Trojan.MulDrop9.38564

Техническая информация

Для обеспечения автозапуска и распространения

Создает или изменяет следующие файлы

%WINDIR%\tasks\googleupdatetaskmachinecore.job
%WINDIR%\tasks\googleupdatetaskmachineua.job

Создает следующие сервисы

[<HKLM>\System\CurrentControlSet\Services\gupdate] 'Start' = '00000002'

Изменения в файловой системе

Создает следующие файлы

%TEMP%\sfx.ini
%ProgramFiles%\google\google earth pro\client\qtcore4.dll
%ProgramFiles%\google\google earth pro\client\ge_expat.dll
%ProgramFiles%\google\google earth pro\client\lang\fil.qm
%ProgramFiles%\google\google earth pro\client\msvcp100.dll
%ProgramFiles%\google\google earth pro\client\shaders\stars.glslesv
%ProgramFiles%\google\google earth pro\client\iggfx.dll
%ProgramFiles%\google\google earth pro\client\shaders\viewshed.h
%ProgramFiles%\google\google earth pro\client\shaders\atmosphere.glsllib
%ProgramFiles%\google\google earth pro\client\lang\fa.qm
%ProgramFiles%\google\google earth pro\client\shaders\stleafmesh.arbvp1
%ProgramFiles%\google\google earth pro\client\lang\sr.qm
%ProgramFiles%\google\google earth pro\client\res\terrainmgr.rcc
%ProgramFiles%\google\google earth pro\client\qtwebkit4.dll
%ProgramFiles%\google\google earth pro\client\shaders\stleafmesh.glslesf
%ProgramFiles%\google\google earth pro\client\res\userpalette.kml
%ProgramFiles%\google\google earth pro\client\shaders\stleafcard.cfg
%ProgramFiles%\google\google earth pro\client\lang\it.qm
%ProgramFiles%\google\google earth pro\client\prime_meridian.csv
%ProgramFiles%\google\google earth pro\client\gdal_datum.csv
%ProgramFiles%\google\google earth pro\client\shaders\stfrond.glslesv
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\xbox_360.ini
%ProgramFiles%\google\google earth pro\client\res\flightsim\hud\generic.ini
%ProgramFiles%\google\google earth pro\client\lang\zh-hans.qm
%ProgramFiles%\google\google earth pro\client\shaders\stfrond.cfg
%ProgramFiles%\google\google earth pro\client\shaders\stleafcard.arbvp1
%ProgramFiles%\google\google earth pro\client\lang\sl.qm
%ProgramFiles%\google\google earth pro\client\res\flightsim\keyboard\sr22.ini
%ProgramFiles%\google\google earth pro\client\seed_2d.dgn
%ProgramFiles%\google\google earth pro\client\msvcr100.dll
%ProgramFiles%\google\google earth pro\client\uninstall.ico
%ProgramFiles%\google\google earth pro\client\lang\zh-hant.qm
%ProgramFiles%\google\google earth pro\client\lang\ja.qm
%ProgramFiles%\google\google earth pro\client\shaders\watersurface.glslesf
%ProgramFiles%\google\google earth pro\client\shaders\glsles.h
%ProgramFiles%\google\google earth pro\client\alchemy\ogles20\d3dcompiler_43.dll
%ProgramFiles%\google\google earth pro\client\lang\el.qm
%ProgramFiles%\google\google earth pro\client\lang\lv.qm
%ProgramFiles%\google\google earth pro\client\res\tourcontrols.rcc
%ProgramFiles%\google\google earth pro\client\shaders\stbranch.arbfp1
%ProgramFiles%\google\google earth pro\client\res\tmcontrols.rcc
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\logitech_force_3d.ini
%ProgramFiles%\google\google earth pro\client\res\search.rcc
%ProgramFiles%\google\google earth pro\client\wavdest.ax
