Техническая информация
Вредоносные функции:
Запускает на исполнение:
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -nohome
- '%TEMP%\is-KTR3K.tmp\~oduswdx.tmp' /SL5="$100E0,1607945,134144,%CommonProgramFiles%\~oduswdx.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%CommonProgramFiles%\~oduswdx.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Завершает или пытается завершить
следующие пользовательские процессы:
- safari.exe
- opera.exe
- firefox.exe
- iexplore.exe
- chrome.exe
Изменения в файловой системе:
Создает следующие файлы:
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-HFKO7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-JMHC1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-CCS1L.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-BT65N.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-TDB3D.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-QKBDK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-102UA.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-A18TH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-BRNQB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-LUB85.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-QJMUH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-JB439.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-L66UH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-MS8DK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-574CS.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-91TC9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-72QL9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-1J48R.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-P6C32.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-2GKDB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-EONLF.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-4EJGR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-KPR7C.tmp
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\unins000.dat
- %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\Uninstall TunesKit Spotify Converter.lnk
- %HOMEPATH%\Desktop\TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-6KNQ4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-UQCT1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-4P3GV.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-VLH5P.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-7C1TS.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-S3S67.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-H7V6P.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-29CT9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-AOL2I.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-NVKNF.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-C2OQB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-EU5A6.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-CB0MD.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-F8TD1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-VUSRK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-19AIE.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-P49VR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-23NU3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-IL22J.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-V3LD5.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-THV51.tmp
- %TEMP%\aut1.tmp
- %CommonProgramFiles%\~oduswdx.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-A3CHI.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-T5TPO.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-32BO5.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-K96QF.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-626QA.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-GTNQ7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-ODASI.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-B8S70.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-ERA7S.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-DANS4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-HBM4E.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-LOU1N.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-9KKOV.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-N8G5T.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-4OKKG.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-U3USR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-7K725.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-6OOI8.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-27EFK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-QP6D1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-8EUAM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-J9UQM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-NCRKH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-KE8GB.tmp
Присваивает атрибут 'скрытый' для следующих файлов:
- %CommonProgramFiles%\~oduswdx.tmp
Удаляет следующие файлы:
- %CommonProgramFiles%\~oduswdx.tmp
- %TEMP%\is-KTR3K.tmp\~oduswdx.tmp
- %TEMP%\aut1.tmp
Перемещает следующие файлы:
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-CCS1L.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\preferences.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-BT65N.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\register.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-574CS.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\menu.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-91TC9.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\messagebox.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-TDB3D.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\history.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-A18TH.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\library.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-HFKO7.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\registerhint.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-JMHC1.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\about.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-1J48R.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\main.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-JB439.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\register.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-L66UH.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\registerhint.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-9KKOV.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\messagebox.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-NVKNF.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\preferences.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-MS8DK.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\library.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-72QL9.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\loading.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-LUB85.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\about.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-QJMUH.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\history.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-S3S67.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\main.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-H7V6P.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\menu.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-29CT9.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\library.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-AOL2I.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\loading.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-2GKDB.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\register.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-EONLF.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\registerhint.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-4EJGR.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\messagebox.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-KPR7C.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\preferences.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-7C1TS.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\history.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-102UA.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\menu.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-P6C32.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\messagebox.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-BRNQB.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\loading.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-QKBDK.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\main.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-6KNQ4.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\registerhint.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-UQCT1.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\about.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-4P3GV.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\preferences.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-VLH5P.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\register.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-VUSRK.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_hot.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-23NU3.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_pushed.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-C2OQB.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\icon_80.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-EU5A6.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_bg.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-P49VR.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-GTNQ7.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_btn_convert.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-IL22J.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_sep.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-19AIE.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\logo.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-F8TD1.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\icon.png
- %ProgramFiles%\TunesKit Spotify Converter\is-A3CHI.tmp в %ProgramFiles%\TunesKit Spotify Converter\ConvertLibrary.dll
- %ProgramFiles%\TunesKit Spotify Converter\is-K96QF.tmp в %ProgramFiles%\TunesKit Spotify Converter\DuiLib.dll
- %ProgramFiles%\TunesKit Spotify Converter\is-V3LD5.tmp в %ProgramFiles%\TunesKit Spotify Converter\unins000.exe
- %ProgramFiles%\TunesKit Spotify Converter\is-THV51.tmp в %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-32BO5.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\dialog.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-CB0MD.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\frame.png
- %ProgramFiles%\TunesKit Spotify Converter\is-626QA.tmp в %ProgramFiles%\TunesKit Spotify Converter\WinSparkle.dll
- %ProgramFiles%\TunesKit Spotify Converter\is-T5TPO.tmp в %ProgramFiles%\TunesKit Spotify Converter\WebStream.dll
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-ODASI.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\about.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-B8S70.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\history.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-ERA7S.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\menu.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-DANS4.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\scrollbar.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-4OKKG.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\main.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-LOU1N.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\menu.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-HBM4E.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\library.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-N8G5T.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\loading.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-J9UQM.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_progress.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-U3USR.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_icons.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-7K725.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_default_cover.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-6OOI8.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_buttons.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-27EFK.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_buttons.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-KE8GB.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_check.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-8EUAM.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_line.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-QP6D1.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_dragfiles.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-NCRKH.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_bk.png
Сетевая активность:
Подключается к:
- 'www.tu###kit.com':80
- 'localhost':1037
TCP:
Запросы HTTP GET:
- http://www.tu###kit.com/
UDP:
- DNS ASK www.tu###kit.com
Другое:
Ищет следующие окна:
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: '' WindowName: ''
