マイライブラリ
マイライブラリ

+ マイライブラリに追加

電話

お問い合わせ履歴

電話(英語)

+7 (495) 789-45-86

Profile

Trojan.DownLoader26.38092

Added to the Dr.Web virus database: 2018-04-17

Virus description added:

Technical Information

To ensure autorun and distribution:
Creates the following services:
  • [<HKLM>\SYSTEM\ControlSet001\Services\NuoNuoPrtService] 'Start' = '00000002'
  • [<HKLM>\SYSTEM\ControlSet001\Services\NuoNuoPrtService] 'ImagePath' = '"%ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.PrtServer.exe"'
  • [<HKLM>\SYSTEM\ControlSet001\Services\NuoNuoUpdateServer] 'Start' = '00000002'
  • [<HKLM>\SYSTEM\ControlSet001\Services\NuoNuoUpdateServer] 'ImagePath' = '"%ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.UpdateServer.exe"'
Modifies file system:
Creates the following files:
  • %TEMP%\RarSFX0\JSKP.exe
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-SBPKB.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-I8B9V.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-5OSF9.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BLM81.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-4UIR3.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-L6KEN.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-AL1M3.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-995L5.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-3CAJM.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-J00SK.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-QV4JD.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-NVO1M.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-KEBQK.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-98SRE.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-7AG3J.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-4L3UM.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-4HH1B.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-V7BMS.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-IBNBP.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-Q6P2J.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-3UERT.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-9M5UM.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ\is-1VK1T.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-TAK6P.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-TSUIR.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-EQLJ9.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ\is-9A7S9.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-5A38B.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-PJN5I.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-7BHG6.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-4AVVL.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-NK6G7.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-P95JB.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-QD1K3.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-20OE5.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-N37VO.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-C6H40.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-VFVUM.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-KMINL.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BOIAJ.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RTFME.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-HHFI0.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-O519N.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-R547I.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-PCE11.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-VVELH.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-74869.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-EAVDB.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-2HHGR.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-QJA3N.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BM54U.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-J978K.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-R2C3A.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-71BOA.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-0GN6L.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-110U8.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-NANAP.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-PVMRJ.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-1EPER.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-207BE.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBackup\is-DPP7M.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\is-3QON5.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\is-5FSFP.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\is-KTN32.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-9OASQ.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\3\is-87OJ8.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-K9VRP.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-166LF.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-VIFS3.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-9A634.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-HMS9K.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-106Q8.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-NOCUL.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-JQBB1.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-DF9O1.tmp
  • %WINDIR%\Fonts\is-Q7A59.tmp
  • %ALLUSERSPROFILE%\Start Menu\Programs\РЕРД·юОсФЖЖЅМЁ\РЕРД·юОсФЖЖЅМЁ.lnk
  • %ALLUSERSPROFILE%\Desktop\РЕРД·юОсФЖЖЅМЁ.lnk
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-97ADP.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\3\is-G1SRA.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-T168S.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\їЄЖ±ИнјюЕаСµКУЖµ\is-OHO5C.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\їЄЖ±ИнјюЕаСµКУЖµ\is-2N558.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-G12PF.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-4NS6H.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-SHBN2.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-4V8BU.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-RNAVI.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-V00Q1.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-BT1NH.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-S7H9D.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\is-A0TPU.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\is-5NU0T.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\is-RVF90.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\is-EOUBL.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-NJPC9.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\is-LTDS5.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-1I0U5.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-FT6GD.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-GJ5QU.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-NERRS.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-KIGTO.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-484PE.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-9V4V2.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-7BU3E.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-2ST2I.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-LO6CF.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-MVF40.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\is-2ONUU.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-OATH9.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-7DQIT.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RHSE5.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-6GBOE.tmp
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\msvcm90.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\msvcp90.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\msvcr90.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NetModule.dll
  • %TEMP%\nsv2.tmp\nsExec.dll
  • %TEMP%\nsv2.tmp\ns3.tmp
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\2018-04-16.Log
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.PrtServer.InstallLog
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.PrtServer.InstallState
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Microsoft.VC90.ATL.manifest
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\mfcm90.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Microsoft.VC90.MFC.manifest
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Log\NuoNuoPrtService.log
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\uninst.exe
  • %TEMP%\is-NI3EN.tmp\ypt.tmp
  • %TEMP%\is-V2F8V.tmp\_isetup\_shfoldr.dll
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-ILEGN.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-OSNFQ.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-MBC4E.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-M929U.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-6A3SJ.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-6DHE6.tmp
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.UpdateServer.InstallLog
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.UpdateServer.InstallState
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Log\NuoNuoPrtUpdate.log
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\mfcm90u.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\mfc90u.dll
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-KHPBD.tmp
  • %TEMP%\RarSFX0\ypt.exe
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\update.config
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\System.Data.SQLite.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NPOI.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\log4net.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\log4net.config
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\ICSharpCode.SharpZipLib.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\configC.property
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuoPlatformPRT.exe
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.UpdateServer.exe
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.PrtServer.exe.config
  • %TEMP%\RarSFX0\Prt.exe
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.PrtServer.exe
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.Core.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Install.exe
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Newtonsoft.Json.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\System.Net.Http.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\System.Net.Http.Extensions.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\System.Net.Http.Primitives.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\System.Net.Http.WebRequest.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\PrtUpdate.exe
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.Tools.exe
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\atl90.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\mfc90.dll
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.DBUtils.dll
  • %APPDATA%\Microsoft\Internet Explorer\Quick Launch\РЕРД·юОсФЖЖЅМЁ.lnk
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-8QO8O.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-SJTNM.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-JFKFU.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-PNA31.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BTMAI.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-CDN6I.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-8CM1M.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-H8SLI.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BH3MA.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-B7CC6.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-JIRKT.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-1S38O.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-6SIN9.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-79PL7.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-2LLHP.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RTP87.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RJ0M4.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-DDTH9.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-UAICC.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-L3PK2.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-LS0RN.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-S0S87.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-82163.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-LRDNL.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-70NSO.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-5T31R.tmp