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\speed_link_black_hawk.ini
%ProgramFiles%\google\google earth pro\client\leap108.dll
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\speed_link_cougar_flightstick.ini
%ProgramFiles%\google\google earth pro\client\shaders\stfrond.arbvp1
%ProgramFiles%\google\google earth pro\client\alchemy\ogl\igsg.dll
%ProgramFiles%\google\google earth pro\client\shaders\stbillboard.ps_2_0
%ProgramFiles%\google\google earth pro\client\res\spin_icon.png
%ProgramFiles%\google\google earth pro\client\res\cursor_crosshair_thick.png
%ProgramFiles%\google\google earth pro\client\wmv9_dvd_quality_(6mbps).prx
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\logitech_freedom.ini
%ProgramFiles%\google\google earth pro\client\wmv9_highest_quality_video_(16mbps).prx
%ProgramFiles%\google\google earth pro\client\shaders\precipitation_double_cone.glslesf
%ProgramFiles%\google\google earth pro\client\seed_3d.dgn
%ProgramFiles%\google\google earth pro\client\res\navcontrols.rcc
%ProgramFiles%\google\google earth pro\client\res\builtin_webdata.rcc
%ProgramFiles%\google\google earth pro\client\gdalicon.png
%ProgramFiles%\google\google earth pro\client\res\flightsim\planet\earth.ini
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\logitech_extreme_3d.ini
%ProgramFiles%\google\google earth pro\client\shaders\color.h
%ProgramFiles%\google\google earth pro\client\res\progress.rcc
%ProgramFiles%\google\google earth pro\client\alchemy\ogles20\d3dx9_43.dll
%ProgramFiles%\google\google earth pro\client\igopt.dll
%ProgramFiles%\google\google earth pro\client\shaders\stbranch.glslesf
%ProgramFiles%\google\google earth pro\client\res\doppler.txt
%ProgramFiles%\google\google earth pro\client\lang\vi.qm
%ProgramFiles%\google\google earth pro\client\lang\fr.qm
%ProgramFiles%\google\google earth pro\client\res\localshapes.rcc
%ProgramFiles%\google\google earth pro\client\shaders\stleafcard.asd
%ProgramFiles%\google\google earth pro\client\importerglobalsettings.ini
%ProgramFiles%\google\google earth pro\client\shaders\stleafcard.vs_2_0
%ProgramFiles%\google\google earth pro\client\res\flightsim\aircraft\sr22.acf
%ProgramFiles%\google\google earth pro\client\shaders\hammer_aitoff.glslesf
%ProgramFiles%\google\google earth pro\client\lang\ko.qm
%ProgramFiles%\google\google earth pro\client\igexportcommon.dll
%ProgramFiles%\google\google earth pro\client\lang\fi.qm
%ProgramFiles%\google\google earth pro\client\gdal17.dll
%ProgramFiles%\google\google earth pro\client\gpl.txt
%ProgramFiles%\google\google earth pro\client\shaders\stleafcard.ps_2_0
%ProgramFiles%\google\google earth pro\client\lang\es-419.qm
%ProgramFiles%\google\google earth pro\client\projop_wparm.csv
%ProgramFiles%\google\google earth pro\client\lang\pt.qm
%ProgramFiles%\google\google earth pro\client\res\print.rcc
%ProgramFiles%\google\google earth pro\client\lang\hu.qm
%ProgramFiles%\google\google earth pro\client\shaders\stleafmesh.asd
%ProgramFiles%\google\google earth pro\client\qtgui4.dll
%ProgramFiles%\google\google earth pro\client\lang\pl.qm
%ProgramFiles%\google\google earth pro\client\googleearth_pro.dll
