用户服务中心

Close

Library
My library

+ Add to library

Search
Search

Contact us
24/7 Tech support | Rules regarding submitting

Send a message

A query form

Call us

+7 (495) 789-45-86

Forum

Your tickets

New ticket

Call us

+7 (495) 789-45-86

Profile

CN

RU CN DE EN ES FR IT JP KZ UZ PL BY
Close
服务
扫描仪
Dr.Web vxCube
试用
计算机病毒事件调查
病毒知识库
知识库

技术

术语

教育培训

误区

新闻

Win32.HLLW.Autoruner2.24678

Added to the Dr.Web virus database: 2016-07-10

Virus description added:

Technical Information

To ensure autorun and distribution:
Modifies the following registry keys:
  • [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Explorer' = '<DRIVERS>\suchost.exe'
Infects the following executable files:
  • C:\Far2\Far.exe
Malicious functions:
To complicate detection of its presence in the operating system,
forces the system hide from view:
  • hidden files
Executes the following:
  • '<DRIVERS>\suchost.exe'
Terminates or attempts to terminate
the following user processes:
  • 360tray.exe
Modifies file system:
Creates the following files:
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabview\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\Desktop_.ini
  • %ProgramFiles%\FireFox\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\Desktop_.ini
  • %ProgramFiles%\Desktop_.ini
  • C:\Far2\PluginSDK\Headers.c\Desktop_.ini
  • C:\Far2\PluginSDK\Desktop_.ini
  • C:\Muldrop\Desktop_.ini
  • C:\Far2\PluginSDK\Headers.pas\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\history\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\branding\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\communicator\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xslt\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xpinstall\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xml\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\search\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\layout\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\svg\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\security\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\handling\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\win\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-region\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\migration\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\feeds\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\downloads\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\branding\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\cookie\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\autoconfig\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\dom\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\alerts\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\sidebar\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\safebrowsing\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser-region\Desktop_.ini
  • C:\Far2\Plugins\Brackets\Desktop_.ini
  • C:\Far2\Plugins\AutoWrap\Desktop_.ini
  • C:\Far2\Plugins\Colorer\bin\Desktop_.ini
  • C:\Far2\Plugins\Colorer\Desktop_.ini
  • C:\Far2\Plugins\arclite\Desktop_.ini
  • C:\Far2\Plugins\Desktop_.ini
  • C:\Far2\FExcept\Desktop_.ini
  • C:\Far2\Plugins\Align\Desktop_.ini
  • C:\Far2\Plugins\7-Zip\Desktop_.ini
  • C:\Far2\Plugins\Compare\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrd\console\contrib\Desktop_.ini
  • C:\Far2\Plugins\EditCase\Desktop_.ini
  • C:\Far2\Plugins\DrawLine\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrd\console\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrc\auto\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrc\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrd\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrc\auto\types\Desktop_.ini
  • C:\Far2\Addons\Colors\Default Highlighting\Desktop_.ini
  • C:\Far2\Addons\Colors\Custom Highlighting\Desktop_.ini
  • %TEMP%\del35$$.bat
  • C:\Far2\Addons\Macros\Desktop_.ini
  • C:\Far2\Addons\Colors\Desktop_.ini
  • <Current directory>\Desktop_.ini
  • <DRIVERS>\suchost.exe
  • C:\Far2\Addons\Desktop_.ini
  • C:\Far2\Desktop_.ini
  • C:\Far2\Documentation\rus\Desktop_.ini
  • C:\Far2\Documentation\eng\Desktop_.ini
  • %TEMP%\90$$.Ico
  • C:\Far2\Encyclopedia\Desktop_.ini
  • C:\Far2\Documentation\Desktop_.ini
  • C:\Far2\Addons\Shell\Desktop_.ini
  • C:\Far2\Addons\SetUp\Desktop_.ini
  • C:\Far2\Addons\XLat\Russian\Desktop_.ini
  • C:\Far2\Addons\XLat\Desktop_.ini
  • C:\Far2\Plugins\EMenu\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\lib\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\forms\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\dragndrop\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\filezilla\misc\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\far\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\dragext\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\filezilla\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\fari\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\putty\charset\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\putty\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\resource\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\release\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\theme\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\my\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\filemng\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\tbx\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\tb2k\Desktop_.ini
  • C:\Far2\Plugins\FileCase\Desktop_.ini
  • C:\Far2\Plugins\FarCmds\Desktop_.ini
  • C:\Far2\Plugins\FTP\lib\Desktop_.ini
  • C:\Far2\Plugins\FTP\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\doc\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\sources\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\keys\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\components\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\core\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\console\Desktop_.ini
  • C:\Far2\Plugins\TmpPanel\Desktop_.ini
  • C:\Far2\Plugins\MacroView\Desktop_.ini
  • C:\Far2\Plugins\HlfViewer\Desktop_.ini
  • C:\Far2\Plugins\ProcList\Desktop_.ini
  • C:\Far2\Plugins\Network\Desktop_.ini
Sets the 'hidden' attribute to the following files:
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\feeds\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\places\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\search\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabbrowser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabbrowser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\communicator\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\tabview\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\aero\browser\tabview\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\places\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\skin\classic\browser\feeds\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\safebrowsing\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\branding\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\Desktop_.ini