  • %ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Microsoft.VC90.CRT.manifest
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-THKCB.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RUHB5.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-34A5C.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-T0HSE.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-8FSOJ.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-U13G5.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-LR035.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-LKTKF.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-5B267.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-73L77.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-P09LF.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-I92B0.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-KB1TT.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-GIT0L.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-FVTU2.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-SRU3N.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-G22GD.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-2IJG8.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-ICGGM.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-URHP4.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-AOH2G.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\db\is-M9IDN.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\en\is-53PJ3.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-QL7G6.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-FU7CU.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-3NIKR.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-TKDLN.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-OFBT9.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-1SAOA.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-KTIBN.tmp
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\unins000.dat
Deletes the following files:
  • %TEMP%\nsv2.tmp\ns3.tmp
  • %TEMP%\nsv2.tmp\nsExec.dll
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\NNuoMain.exe
  • %TEMP%\is-V2F8V.tmp\_isetup\_shfoldr.dll
  • %TEMP%\is-NI3EN.tmp\ypt.tmp
Moves the following files:
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-ILEGN.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\unins000.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-4HH1B.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЧФЦъЅЙ·С.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-V7BMS.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЧФЦъЅЙ·С.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-IBNBP.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЧФЦъЅЙ·С.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-Q6P2J.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЪЙСФґтЙН.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-3UERT.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЪЙСФґтЙН.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-9M5UM.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЪЙСФґтЙН.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ\is-1VK1T.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-5OSF9.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.vshost.application
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ\is-9A7S9.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-0GN6L.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\automaticDownlodaFwkp.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-8QO8O.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\automaticDownlodaFwkp.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-G12PF.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\automaticDownlodaFwkp.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-NJPC9.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\BaseOperate.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-4NS6H.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\reinstallFwkp.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-SHBN2.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\reinstallFwkp.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-4V8BU.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\reinstallFwkp.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-7AG3J.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ»Цёґ.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-4L3UM.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ»Цёґ.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-98SRE.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ»Цёґ.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-TSUIR.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ»Цёґ.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-TAK6P.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ»Цёґ.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-QJA3N.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-5A38B.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-VFVUM.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ИЛГс±ТґуРґЧЄ»»№¤ѕЯ.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BOIAJ.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.application
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-QV4JD.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-NVO1M.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-SBPKB.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-RNAVI.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\reinstallFwkp.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-EQLJ9.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\automaticDownlodaFwkp.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-I8B9V.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.png
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-4UIR3.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-L6KEN.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-AL1M3.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ±ё·Э.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-995L5.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ±ё·Э.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-3CAJM.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ±ё·Э.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-J00SK.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ±ё·Э.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-KEBQK.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ФЖ±ё·Э.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-2HHGR.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BLM81.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ПъПо·ўЖ±ГчПё.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-V00Q1.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Sequences.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-BT1NH.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Sequences1.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\is-S7H9D.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Sequences2.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-NANAP.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\ФЖјЗХЛ.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-PVMRJ.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\ЧФЦъґъїЄ.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-1EPER.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\ЧФЦъґъїЄ.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-207BE.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\ЧФЦъґъїЄ.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBackup\is-DPP7M.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBackup\NotDel.txt
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\is-3QON5.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\Acount.db
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\is-5FSFP.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\Acount.mdb
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\is-KTN32.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DataBase\DataLink.Xml
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-K9VRP.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\Chinese.frc
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-EAVDB.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-97ADP.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\Report.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-VIFS3.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\Set.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-T168S.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\Static.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-9A634.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\StaticReport.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-HMS9K.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\welcome.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-106Q8.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\welcomeY.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-NOCUL.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\YFCheck.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-JQBB1.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\YSCheck.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-166LF.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\ФЖјЗХЛ.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-NERRS.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\·юОсНшµг.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\is-110U8.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\4\ФЖјЗХЛ.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-GJ5QU.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\·юОсНшµг.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\is-A0TPU.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\Sequences.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\is-5NU0T.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\Sequences1.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\is-RVF90.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЦШЧ°їЄЖ±\Resource\Sequences2.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\is-EOUBL.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\ЪЙСФґтЙН.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\is-LTDS5.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\ЪЙСФґтЙН.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\is-2ONUU.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\1\ЪЙСФґтЙН\ЪЙСФґтЙН.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-1I0U5.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\µз»°·юОс.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-FT6GD.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\µз»°·юОс.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-DF9O1.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\zongzhang.jpg
