Техническая информация
Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'cenalnt' = '%TEMP%\cenalnt.exe'
Вредоносные функции:
Создает и запускает на исполнение:
- '%TEMP%\cenalnt.exe'
- '%TEMP%\370zhudongfangyu.exe'
- '<Текущая директория>\<Имя вируса>.tmp'
- '<Текущая директория>\2111d.exe'
Изменения в файловой системе:
Создает следующие файлы:
- %TEMP%\35a95.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\bckgzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX33.tmp
- %TEMP%\35b03.ico
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX36.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX35.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX34.tmp
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX30.tmp
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2F.tmp
- %TEMP%\34fe5.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX32.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX31.tmp
- %TEMP%\350a1.ico
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3A.tmp
- %TEMP%\372c5.ico
- %TEMP%\371da.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3B.tmp
- %TEMP%\37e6f.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\Rvsezm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3C.tmp
- %TEMP%\36660.ico
- %TEMP%\36536.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\chkrzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX37.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\hrtzzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX39.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX38.tmp
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2E.tmp
- %TEMP%\3143c.ico
- %TEMP%\311ca.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\isignup.exe
- %PROGRAM_FILES%\Movie Maker\RCX25.tmp
- %PROGRAM_FILES%\Movie Maker\moviemk.exe
- %PROGRAM_FILES%\Movie Maker\RCX27.tmp
- %PROGRAM_FILES%\Movie Maker\RCX26.tmp
- %TEMP%\306ac.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\inetwiz.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX21.tmp
- %TEMP%\307b7.ico
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX24.tmp
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX23.tmp
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX22.tmp
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2C.tmp
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2B.tmp
- %TEMP%\32d27.ico
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2D.tmp
- %TEMP%\34044.ico
- %TEMP%\33a86.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\RCX28.tmp
- %TEMP%\320c1.ico
- %TEMP%\31f49.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\RCX29.tmp
- %TEMP%\32c3c.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\msnsusii.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\RCX2A.tmp
- %TEMP%\37f0c.ico
- %PROGRAM_FILES%\Outlook Express\RCX4C.tmp
- %TEMP%\3bc08.ico
- %TEMP%\3bafd.exe
- %PROGRAM_FILES%\Outlook Express\RCX4D.tmp
- %TEMP%\3c715.exe
- %PROGRAM_FILES%\Outlook Express\wabmig.exe
- %PROGRAM_FILES%\Outlook Express\RCX4E.tmp
- %TEMP%\3b000.ico
- %TEMP%\3af05.exe
- %PROGRAM_FILES%\Outlook Express\setup50.exe
- %PROGRAM_FILES%\Outlook Express\RCX49.tmp
- %PROGRAM_FILES%\Outlook Express\wab.exe
- %PROGRAM_FILES%\Outlook Express\RCX4B.tmp
- %PROGRAM_FILES%\Outlook Express\RCX4A.tmp
- %TEMP%\3d8cd.ico
- %TEMP%\3d820.exe
- %PROGRAM_FILES%\Windows Media Player\mplayer2.exe
- %PROGRAM_FILES%\Windows Media Player\RCX52.tmp
- %PROGRAM_FILES%\Windows Media Player\setup_wm.exe
- %PROGRAM_FILES%\Windows Media Player\RCX54.tmp
- %PROGRAM_FILES%\Windows Media Player\RCX53.tmp
- %TEMP%\3cb2f.ico
- %TEMP%\3ca43.exe
- %PROGRAM_FILES%\Windows Media Player\migrate.exe
- %PROGRAM_FILES%\Windows Media Player\RCX4F.tmp
- %PROGRAM_FILES%\Windows Media Player\RCX51.tmp
- C:\System Volume Information\_restore{E7F0F64C-F7E5-4319-8757-E9A20C1C4E14}\_filelst.cfg
- %PROGRAM_FILES%\Windows Media Player\RCX50.tmp
- %TEMP%\3ade9.exe
- %TEMP%\38c31.ico
