КОРИСТУВАЧАМ

Закрити

Пошук
Пошук

Пошук

Підтримка
Цілодобова підтримка | Правила звернення

Напишіть

Запит через форму

Зателефонуйте

Глобальна підтримка:
+7 (495) 789-45-86

Поширені запитання |  Форум |  Бот самопідтримки Telegram

Ваші запити

  • Всі: -
  • Незакриті: -
  • Останій: -
Створити новий запит Поширені запитання

Зателефонуйте

Глобальна підтримка:
+7 (495) 789-45-86

Зв'яжіться з нами Незакриті запити: 

Профіль

Профіль

RU CN DE EN ES FR IT JP KZ UZ PL BY
Закрити
Сервіси
Сканери
Dr.Web vxCube
Демо
Експертиза ВКІ
Вірусна бібліотека
База знань

Технології

Терміни

Навчання

Міфи

Новини

Trojan.MulDrop21.1327

Добавлен в вирусную базу Dr.Web: 2022-10-17

Описание добавлено:

Technical Information

To ensure autorun and distribution
Modifies the following registry keys
  • [<HKCU>\Software\Classes\emeditor64.txt\shell\open\command] '' = '%LOCALAPPDATA%\Programs\EmEditor\emeditor.exe "%1"'
  • [<HKCU>\Software\Classes\emeditor_workspace64.eeWorkspace\shell\open\command] '' = '%LOCALAPPDATA%\Programs\EmEditor\emedws.exe "%1"'
Modifies file system
Creates the following files
  • %TEMP%\7zipsfx.000\emeditor 21.4.0.exe
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1033\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1033\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1033\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\wordcount.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\wordcomplete.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\webpreview.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\snippets.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\search.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\projects.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\opendocuments.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\htmlbar.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\explorer.dll
  • %LOCALAPPDATA%\programs\emeditor\emedres.dll
  • %LOCALAPPDATA%\programs\emeditor\emeddlgt.dll
  • %LOCALAPPDATA%\programs\emeditor\emeddlgs.dll
  • %LOCALAPPDATA%\programs\emeditor\emedcfg.dll
  • %LOCALAPPDATA%\programs\emeditor\emedcfd.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1033\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1041\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1041\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1041\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1036\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\1036\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\2057\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\2057\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\2057\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\2057\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\2057\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\2057\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1029\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1029\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1029\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1029\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1029\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\1029\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\dictionaries\en_us.aff
  • %LOCALAPPDATA%\programs\emeditor\dictionaries\en_us.dic
  • %LOCALAPPDATA%\programs\emeditor\libhunspell.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1041\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1036\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\eemacro.dll
  • %LOCALAPPDATA%\programs\emeditor\emedws.exe
  • %LOCALAPPDATA%\programs\emeditor\emedtray.exe
  • %LOCALAPPDATA%\programs\emeditor\template.java
  • %LOCALAPPDATA%\programs\emeditor\template.htm
  • %LOCALAPPDATA%\programs\emeditor\template.css
  • %LOCALAPPDATA%\programs\emeditor\template.cpp
  • %LOCALAPPDATA%\programs\emeditor\template.xml
  • %LOCALAPPDATA%\programs\emeditor\eemacro.tlb
  • %LOCALAPPDATA%\programs\emeditor\setupca.dll
  • %LOCALAPPDATA%\programs\emeditor\emeditor.exe
  • %LOCALAPPDATA%\programs\emeditor\dictionaries\uk_ua.dic
  • %LOCALAPPDATA%\programs\emeditor\dictionaries\uk_ua.aff
  • %LOCALAPPDATA%\programs\emeditor\dictionaries\ru_ru.dic
  • %LOCALAPPDATA%\programs\emeditor\dictionaries\ru_ru.aff
  • %LOCALAPPDATA%\programs\emeditor\dictionaries\en_us_ru_ru.dic
  • %LOCALAPPDATA%\programs\emeditor\dictionaries\en_us_ru_ru.aff
  • %TEMP%\is-gfime.tmp\emed\dictionaries\is-875qq.tmp
  • %TEMP%\is-gfime.tmp\emed\dictionaries\is-1813f.tmp
  • %TEMP%\is-gfime.tmp\emed\dictionaries\is-5l5q8.tmp
  • %LOCALAPPDATA%\programs\emeditor\template.js
  • %LOCALAPPDATA%\programs\emeditor\template.jsp
  • %LOCALAPPDATA%\programs\emeditor\template.php
  • %LOCALAPPDATA%\programs\emeditor\template.pl
  • %LOCALAPPDATA%\programs\emeditor\emregexp.dll
  • %LOCALAPPDATA%\programs\emeditor\eeadmin.exe
  • %LOCALAPPDATA%\programs\emeditor\mui\1041\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1041\info.ini
  • %LOCALAPPDATA%\programs\emeditor\plugins\default.eesnip
  • %LOCALAPPDATA%\programs\emeditor\plugins\snippets.ico
  • %LOCALAPPDATA%\programs\emeditor\plugins\src_ctags.txt
  • %LOCALAPPDATA%\programs\emeditor\plugins\copying_ctags.txt
  • %LOCALAPPDATA%\programs\emeditor\mui\1033\info.ini
  • %LOCALAPPDATA%\programs\emeditor\plugins\ctags.exe
  • %LOCALAPPDATA%\programs\emeditor\mui\1033\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\eula_e.rtf
  • %LOCALAPPDATA%\programs\emeditor\eula_j.rtf
  • %LOCALAPPDATA%\programs\emeditor\template.wsf
  • %LOCALAPPDATA%\programs\emeditor\template.vbs
  • %LOCALAPPDATA%\programs\emeditor\template.tex
  • %LOCALAPPDATA%\programs\emeditor\template.rb
  • %LOCALAPPDATA%\programs\emeditor\template.py
  • %LOCALAPPDATA%\programs\emeditor\emedhtml.exe
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1028\snippets_loc.dll
  • %APPDATA%\microsoft\installer\{196c4fda-8e5a-4dbf-9436-ac2337f654f8}\emeditor_org.exe
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1036\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\macros\autocopy.ico
  • %LOCALAPPDATA%\programs\emeditor\macros\autocopy.jsee
