Техническая информация
- '%TEMP%\www.crossfire-megacheat.ru.exe'
- '%TEMP%\1.exe'
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CFD8.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CEBD.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D0B5.tmp
- %APPDATA%\Roaming\Microsoft\Windows\Recent\CustomDestinations\LKNK3PSAP1QZJDSP0BYY.temp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D568.tmp
- %HOMEPATH%\Downloads\en:Zone.Identifier
- %HOMEPATH%\Downloads\download:Zone.Identifier
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CBAB.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD93.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD24.tmp
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\23BUYPX5\background_gradient[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\UEWNTWLX\info_48[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\3U23MFC9\bullet[1]
- %APPDATA%\Roaming\Opera Software\Opera Stable\6B80.tmp
- %TEMP%\etilqs_76d1fhe9fIVJPzx
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\000001.dbtmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\MANIFEST-000001
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\MANIFEST-000002
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\LOG
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\000002.dbtmp
- %TEMP%\etilqs_gI3HWK1voToqz9O
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\23BUYPX5\ErrorPageTemplate[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\UEWNTWLX\navcancl[1]
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\3U23MFC9\errorPageStrings[1]
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\000001.dbtmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\MANIFEST-000001
- %TEMP%\www.crossfire-megacheat.ru.exe
- %TEMP%\1.exe
- %TEMP%\D835.tmp\Action.bat
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\YIF7DGLM\3X9FR39T
- %TEMP%\thisislegitdll.dll
- %APPDATA%\Roaming\Opera Software\Opera Stable\1860.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\History Provider Cache
- %HOMEPATH%\Downloads\280A.tmp
- %TEMP%\etilqs_EdquYDWH003dZWx
- %HOMEPATH%\Downloads\3535.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\000002.dbtmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\MANIFEST-000002
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\LOG
- %TEMP%\etilqs_64CObNw8QT1rAYB
- <LS_APPDATA>\Microsoft\Windows\Temporary Internet Files\Content.IE5\YIF7DGLM\httpErrorPagesScripts[1]
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D0A4.tmp~RFdd0f5.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CFC8.tmp~RFdd049.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CE4F.tmp~RFdcf21.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\MANIFEST-000001
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT~RFde09e.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D557.tmp~RFdd680.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\MANIFEST-000001
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT~RFcf16f.TMP
- %TEMP%\D835.tmp\Action.bat
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD82.tmp~RFdcdf8.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD03.tmp~RFdcd4c.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CB8B.tmp~RFdccc0.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CFC8.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CFC8.tmp~RFdd049.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D0B5.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D0A4.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D0A4.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D0A4.tmp~RFdd0f5.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CEBD.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CE4F.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CE4F.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CE4F.tmp~RFdcf21.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CFD8.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CFC8.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D568.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D557.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\000002.dbtmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT~RFde09e.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\6B80.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Local State
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D557.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\D557.tmp~RFdd680.TMP
- %APPDATA%\Roaming\Microsoft\Windows\Recent\CustomDestinations\LKNK3PSAP1QZJDSP0BYY.temp в %APPDATA%\Roaming\Microsoft\Windows\Recent\CustomDestinations\8548f632abe97aa3.customDestinations-ms
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\000001.dbtmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension State\CURRENT
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD82.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD82.tmp~RFdcdf8.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\1860.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Preferences
- %HOMEPATH%\Downloads\280A.tmp в %HOMEPATH%\Downloads\download.opdownload
- %HOMEPATH%\Downloads\3535.tmp в %HOMEPATH%\Downloads\en.opdownload
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\000001.dbtmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\000002.dbtmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT
- %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT в %APPDATA%\Roaming\Opera Software\Opera Stable\Extension Rules\CURRENT~RFcf16f.TMP
- %HOMEPATH%\Downloads\download.opdownload в %HOMEPATH%\Downloads\download
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD24.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD03.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD03.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD03.tmp~RFdcd4c.TMP
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD93.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CD82.tmp
- %HOMEPATH%\Downloads\en.opdownload в %HOMEPATH%\Downloads\en
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CBAB.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CB8B.tmp
- %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CB8B.tmp в %APPDATA%\Roaming\Opera Software\Opera Stable\Jump List Icons\CB8B.tmp~RFdccc0.TMP
- '93.##8.134.11':80
- 'bi##.#ikimedia.org':80
- 'ap#.###sys.opera.com':443
- 'au######te.geo.opera.com':443
- 'i.##0.ru':80
- 'www.ic#.com':80
- 'cr#####re-megacheat.ru':80
- 'www.go##le.ru':80
- 'si#####ck2.opera.com':80
- bi##.#ikimedia.org/favicon/wikipedia.ico
- i.##0.ru/2011/icons/rambler.ico
- www.ic#.com/en
- 93.##8.134.11/favicon.ico
- si#####ck2.opera.com/?ho###############################################
- cr#####re-megacheat.ru/
- www.go##le.ru/favicon.ico
- si#####ck2.opera.com/?ho##############################################################
- DNS ASK sl####i.yandex.ru
- DNS ASK bi##.#ikimedia.org
- DNS ASK au######te.geo.opera.com
- DNS ASK dn#.##ftncsi.com
- DNS ASK ap#.###sys.opera.com
- DNS ASK i.##0.ru
- DNS ASK www.google.com
- DNS ASK cr#####re-megacheat.ru
- DNS ASK www.ic#.com
- DNS ASK www.go##le.ru
- DNS ASK si#####ck2.opera.com
- ClassName: 'Opera_MessageWindow' WindowName: '%APPDATA%\Roaming\Opera Software\Opera Stable'
- ClassName: 'OleMainThreadWndClass' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebCheckMonitor' WindowName: ''