- %TEMP%\38b75.exe
- %PROGRAM_FILES%\NetMeeting\cb32.exe
- %PROGRAM_FILES%\NetMeeting\RCX40.tmp
- %PROGRAM_FILES%\NetMeeting\conf.exe
- %PROGRAM_FILES%\NetMeeting\RCX42.tmp
- %PROGRAM_FILES%\NetMeeting\RCX41.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3F.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3E.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3D.tmp
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\shvlzm.exe
- %TEMP%\38ab7.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\zClientm.exe
- %TEMP%\389fa.exe
- %TEMP%\3a4c1.ico
- %TEMP%\3a423.exe
- %PROGRAM_FILES%\Outlook Express\msimn.exe
- %PROGRAM_FILES%\Outlook Express\RCX46.tmp
- %PROGRAM_FILES%\Outlook Express\oemig50.exe
- %PROGRAM_FILES%\Outlook Express\RCX48.tmp
- %PROGRAM_FILES%\Outlook Express\RCX47.tmp
- %TEMP%\39869.exe
- %PROGRAM_FILES%\NetMeeting\wb32.exe
- %TEMP%\39700.exe
- %TEMP%\39984.ico
- %PROGRAM_FILES%\Outlook Express\RCX45.tmp
- %PROGRAM_FILES%\Outlook Express\RCX44.tmp
- %PROGRAM_FILES%\Outlook Express\RCX43.tmp
- %TEMP%\28e25.ico
- %TEMP%\28d97.exe
- %CommonProgramFiles%\Microsoft Shared\DW\DWTRIG20.EXE
- %CommonProgramFiles%\Microsoft Shared\MSInfo\RCX7.tmp
- %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\RCX9.tmp
- %CommonProgramFiles%\Microsoft Shared\MSInfo\RCX8.tmp
- %TEMP%\370zhudongfangyu.exe
- %CommonProgramFiles%\Microsoft Shared\DW\RCX4.tmp
- %TEMP%\28017.ico
- %CommonProgramFiles%\Microsoft Shared\DW\RCX5.tmp
- %TEMP%\28c8b.exe
- %CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE
- %CommonProgramFiles%\Microsoft Shared\DW\RCX6.tmp
- %TEMP%\2aa0f.ico
- %TEMP%\2a982.exe
- %PROGRAM_FILES%\FireFox\crashreporter.exe
- %PROGRAM_FILES%\FireFox\RCXD.tmp
- %PROGRAM_FILES%\FireFox\firefox.exe
- %PROGRAM_FILES%\FireFox\RCXF.tmp
- %PROGRAM_FILES%\FireFox\RCXE.tmp
- %TEMP%\29c12.exe
- %CommonProgramFiles%\Microsoft Shared\Speech\sapisvr.exe
- %TEMP%\299af.exe
- %TEMP%\29ccf.ico
- %PROGRAM_FILES%\FireFox\RCXC.tmp
- %PROGRAM_FILES%\FireFox\RCXB.tmp
- %PROGRAM_FILES%\FireFox\RCXA.tmp
- %TEMP%\QBTVZEJLPTX.exe
- %TEMP%\UFXZDHMO.exe
- %TEMP%\cena.log
- %TEMP%\FXAEKNPTXBF.exe
- %TEMP%\KFWZCHKMIMQ.exe
- %TEMP%\26856.exe
- %TEMP%\DMDFIL.exe
- %TEMP%\NWOPTVA.exe
- %TEMP%\jusched.log
- <Текущая директория>\2111d.exe
- <Текущая директория>\<Имя вируса>.tmp
- %TEMP%\cenalnt.exe
- %TEMP%\23389.exe
- %TEMP%\QBTVZ.exe
- %TEMP%\run.rsq
- C:\Far2\Far.exe
- %TEMP%\EPHJOSX.exe
- C:\Far2\RCX3.tmp
- %TEMP%\SWYDFJNRV.exe
- %TEMP%\27eed.exe
- %TEMP%\RARWBEJLPT.exe
- %TEMP%\PXOQVYDF.exe
- C:\Far2\RCX1.tmp
- %TEMP%\26cbc.ico
- %TEMP%\OQUZEGKO.exe
- %TEMP%\UJLPTWY.exe
- %TEMP%\HEWSXCFH.exe
- %TEMP%\UFWAEINPTX.exe
- C:\Far2\RCX2.tmp
- %TEMP%\2b490.exe
- %TEMP%\2e6c7.ico
- %TEMP%\2e62a.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX19.tmp
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1B.tmp
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1A.tmp
- %TEMP%\2dc83.exe
- %PROGRAM_FILES%\Internet Explorer\iedw.exe
- %TEMP%\2db97.exe
- %TEMP%\2dd20.ico
- %PROGRAM_FILES%\Internet Explorer\RCX18.tmp
- %PROGRAM_FILES%\Internet Explorer\RCX17.tmp
- %PROGRAM_FILES%\Internet Explorer\RCX16.tmp
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwtutor.exe
- %TEMP%\2fc77.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwrmind.exe
- %TEMP%\2fd34.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX20.tmp
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1F.tmp
- %TEMP%\2fde1.ico
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1C.tmp
- %TEMP%\2f11a.ico
- %TEMP%\2f05d.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1D.tmp
- %TEMP%\2fafe.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1E.tmp
- %PROGRAM_FILES%\FireFox\uninstall\helper.exe
- %TEMP%\2b843.exe
- %PROGRAM_FILES%\FireFox\shlibsign.exe
- %TEMP%\2b795.exe
- %TEMP%\2b8f0.ico
- %PROGRAM_FILES%\FireFox\RCX12.tmp
- %PROGRAM_FILES%\FireFox\RCX11.tmp
- %PROGRAM_FILES%\FireFox\RCX10.tmp