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1049\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1049\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1049\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1049\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1049\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\emonig.dll
  • %LOCALAPPDATA%\programs\emeditor\macros\parameterinfo.jsee
  • %LOCALAPPDATA%\programs\emeditor\macros\popbrowsecontext.jsee
  • %LOCALAPPDATA%\programs\emeditor\macros\gotodefinition.jsee
  • %LOCALAPPDATA%\programs\emeditor\macros\symbollist.jsee
  • %LOCALAPPDATA%\programs\emeditor\macros\wraptags.jsee
  • %LOCALAPPDATA%\programs\emeditor\macros\validatexml.jsee
  • %LOCALAPPDATA%\programs\emeditor\macros\sum.jsee
  • %LOCALAPPDATA%\programs\emeditor\eehlpver.exe
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1043\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\macros\gotodefinition.ico
  • %LOCALAPPDATA%\programs\emeditor\macros\parameterinfo.ico
  • %LOCALAPPDATA%\programs\emeditor\macros\popbrowsecontext.ico
  • %LOCALAPPDATA%\programs\emeditor\macros\sum.ico
  • %LOCALAPPDATA%\programs\emeditor\eecommon.dll
  • %LOCALAPPDATA%\programs\emeditor\emuchardet.dll
  • %LOCALAPPDATA%\programs\emeditor\emeduwp.dll
  • %LOCALAPPDATA%\programs\emeditor\vcruntime140_1.dll
  • %LOCALAPPDATA%\programs\emeditor\vcruntime140.dll
  • %LOCALAPPDATA%\programs\emeditor\vccorlib140.dll
  • %LOCALAPPDATA%\programs\emeditor\msvcp140.dll
  • %LOCALAPPDATA%\programs\emeditor\thirdpartylicenses
  • %LOCALAPPDATA%\programs\emeditor\ee512.dll
  • %LOCALAPPDATA%\programs\emeditor\template.json
  • %LOCALAPPDATA%\programs\emeditor\ee256.dll
  • %LOCALAPPDATA%\programs\emeditor\ee128.dll
  • %LOCALAPPDATA%\programs\emeditor\htmlvalidator\css-html-validator-x64.dll
  • %LOCALAPPDATA%\programs\emeditor\htmlvalidator\htmlvalv190.cfg
  • %LOCALAPPDATA%\programs\emeditor\macros\iptip.jsee
  • %LOCALAPPDATA%\programs\emeditor\macros\wraptags.ico
  • %LOCALAPPDATA%\programs\emeditor\macros\validatexml.ico
  • %LOCALAPPDATA%\programs\emeditor\macros\symbollist.ico
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1036\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\dictionaries\is-bcujl.tmp
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1043\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1043\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1031\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1031\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1031\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\1031\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1040\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1040\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1040\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1040\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1040\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\1040\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1049\info.ini
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\3082\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\3082\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\3082\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\3082\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\3082\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\3082\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1031\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1031\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1042\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\1042\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1043\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\emtoast.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\2052\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\2052\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\2052\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\2052\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\2052\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\2052\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1036\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1028\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1028\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1028\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1028\info.ini
  • %LOCALAPPDATA%\programs\emeditor\mui\1028\emedloc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1042\wordcomplete_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1042\snippets_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1042\projects_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1042\htmlbar_loc.dll
  • %LOCALAPPDATA%\programs\emeditor\mui\1043\info.ini
  • %LOCALAPPDATA%\programs\emeditor\plugins\mui\1043\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\dictionaries\is-p2jhd.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\is-tblae.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-gphmu.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-gss98.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-eghq5.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-tm56j.tmp
  • %TEMP%\is-gfime.tmp\emed\htmlvalidator\is-5jjen.tmp
  • %TEMP%\is-gfime.tmp\emed\htmlvalidator\is-kblg7.tmp
  • %TEMP%\is-gfime.tmp\emed\dictionaries\is-980ui.tmp
  • %TEMP%\is-gfime.tmp\emed\dictionaries\is-c6gks.tmp
  • %TEMP%\is-gfime.tmp\emed\is-vjpvp.tmp
  • %TEMP%\is-gfime.tmp\emed\is-9b9ik.tmp
  • %TEMP%\is-gfime.tmp\emed\is-efiur.tmp
  • %TEMP%\is-gfime.tmp\emed\is-r3lon.tmp
  • %TEMP%\is-gfime.tmp\emed\is-r9oob.tmp
  • %TEMP%\is-gfime.tmp\emed\is-s1qpn.tmp
  • %TEMP%\is-gfime.tmp\emed\is-mod38.tmp
  • %TEMP%\is-gfime.tmp\emed\is-4mqdd.tmp
