET\NETLOGON
- %TEMP%\mia1\session.txt
- %TEMP%\mia1\geoloc.exe
- %TEMP%\mia1\update_reboot.dfm
- %TEMP%\mia1\update_setup_account.dfm
- %TEMP%\mia1\update_setup_finish.dfm
- %TEMP%\mia1\update_notify_install.dfm
- %TEMP%\mia1\update_download.dfm
- %TEMP%\mia1\update_install.dfm
- %TEMP%\mia1\update_notify_download.dfm
- %TEMP%\mia1\wizard.dfm
- %TEMP%\mia1\ApnIC.dll
- %TEMP%\mia1\ga.exe
- %TEMP%\mia1\welcome.dfm
- %TEMP%\mia1\update_setup_schedule.dfm
- %TEMP%\mia1\update_setup_welcome.dfm
- %TEMP%\mia1\upgrade_uninstall.dfm
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\Newtonsoft.Json.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\backbone.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\4D8E513\backbone.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\bootstrap.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\backbone.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\88EF8CFE\bootstrap.min.css
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B2890989\qunit.css
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\backbone.analytics.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B16299D3\dWeather.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2F536942\dWeatherUnitTests.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B16299D3\dWeather_dMiniExtensions.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1194B90A\dWeather.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B2735F12\configuration.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\configurationStore.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\dataStore.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\testPage.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\MiniBugIcon.ico
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\GalaSoft.MvvmLight.Extras.WPF4.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\GalaSoft.MvvmLight.WPF4.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\F1B200E5\glyphicons-halflings.png
- %TEMP%\mia251.tmp\WeatherBugSetup.msi
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\background.png
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\F1B200E5\glyphicons-halflings-white.png
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\noconnection.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\runtime.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1194B90A\runtime.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\client.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\layout.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\Microsoft.Practices.ServiceLocation.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\System.Windows.Interactivity.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\GalaSoft.MvvmLight.Extras.WPF4.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\GalaSoft.MvvmLight.WPF4.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\Hardcodet.Wpf.TaskbarNotification.dll
- %TEMP%\mia251.tmp\WeatherBugSetup.exe
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\CustomActions.exe
- %TEMP%\mia251.tmp\OFFLINE\mFileBagIDE.dll\bag\ga.exe
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\WeatherBug.exe
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\Microsoft.Practices.ServiceLocation.dll
- %TEMP%\mia251.tmp\OFFLINE\mMSI.dll\mMSIExec.dll
- %TEMP%\mia251.tmp\OFFLINE\mWinRun.dll\mWinRunExec.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\Microsoft.Maps.MapControl.WPF.dll
- %TEMP%\mia251.tmp\OFFLINE\mDown.dll\mDownExec.dll
- %TEMP%\mia251.tmp\OFFLINE\mIDEFunc.dll\mEXEFunc.dll
- %TEMP%\mia251.tmp\OFFLINE\mFileBagIDE.dll\mFileBagEXE.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\4D8E513\underscore.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\4D8E513\json2.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\locationStore.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\notificationCenter.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\json2.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\D759BF7C\environment.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\jquery.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\4D8E513\jquery.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\timeEventSource.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\76981FF9\timeSpan.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\underscore.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\stacktrace.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\557E91D7\qunit.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\settingsStore.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\D759BF7C\shell.js
Удаляет следующие файлы:
- %TEMP%\mia.tmp
- %TEMP%\lang.loc
Перемещает следующие файлы:
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B16299D3\dWeather.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\B16299D3\dWeather.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B16299D3\dWeather_dMiniExtensions.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\B16299D3\dWeather_dMiniExtensions.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\88EF8CFE\bootstrap.min.css в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\88EF8CFE\bootstrap.min.css
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B16299D3\configuration.json в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\B16299D3\configuration.json
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B2890989\qunit.css в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\B2890989\qunit.css
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\D759BF7C\environment.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\D759BF7C\environment.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B16299D3\locations.json в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\B16299D3\locations.json
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\B2735F12\configuration.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\B2735F12\configuration.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\NLog.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\NLog.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\System.Windows.Interactivity.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\System.Windows.Interactivity.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\Microsoft.Practices.ServiceLocation.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\Microsoft.Practices.ServiceLocation.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\Newtonsoft.Json.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\Newtonsoft.Json.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\WebResources.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\WebResources.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\76981FF9\timeSpan.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\76981FF9\timeSpan.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\WeatherBug.exe в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\WeatherBug.exe
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\WeatherBugLib.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\WeatherBugLib.dll
- %TEMP%\mia251.tmp\OFFLINE\mFileBagIDE.dll\bag\ga.exe в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\mFileBagIDE.dll\bag\ga.exe
- %TEMP%\mia251.tmp\OFFLINE\mFileBagIDE.dll\bag\ga.exe.config в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\mFileBagIDE.dll\bag\ga.exe.config