- %PROGRAM_FILES%\FireFox\mangle.exe
- %TEMP%\2b609.exe
- %PROGRAM_FILES%\FireFox\js.exe
- %TEMP%\2b688.exe
- %PROGRAM_FILES%\FireFox\plugin-container.exe
- %TEMP%\2b716.exe
- %PROGRAM_FILES%\FireFox\nsinstall.exe
- %TEMP%\2d0d7.exe
- %PROGRAM_FILES%\FireFox\xpt_link.exe
- %TEMP%\2c711.exe
- %TEMP%\2d155.ico
- %PROGRAM_FILES%\FireFox\uninstall\RCX15.tmp
- %PROGRAM_FILES%\FireFox\uninstall\RCX14.tmp
- %PROGRAM_FILES%\FireFox\uninstall\RCX13.tmp
- %PROGRAM_FILES%\FireFox\xpcshell.exe
- %TEMP%\2c4a9.exe
- %PROGRAM_FILES%\FireFox\updater.exe
- %TEMP%\2c5c4.exe
- %PROGRAM_FILES%\FireFox\xpt_dump.exe
- %TEMP%\2c682.exe
- %PROGRAM_FILES%\FireFox\xpidl.exe
Присваивает атрибут 'скрытый' для следующих файлов:
- <Текущая директория>\2111d.exe
- <Текущая директория>\<Имя вируса>.tmp
Удаляет следующие файлы:
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\chkrzm.exe
- %TEMP%\35a95.exe
- %TEMP%\36660.ico
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\bckgzm.exe
- %TEMP%\34fe5.exe
- %TEMP%\35b03.ico
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\hrtzzm.exe
- %TEMP%\371da.exe
- %TEMP%\37f0c.ico
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\shvlzm.exe
- %TEMP%\36536.exe
- %TEMP%\372c5.ico
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\Rvsezm.exe
- %TEMP%\320c1.ico
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\msnsusii.exe
- %TEMP%\31f49.exe
- %TEMP%\3143c.ico
- %PROGRAM_FILES%\Movie Maker\moviemk.exe
- %TEMP%\311ca.exe
- %TEMP%\32d27.ico
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
- %TEMP%\33a86.exe
- %TEMP%\350a1.ico
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
- %TEMP%\32c3c.exe
- %TEMP%\34044.ico
- %TEMP%\37e6f.exe
- %TEMP%\3bc08.ico
- %PROGRAM_FILES%\Outlook Express\wabmig.exe
- %TEMP%\3bafd.exe
- %TEMP%\3b000.ico
- %PROGRAM_FILES%\Outlook Express\wab.exe
- %TEMP%\3af05.exe
- %TEMP%\3c715.exe
- %TEMP%\3d8cd.ico
- %PROGRAM_FILES%\Windows Media Player\setup_wm.exe
- %TEMP%\3d820.exe
- %TEMP%\3cb2f.ico
- %PROGRAM_FILES%\Windows Media Player\mplayer2.exe
- %TEMP%\3ca43.exe
- %PROGRAM_FILES%\NetMeeting\conf.exe
- %TEMP%\38b75.exe
- %TEMP%\39700.exe
- %TEMP%\389fa.exe
- %TEMP%\38ab7.exe
- %TEMP%\38c31.ico
- %TEMP%\39984.ico
- %PROGRAM_FILES%\Outlook Express\oemig50.exe
- %TEMP%\3a423.exe
- %TEMP%\3ade9.exe
- %PROGRAM_FILES%\Outlook Express\msimn.exe
- %TEMP%\39869.exe
- %TEMP%\3a4c1.ico
- %TEMP%\29c12.exe
- %TEMP%\2aa0f.ico
- %PROGRAM_FILES%\FireFox\firefox.exe
- %TEMP%\299af.exe
- %TEMP%\29ccf.ico
- %PROGRAM_FILES%\FireFox\crashreporter.exe
- %TEMP%\2a982.exe
- %TEMP%\2b716.exe
- %TEMP%\2b795.exe
- %TEMP%\2b8f0.ico
- %TEMP%\2b490.exe
- %TEMP%\2b609.exe
- %TEMP%\2b688.exe
- %TEMP%\26cbc.ico
- C:\Far2\Far.exe
- %TEMP%\26856.exe
- %TEMP%\23389.exe
- <Текущая директория>\<Имя вируса>.tmp
- <Текущая директория>\2111d.exe
- %TEMP%\28017.ico
- %TEMP%\28e25.ico
- %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe
- %TEMP%\28d97.exe
- %CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE
- %TEMP%\27eed.exe
- %TEMP%\28c8b.exe
- %PROGRAM_FILES%\FireFox\updater.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe
- %TEMP%\2f05d.exe
- %TEMP%\2fafe.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe
- %TEMP%\2e62a.exe
- %TEMP%\2f11a.ico
- %TEMP%\2fc77.exe
- %TEMP%\307b7.ico
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\isignup.exe
- %TEMP%\306ac.exe
- %TEMP%\2fde1.ico
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\inetwiz.exe
- %TEMP%\2fd34.exe
- %TEMP%\2c682.exe
- %TEMP%\2c711.exe
- %TEMP%\2d155.ico
- %TEMP%\2b843.exe
- %TEMP%\2c4a9.exe
- %TEMP%\2c5c4.exe
- %PROGRAM_FILES%\FireFox\uninstall\helper.exe
- %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %TEMP%\2dc83.exe
- %TEMP%\2e6c7.ico
- %TEMP%\2d0d7.exe
- %TEMP%\2db97.exe
- %TEMP%\2dd20.ico
Перемещает следующие файлы:
