Trojan.DownLoader22.8530

Техническая информация

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\Help\Tours\htmlTour\MZbsR8beG~~R.cke
%WINDIR%\Help\Tours\htmlTour\xzJqT@7G80.cke
%WINDIR%\yfnK=k%ZjBm.cke
<STUBS_DIR>\syP8vIlz.cke
%WINDIR%\!TOd9qnv.cke
%WINDIR%\Help\Tours\htmlTour\k=U4W~~Ak.cke
%WINDIR%\Help\Tours\htmlTour\)PC1Y%Ty.cke
%WINDIR%\Help\Tours\htmlTour\yz^AT%h.cke
%WINDIR%\Help\Tours\htmlTour\7xDGXvM81S&.cke
%WINDIR%\Help\Tours\htmlTour\r0c9app.cke
C:\Far2\Plugins\FTP\2cO!!IwL.cke
C:\Far2\Plugins\FTP\JEY~8Wn)HZq.cke
C:\Far2\Plugins\ExtSearch\sources\RegExp\n=Cy!=P.cke
C:\Far2\Plugins\ExtSearch\sources\0=3PzJ!.cke
C:\Far2\Plugins\ExtSearch\sources\RegExp\YPkM2QV&@L$.cke
<STUBS_DIR>\6PpovZV.cke
<STUBS_DIR>\@NjEzGw.cke
<STUBS_DIR>\bmfr1KfUJ.cke
C:\Far2\Plugins\FTP\SDTa=E#1A5v.cke
C:\Far2\Plugins\FTP\v2dX7S5oU.cke
%WINDIR%\Help\Tours\htmlTour\D$7eeR4%.cke
%WINDIR%\Help\Tours\htmlTour\=FJLhLKt(B).cke
%WINDIR%\Help\Tours\htmlTour\S4hycXZRbt@b.cke
%WINDIR%\Help\Tours\htmlTour\C#((ePGzUSit.cke
%WINDIR%\Help\Tours\htmlTour\grI^Zd&np.cke
%WINDIR%\Help\Tours\htmlTour\rqwZeQvz.cke
%WINDIR%\Help\Tours\htmlTour\(S8WZelnmHMz.cke
%WINDIR%\Help\Tours\htmlTour\ir30aiU).cke
%WINDIR%\Help\Tours\htmlTour\T4TJcaAh.cke
%WINDIR%\Help\Tours\htmlTour\E$s=fUdLEb.cke
%WINDIR%\Help\Tours\htmlTour\9bN#c@Xs#a)(.cke
%WINDIR%\Help\Tours\htmlTour\tnmvf81V1.cke
%WINDIR%\Help\Tours\htmlTour\1cTcYJ&@)^%^.cke
%WINDIR%\Help\Tours\htmlTour\HN&Qcyvd.cke
%WINDIR%\Help\Tours\htmlTour\PDlfWDnP.cke
%WINDIR%\Help\Tours\htmlTour\J@GDh%7OWI.cke
%WINDIR%\Help\Tours\htmlTour\R3vRbVzAj.cke
%WINDIR%\Help\Tours\htmlTour\B#MndMfjdz.cke
%WINDIR%\Help\Tours\htmlTour\I!Usg@K.cke
%WINDIR%\Help\Tours\htmlTour\Q307aSC.cke
C:\Far2\Plugins\ExtSearch\sources\2ANB75(.cke
%HOMEPATH%\Templates\MMz4DSDP.cke
C:\Far2\Addons\e4AawEfx=.cke
%HOMEPATH%\Templates\EXKpJ@Lc.cke
%HOMEPATH%\Templates\owFFK%%0FR.cke
%HOMEPATH%\Templates\&YQDFJ7x.cke
C:\Far2\Documentation\eng\tjSO%OPBot3W.cke
C:\Far2\Documentation\rus\I9AL^UuzTt.cke
C:\Far2\Documentation\eng\8X$h@U9Y4.cke
C:\Far2\Documentation\eng\#VBn%)m.cke
C:\Far2\Documentation\eng\)Lq2~af.cke
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\NBXNZ~wulwu.cke
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\V)SzerBZeEz.cke
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\6ZNPev77.cke
%APPDATA%\Microsoft\Protect\CREDHIST
%APPDATA%\Microsoft\Crypto\RSA\S-1-5-21-2052111302-484763869-725345543-1003\cb25ad0ac6e3e3b85eb3a23cd7c5d7ac_23ef5514-3059-436f-a4a7-4cefaab20eb1
%APPDATA%\Mozilla\Firefox\Profiles\cwdgt0y8.default\zEdlfJq!m.cke
%HOMEPATH%\Templates\4k3YHBmK.cke
C:\Documents and Settings\Default User\Templates\a^0R!8J.cke
%ALLUSERSPROFILE%\Documents\My Pictures\Sample Pictures\zycwZ7#Ny.cke
C:\Documents and Settings\Default User\Templates\S&$29E5.cke
C:\Far2\Plugins\ExtSearch\doc\H(OMw2ylF.cke
C:\Far2\Plugins\ExtSearch\doc\9j$$s4nahv.cke
C:\Far2\Plugins\ExtSearch\doc\W9=gt8V8UF5E.cke
C:\Far2\Plugins\Colorer\hrd\Ph2mj3#u.cke
C:\Far2\Plugins\ExtSearch\doc\kwmzq@#Ii=.cke
C:\Far2\Plugins\ExtSearch\sources\uvEHwzqUL.cke
C:\Far2\Plugins\ExtSearch\sources\0MRVw&C^5N.cke
C:\Far2\Plugins\ExtSearch\sources\0j2at6NrZOwt.cke
C:\Far2\Plugins\ExtSearch\doc\QLD@n&dO.cke
C:\Far2\Plugins\ExtSearch\sources\BXcuq=7#n).cke
C:\Far2\Plugins\7-Zip\2~OpFVTgVAAk.cke
C:\Far2\Plugins\Colorer\AC(4MgT%.cke
C:\Far2\Documentation\rus\9AR0^jX#D.cke
C:\Far2\Documentation\rus\mlKJ!jln.cke
C:\Far2\Documentation\rus\B~#G#p%PR4zH.cke
C:\Far2\Plugins\Colorer\hrd\y8xCk7wFSy.cke
C:\Far2\Plugins\Colorer\hrd\86roooC7LGt.cke
C:\Far2\Plugins\Colorer\hrc\auto\types\8GGulbN.cke
C:\Far2\Plugins\Colorer\hrc\lc21Nmy.cke
C:\Far2\Plugins\Colorer\hrc\A3jxPtHT3s=.cke