%ProgramFiles%\google\google earth pro\client\shaders\stbranch.asd
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\saitek_cyborg_evo.ini
%ProgramFiles%\google\google earth pro\client\lang\zh-hant-hk.qm
%ProgramFiles%\google\google earth pro\client\res\toolbar.rcc
%ProgramFiles%\google\google earth pro\client\lang\no.qm
%ProgramFiles%\google\google earth pro\client\alchemy\ogles20\libglesv2.dll
%ProgramFiles%\google\google earth pro\client\res\cursor_crosshair_inverse.png
%ProgramFiles%\google\google earth pro\client\shaders\stleafmesh.arbfp1
%ProgramFiles%\google\google earth pro\client\res\leftpanel-layer.rcc
%ProgramFiles%\google\google earth pro\client\res\application.rcc
%ProgramFiles%\google\google earth pro\client\shaders\stfrond.asd
%ProgramFiles%\google\google earth pro\client\alchemy\ogl\igattrs.dll
%ProgramFiles%\google\google earth pro\client\shaders\water.glsllib
%ProgramFiles%\google\google earth pro\client\s57expectedinput.csv
%ProgramFiles%\google\google earth pro\client\drivers.ini
%ProgramFiles%\google\google earth pro\client\ecw_cs.dat
%ProgramFiles%\google\google earth pro\client\shaders\precipitation_double_cone.glslesv
%ProgramFiles%\google\google earth pro\client\lang\ar.qm
%ProgramFiles%\google\google earth pro\client\igsg.dll
%ProgramFiles%\google\google earth pro\client\alchemy\ogles20\iggfx.dll
%ProgramFiles%\google\google earth pro\client\lang\nl.qm
%ProgramFiles%\google\google earth pro\client\unit_of_measure.csv
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\generic.ini
%ProgramFiles%\google\google earth pro\client\lang\bg.qm
%ProgramFiles%\google\google earth pro\client\imageformats\qjpeg4.dll
%ProgramFiles%\google\google earth pro\client\importeruisettings.ini
%ProgramFiles%\google\google earth pro\client\igcore.dll
%ProgramFiles%\google\google earth pro\client\igutils.dll
%ProgramFiles%\google\google earth pro\client\shaders\stfrond.ps_2_0
%ProgramFiles%\google\google earth pro\client\lang\sv.qm
%ProgramFiles%\google\google earth pro\client\res\mouse3dgui.rcc
%ProgramFiles%\google\google earth pro\client\res\startinglocations.rcc
%ProgramFiles%\google\google earth pro\client\shaders\stbranch.arbvp1
%ProgramFiles%\google\google earth pro\client\shaders\stbillboard.arbvp1
%ProgramFiles%\google\google earth pro\client\shaders\stleafcard.glslesf
%ProgramFiles%\google\google earth pro\client\s57attributes.csv
%ProgramFiles%\google\google earth pro\client\icudt.dll
%ProgramFiles%\google\google earth pro\client\alchemy\optimizations\igoptextension.dll
%ProgramFiles%\google\google earth pro\client\google_earth.ico
%ProgramFiles%\google\google earth pro\client\s57objectclasses.csv
%ProgramFiles%\google\google earth pro\client\earthps.dll
%ProgramFiles%\google\google earth pro\client\pcoptimizations.ini
%ProgramFiles%\google\google earth pro\client\shaders\stcommonobjects.ini
%ProgramFiles%\google\google earth pro\client\alchemy\ogles20\libegl.dll
%ProgramFiles%\google\google earth pro\client\lang\hi.qm
%ProgramFiles%\google\google earth pro\client\shaders\watersurface.glslesv
%ProgramFiles%\google\google earth pro\client\res\unknown_plugin.png
%ProgramFiles%\google\google earth pro\client\res\notifications.rcc
