Техническая информация
Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'EfficientDiaryPro' = ''
- [<HKLM>\SOFTWARE\Classes\EfficientDiaryFile\shell\open\command] '' = '"%PROGRAM_FILES%\Efficient Diary Pro\EfficientDiaryPro.exe" %1'
Вредоносные функции:
Для обхода брандмауэра удаляет или модифицирует следующие ключи реестра:
- [<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List] '%PROGRAM_FILES%\Efficient Diary Pro\EfficientDiaryPro.exe' = '%PROGRAM_FILES%\Efficient Diary Pro\EfficientDiaryPro.exe:*:Enabled:Efficient Diary Pro'
Создает и запускает на исполнение:
- '%TEMP%\is-MFME7.tmp\EfficientDiaryPro-Setup.tmp' /SL5="$200E2,11102791,54272,%WINDIR%\MrSoftware\EfficientDiaryPro-Setup.exe" EfficientDiaryPro-Setup.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%WINDIR%\MrSoftware\EfficientDiaryPro-Setup.exe' EfficientDiaryPro-Setup.exe /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Запускает на исполнение:
- '<SYSTEM32>\netsh.exe' firewall set allowedprogram "%PROGRAM_FILES%\Efficient Diary Pro\EfficientDiaryPro.exe" "Efficient Diary Pro"
- '%WINDIR%\regedit.exe' /s reg.reg
Изменения в файловой системе:
Создает следующие файлы:
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-4B4S8.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-0OHMN.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-MOB9B.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-QJ5ID.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-6FE12.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-ADAFQ.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-TTUBM.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-U36PS.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-DSFNI.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-3AVD7.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-CVO0P.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-NTIDN.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-0627R.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-A4LVK.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-0S1VQ.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-EMM1U.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-T8F0S.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-VN8N7.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-S3OFM.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-VMCAE.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-CTR8B.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-UDNS2.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-JVEU2.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-LCSN6.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-OG76H.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-1SR0P.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-CPAQL.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-NR4V9.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\English\is-7D4VN.tmp
- %APPDATA%\Efficient Diary Pro\Dictionaries\is-18GFU.tmp
- %APPDATA%\Efficient Diary Pro\Dictionaries\is-OMP4E.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\Efficient Diary Pro\Efficient Diary Pro.lnk
- %APPDATA%\Efficient Diary Pro\Dictionaries\is-I9KFG.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-10T5J.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-85I5L.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-V2OL8.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\EfficientDiary.url
- %PROGRAM_FILES%\Efficient Diary Pro\unins000.dat
- %HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\takiemon[1]
- %HOMEPATH%\Desktop\Efficient Diary Pro.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Efficient Diary Pro\Efficient Diary Help.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Efficient Diary Pro\Efficient Diary Home Page.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\Efficient Diary Pro\Uninstall Efficient Diary Pro.lnk
- %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Trad\is-5GBBL.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-TJL6D.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-C045G.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\is-6CUNU.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\English\is-P6SRJ.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\English\is-KP835.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\is-VHBM8.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-GHRF5.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-NLVTN.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-OFKMR.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-2KJPM.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-CBBV5.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-7ABMP.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-G6E12.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-9HJCJ.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Image\is-5ADPQ.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Report\is-MQ46U.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-56L8U.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\is-HRS7Q.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-3K7CK.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-BSNE2.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\English\is-EKLPF.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-T8TFV.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-1QU8F.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-6V9E7.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-LGQOA.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-53NK5.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-UMCIG.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-K8B9E.tmp
- %TEMP%\is-MFME7.tmp\EfficientDiaryPro-Setup.tmp
- %TEMP%\is-4881Q.tmp\_isetup\_RegDLL.tmp
- %TEMP%\is-4881Q.tmp\_isetup\_shfoldr.dll
- %WINDIR%\MrSoftware\reg.reg
- %TEMP%\aut1.tmp
- %WINDIR%\MrSoftware\EfficientDiaryPro-Setup.exe
