Technical Information
- [<HKCU>\Software\Microsoft\Windows\CurrentVersion\Run] 'Chromium' = '%PROGRAM_FILES%\Internet Explorer\install.bat'
- '<SYSTEM32>\reg.exe' --type=renderer --lang=ru --force-fieldtrials="BrowserBlacklist/Enabled/ChromeSuggestions/Most Likely with Kodachrome/EmbeddedSearch/Group3 pct:10c stable:pp2 prefetch_results:1 reuse_instant_search_base_page:1/ExtensionInstallVerification/Enforce/GoogleNow/Enable/OmniboxBundledExperimentV1/StandardR4/Prerender/PrerenderEnabled/PrerenderLocalPredictorSpec/LocalPredictor=Disabled/QUIC/Disabled/SettingsEnforcement/no_enforcement/ShowAppLauncherPromo/ShowPromoUntilDismissed/Test0PercentDefault/group_01/UMA-Dynamic-Binary-Uniformity-Trial/default/UMA-Dynamic-Uniformity-Trial/Group3/UMA-New-Install-Uniformity-Trial/Experiment/UMA-Population-Restrict/normal/UMA-Session-Randomized-Uniformity-Trial-5-Percent/group_09/UMA-Uniformity-Trial-1-Percent/group_88/UMA-Uniformity-Trial-10-Percent/group_05/UMA-Uniformity-Trial-100-Percent/group_01/UMA-Uniformity-Trial-20-Percent/group_04/UMA-Uniformity-Trial-5-Percent/group_01/UMA-Uniformity-Trial-50-Percent/group_01/VoiceTrigger/Install/" --renderer-print-preview --enable-threaded-compositing --enable-delegated-renderer --disable-gpu-compositing --channel="2744.5.691351538\1944697545" /prefetch:673131151
- '<SYSTEM32>\reg.exe' ADD "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run" /V "Chromium" /t REG_SZ /F /D "%PROGRAM_FILES%\Internet Explorer\install.bat"
- <LS_APPDATA>\Google\Chrome\User Data\Default\IndexedDB\https_www.google.ru_0.indexeddb.leveldb\MANIFEST-000035
- <LS_APPDATA>\Google\Chrome\User Data\Default\IndexedDB\https_www.google.ru_0.indexeddb.leveldb\LOG
- %TEMP%\etilqs_YeDdn7z7Iikj0HW
- %HOMEPATH%\Downloads\video.php:Zone.Identifier
- <LS_APPDATA>\Google\Chrome\User Data\Default\Session Storage\000048.log
- <LS_APPDATA>\Google\Chrome\User Data\Default\IndexedDB\https_www.google.ru_0.indexeddb.leveldb\000035.dbtmp
- %HOMEPATH%\Downloads\FB72.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Session Storage\LOG
- <LS_APPDATA>\Google\Chrome\User Data\Default\F2BA.tmp
- <LS_APPDATA>\Google\Chrome\User Data\F2B9.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Session Storage\000046.dbtmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Session Storage\MANIFEST-000046
- <LS_APPDATA>\Google\Chrome\User Data\Default\Session Storage\000047.ldb
- %HOMEPATH%\Downloads\generate_204:Zone.Identifier
- %HOMEPATH%\Downloads\3FA2.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Storage\chrome-extension_djpghocmiooaahofhhcpemhjcjfpkpmg_0.localstorage
- <LS_APPDATA>\Google\Chrome\User Data\DCAD.tmp
- <LS_APPDATA>\Google\Chrome\User Data\5F33.tmp
- %TEMP%\etilqs_235tg4AxIwXh1EQ
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Storage\chrome-extension_djpghocmiooaahofhhcpemhjcjfpkpmg_0.localstorage-journal
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1657.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1626.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\15E6.tmp
- <LS_APPDATA>\Google\Chrome\User Data\2251.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1795.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1744.tmp
- <LS_APPDATA>\Google\Chrome\User Data\F19F.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\000002.dbtmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000002
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\000001.dbtmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Current Session
- <LS_APPDATA>\Google\Chrome\User Data\Default\CE17.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\LOG
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000001
- %PROGRAM_FILES%\Internet Explorer\manifest.json
- %PROGRAM_FILES%\Internet Explorer\jquery.min.js
- %PROGRAM_FILES%\Internet Explorer\install.bat
- %PROGRAM_FILES%\Internet Explorer\icon.png
- %PROGRAM_FILES%\Internet Explorer\background.js
- %PROGRAM_FILES%\Internet Explorer\script.js
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension State\000047.ldb
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension State\LOG
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000003.log
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension State\000048.log
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension State\000046.dbtmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension State\MANIFEST-000046
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\LOG
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\MANIFEST-000001
- %TEMP%\etilqs_8W4NE2GKXeDe86L
- <LS_APPDATA>\Google\Chrome\User Data\Default\History Provider Cache
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000002.dbtmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\MANIFEST-000002
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000001.dbtmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\16C6.tmp~RF81756.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1647.tmp~RF8166c.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1616.tmp~RF8163e.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1785.tmp~RF817a4.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Local State~RF8dcf6.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Local State~RF85f3f.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Local State~RF8228d.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Default\CE17.tmp
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\MANIFEST-000001