%ProgramFiles%\google\google earth pro\client\pcs.csv
%ProgramFiles%\google\google earth pro\client\shaders\stfrond.glslesf
%ProgramFiles%\google\google earth pro\client\res\statusbar.rcc
%ProgramFiles%\google\google earth pro\client\res\default_myplaces.rcc
%ProgramFiles%\google\google earth pro\client\shaders\stleafcard.glslesv
%ProgramFiles%\google\google earth pro\client\lang\de.qm
%ProgramFiles%\google\google earth pro\client\igmath.dll
%ProgramFiles%\google\google earth pro\client\lang\id.qm
%ProgramFiles%\google\google earth pro\client\shaders\speedtree_configuration_glsles.h
%ProgramFiles%\google\google earth pro\client\alchemy\ogl\iggfx.dll
%ProgramFiles%\google\google earth pro\client\lang\lt.qm
%ProgramFiles%\google\google earth pro\client\res\filmstrip.rcc
%ProgramFiles%\google\google earth pro\client\shaders\stleafcard.arbfp1
%ProgramFiles%\google\google earth pro\client\lang\ro.qm
%ProgramFiles%\google\google earth pro\client\shaders\stfrond.vs_2_0
%ProgramFiles%\google\google earth pro\client\qtnetwork4.dll
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\speed_link_dark_tornado.ini
%ProgramFiles%\google\google earth pro\client\alchemy\ogles20\igattrs.dll
%ProgramFiles%\google\google earth pro\client\gpsbabel.exe
%ProgramFiles%\google\google earth pro\client\res\startinglocations-nonmac.rcc
%ProgramFiles%\google\google earth pro\client\proj.dll
%ProgramFiles%\google\google earth pro\client\shaders\stbranch.vs_2_0
%ProgramFiles%\google\google earth pro\client\shaders\stbranch.cfg
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\saitek_x52.ini
%ProgramFiles%\google\google earth pro\client\lang\uk.qm
%ProgramFiles%\google\google earth pro\client\lang\cs.qm
%ProgramFiles%\google\google earth pro\client\imageformats\qgif4.dll
%ProgramFiles%\google\google earth pro\client\shaders\stbillboard.glslesv
%ProgramFiles%\google\google earth pro\client\shaders\stbillboard.vs_2_0
%ProgramFiles%\google\google earth pro\client\alchemy\ogles20\igsg.dll
%ProgramFiles%\google\google earth pro\client\res\renderui.rcc
%ProgramFiles%\google\google earth pro\client\res\balloons.rcc
%ProgramFiles%\google\google earth pro\client\igattrs.dll
%ProgramFiles%\google\google earth pro\client\stateplane.csv
%ProgramFiles%\google\google earth pro\client\lang\tr.qm
%ProgramFiles%\google\google earth pro\client\shaders\stleafmesh.ps_2_0
%ProgramFiles%\google\google earth pro\client\res\leftpanel-common.rcc
%ProgramFiles%\google\google earth pro\client\shaders\stbillboard.glslesf
%ProgramFiles%\google\google earth pro\client\res\flightsim\flightsim.ini
%ProgramFiles%\google\update\1.3.33.5\goopdateres_da.dll
%ProgramFiles%\gum1.tmp\goopdateres_sw.dll
%ProgramFiles%\gum1.tmp\goopdateres_sv.dll
%ProgramFiles%\gum1.tmp\goopdateres_sr.dll
%ProgramFiles%\gum1.tmp\goopdateres_sl.dll
%ProgramFiles%\gum1.tmp\goopdateres_sk.dll
%ProgramFiles%\gum1.tmp\goopdateres_ru.dll
%ProgramFiles%\gum1.tmp\goopdateres_ro.dll
%ProgramFiles%\gum1.tmp\goopdateres_pt-pt.dll
%ProgramFiles%\gum1.tmp\goopdateres_ja.dll
%ProgramFiles%\gum1.tmp\goopdateres_pt-br.dll
%ProgramFiles%\gum1.tmp\goopdateres_no.dll
%ProgramFiles%\gum1.tmp\goopdateres_nl.dll
