Техническая информация
Для обеспечения автозапуска и распространения:
Создает следующие сервисы:
- [<HKLM>\SYSTEM\ControlSet001\Services\DIRECTIO] 'ImagePath' = '%ProgramFiles%\BurnInTest\DirectIo32.sys'
Вредоносные функции:
Ищет следующие окна с целью
обнаружения утилит для анализа:
- ClassName: 'OLLYDBG', WindowName: ''
Изменения в файловой системе:
Создает следующие файлы:
- %ProgramFiles%\BurnInTest\bitlocalization.txt
- %ProgramFiles%\BurnInTest\Readme.txt
- %ProgramFiles%\BurnInTest\HTML_R\zoom_search.js
- %ProgramFiles%\BurnInTest\BITErrorClassification.txt
- %ProgramFiles%\BurnInTest\key.dat
- %ProgramFiles%\BurnInTest\Testsound.mid
- %ProgramFiles%\BurnInTest\SysInfo_localization.txt
- %ProgramFiles%\BurnInTest\LastUsed.bitcfg
- %ProgramFiles%\BurnInTest\HTML_R\highlight.js
- %ProgramFiles%\BurnInTest\HTML_R\rebooter_navigation.js
- %ProgramFiles%\BurnInTest\HTML_R\default.css
- %ProgramFiles%\BurnInTest\HTML_R\helpman_topicinit.js
- %ProgramFiles%\BurnInTest\HTML_R\zoom_index.js
- %ProgramFiles%\BurnInTest\HTML_R\zoom_pageinfo.js
- %ProgramFiles%\BurnInTest\HTML_R\Rebooter_popup_html.js
- %ProgramFiles%\BurnInTest\HTML_R\settings.js
- %ProgramFiles%\BurnInTest\amd_ags_x86.dll
- %ProgramFiles%\BurnInTest\D3DCompiler_43.dll
- %ProgramFiles%\BurnInTest\Sound_Plugin.exe
- %ProgramFiles%\BurnInTest\Webcam_Plugin.exe
- %ProgramFiles%\BurnInTest\DirectIo32.sys
- %HOMEPATH%\My Documents\PassMark\BurnInTest\LastUsed.bitcfg
- %ProgramFiles%\BurnInTest\d3dx11_43.dll
- %ProgramFiles%\BurnInTest\D3DX9_43.dll
- %ProgramFiles%\BurnInTest\Battery_Capacity_Plugin.exe
- %ProgramFiles%\BurnInTest\bit.exe
- %ProgramFiles%\BurnInTest\HP Printer file.pcl
- %ProgramFiles%\BurnInTest\BurnInTest.url
- %ProgramFiles%\BurnInTest\Microphone_Plugin.exe
- %ProgramFiles%\BurnInTest\rebooter.exe
- %ProgramFiles%\BurnInTest\Endpoint.exe
- %ProgramFiles%\BurnInTest\MemTest32.exe
- %ProgramFiles%\BurnInTest\HTML_R\rebooter_kwindex_static.html
- %ProgramFiles%\BurnInTest\HTML_R\nav_up_blue.gif
- %ProgramFiles%\BurnInTest\HTML_R\logo.png
- %ProgramFiles%\BurnInTest\HTML_R\nav_left_blue.gif
- %ProgramFiles%\BurnInTest\HTML_R\nav_right_blue.gif
- %ProgramFiles%\BurnInTest\HTML_R\autologin.htm
- %ProgramFiles%\BurnInTest\HTML_R\autorun.htm
- %ProgramFiles%\BurnInTest\bit.exe.manifest
- %ProgramFiles%\BurnInTest\rebooter.exe.manifest
- %ProgramFiles%\BurnInTest\Sinewave_587.3Hz.mp3
- %ProgramFiles%\BurnInTest\Testsound.mp3
- %ProgramFiles%\BurnInTest\test.wmv
- %ProgramFiles%\BurnInTest\Sinewave_392Hz.mp3
- %ProgramFiles%\BurnInTest\HTML_R\ciconidx.gif
- %ProgramFiles%\BurnInTest\HTML_R\cicon_loadindex_ani.gif
- %ProgramFiles%\BurnInTest\Testsound.wav
- %ProgramFiles%\BurnInTest\HTML_R\cicon9.gif
- %ProgramFiles%\BurnInTest\BITCertificateTemplate.html
- %ProgramFiles%\BurnInTest\HTML_R\index.html
- %ProgramFiles%\BurnInTest\HTML_R\systemreq.htm
- %ProgramFiles%\BurnInTest\HTML_R\whats_new.htm
- %ProgramFiles%\BurnInTest\HTML_R\rebooter_ftsearch.html
- %ProgramFiles%\BurnInTest\HTML_R\rebooter_kwindex_dyn.html
- %ProgramFiles%\BurnInTest\HTML_R\rebooter_content_dyn.html
- %ProgramFiles%\BurnInTest\HTML_R\rebooter_content_static.html
- %ProgramFiles%\BurnInTest\HTML_R\copyright.htm
- %ProgramFiles%\BurnInTest\HTML_R\cycle.htm
- %ProgramFiles%\BurnInTest\HTML_R\commandline.htm
- %ProgramFiles%\BurnInTest\HTML_R\contacts.htm
- %ProgramFiles%\BurnInTest\HTML_R\overview.htm
- %ProgramFiles%\BurnInTest\HTML_R\reboottypes.htm
- %ProgramFiles%\BurnInTest\HTML_R\faq.htm
- %ProgramFiles%\BurnInTest\HTML_R\forcetypes.htm
Другое:
Создает и запускает на исполнение:
- '%ProgramFiles%\BurnInTest\bit.exe'