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX39.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\hrtzzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3A.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\Rvsezm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX38.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\hrtzzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX36.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\chkrzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX37.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\hrtzzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3E.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\shvlzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3F.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\shvlzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3D.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\shvlzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3B.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\Rvsezm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX3C.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\Rvsezm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX35.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\chkrzm.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2E.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2F.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2D.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2B.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX2C.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Digcore.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX33.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\bckgzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX34.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\chkrzm.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX32.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\bckgzm.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\RCX30.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\MSN9Components\Msncli.exe
- %PROGRAM_FILES%\MSN Gaming Zone\Windows\RCX31.tmp в %PROGRAM_FILES%\MSN Gaming Zone\Windows\bckgzm.exe
- %PROGRAM_FILES%\Outlook Express\RCX4E.tmp в %PROGRAM_FILES%\Outlook Express\wabmig.exe
- %PROGRAM_FILES%\Windows Media Player\RCX4F.tmp в %PROGRAM_FILES%\Windows Media Player\mplayer2.exe
- %PROGRAM_FILES%\Outlook Express\RCX4D.tmp в %PROGRAM_FILES%\Outlook Express\wabmig.exe
- %PROGRAM_FILES%\Outlook Express\RCX4B.tmp в %PROGRAM_FILES%\Outlook Express\wab.exe
- %PROGRAM_FILES%\Outlook Express\RCX4C.tmp в %PROGRAM_FILES%\Outlook Express\wabmig.exe
- %PROGRAM_FILES%\Windows Media Player\RCX53.tmp в %PROGRAM_FILES%\Windows Media Player\setup_wm.exe
- %PROGRAM_FILES%\Windows Media Player\RCX54.tmp в %PROGRAM_FILES%\Windows Media Player\setup_wm.exe
- %PROGRAM_FILES%\Windows Media Player\RCX52.tmp в %PROGRAM_FILES%\Windows Media Player\setup_wm.exe
- %PROGRAM_FILES%\Windows Media Player\RCX50.tmp в %PROGRAM_FILES%\Windows Media Player\mplayer2.exe
- %PROGRAM_FILES%\Windows Media Player\RCX51.tmp в %PROGRAM_FILES%\Windows Media Player\mplayer2.exe
- %PROGRAM_FILES%\Outlook Express\RCX4A.tmp в %PROGRAM_FILES%\Outlook Express\wab.exe
- %PROGRAM_FILES%\Outlook Express\RCX43.tmp в %PROGRAM_FILES%\Outlook Express\msimn.exe
- %PROGRAM_FILES%\Outlook Express\RCX44.tmp в %PROGRAM_FILES%\Outlook Express\msimn.exe
- %PROGRAM_FILES%\NetMeeting\RCX42.tmp в %PROGRAM_FILES%\NetMeeting\conf.exe
- %PROGRAM_FILES%\NetMeeting\RCX40.tmp в %PROGRAM_FILES%\NetMeeting\conf.exe
- %PROGRAM_FILES%\NetMeeting\RCX41.tmp в %PROGRAM_FILES%\NetMeeting\conf.exe
- %PROGRAM_FILES%\Outlook Express\RCX48.tmp в %PROGRAM_FILES%\Outlook Express\oemig50.exe
- %PROGRAM_FILES%\Outlook Express\RCX49.tmp в %PROGRAM_FILES%\Outlook Express\wab.exe
- %PROGRAM_FILES%\Outlook Express\RCX47.tmp в %PROGRAM_FILES%\Outlook Express\oemig50.exe
- %PROGRAM_FILES%\Outlook Express\RCX45.tmp в %PROGRAM_FILES%\Outlook Express\msimn.exe
- %PROGRAM_FILES%\Outlook Express\RCX46.tmp в %PROGRAM_FILES%\Outlook Express\oemig50.exe