  • C:\Muldrop\Desktop_.ini
  • C:\Far2\PluginSDK\Headers.pas\Desktop_.ini
  • %ProgramFiles%\FireFox\Desktop_.ini
  • %ProgramFiles%\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\pageinfo\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\migration\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\places\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\certerror\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\bookmarks\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\history\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\browser\content\browser\feeds\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xslt\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xpinstall\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\mac\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\security\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\search\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\xml\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\svg\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\unix\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\handling\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\extensions\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\plugins\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-region\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global-platform\win\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\downloads\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\mozapps\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\layout\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\migration\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\feeds\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\preferences\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\places\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\branding\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\downloads\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\safebrowsing\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\cookie\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\autoconfig\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\dom\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\global\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser-region\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\browser\sidebar\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\alerts\Desktop_.ini
  • %ProgramFiles%\FireFox\chrome\en-US\locale\en-US\Desktop_.ini
  • C:\Far2\PluginSDK\Headers.c\Desktop_.ini
  • C:\Far2\Plugins\Colorer\bin\Desktop_.ini
  • C:\Far2\Plugins\Colorer\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrc\auto\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrc\Desktop_.ini
  • C:\Far2\Plugins\arclite\Desktop_.ini
  • C:\Far2\Plugins\Align\Desktop_.ini
  • C:\Far2\Plugins\Brackets\Desktop_.ini
  • C:\Far2\Plugins\AutoWrap\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrc\auto\types\Desktop_.ini
  • C:\Far2\Plugins\EditCase\Desktop_.ini
  • C:\Far2\Plugins\DrawLine\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\Desktop_.ini
  • C:\Far2\Plugins\EMenu\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrd\console\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrd\Desktop_.ini
  • C:\Far2\Plugins\Compare\Desktop_.ini
  • C:\Far2\Plugins\Colorer\hrd\console\contrib\Desktop_.ini
  • C:\Far2\Plugins\7-Zip\Desktop_.ini
  • C:\Far2\Addons\Colors\Default Highlighting\Desktop_.ini
  • C:\Far2\Addons\Colors\Custom Highlighting\Desktop_.ini
  • C:\Far2\Addons\SetUp\Desktop_.ini
  • C:\Far2\Addons\Macros\Desktop_.ini
  • C:\Far2\Desktop_.ini
  • <Current directory>\Desktop_.ini
  • C:\Far2\Addons\Colors\Desktop_.ini
  • C:\Far2\Addons\Desktop_.ini
  • C:\Far2\Addons\Shell\Desktop_.ini
  • C:\Far2\Encyclopedia\Desktop_.ini
  • C:\Far2\Documentation\rus\Desktop_.ini
  • C:\Far2\Plugins\Desktop_.ini
  • C:\Far2\FExcept\Desktop_.ini
  • C:\Far2\Addons\XLat\Russian\Desktop_.ini
  • C:\Far2\Addons\XLat\Desktop_.ini
  • C:\Far2\Documentation\eng\Desktop_.ini
  • C:\Far2\Documentation\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\doc\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\lib\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\filemng\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\dragndrop\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\filezilla\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\fari\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\forms\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\filezilla\misc\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\my\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\release\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\putty\charset\Desktop_.ini
  • C:\Far2\PluginSDK\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\resource\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\tbx\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\tb2k\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\putty\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\packages\theme\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\far\Desktop_.ini
  • C:\Far2\Plugins\FTP\Desktop_.ini
  • C:\Far2\Plugins\FileCase\Desktop_.ini
  • C:\Far2\Plugins\HlfViewer\Desktop_.ini
  • C:\Far2\Plugins\FTP\lib\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\sources\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\keys\Desktop_.ini
  • C:\Far2\Plugins\FarCmds\Desktop_.ini
  • C:\Far2\Plugins\ExtSearch\sources\RegExp\Desktop_.ini
  • C:\Far2\Plugins\MacroView\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\console\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\components\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\dragext\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\core\Desktop_.ini
  • C:\Far2\Plugins\ProcList\Desktop_.ini
  • C:\Far2\Plugins\Network\Desktop_.ini
  • C:\Far2\Plugins\WinSCP\Desktop_.ini
  • C:\Far2\Plugins\TmpPanel\Desktop_.ini
Deletes the following files:
  • %TEMP%\90$$.Ico
Network activity:
Connects to:
  • '<L###LNET>.0.28':445
  • '<L####NET>.0.106':445
  • '<L####NET>.0.200':445
  • '<L###LNET>.0.45':445
  • '<L####NET>.0.203':445
  • '<L###LNET>.0.32':445
  • '<L###LNET>.0.27':445
  • '<L####NET>.0.134':445
  • '<L####NET_GATEWAY>':445
  • '<L####NET>.0.135':445
  • '<L####NET>.0.200':139
  • '<L####NET_GATEWAY>':139
  • '<L###LNET>.0.45':139
  • '<L####NET>.0.203':139
  • '<L###LNET>.0.28':139
  • '<L####NET>.0.106':139
  • '<L###LNET>.0.27':139
  • '<L###LNET>.0.32':139
  • '<L####NET>.0.135':139
  • '<L####NET>.0.134':139
Miscellaneous:
Searches for the following windows:
  • ClassName: 'msctls_statusbar32' WindowName: ''
  • ClassName: '' WindowName: ''
  • ClassName: 'Indicator' WindowName: ''
Wechat