  • %TEMP%\is-gfime.tmp\emed\is-cofam.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-rea6l.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-l4fdd.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-ir78g.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-4lre5.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1036\is-pm2jh.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1033\is-46uo2.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1033\is-1gt07.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1031\is-12umg.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1031\is-gtbtq.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1029\is-50414.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1029\is-ihe3e.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1028\is-3mr2u.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-i5b08.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1028\is-v1g6g.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-s32kl.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-apd8j.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-8cntr.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-e9jon.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-nlve5.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-0o1cm.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-12go2.tmp
  • %TEMP%\is-gfime.tmp\emed\macros\is-fdp1p.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1036\is-gi5i1.tmp
  • %TEMP%\is-gfime.tmp\emed\is-l212q.tmp
  • %TEMP%\is-gfime.tmp\emed\is-s25o2.tmp
  • %TEMP%\is-gfime.tmp\emed\is-kkr26.tmp
  • %TEMP%\is-gfime.tmp\emed\is-1t0ed.tmp
  • %TEMP%\is-gfime.tmp\emed\is-uui1g.tmp
  • %TEMP%\is-gfime.tmp\emed\is-l6spv.tmp
  • %TEMP%\is-gfime.tmp\emed\is-8991n.tmp
  • %TEMP%\is-gfime.tmp\emed\is-i42un.tmp
  • %TEMP%\is-gfime.tmp\emed\is-h3qiv.tmp
  • %TEMP%\is-gfime.tmp\emed\is-7bffl.tmp
  • %TEMP%\is-gfime.tmp\emed\is-20mil.tmp
  • %TEMP%\is-gfime.tmp\emed\is-663p3.tmp
  • %TEMP%\is-gfime.tmp\wizardform.bitmapimage1.bmp
  • %TEMP%\is-gfime.tmp\metroblue.vsf
  • %TEMP%\is-gfime.tmp\vclstylesinno.dll
  • %TEMP%\is-gfime.tmp\istask.dll
  • %TEMP%\is-gfime.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-gfime.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-gfime.tmp\_isetup\_regdll.tmp
  • %TEMP%\is-17pif.tmp\emeditor 21.4.0.tmp
  • %TEMP%\is-gfime.tmp\emed\is-bd5j5.tmp
  • %TEMP%\is-gfime.tmp\emed\is-61p07.tmp
  • %TEMP%\is-gfime.tmp\emed\is-5p2bp.tmp
  • %TEMP%\is-gfime.tmp\emed\is-vh2ot.tmp
  • %TEMP%\is-gfime.tmp\emed\is-n2jv2.tmp
  • %TEMP%\is-gfime.tmp\emed\is-c66dh.tmp
  • %TEMP%\is-gfime.tmp\emed\is-cq4q9.tmp
  • %TEMP%\is-gfime.tmp\emed\is-qpapl.tmp
  • %TEMP%\is-gfime.tmp\emed\is-oikjp.tmp
  • %TEMP%\is-gfime.tmp\emed\is-jrdns.tmp
  • %TEMP%\is-gfime.tmp\emed\is-2bfcu.tmp
  • %TEMP%\is-gfime.tmp\emed\is-fgdeq.tmp
  • %TEMP%\is-gfime.tmp\emed\is-33hfb.tmp
  • %TEMP%\is-gfime.tmp\emed\is-rqnq7.tmp
  • %TEMP%\is-gfime.tmp\emed\is-pbn5e.tmp
  • %TEMP%\is-gfime.tmp\emed\is-r87em.tmp
  • %TEMP%\is-gfime.tmp\emed\is-frfvj.tmp
  • %TEMP%\is-gfime.tmp\emed\is-jh0g7.tmp
  • %TEMP%\is-gfime.tmp\emed\is-dmn30.tmp
  • %TEMP%\is-gfime.tmp\emed\is-5t2vk.tmp
  • %TEMP%\is-gfime.tmp\emed\is-con56.tmp
  • %TEMP%\is-gfime.tmp\emed\is-0m4qo.tmp
  • %TEMP%\is-gfime.tmp\emed\is-uard2.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\is-b0gap.tmp
  • %TEMP%\is-gfime.tmp\emed\is-mf6oh.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1041\is-huerb.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\is-3aons.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\is-88rlo.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\is-8qe2v.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\is-ep872.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\is-6s9tu.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\is-hjtni.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\is-jfpnu.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\is-bkoa8.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\is-u56uc.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\is-a14re.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\is-k1smt.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\is-r58il.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\is-atm9e.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\is-icn4l.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\is-0s9q5.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\is-fgr5g.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\is-me3jd.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\is-11fnq.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\is-ki71o.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\is-3jp6o.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\is-msfvv.tmp
  • %TEMP%\is-gfime.tmp\emed\is-ps7hh.tmp
  • %TEMP%\is-gfime.tmp\emed\is-lb2j5.tmp
  • %TEMP%\is-gfime.tmp\emed\is-5hr4o.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\is-7f3i4.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\is-5lnhk.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\is-3105c.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\is-2obej.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\is-71vu9.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\is-c4d1a.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\is-eqqi9.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\is-t4dti.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\is-i9489.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\is-6mgll.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\is-qj7k6.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\is-keddu.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\is-gknfb.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\is-um023.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\is-vklv9.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1040\is-errlr.tmp
