Техническая информация
Вредоносные функции:
Ищет следующие окна с целью
обнаружения утилит для анализа:
- ClassName: 'OLLYDBG' WindowName: ''
Изменения в файловой системе:
Удаляет следующие файлы:
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00114
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00113
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00116
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00115
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00112
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00109
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00108
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00111
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00110
- %WINDIR%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.exe
- %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.txt
- %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.inf
- %WINDIR%\$NtUninstallWIC$\spuninst\updspapi.dll
- %WINDIR%\AppPatch\AcGenral.dll
- %WINDIR%\0.log
- %WINDIR%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.txt
- %WINDIR%\$MSI31Uninstall_KB893803v2$\spuninst\spuninst.inf
- %WINDIR%\$NtUninstallWIC$\spuninst\spuninst.exe
- %WINDIR%\$MSI31Uninstall_KB893803v2$\spuninst\updspapi.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00107
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00094
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00093
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00096
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00095
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00092
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00089
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00088
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00091
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00090
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00097
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00104
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00103
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00106
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00105
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00102
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00099
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00098
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00101
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00100
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\prc.nlp
- %WINDIR%\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.dll
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\prcp.nlp
- %WINDIR%\WinSxS\x86_System.EnterpriseServices_b03f5f7f11d50a3a_2.0.0.0_x-ww_7d5f3790\System.EnterpriseServices.Wrapper.dll
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfkd.nlp
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfc.nlp
- %WINDIR%\assembly\GAC_32\System.Data.OracleClient\2.0.0.0__b77a5c561934e089\System.Data.OracleClient.dll
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfkc.nlp
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normnfd.nlp
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sortkey.nlp
- %WINDIR%\assembly\GAC_MSIL\AspNetMMCExt\2.0.0.0__b03f5f7f11d50a3a\AspNetMMCExt.dll
- %WINDIR%\assembly\GAC_MSIL\Accessibility\2.0.0.0__b03f5f7f11d50a3a\Accessibility.dll
- %WINDIR%\WinSxS\MSIL_IEExecRemote_b03f5f7f11d50a3a_2.0.0.0_x-ww_6e57c34e\IEExecRemote.dll
- %WINDIR%\assembly\GAC_MSIL\cscompmgd\8.0.0.0__b03f5f7f11d50a3a\cscompmgd.dll
- %WINDIR%\assembly\GAC_32\System.Web\2.0.0.0__b03f5f7f11d50a3a\System.Web.dll
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\sorttbls.nlp
- %WINDIR%\assembly\GAC_32\System.Printing\3.0.0.0__31bf3856ad364e35\System.Printing.dll
- %WINDIR%\assembly\GAC_32\System.Transactions\2.0.0.0__b77a5c561934e089\System.Transactions.dll
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\xjis.nlp
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\normidna.nlp
- %WINDIR%\AppPatch\drvmain.sdb
- %WINDIR%\AppPatch\apph_sp.sdb
- %WINDIR%\AppPatch\sysmain.sdb
- %WINDIR%\AppPatch\msimain.sdb
- %WINDIR%\AppPatch\apphelp.sdb
- %WINDIR%\AppPatch\AcLua.dll
- %WINDIR%\AppPatch\AcLayers.dll
- %WINDIR%\AppPatch\AcXtrnal.dll
- %WINDIR%\AppPatch\AcSpecfc.dll
- %WINDIR%\assembly\Desktop.ini
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\ksc.nlp
- %WINDIR%\assembly\GAC_32\PresentationCore\3.0.0.0__31bf3856ad364e35\PresentationCore.dll
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\mscorlib.dll
- %WINDIR%\assembly\GAC_32\System.Data\2.0.0.0__b77a5c561934e089\System.Data.dll
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\bopomofo.nlp
- %WINDIR%\assembly\GAC_32\ISymWrapper\2.0.0.0__b03f5f7f11d50a3a\ISymWrapper.dll
- %WINDIR%\assembly\GAC_32\CustomMarshalers\2.0.0.0__b03f5f7f11d50a3a\CustomMarshalers.dll
- %WINDIR%\assembly\GAC_32\mscorlib\2.0.0.0__b77a5c561934e089\big5.nlp
- %WINDIR%\assembly\GAC_32\Microsoft.Transactions.Bridge.Dtc\3.0.0.0__b03f5f7f11d50a3a\Microsoft.Transactions.Bridge.Dtc.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00034
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00033
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00036
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00035
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00032
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00029
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00028
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00031
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00030
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00037
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00044
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00043
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00046
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00045
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00042
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00039
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00038
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00041
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00040
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00027
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00014
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00013
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00016
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00015
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msisip.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msiexec.exe
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msi.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msimsg.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\msihnd.dll
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00017
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00024
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00023
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00026
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00025
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00022
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00019
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00018
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00021
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00020
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00075
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00074
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00077
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00076
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00073
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00070
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00069
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00072
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00071
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00078
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00085
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00084
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00087
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00086
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00083
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00080
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00079
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00082
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00081
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00068
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00055
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00054
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00057
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00056
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00053
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00048
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00047
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00052
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00051
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00058
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00065
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00064
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00067
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00066
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00063
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00060
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00059
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00062
- %WINDIR%\$MSI31Uninstall_KB893803v2$\reg00061