- %PROGRAM_FILES%\FireFox\RCXF.tmp в %PROGRAM_FILES%\FireFox\firefox.exe
- %PROGRAM_FILES%\FireFox\RCX10.tmp в %PROGRAM_FILES%\FireFox\updater.exe
- %PROGRAM_FILES%\FireFox\RCXE.tmp в %PROGRAM_FILES%\FireFox\firefox.exe
- %PROGRAM_FILES%\FireFox\RCXC.tmp в %PROGRAM_FILES%\FireFox\crashreporter.exe
- %PROGRAM_FILES%\FireFox\RCXD.tmp в %PROGRAM_FILES%\FireFox\firefox.exe
- %PROGRAM_FILES%\FireFox\uninstall\RCX14.tmp в %PROGRAM_FILES%\FireFox\uninstall\helper.exe
- %PROGRAM_FILES%\FireFox\uninstall\RCX15.tmp в %PROGRAM_FILES%\FireFox\uninstall\helper.exe
- %PROGRAM_FILES%\FireFox\uninstall\RCX13.tmp в %PROGRAM_FILES%\FireFox\uninstall\helper.exe
- %PROGRAM_FILES%\FireFox\RCX11.tmp в %PROGRAM_FILES%\FireFox\updater.exe
- %PROGRAM_FILES%\FireFox\RCX12.tmp в %PROGRAM_FILES%\FireFox\updater.exe
- %PROGRAM_FILES%\FireFox\RCXB.tmp в %PROGRAM_FILES%\FireFox\crashreporter.exe
- %CommonProgramFiles%\Microsoft Shared\DW\RCX4.tmp в %CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE
- %CommonProgramFiles%\Microsoft Shared\DW\RCX5.tmp в %CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE
- C:\Far2\RCX3.tmp в C:\Far2\Far.exe
- C:\Far2\RCX1.tmp в C:\Far2\Far.exe
- C:\Far2\RCX2.tmp в C:\Far2\Far.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\RCX9.tmp в %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe
- %PROGRAM_FILES%\FireFox\RCXA.tmp в %PROGRAM_FILES%\FireFox\crashreporter.exe
- %CommonProgramFiles%\Microsoft Shared\MSInfo\RCX8.tmp в %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe
- %CommonProgramFiles%\Microsoft Shared\DW\RCX6.tmp в %CommonProgramFiles%\Microsoft Shared\DW\DW20.EXE
- %CommonProgramFiles%\Microsoft Shared\MSInfo\RCX7.tmp в %CommonProgramFiles%\Microsoft Shared\MSInfo\msinfo32.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX24.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\isignup.exe
- %PROGRAM_FILES%\Movie Maker\RCX25.tmp в %PROGRAM_FILES%\Movie Maker\moviemk.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX23.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\isignup.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX21.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\inetwiz.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX22.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\isignup.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\RCX29.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\msnsusii.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\RCX2A.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\msnsusii.exe
- %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\RCX28.tmp в %PROGRAM_FILES%\MSN\MSNCoreFiles\Install\msnsusii.exe
- %PROGRAM_FILES%\Movie Maker\RCX26.tmp в %PROGRAM_FILES%\Movie Maker\moviemk.exe
- %PROGRAM_FILES%\Movie Maker\RCX27.tmp в %PROGRAM_FILES%\Movie Maker\moviemk.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX20.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\inetwiz.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX19.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1A.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe
- %PROGRAM_FILES%\Internet Explorer\RCX18.tmp в %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %PROGRAM_FILES%\Internet Explorer\RCX16.tmp в %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %PROGRAM_FILES%\Internet Explorer\RCX17.tmp в %PROGRAM_FILES%\Internet Explorer\IEXPLORE.EXE
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1E.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1F.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\inetwiz.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1D.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1B.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn1.exe
- %PROGRAM_FILES%\Internet Explorer\Connection Wizard\RCX1C.tmp в %PROGRAM_FILES%\Internet Explorer\Connection Wizard\icwconn2.exe