  • %TEMP%\is-gfime.tmp\emed\dictionaries\is-cnb7p.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\is-2l5vt.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\is-prls1.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-ka5f4.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-k0974.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-aqls6.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-ocb3l.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\3082\is-pvvij.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\3082\is-sl417.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\2057\is-m1cbj.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\2057\is-p84uh.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\2052\is-hi2jp.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\2052\is-bhm4f.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1049\is-uv5cr.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1049\is-r7406.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1043\is-q7mvt.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1043\is-h3cd3.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1042\is-o21v6.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1042\is-km0er.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1041\is-neco7.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-iq4d9.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-80vjb.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-5dhtu.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-jk9g3.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\is-d9ko2.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\is-gcqae.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\is-7ec3i.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\is-80c91.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\is-3bpcp.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\is-8e5vv.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\is-u98t8.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\is-geah5.tmp
  • %TEMP%\is-gfime.tmp\emed\mui\1040\is-leakp.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\is-m8frp.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\is-jkoud.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\is-ijgh6.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-f47cd.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-2pqp3.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-uukg9.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-391hc.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-j3bpr.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\is-g2it6.tmp
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\is-141kh.tmp
  • %APPDATA%\microsoft\windows\start menu\programs\emeditor.lnk
Deletes the following files
  • %TEMP%\is-gfime.tmp\emed\ee128.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\3082\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\snippets.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\copying_ctags.txt
  • %TEMP%\is-gfime.tmp\emed\plugins\ctags.exe
  • %TEMP%\is-gfime.tmp\emed\plugins\default.eesnip
  • %TEMP%\is-gfime.tmp\emed\plugins\explorer.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\htmlbar.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\opendocuments.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\projects.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\src_ctags.txt
  • %TEMP%\is-gfime.tmp\emed\plugins\webpreview.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\wordcomplete.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\wordcount.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\search.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\snippets.ico
  • %TEMP%\is-gfime.tmp\emed\mui\3082\info.ini
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\eehlpver.exe
  • %TEMP%\is-gfime.tmp\emed\emtoast.dll
  • %TEMP%\is-gfime.tmp\emed\setup.msi
  • %TEMP%\is-gfime.tmp\emed\setupca.dll
  • %TEMP%\is-gfime.tmp\emed\dictionaries\en_us_ru_ru.aff
  • %TEMP%\is-gfime.tmp\emed\dictionaries\en_us_ru_ru.dic
  • %TEMP%\is-gfime.tmp\emed\dictionaries\ru_ru.aff
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\dictionaries\ru_ru.dic
  • %TEMP%\is-gfime.tmp\istask.dll
  • %TEMP%\is-gfime.tmp\metroblue.vsf
  • %TEMP%\is-gfime.tmp\vclstylesinno.dll
  • %TEMP%\is-gfime.tmp\wizardform.bitmapimage1.bmp
  • %TEMP%\is-gfime.tmp\_isetup\_regdll.tmp
  • %TEMP%\is-gfime.tmp\_isetup\_setup64.tmp
  • %TEMP%\is-gfime.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-gfime.tmp\emed\dictionaries\uk_ua.aff
  • %TEMP%\is-gfime.tmp\emed\dictionaries\uk_ua.dic
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\projects_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\snippets_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\wordcomplete_loc.dll
  • %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\htmlbar_loc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\2057\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\2057\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\2052\info.ini
  • %TEMP%\is-gfime.tmp\emed\msvcp140.dll
  • %TEMP%\is-gfime.tmp\emed\template.cpp
  • %TEMP%\is-gfime.tmp\emed\template.css
  • %TEMP%\is-gfime.tmp\emed\template.htm
  • %TEMP%\is-gfime.tmp\emed\template.java
  • %TEMP%\is-gfime.tmp\emed\template.js
  • %TEMP%\is-gfime.tmp\emed\template.json
  • %TEMP%\is-gfime.tmp\emed\eula_j.rtf
  • %TEMP%\is-gfime.tmp\emed\vccorlib140.dll
  • %TEMP%\is-gfime.tmp\emed\eula_e.rtf
  • %TEMP%\is-gfime.tmp\emed\template.py
  • %TEMP%\is-gfime.tmp\emed\template.rb
  • %TEMP%\is-gfime.tmp\emed\template.tex
  • %TEMP%\is-gfime.tmp\emed\template.vbs
  • %TEMP%\is-gfime.tmp\emed\template.wsf
  • %TEMP%\is-gfime.tmp\emed\template.xml
  • %TEMP%\is-gfime.tmp\emed\thirdpartylicenses
  • %TEMP%\is-gfime.tmp\emed\template.php
  • %TEMP%\is-gfime.tmp\emed\template.jsp
  • %TEMP%\is-gfime.tmp\emed\template.pl
  • %TEMP%\is-gfime.tmp\emed\emregexp.dll
  • %TEMP%\is-gfime.tmp\emed\emeddlgt.dll
  • %TEMP%\is-gfime.tmp\emed\ee512.dll
  • %TEMP%\is-gfime.tmp\emed\eeadmin.exe
  • %TEMP%\is-gfime.tmp\emed\eecommon.dll
  • %TEMP%\is-gfime.tmp\emed\eeinst.exe
  • %TEMP%\is-gfime.tmp\emed\eemacro.dll
  • %TEMP%\is-gfime.tmp\emed\eemacro.tlb
  • %TEMP%\is-gfime.tmp\emed\emedcfd.dll
  • %TEMP%\is-gfime.tmp\emed\emuchardet.dll
  • %TEMP%\is-gfime.tmp\emed\vcruntime140.dll
  • %TEMP%\is-gfime.tmp\emed\ee256.dll
  • %TEMP%\is-gfime.tmp\emed\emedhtml.exe
  • %TEMP%\is-gfime.tmp\emed\emeditor.exe
  • %TEMP%\is-gfime.tmp\emed\emedres.dll
  • %TEMP%\is-gfime.tmp\emed\emedtray.exe
  • %TEMP%\is-gfime.tmp\emed\emeduwp.dll
  • %TEMP%\is-gfime.tmp\emed\emedws.exe
  • %TEMP%\is-gfime.tmp\emed\emonig.dll
  • %TEMP%\is-gfime.tmp\emed\emeddlgs.dll
  • %TEMP%\is-gfime.tmp\emed\emedcfg.dll
  • %TEMP%\is-gfime.tmp\emed\libhunspell.dll