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\3\is-G1SRA.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\3\»э·Ц¶Т»».exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-KIGTO.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\·юОсНшµг.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-484PE.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\»ъЖчИЛ·юОс.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-9V4V2.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\»ъЖчИЛ·юОс.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-7BU3E.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\»ъЖчИЛ·юОс.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-2ST2I.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\ОўРЕ·юОс.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\is-LO6CF.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\ОўРЕ·юОс.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\їЄЖ±ИнјюЕаСµКУЖµ\is-2N558.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\їЄЖ±ИнјюЕаСµКУЖµ\їЄЖ±ИнјюЕаСµКУЖµ.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\їЄЖ±ИнјюЕаСµКУЖµ\is-OHO5C.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\2\їЄЖ±ИнјюЕаСµКУЖµ\їЄЖ±ИнјюЕаСµКУЖµ.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\3\is-87OJ8.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\3\»э·Ц¶Т»».vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\is-9OASQ.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PrintModel\A_PZ_Money.fr3
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-74869.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.vshost.application
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-20OE5.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\БРЕдЦГ.xml
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-2IJG8.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\SimpleUpdater.xml
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-ICGGM.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\System.Data.SQLite.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-URHP4.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Tools.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-AOH2G.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\wke.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\db\is-M9IDN.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\db\Aisino.db3
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\en\is-53PJ3.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\en\SimpleUpdater.resources.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-QL7G6.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\atl90.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-FVTU2.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\CustomMessageBox.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-FU7CU.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\A_ClassCommonOperate_CX.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-TKDLN.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\A_ClassCommonOperate_PL.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-1SAOA.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\DevComponents.DotNetBar2.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-T0HSE.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\HeaderUnitView.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-34A5C.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\mfc90u.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-6SIN9.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\mfcm90u.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RUHB5.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\Microsoft.VC90.ATL.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-2LLHP.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\Microsoft.VC90.CRT.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-OFBT9.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\PubDbMethod.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-G22GD.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\SimpleUpdater.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-SRU3N.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\NNuoMain.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-GIT0L.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\NNuoMain.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-KB1TT.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\NNuoMain.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-MBC4E.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\AutoUpdater.application
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-M929U.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\AutoUpdater.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-6A3SJ.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\AutoUpdater.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-6DHE6.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\AutoUpdater.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-KHPBD.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\AutoUpdater.vshost.application
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-SJTNM.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\AutoUpdater.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-71BOA.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\AutoUpdater.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-PNA31.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\Microsoft.VC90.MFC.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-3NIKR.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\A_ClassCommonOperate_DC.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-KTIBN.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\AutoUpdater.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-8FSOJ.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\DSkin.xml
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-U13G5.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\edtFTPnet.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-LR035.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\ewe.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-LKTKF.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\ImageButtion.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-5B267.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Logic.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-73L77.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Model.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-I92B0.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\NNuoMain.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-OSNFQ.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\NNuoMain.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\is-JFKFU.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\DSkin.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BTMAI.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\msvcm90.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-CDN6I.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\msvcp90.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-8CM1M.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\msvcr90.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-KMINL.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.png
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-OATH9.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.vshost.application
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-PJN5I.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-7BHG6.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-4AVVL.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-NK6G7.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\јЖЛгЖч.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-P95JB.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\јЖЛгЖч.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-QD1K3.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\јЖЛгЖч.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-N37VO.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\БРЕдЦГ2.xml
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-VVELH.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.png
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-C6H40.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕµЕµЙМіЗ.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RTFME.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕµЕµЙМіЗ.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BM54U.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕµЕµЙМіЗ.vshost.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-J978K.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕµЕµЙМіЗ.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-R2C3A.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕµЕµЙМіЗ.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-HHFI0.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.application
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-O519N.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-R547I.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-MVF40.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RJ0M4.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\System.Data.SQLite.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-7DQIT.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-THKCB.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\sqlite3.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-H8SLI.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\MultiHeaderDataGridView.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-BH3MA.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\NetModule.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-B7CC6.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\PubMethod.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-JIRKT.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ReadData.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-1S38O.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ReadInterface.dll
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-79PL7.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\Sequences.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-5T31R.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\Sequences1.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RTP87.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\Sequences2.ico
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-PCE11.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\ЕъБїїЄЖ±.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-6GBOE.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.application
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-DDTH9.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\unins000.dat
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-UAICC.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\unins000.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-L3PK2.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\xjhtxx_helx_ANN.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-LS0RN.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\xjhtxx_helx_ANN.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-S0S87.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\xjhtxx_helx_ANN.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-82163.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\xjhtxx_helx_ANN_DLoad.exe
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-LRDNL.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\xjhtxx_helx_ANN_DLoad.vshost.exe.config
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-70NSO.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\xjhtxx_helx_ANN_DLoad.vshost.exe.manifest
  • from %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\is-RHSE5.tmp to %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\Software\іЈУГИнјю\±ЁЛ°КэѕЭµјіц.exe
  • from %WINDIR%\Fonts\is-Q7A59.tmp to %WINDIR%\Fonts\OCR_A_Extended.ttf
Substitutes the following files:
  • %ProgramFiles%\РЕРД·юОсФЖЖЅМЁ\NNuoMain.exe
Miscellaneous:
Searches for the following windows:
  • ClassName: 'EDIT' WindowName: ''
Creates and executes the following:
  • '%TEMP%\RarSFX0\Prt.exe' /S
  • '%TEMP%\nsv2.tmp\ns3.tmp' "%ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Install.exe" "install"
  • '%ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\Install.exe' "install"
  • '%ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.PrtServer.exe'
  • '%ProgramFiles%\ЕµЕµ\Ж±ИЪНЁ\NuoNuo.UpdateServer.exe'
  • '%TEMP%\RarSFX0\ypt.exe' /silent
  • '%TEMP%\is-NI3EN.tmp\ypt.tmp' /SL5="$20106,19244642,67072,%TEMP%\RarSFX0\ypt.exe" /silent