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\timeEventSource.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\FB6F57A0\timeEventSource.js
- %TEMP%\mia251.tmp\OFFLINE\mDown.dll\mDownExec.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\mDown.dll\mDownExec.dll
- %TEMP%\mia251.tmp\OFFLINE\mMSI.dll\mMSIExec.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\mMSI.dll\mMSIExec.dll
- %TEMP%\mia251.tmp\OFFLINE\mWinRun.dll\mWinRunExec.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\mWinRun.dll\mWinRunExec.dll
- %TEMP%\mia251.tmp\OFFLINE\mFileBagIDE.dll\mFileBagEXE.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\mFileBagIDE.dll\mFileBagEXE.dll
- %TEMP%\mia251.tmp\OFFLINE\mIDEFunc.dll\mEXEFunc.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\mIDEFunc.dll\mEXEFunc.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\F1B200E5\glyphicons-halflings.png в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\F1B200E5\glyphicons-halflings.png
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\configurationStore.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\FB6F57A0\configurationStore.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\D759BF7C\shell.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\D759BF7C\shell.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\F1B200E5\glyphicons-halflings-white.png в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\F1B200E5\glyphicons-halflings-white.png
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\notificationCenter.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\FB6F57A0\notificationCenter.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\settingsStore.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\FB6F57A0\settingsStore.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\dataStore.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\FB6F57A0\dataStore.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\FB6F57A0\locationStore.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\FB6F57A0\locationStore.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\Microsoft.Maps.MapControl.WPF.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\Microsoft.Maps.MapControl.WPF.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\background.png в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1382EDFA\background.png
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\client.html в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1382EDFA\client.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1194B90A\dWeather.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1194B90A\dWeather.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1194B90A\runtime.html в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1194B90A\runtime.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\noconnection.html в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1382EDFA\noconnection.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\runtime.html в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1382EDFA\runtime.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\layout.xml в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1382EDFA\layout.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\MiniBugIcon.ico в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1382EDFA\MiniBugIcon.ico
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\backbone.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\10755C93\backbone.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\bootstrap.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\10755C93\bootstrap.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\backbone.analytics.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\10755C93\backbone.analytics.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\backbone.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\10755C93\backbone.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\stacktrace.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\10755C93\stacktrace.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\underscore.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\10755C93\underscore.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\jquery.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\10755C93\jquery.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\10755C93\json2.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\10755C93\json2.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\4D8E513\underscore.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\4D8E513\underscore.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\557E91D7\qunit.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\557E91D7\qunit.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\4D8E513\jquery.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\4D8E513\jquery.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\4D8E513\json2.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\4D8E513\json2.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\GalaSoft.MvvmLight.WPF4.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\GalaSoft.MvvmLight.WPF4.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\Hardcodet.Wpf.TaskbarNotification.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\Hardcodet.Wpf.TaskbarNotification.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\CustomActions.exe в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\CustomActions.exe
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\609C82D7\GalaSoft.MvvmLight.Extras.WPF4.dll в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\609C82D7\GalaSoft.MvvmLight.Extras.WPF4.dll
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\GalaSoft.MvvmLight.WPF4.xml в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\2AF55881\GalaSoft.MvvmLight.WPF4.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\Microsoft.Practices.ServiceLocation.xml в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\2AF55881\Microsoft.Practices.ServiceLocation.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\1382EDFA\testPage.html в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\1382EDFA\testPage.html
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\GalaSoft.MvvmLight.Extras.WPF4.xml в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\2AF55881\GalaSoft.MvvmLight.Extras.WPF4.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2F536942\dWeatherUnitTests.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\2F536942\dWeatherUnitTests.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\4D8E513\backbone.min.js в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\4D8E513\backbone.min.js
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\System.Windows.Interactivity.xml в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\2AF55881\System.Windows.Interactivity.xml
- %TEMP%\mia251.tmp\OFFLINE\ED87AFBD\2AF55881\WeatherBug.exe.config в C:\ProgramData\{E0A9340B-C01B-42C1-9910-C307D7BE4756}\OFFLINE\ED87AFBD\2AF55881\WeatherBug.exe.config
Сетевая активность:
Подключается к:
- '74.##5.232.51':80
TCP:
Запросы HTTP GET:
- 74.##5.232.51/jsapi
UDP:
- DNS ASK www.google.com
Другое:
Ищет следующие окна:
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'TApplication' WindowName: 'WeatherBugSetup'