  • %TEMP%\is-gfime.tmp\emed\vcruntime140_1.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1029\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\1031\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\1033\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1033\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\1036\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1036\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\1040\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1029\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1028\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1031\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1040\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\1042\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\1043\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1043\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\1049\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1049\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\2052\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1041\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1041\info.ini
  • %TEMP%\is-gfime.tmp\emed\mui\1042\emedloc.dll
  • %TEMP%\is-gfime.tmp\emed\mui\1028\info.ini
  • %TEMP%\is-gfime.tmp\emed\macros\wraptags.jsee
  • %TEMP%\is-gfime.tmp\emed\dictionaries\en_us.aff
  • %TEMP%\is-gfime.tmp\emed\htmlvalidator\css-html-validator-x64.dll
  • %TEMP%\is-gfime.tmp\emed\htmlvalidator\htmlvalv190.cfg
  • %TEMP%\is-gfime.tmp\emed\macros\autocopy.ico
  • %TEMP%\is-gfime.tmp\emed\macros\autocopy.jsee
  • %TEMP%\is-gfime.tmp\emed\macros\gotodefinition.ico
  • %TEMP%\is-gfime.tmp\emed\macros\gotodefinition.jsee
  • %TEMP%\is-gfime.tmp\emed\macros\iptip.jsee
  • %TEMP%\is-gfime.tmp\emed\macros\parameterinfo.ico
  • %TEMP%\is-gfime.tmp\emed\dictionaries\en_us.dic
  • %TEMP%\is-gfime.tmp\emed\macros\parameterinfo.jsee
  • %TEMP%\is-gfime.tmp\emed\macros\popbrowsecontext.jsee
  • %TEMP%\is-gfime.tmp\emed\macros\sum.ico
  • %TEMP%\is-gfime.tmp\emed\macros\sum.jsee
  • %TEMP%\is-gfime.tmp\emed\macros\symbollist.ico
  • %TEMP%\is-gfime.tmp\emed\macros\symbollist.jsee
  • %TEMP%\is-gfime.tmp\emed\macros\validatexml.ico
  • %TEMP%\is-gfime.tmp\emed\macros\validatexml.jsee
  • %TEMP%\is-gfime.tmp\emed\macros\wraptags.ico
  • %TEMP%\is-gfime.tmp\emed\macros\popbrowsecontext.ico
  • %TEMP%\is-17pif.tmp\emeditor 21.4.0.tmp
  • %TEMP%\7zipsfx.000\emeditor 21.4.0.exe
Moves the following files
  • from %TEMP%\is-gfime.tmp\emed\is-663p3.tmp to %TEMP%\is-gfime.tmp\emed\ee128.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\is-jkoud.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\is-b0gap.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\is-m8frp.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\is-geah5.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\is-u98t8.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\is-8e5vv.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\is-3bpcp.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1029\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\is-80c91.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\is-7ec3i.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\is-gcqae.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\is-d9ko2.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1031\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\is-141kh.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\is-prls1.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\is-2l5vt.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\is-tblae.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1033\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\is-me3jd.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\is-fgr5g.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\is-ijgh6.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1028\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\is-0s9q5.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-f47cd.tmp to %TEMP%\is-gfime.tmp\emed\plugins\wordcount.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-uukg9.tmp to %TEMP%\is-gfime.tmp\emed\plugins\webpreview.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\2052\is-bhm4f.tmp to %TEMP%\is-gfime.tmp\emed\mui\2052\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\2052\is-hi2jp.tmp to %TEMP%\is-gfime.tmp\emed\mui\2052\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\2057\is-p84uh.tmp to %TEMP%\is-gfime.tmp\emed\mui\2057\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\2057\is-m1cbj.tmp to %TEMP%\is-gfime.tmp\emed\mui\2057\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\3082\is-sl417.tmp to %TEMP%\is-gfime.tmp\emed\mui\3082\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\3082\is-pvvij.tmp to %TEMP%\is-gfime.tmp\emed\mui\3082\info.ini
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-ocb3l.tmp to %TEMP%\is-gfime.tmp\emed\plugins\copying_ctags.txt
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-aqls6.tmp to %TEMP%\is-gfime.tmp\emed\plugins\ctags.exe
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-k0974.tmp to %TEMP%\is-gfime.tmp\emed\plugins\default.eesnip
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-ka5f4.tmp to %TEMP%\is-gfime.tmp\emed\plugins\explorer.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-iq4d9.tmp to %TEMP%\is-gfime.tmp\emed\plugins\htmlbar.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-80vjb.tmp to %TEMP%\is-gfime.tmp\emed\plugins\opendocuments.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-5dhtu.tmp to %TEMP%\is-gfime.tmp\emed\plugins\projects.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-jk9g3.tmp to %TEMP%\is-gfime.tmp\emed\plugins\search.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-g2it6.tmp to %TEMP%\is-gfime.tmp\emed\plugins\snippets.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-j3bpr.tmp to %TEMP%\is-gfime.tmp\emed\plugins\snippets.ico
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-391hc.tmp to %TEMP%\is-gfime.tmp\emed\plugins\src_ctags.txt
  • from %TEMP%\is-gfime.tmp\emed\plugins\is-2pqp3.tmp to %TEMP%\is-gfime.tmp\emed\plugins\wordcomplete.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\is-keddu.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\dictionaries\is-1813f.tmp to %TEMP%\is-gfime.tmp\emed\dictionaries\uk_ua.aff