Curing recommendations

  1. If the operating system (OS) can be loaded (either normally or in safe mode), download Dr.Web Security Space and run a full scan of your computer and removable media you use. More about Dr.Web Security Space.
  2. If you cannot boot the OS, change the BIOS settings to boot your system from a CD or USB drive. Download the image of the emergency system repair disk Dr.Web® LiveDisk , mount it on a USB drive or burn it to a CD/DVD. After booting up with this media, run a full scan and cure all the detected threats.
Download Dr.Web

Download by serial number

Use Dr.Web Anti-virus for macOS to run a full scan of your Mac.

After booting up, run a full scan of all disk partitions with Dr.Web Anti-virus for Linux.

Download Dr.Web

Download by serial number

  1. If the mobile device is operating normally, download and install Dr.Web for Android. Run a full system scan and follow recommendations to neutralize the detected threats.
  2. If the mobile device has been locked by Android.Locker ransomware (the message on the screen tells you that you have broken some law or demands a set ransom amount; or you will see some other announcement that prevents you from using the handheld normally), do the following:
    • Load your smartphone or tablet in the safe mode (depending on the operating system version and specifications of the particular mobile device involved, this procedure can be performed in various ways; seek clarification from the user guide that was shipped with the device, or contact its manufacturer);
    • Once you have activated safe mode, install the Dr.Web for Android onto the infected handheld and run a full scan of the system; follow the steps recommended for neutralizing the threats that have been detected;
    • Switch off your device and turn it on as normal.

Find out more about Dr.Web for Android