Техническая информация
Вредоносные функции:
Завершает или пытается завершить
следующие пользовательские процессы:
- iexplore.exe
- chrome.exe
- firefox.exe
- safari.exe
- opera.exe
Изменения в файловой системе:
Создает следующие файлы:
- %TEMP%\aut1.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-75LS8.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-OTK8T.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-T4KR3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-8G1JP.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-DNGJV.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-N98VR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-R8KC9.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-SRU1D.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-L1J1M.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-I9QO0.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-L05K4.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-ME5GC.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-FJ5VM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-RP9MJ.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-IAQ6R.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-VP4C6.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-UD6NU.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-LRS47.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-TVQGA.tmp
- %HOMEPATH%\Desktop\TunesKit Spotify Converter.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\Uninstall TunesKit Spotify Converter.lnk
- %ALLUSERSPROFILE%\Start Menu\Programs\TunesKit Spotify Converter\TunesKit Spotify Converter.lnk
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-6TFC6.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-TPGFO.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-KAPLG.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-HPHEN.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-GAH0S.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-VURJA.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-07EMB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-GB2PS.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-URNDK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-8KRVK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-OFQ3G.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-5RQ4A.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-78M1U.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-N6PKT.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-FOASM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-D553A.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-F232F.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-5F17Q.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-PBP5U.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-0OBF6.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-MG8HM.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-L26AL.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-APPN3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-P92GR.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-KCVQK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-GNU2K.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-CO8M3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\is-Q6157.tmp
- %TEMP%\is-O4DF9.tmp\~fhkduzn.tmp
- %CommonProgramFiles%\~fhkduzn.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-JBMNB.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-OUL1R.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-V8JU3.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-R36JN.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-9DD9F.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-FS7V7.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-ECS05.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-L6PHU.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-SQIHO.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-O7LTO.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-TKPPK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-B9J6R.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-B872Q.tmp
- %ProgramFiles%\TunesKit Spotify Converter\unins000.dat
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-HMTMH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-79HVK.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-RU7OS.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-2BLOC.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-Q7U04.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-EDV4H.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-9V6K2.tmp
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-RI9MH.tmp
- %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
Присваивает атрибут 'скрытый' для следующих файлов:
- %CommonProgramFiles%\~fhkduzn.tmp
Удаляет следующие файлы:
- %TEMP%\aut1.tmp
- %TEMP%\is-O4DF9.tmp\~fhkduzn.tmp
- %CommonProgramFiles%\~fhkduzn.tmp
Перемещает следующие файлы:
- %ProgramFiles%\TunesKit Spotify Converter\is-Q6157.tmp в %ProgramFiles%\TunesKit Spotify Converter\unins000.exe
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-UD6NU.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\registerhint.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-IAQ6R.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\about.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-RP9MJ.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\history.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-FJ5VM.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\library.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-ME5GC.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\loading.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-L05K4.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\main.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-I9QO0.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\menu.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-L1J1M.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\messagebox.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-SRU1D.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\preferences.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-R8KC9.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\register.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\de\is-N98VR.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\de\registerhint.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-DNGJV.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\about.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-8G1JP.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\history.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-N6PKT.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\preferences.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-VP4C6.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\register.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-T4KR3.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\library.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-OTK8T.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\loading.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-KAPLG.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\preferences.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-HPHEN.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\messagebox.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-B872Q.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\menu.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-GAH0S.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\main.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-07EMB.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\loading.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-VURJA.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_line.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-GB2PS.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\library.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-8KRVK.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\about.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-OFQ3G.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\registerhint.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-5RQ4A.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\register.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-78M1U.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\preferences.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-TVQGA.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\messagebox.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-LRS47.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\menu.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\fr\is-75LS8.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\fr\main.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-FOASM.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\messagebox.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-D553A.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\menu.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-9DD9F.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\main.xml
- %ProgramFiles%\TunesKit Spotify Converter\is-GNU2K.tmp в %ProgramFiles%\TunesKit Spotify Converter\ConvertLibrary.dll
- %ProgramFiles%\TunesKit Spotify Converter\is-KCVQK.tmp в %ProgramFiles%\TunesKit Spotify Converter\DuiLib.dll
- %ProgramFiles%\TunesKit Spotify Converter\is-P92GR.tmp в %ProgramFiles%\TunesKit Spotify Converter\WinSparkle.dll
- %ProgramFiles%\TunesKit Spotify Converter\is-APPN3.tmp в %ProgramFiles%\TunesKit Spotify Converter\WebStream.dll
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-L26AL.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\dialog.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-MG8HM.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\frame.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-0OBF6.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\icon.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-PBP5U.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\icon_80.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-5F17Q.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_bg.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-F232F.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_hot.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-V8JU3.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_pushed.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-JBMNB.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\list_header_sep.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-OUL1R.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\logo.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-R36JN.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main.png
- %ProgramFiles%\TunesKit Spotify Converter\is-CO8M3.tmp в %ProgramFiles%\TunesKit Spotify Converter\SpotifyConverter.exe
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-FS7V7.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_btn_convert.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-ECS05.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\loading.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-9V6K2.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_buttons.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-EDV4H.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_buttons.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-Q7U04.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_com_icons.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-2BLOC.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_default_cover.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-RU7OS.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_dragfiles.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-79HVK.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_bk.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-URNDK.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\history.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-HMTMH.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_menu_check.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-TPGFO.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\register.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-B9J6R.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\menu.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-TKPPK.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\scrollbar.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-O7LTO.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\about.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-SQIHO.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\history.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\en\is-L6PHU.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\en\library.xml
- %ProgramFiles%\TunesKit Spotify Converter\skin\is-RI9MH.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\main_progress.png
- %ProgramFiles%\TunesKit Spotify Converter\skin\ja\is-6TFC6.tmp в %ProgramFiles%\TunesKit Spotify Converter\skin\ja\registerhint.xml
Сетевая активность:
Подключается к:
- 'localhost':1038
- 'tu###kit.com':80
TCP:
Запросы HTTP GET:
- http://www.tu###kit.com/music-converter-for-spotify-win/user-guide.html via tu###kit.com
UDP:
- DNS ASK www.tu###kit.com
Другое:
Ищет следующие окна:
- ClassName: '' WindowName: ''
- ClassName: 'IEFrame' WindowName: ''
- ClassName: 'MS_AutodialMonitor' WindowName: ''
- ClassName: 'MS_WebcheckMonitor' WindowName: ''
Создает и запускает на исполнение:
- '%CommonProgramFiles%\~fhkduzn.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
- '%TEMP%\is-O4DF9.tmp\~fhkduzn.tmp' /SL5="$100E2,1620996,134144,%CommonProgramFiles%\~fhkduzn.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
Запускает на исполнение:
- '%ProgramFiles%\Internet Explorer\IEXPLORE.EXE' -nohome