- <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\CURRENT~RF7cc91.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT~RF7e6c5.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\15D5.tmp~RF815ff.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Local State~RF7f305.TMP
- <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\MANIFEST-000001
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\16C6.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\16C6.tmp~RF81756.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1744.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\16C6.tmp
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1785.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1785.tmp~RF817a4.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1795.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1785.tmp
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1616.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1616.tmp~RF8163e.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1626.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1616.tmp
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1647.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1647.tmp~RF8166c.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1657.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\1647.tmp
- from <LS_APPDATA>\Google\Chrome\User Data\Local State to <LS_APPDATA>\Google\Chrome\User Data\Local State~RF85f3f.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\5F33.tmp to <LS_APPDATA>\Google\Chrome\User Data\Local State
- from <LS_APPDATA>\Google\Chrome\User Data\Local State to <LS_APPDATA>\Google\Chrome\User Data\Local State~RF8dcf6.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\DCAD.tmp to <LS_APPDATA>\Google\Chrome\User Data\Local State
- from <LS_APPDATA>\Google\Chrome\User Data\Local State to <LS_APPDATA>\Google\Chrome\User Data\Local State~RF8228d.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\2251.tmp to <LS_APPDATA>\Google\Chrome\User Data\Local State
- from %HOMEPATH%\Downloads\generate_204.crdownload to %HOMEPATH%\Downloads\generate_204
- from %HOMEPATH%\Downloads\3FA2.tmp to %HOMEPATH%\Downloads\generate_204.crdownload
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\15D5.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\15D5.tmp~RF815ff.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT to <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT~RF7e6c5.TMP
- from <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000002.dbtmp to <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT
- from <LS_APPDATA>\Google\Chrome\User Data\F19F.tmp to <LS_APPDATA>\Google\Chrome\User Data\Local State
- from <LS_APPDATA>\Google\Chrome\User Data\Default\Extension State\000046.dbtmp to <LS_APPDATA>\Google\Chrome\User Data\Default\Extension State\CURRENT
- from <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\000002.dbtmp to <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\CURRENT
- from <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\000001.dbtmp to <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\CURRENT
- from <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\000001.dbtmp to <LS_APPDATA>\Google\Chrome\User Data\Default\Local Extension Settings\pafkbggdmjlpgkdkcbjmhmfcdpncadgh\CURRENT
- from <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\CURRENT to <LS_APPDATA>\Google\Chrome\User Data\Default\Extension Rules\CURRENT~RF7cc91.TMP
- from %HOMEPATH%\Downloads\FB72.tmp to %HOMEPATH%\Downloads\video.php.crdownload
- from <LS_APPDATA>\Google\Chrome\User Data\Default\IndexedDB\https_www.google.ru_0.indexeddb.leveldb\000035.dbtmp to <LS_APPDATA>\Google\Chrome\User Data\Default\IndexedDB\https_www.google.ru_0.indexeddb.leveldb\CURRENT
- from <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\15E6.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\JumpListIcons\15D5.tmp
- from %HOMEPATH%\Downloads\video.php.crdownload to %HOMEPATH%\Downloads\video.php
- from <LS_APPDATA>\Google\Chrome\User Data\Default\F2BA.tmp to <LS_APPDATA>\Google\Chrome\User Data\Default\Preferences
- from <LS_APPDATA>\Google\Chrome\User Data\F2B9.tmp to <LS_APPDATA>\Google\Chrome\User Data\Local State
- from <LS_APPDATA>\Google\Chrome\User Data\Default\Session Storage\000046.dbtmp to <LS_APPDATA>\Google\Chrome\User Data\Default\Session Storage\CURRENT
- from <LS_APPDATA>\Google\Chrome\User Data\Local State to <LS_APPDATA>\Google\Chrome\User Data\Local State~RF7f305.TMP
- 'www.fa###ook.com':443
- 'tr######e.googleapis.com':443
- 'www.gs##tic.com':80
- 'pr####etubex.com':80
- '74.##5.232.51':443
- 'www.go##le.ru':443
- 'www.gs##tic.com':443
- 'ss#.#static.com':443
- www.gs##tic.com/generate_204
- pr####etubex.com/video.php?vi####
- DNS ASK tr######e.googleapis.com
- DNS ASK cl####s4.google.com
- DNS ASK www.go##le.ru
- DNS ASK www.gs##tic.com
- DNS ASK fb#####c-a.akamaihd.net
- DNS ASK pr####etubex.com
- DNS ASK cl####s3.google.com
- DNS ASK www.fa###ook.com
- DNS ASK www.go#####analytics.com
- DNS ASK www.go#####agmanager.com
- DNS ASK ru#####tic.pingdom.net
- DNS ASK d2#######clgz3.cloudfront.net
- DNS ASK ss#.#static.com
- DNS ASK www.google.com
- DNS ASK www.op##a.com
- DNS ASK ap##.google.com
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'Chrome_MessageWindow' WindowName: '<LS_APPDATA>\Google\Chrome\User Data'
- ClassName: 'Indicator' WindowName: ''