- %TEMP%\aut2.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-J24Q0.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-UO3I5.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-NJNK6.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-B5AT7.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-VT2Q0.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-H5MV7.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\is-97BMG.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-ERE3A.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-GDH3D.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-9KOS5.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-9GPD7.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-GB8IG.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-LH23N.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-DF4QN.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-JT7MV.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-LGOGK.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-IA2O0.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-R6QP7.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-K3L26.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-KH4CP.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-SACTT.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-FPNJO.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-417KT.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-PQL76.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-O2H5Q.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-1R49M.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-68D5U.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-0BNHE.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-DEU23.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-832RL.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-B0CSL.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-TPDJV.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-L8PE3.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-L0TF7.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-N45FI.tmp
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-86A7E.tmp
Удаляет следующие файлы:
- %TEMP%\is-4881Q.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-MFME7.tmp\EfficientDiaryPro-Setup.tmp
- %WINDIR%\MrSoftware\EfficientDiaryPro-Setup.exe
- %TEMP%\aut1.tmp
- %TEMP%\aut2.tmp
- %TEMP%\is-4881Q.tmp\_isetup\_RegDLL.tmp
Перемещает следующие файлы:
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-ADAFQ.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Russian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-TTUBM.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Slovenian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-QJ5ID.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Slovenian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-JVEU2.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\PortugueseBR.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-LCSN6.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\PortugueseBR.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-6FE12.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Russian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-NTIDN.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Swedish.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-0627R.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Thai.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-A4LVK.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Thai.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-4B4S8.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Spanish.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-0OHMN.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Spanish.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-MOB9B.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Swedish.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-UDNS2.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Portuguese.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-CTR8B.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Korean.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-VN8N7.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Korean.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-0S1VQ.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Lithuanian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-9HJCJ.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Italian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-S3OFM.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Japanese.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-VMCAE.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Japanese.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-CPAQL.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Polish.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-NR4V9.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Polish.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-OG76H.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Portuguese.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-EMM1U.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Lithuanian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-T8F0S.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Norwegian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-1SR0P.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Norwegian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-GHRF5.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Silver.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-NLVTN.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Springtime.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-OFKMR.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Summer.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-7ABMP.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Blue.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-G6E12.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Green.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-2KJPM.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Pink.skn
- %APPDATA%\Efficient Diary Pro\Dictionaries\is-I9KFG.tmp в %APPDATA%\Efficient Diary Pro\Dictionaries\american.adm
- %APPDATA%\Efficient Diary Pro\Dictionaries\is-18GFU.tmp в %APPDATA%\Efficient Diary Pro\Dictionaries\autocorrect.adu
- %APPDATA%\Efficient Diary Pro\Dictionaries\is-OMP4E.tmp в %APPDATA%\Efficient Diary Pro\Dictionaries\Roget.adt
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-10T5J.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Xmas.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-85I5L.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Valentine.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-V2OL8.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Pumpkin.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-CBBV5.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Black.skn
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-3AVD7.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Ukrainian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\English\is-7D4VN.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\English\license.rtf
- %PROGRAM_FILES%\Efficient Diary Pro\Language\English\is-P6SRJ.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\English\Local.ini
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-CVO0P.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Turkish.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-U36PS.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Turkish.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-DSFNI.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Ukrainian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Trad\is-5GBBL.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Trad\Local.ini