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\is-r58il.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\is-i9489.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\is-t4dti.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\is-c4d1a.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\is-eqqi9.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\is-71vu9.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\2057\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\is-2obej.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\is-3105c.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\is-5lnhk.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\is-7f3i4.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\3082\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\is-5hr4o.tmp to %TEMP%\is-gfime.tmp\emed\eehlpver.exe
  • from %TEMP%\is-gfime.tmp\emed\is-lb2j5.tmp to %TEMP%\is-gfime.tmp\emed\emtoast.dll
  • from %TEMP%\is-gfime.tmp\emed\is-ps7hh.tmp to %TEMP%\is-gfime.tmp\emed\setup.msi
  • from %TEMP%\is-gfime.tmp\emed\is-mf6oh.tmp to %TEMP%\is-gfime.tmp\emed\setupca.dll
  • from %TEMP%\is-gfime.tmp\emed\dictionaries\is-cnb7p.tmp to %TEMP%\is-gfime.tmp\emed\dictionaries\en_us_ru_ru.aff
  • from %TEMP%\is-gfime.tmp\emed\dictionaries\is-p2jhd.tmp to %TEMP%\is-gfime.tmp\emed\dictionaries\en_us_ru_ru.dic
  • from %TEMP%\is-gfime.tmp\emed\dictionaries\is-bcujl.tmp to %TEMP%\is-gfime.tmp\emed\dictionaries\ru_ru.aff
  • from %TEMP%\is-gfime.tmp\emed\dictionaries\is-5l5q8.tmp to %TEMP%\is-gfime.tmp\emed\dictionaries\ru_ru.dic
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\is-6mgll.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1049\is-uv5cr.tmp to %TEMP%\is-gfime.tmp\emed\mui\1049\info.ini
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\is-qj7k6.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\2052\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\is-gknfb.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\is-k1smt.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\is-a14re.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\is-u56uc.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\is-bkoa8.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\is-jfpnu.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\is-hjtni.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1041\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\is-6s9tu.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\is-ep872.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\is-8qe2v.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\is-88rlo.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1042\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\is-3aons.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\is-11fnq.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\is-ki71o.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\is-3jp6o.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1043\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\is-msfvv.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\is-vklv9.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\projects_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\is-um023.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1049\snippets_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\is-icn4l.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1036\wordcomplete_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\is-atm9e.tmp to %TEMP%\is-gfime.tmp\emed\plugins\mui\1040\htmlbar_loc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1049\is-r7406.tmp to %TEMP%\is-gfime.tmp\emed\mui\1049\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\is-efiur.tmp to %TEMP%\is-gfime.tmp\emed\vccorlib140.dll
  • from %TEMP%\is-gfime.tmp\emed\is-rqnq7.tmp to %TEMP%\is-gfime.tmp\emed\eula_j.rtf
  • from %TEMP%\is-gfime.tmp\emed\is-fgdeq.tmp to %TEMP%\is-gfime.tmp\emed\libhunspell.dll
  • from %TEMP%\is-gfime.tmp\emed\is-2bfcu.tmp to %TEMP%\is-gfime.tmp\emed\msvcp140.dll
  • from %TEMP%\is-gfime.tmp\emed\is-jrdns.tmp to %TEMP%\is-gfime.tmp\emed\template.cpp
  • from %TEMP%\is-gfime.tmp\emed\is-oikjp.tmp to %TEMP%\is-gfime.tmp\emed\template.css
  • from %TEMP%\is-gfime.tmp\emed\is-qpapl.tmp to %TEMP%\is-gfime.tmp\emed\template.htm
  • from %TEMP%\is-gfime.tmp\emed\is-cq4q9.tmp to %TEMP%\is-gfime.tmp\emed\template.java
  • from %TEMP%\is-gfime.tmp\emed\is-c66dh.tmp to %TEMP%\is-gfime.tmp\emed\template.js
  • from %TEMP%\is-gfime.tmp\emed\is-n2jv2.tmp to %TEMP%\is-gfime.tmp\emed\template.json
  • from %TEMP%\is-gfime.tmp\emed\is-uard2.tmp to %TEMP%\is-gfime.tmp\emed\template.jsp
  • from %TEMP%\is-gfime.tmp\emed\is-kkr26.tmp to %TEMP%\is-gfime.tmp\emed\template.php
  • from %TEMP%\is-gfime.tmp\emed\is-s25o2.tmp to %TEMP%\is-gfime.tmp\emed\template.pl
  • from %TEMP%\is-gfime.tmp\emed\is-l212q.tmp to %TEMP%\is-gfime.tmp\emed\template.py
  • from %TEMP%\is-gfime.tmp\emed\is-cofam.tmp to %TEMP%\is-gfime.tmp\emed\template.rb
  • from %TEMP%\is-gfime.tmp\emed\is-4mqdd.tmp to %TEMP%\is-gfime.tmp\emed\template.tex
  • from %TEMP%\is-gfime.tmp\emed\is-mod38.tmp to %TEMP%\is-gfime.tmp\emed\template.vbs
  • from %TEMP%\is-gfime.tmp\emed\is-s1qpn.tmp to %TEMP%\is-gfime.tmp\emed\template.wsf
  • from %TEMP%\is-gfime.tmp\emed\is-33hfb.tmp to %TEMP%\is-gfime.tmp\emed\eula_e.rtf
  • from %TEMP%\is-gfime.tmp\emed\is-r9oob.tmp to %TEMP%\is-gfime.tmp\emed\template.xml
  • from %TEMP%\is-gfime.tmp\emed\is-pbn5e.tmp to %TEMP%\is-gfime.tmp\emed\emuchardet.dll
  • from %TEMP%\is-gfime.tmp\emed\is-frfvj.tmp to %TEMP%\is-gfime.tmp\emed\emonig.dll
  • from %TEMP%\is-gfime.tmp\emed\is-20mil.tmp to %TEMP%\is-gfime.tmp\emed\ee256.dll
  • from %TEMP%\is-gfime.tmp\emed\is-7bffl.tmp to %TEMP%\is-gfime.tmp\emed\ee512.dll
  • from %TEMP%\is-gfime.tmp\emed\is-h3qiv.tmp to %TEMP%\is-gfime.tmp\emed\eeadmin.exe
  • from %TEMP%\is-gfime.tmp\emed\is-i42un.tmp to %TEMP%\is-gfime.tmp\emed\eecommon.dll
  • from %TEMP%\is-gfime.tmp\emed\is-8991n.tmp to %TEMP%\is-gfime.tmp\emed\eeinst.exe
  • from %TEMP%\is-gfime.tmp\emed\is-l6spv.tmp to %TEMP%\is-gfime.tmp\emed\eemacro.dll
  • from %TEMP%\is-gfime.tmp\emed\is-uui1g.tmp to %TEMP%\is-gfime.tmp\emed\eemacro.tlb