- %PROGRAM_FILES%\Efficient Diary Pro\is-TJL6D.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Links.ini
- %PROGRAM_FILES%\Efficient Diary Pro\Skins\is-C045G.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Skins\Skins.ini
- %PROGRAM_FILES%\Efficient Diary Pro\Language\English\is-KP835.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\English\HelpInfo.ini
- %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\is-VHBM8.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\license.rtf
- %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\is-6CUNU.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\Local.ini
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-K8B9E.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Arabic.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-LGQOA.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Armenian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-T8TFV.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Armenian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-56L8U.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\English.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-53NK5.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\English.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-UMCIG.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Arabic.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-68D5U.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-0BNHE.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl.lc
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-DEU23.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Trad.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-1QU8F.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Bulgarian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-6V9E7.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Bulgarian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-ERE3A.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Report\is-MQ46U.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Report\ReportTemplate.htm
- %PROGRAM_FILES%\Efficient Diary Pro\is-B5AT7.tmp в %PROGRAM_FILES%\Efficient Diary Pro\icudt30.dll
- %PROGRAM_FILES%\Efficient Diary Pro\is-J24Q0.tmp в %PROGRAM_FILES%\Efficient Diary Pro\icuuc30.dll
- %PROGRAM_FILES%\Efficient Diary Pro\is-UO3I5.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Microsoft.VC80.CRT.manifest
- %PROGRAM_FILES%\Efficient Diary Pro\is-VT2Q0.tmp в %PROGRAM_FILES%\Efficient Diary Pro\unins000.exe
- %PROGRAM_FILES%\Efficient Diary Pro\is-H5MV7.tmp в %PROGRAM_FILES%\Efficient Diary Pro\firebird.msg
- %PROGRAM_FILES%\Efficient Diary Pro\is-97BMG.tmp в %PROGRAM_FILES%\Efficient Diary Pro\gds32.dll
- %PROGRAM_FILES%\Efficient Diary Pro\Language\English\is-EKLPF.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\English\EfficientDiaryPro.chm
- %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\is-HRS7Q.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Simpl\EfficientDiaryPro-Chinese_Simpl.chm
- %PROGRAM_FILES%\Efficient Diary Pro\Image\is-5ADPQ.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Image\Logo.jpg
- %PROGRAM_FILES%\Efficient Diary Pro\is-NJNK6.tmp в %PROGRAM_FILES%\Efficient Diary Pro\msvcr80.dll
- %PROGRAM_FILES%\Efficient Diary Pro\is-3K7CK.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Template.dat
- %PROGRAM_FILES%\Efficient Diary Pro\is-BSNE2.tmp в %PROGRAM_FILES%\Efficient Diary Pro\EfficientDiaryPro.exe
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-9KOS5.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\German.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-9GPD7.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\German.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-KH4CP.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Greek.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-JT7MV.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Finnish.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-GB8IG.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\French.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-GDH3D.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\French.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-LGOGK.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Indonesian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-IA2O0.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Indonesian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-R6QP7.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Italian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-SACTT.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Greek.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-FPNJO.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Hungarian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-K3L26.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Hungarian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-DF4QN.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Finnish.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-O2H5Q.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Croatian.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-L0TF7.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Czech.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-N45FI.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Czech.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-1R49M.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Trad.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-417KT.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Chinese_Trad.lc
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-PQL76.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Croatian.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-B0CSL.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Dutch.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-TPDJV.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Farsi.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-LH23N.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Farsi.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-86A7E.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Danish.lng
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-L8PE3.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Danish.tip
- %PROGRAM_FILES%\Efficient Diary Pro\Language\is-832RL.tmp в %PROGRAM_FILES%\Efficient Diary Pro\Language\Dutch.lng
Сетевая активность:
Подключается к:
- 'www.ta##emon.nl':80
- 'localhost':1037
TCP:
Запросы HTTP GET:
- www.ta##emon.nl/
UDP:
- DNS ASK www.ta##emon.nl
Другое:
Ищет следующие окна:
- ClassName: 'IEFrame' WindowName: '(null)'
- ClassName: 'MS_AutodialMonitor' WindowName: '(null)'
- ClassName: 'MS_WebcheckMonitor' WindowName: '(null)'
- ClassName: '' WindowName: '(null)'
- ClassName: 'Shell_TrayWnd' WindowName: '(null)'
- ClassName: 'BUTTON' WindowName: '(null)'
- ClassName: 'RegEdit_RegEdit' WindowName: '(null)'