  • from %TEMP%\is-gfime.tmp\emed\is-1t0ed.tmp to %TEMP%\is-gfime.tmp\emed\emedcfd.dll
  • from %TEMP%\is-gfime.tmp\emed\is-bd5j5.tmp to %TEMP%\is-gfime.tmp\emed\emedcfg.dll
  • from %TEMP%\is-gfime.tmp\emed\is-61p07.tmp to %TEMP%\is-gfime.tmp\emed\emeddlgs.dll
  • from %TEMP%\is-gfime.tmp\emed\is-5p2bp.tmp to %TEMP%\is-gfime.tmp\emed\emeddlgt.dll
  • from %TEMP%\is-gfime.tmp\emed\is-vh2ot.tmp to %TEMP%\is-gfime.tmp\emed\emedhtml.exe
  • from %TEMP%\is-gfime.tmp\emed\is-0m4qo.tmp to %TEMP%\is-gfime.tmp\emed\emeditor.exe
  • from %TEMP%\is-gfime.tmp\emed\is-con56.tmp to %TEMP%\is-gfime.tmp\emed\emedres.dll
  • from %TEMP%\is-gfime.tmp\emed\is-5t2vk.tmp to %TEMP%\is-gfime.tmp\emed\emedtray.exe
  • from %TEMP%\is-gfime.tmp\emed\is-dmn30.tmp to %TEMP%\is-gfime.tmp\emed\emeduwp.dll
  • from %TEMP%\is-gfime.tmp\emed\is-jh0g7.tmp to %TEMP%\is-gfime.tmp\emed\emedws.exe
  • from %TEMP%\is-gfime.tmp\emed\is-r87em.tmp to %TEMP%\is-gfime.tmp\emed\emregexp.dll
  • from %TEMP%\is-gfime.tmp\emed\macros\is-8cntr.tmp to %TEMP%\is-gfime.tmp\emed\macros\validatexml.ico
  • from %TEMP%\is-gfime.tmp\emed\mui\1043\is-h3cd3.tmp to %TEMP%\is-gfime.tmp\emed\mui\1043\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\is-9b9ik.tmp to %TEMP%\is-gfime.tmp\emed\vcruntime140.dll
  • from %TEMP%\is-gfime.tmp\emed\macros\is-i5b08.tmp to %TEMP%\is-gfime.tmp\emed\macros\wraptags.jsee
  • from %TEMP%\is-gfime.tmp\emed\mui\1028\is-v1g6g.tmp to %TEMP%\is-gfime.tmp\emed\mui\1028\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1028\is-3mr2u.tmp to %TEMP%\is-gfime.tmp\emed\mui\1028\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\1029\is-ihe3e.tmp to %TEMP%\is-gfime.tmp\emed\mui\1029\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1029\is-50414.tmp to %TEMP%\is-gfime.tmp\emed\mui\1029\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\1031\is-gtbtq.tmp to %TEMP%\is-gfime.tmp\emed\mui\1031\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1031\is-12umg.tmp to %TEMP%\is-gfime.tmp\emed\mui\1031\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\1033\is-1gt07.tmp to %TEMP%\is-gfime.tmp\emed\mui\1033\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1033\is-46uo2.tmp to %TEMP%\is-gfime.tmp\emed\mui\1033\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\1036\is-pm2jh.tmp to %TEMP%\is-gfime.tmp\emed\mui\1036\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1036\is-gi5i1.tmp to %TEMP%\is-gfime.tmp\emed\mui\1036\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\1040\is-leakp.tmp to %TEMP%\is-gfime.tmp\emed\mui\1040\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1040\is-errlr.tmp to %TEMP%\is-gfime.tmp\emed\mui\1040\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\1041\is-huerb.tmp to %TEMP%\is-gfime.tmp\emed\mui\1041\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1041\is-neco7.tmp to %TEMP%\is-gfime.tmp\emed\mui\1041\info.ini
  • from %TEMP%\is-gfime.tmp\emed\mui\1042\is-km0er.tmp to %TEMP%\is-gfime.tmp\emed\mui\1042\emedloc.dll
  • from %TEMP%\is-gfime.tmp\emed\mui\1042\is-o21v6.tmp to %TEMP%\is-gfime.tmp\emed\mui\1042\info.ini
  • from %TEMP%\is-gfime.tmp\emed\macros\is-s32kl.tmp to %TEMP%\is-gfime.tmp\emed\macros\wraptags.ico
  • from %TEMP%\is-gfime.tmp\emed\mui\1043\is-q7mvt.tmp to %TEMP%\is-gfime.tmp\emed\mui\1043\info.ini
  • from %TEMP%\is-gfime.tmp\emed\macros\is-apd8j.tmp to %TEMP%\is-gfime.tmp\emed\macros\validatexml.jsee
  • from %TEMP%\is-gfime.tmp\emed\macros\is-e9jon.tmp to %TEMP%\is-gfime.tmp\emed\macros\symbollist.jsee
  • from %TEMP%\is-gfime.tmp\emed\is-vjpvp.tmp to %TEMP%\is-gfime.tmp\emed\vcruntime140_1.dll
  • from %TEMP%\is-gfime.tmp\emed\dictionaries\is-c6gks.tmp to %TEMP%\is-gfime.tmp\emed\dictionaries\en_us.aff
  • from %TEMP%\is-gfime.tmp\emed\dictionaries\is-980ui.tmp to %TEMP%\is-gfime.tmp\emed\dictionaries\en_us.dic
  • from %TEMP%\is-gfime.tmp\emed\htmlvalidator\is-kblg7.tmp to %TEMP%\is-gfime.tmp\emed\htmlvalidator\css-html-validator-x64.dll
  • from %TEMP%\is-gfime.tmp\emed\htmlvalidator\is-5jjen.tmp to %TEMP%\is-gfime.tmp\emed\htmlvalidator\htmlvalv190.cfg
  • from %TEMP%\is-gfime.tmp\emed\macros\is-tm56j.tmp to %TEMP%\is-gfime.tmp\emed\macros\autocopy.ico
  • from %TEMP%\is-gfime.tmp\emed\macros\is-eghq5.tmp to %TEMP%\is-gfime.tmp\emed\macros\autocopy.jsee
  • from %TEMP%\is-gfime.tmp\emed\macros\is-gss98.tmp to %TEMP%\is-gfime.tmp\emed\macros\gotodefinition.ico
  • from %TEMP%\is-gfime.tmp\emed\macros\is-gphmu.tmp to %TEMP%\is-gfime.tmp\emed\macros\gotodefinition.jsee
  • from %TEMP%\is-gfime.tmp\emed\macros\is-rea6l.tmp to %TEMP%\is-gfime.tmp\emed\macros\iptip.jsee
  • from %TEMP%\is-gfime.tmp\emed\macros\is-l4fdd.tmp to %TEMP%\is-gfime.tmp\emed\macros\parameterinfo.ico
  • from %TEMP%\is-gfime.tmp\emed\macros\is-ir78g.tmp to %TEMP%\is-gfime.tmp\emed\macros\parameterinfo.jsee
  • from %TEMP%\is-gfime.tmp\emed\macros\is-4lre5.tmp to %TEMP%\is-gfime.tmp\emed\macros\popbrowsecontext.ico
  • from %TEMP%\is-gfime.tmp\emed\macros\is-fdp1p.tmp to %TEMP%\is-gfime.tmp\emed\macros\popbrowsecontext.jsee
  • from %TEMP%\is-gfime.tmp\emed\macros\is-12go2.tmp to %TEMP%\is-gfime.tmp\emed\macros\sum.ico
  • from %TEMP%\is-gfime.tmp\emed\macros\is-0o1cm.tmp to %TEMP%\is-gfime.tmp\emed\macros\sum.jsee
  • from %TEMP%\is-gfime.tmp\emed\macros\is-nlve5.tmp to %TEMP%\is-gfime.tmp\emed\macros\symbollist.ico
  • from %TEMP%\is-gfime.tmp\emed\is-r3lon.tmp to %TEMP%\is-gfime.tmp\emed\thirdpartylicenses
  • from %TEMP%\is-gfime.tmp\emed\dictionaries\is-875qq.tmp to %TEMP%\is-gfime.tmp\emed\dictionaries\uk_ua.dic
Miscellaneous
Searches for the following windows
  • ClassName: 'RegEdit_RegEdit' WindowName: ''
  • ClassName: 'MsiDialogCloseClass' WindowName: ''
Creates and executes the following
  • '%TEMP%\7zipsfx.000\emeditor 21.4.0.exe' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
  • '%TEMP%\is-17pif.tmp\emeditor 21.4.0.tmp' /SL5="$D0216,18523914,64512,%TEMP%\7ZipSfx.000\EmEditor 21.4.0.exe" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Executes the following
  • '%WINDIR%\regedit.exe' /S "%TEMP%\7ZipSfx.000\settings.reg"
  • '<SYSTEM32>\msiexec.exe' /i "%TEMP%\is-GFIME.tmp\EMED\setup.msi" /qn APPDIR="%LOCALAPPDATA%\Programs\EmEditor"

Рекомендации по лечению

  1. В случае если операционная система способна загрузиться (в штатном режиме или режиме защиты от сбоев), скачайте лечащую утилиту Dr.Web CureIt! и выполните с ее помощью полную проверку вашего компьютера, а также используемых вами переносных носителей информации.
  2. Если загрузка операционной системы невозможна, измените настройки BIOS вашего компьютера, чтобы обеспечить возможность загрузки ПК с компакт-диска или USB-накопителя. Скачайте образ аварийного диска восстановления системы Dr.Web® LiveDisk или утилиту записи Dr.Web® LiveDisk на USB-накопитель, подготовьте соответствующий носитель. Загрузив компьютер с использованием данного носителя, выполните его полную проверку и лечение обнаруженных угроз.
Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

Выполните полную проверку системы с использованием Антивируса Dr.Web Light для macOS. Данный продукт можно загрузить с официального сайта Apple App Store.

Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

Скачать Dr.Web с Apple Store

На загруженной ОС выполните полную проверку всех дисковых разделов с использованием продукта Антивирус Dr.Web для Linux.

Демо бесплатно

 

Скачать Dr.Web

По серийному номеру

  1. Если мобильное устройство функционирует в штатном режиме, загрузите и установите на него бесплатный антивирусный продукт Dr.Web для Android Light. Выполните полную проверку системы и используйте рекомендации по нейтрализации обнаруженных угроз.
  2. Если мобильное устройство заблокировано троянцем-вымогателем семейства Android.Locker (на экране отображается обвинение в нарушении закона, требование выплаты определенной денежной суммы или иное сообщение, мешающее нормальной работе с устройством), выполните следующие действия:
    • загрузите свой смартфон или планшет в безопасном режиме (в зависимости от версии операционной системы и особенностей конкретного мобильного устройства эта процедура может быть выполнена различными способами; обратитесь за уточнением к инструкции, поставляемой вместе с приобретенным аппаратом, или напрямую к его производителю);
    • после активации безопасного режима установите на зараженное устройство бесплатный антивирусный продукт Dr.Web для Android Light и произведите полную проверку системы, выполнив рекомендации по нейтрализации обнаруженных угроз;
    • выключите устройство и включите его в обычном режиме.

Подробнее о Dr.Web для Android

Демо бесплатно на 14 дней

Выдаётся при установке

Скачать с сайта
Скачать с Google Play