%ProgramFiles%\gum1.tmp\goopdateres_ms.dll
%ProgramFiles%\gum1.tmp\goopdateres_mr.dll
%ProgramFiles%\gum1.tmp\goopdateres_ml.dll
%ProgramFiles%\gum1.tmp\goopdateres_lv.dll
%ProgramFiles%\gum1.tmp\goopdateres_lt.dll
%ProgramFiles%\gum1.tmp\goopdateres_ko.dll
%ProgramFiles%\gum1.tmp\goopdateres_pl.dll
%ProgramFiles%\gum1.tmp\goopdateres_kn.dll
%ProgramFiles%\gum1.tmp\goopdateres_ta.dll
%ProgramFiles%\google\update\1.3.33.5\goopdate.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ca.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_bn.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_bg.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ar.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_am.dll
%ProgramFiles%\google\update\1.3.33.5\googleupdatecomregistershell64.exe
%ProgramFiles%\google\update\1.3.33.5\googlecrashhandler64.exe
%ProgramFiles%\google\update\1.3.33.5\googlecrashhandler.exe
%ProgramFiles%\gum1.tmp\goopdateres_th.dll
%ProgramFiles%\gum1.tmp\goopdateres_te.dll
%ProgramFiles%\google\update\1.3.33.5\googleupdate.exe
%ProgramFiles%\gum1.tmp\googleupdatesetup.exe
%ProgramFiles%\gum1.tmp\goopdateres_zh-tw.dll
%ProgramFiles%\gum1.tmp\goopdateres_zh-cn.dll
%ProgramFiles%\gum1.tmp\goopdateres_vi.dll
%ProgramFiles%\gum1.tmp\goopdateres_ur.dll
%ProgramFiles%\gum1.tmp\goopdateres_uk.dll
%ProgramFiles%\gum1.tmp\goopdateres_tr.dll
%ProgramFiles%\google\update\1.3.33.5\googleupdatecore.exe
%ProgramFiles%\gum1.tmp\goopdateres_iw.dll
%ProgramFiles%\gum1.tmp\goopdateres_it.dll
%ProgramFiles%\gum1.tmp\goopdateres_is.dll
%ProgramFiles%\gum1.tmp\googlecrashhandler64.exe
%ProgramFiles%\gum1.tmp\psuser_64.dll
%ProgramFiles%\gum1.tmp\psuser.dll
%ProgramFiles%\gum1.tmp\psmachine_64.dll
%ProgramFiles%\gum1.tmp\psmachine.dll
%ProgramFiles%\gum1.tmp\googleupdatewebplugin.exe
%ProgramFiles%\gum1.tmp\googleupdatecomregistershell64.exe
%ProgramFiles%\gum1.tmp\goopdateres_am.dll
%ProgramFiles%\gum1.tmp\googleupdateondemand.exe
%ProgramFiles%\gum1.tmp\googleupdatehelper.msi
%ProgramFiles%\gum1.tmp\npgoogleupdate3.dll
%ProgramFiles%\gum1.tmp\goopdate.dll
%ProgramFiles%\gum1.tmp\googlecrashhandler.exe
%ProgramFiles%\gum1.tmp\googleupdate.exe
%ProgramFiles%\gut2.tmp
%TEMP%\net1.vbs
%TEMP%\google-earth-7.3.exe
%ProgramFiles%\gum1.tmp\googleupdatebroker.exe
%ProgramFiles%\gum1.tmp\goopdateres_ar.dll
%ProgramFiles%\gum1.tmp\googleupdatecore.exe
%ProgramFiles%\gum1.tmp\goopdateres_bg.dll
%ProgramFiles%\gum1.tmp\goopdateres_id.dll
%ProgramFiles%\gum1.tmp\goopdateres_et.dll
%ProgramFiles%\gum1.tmp\goopdateres_hu.dll
%ProgramFiles%\gum1.tmp\goopdateres_hr.dll
%ProgramFiles%\gum1.tmp\goopdateres_hi.dll
%ProgramFiles%\gum1.tmp\goopdateres_gu.dll
%ProgramFiles%\gum1.tmp\goopdateres_fr.dll
%ProgramFiles%\gum1.tmp\goopdateres_fil.dll
%ProgramFiles%\gum1.tmp\goopdateres_fi.dll
%ProgramFiles%\gum1.tmp\goopdateres_fa.dll
%ProgramFiles%\gum1.tmp\goopdateres_es-419.dll
%ProgramFiles%\gum1.tmp\goopdateres_bn.dll
%ProgramFiles%\gum1.tmp\goopdateres_es.dll
%ProgramFiles%\gum1.tmp\goopdateres_en-gb.dll
%ProgramFiles%\gum1.tmp\goopdateres_en.dll
%ProgramFiles%\gum1.tmp\goopdateres_el.dll
%ProgramFiles%\gum1.tmp\goopdateres_de.dll
%ProgramFiles%\gum1.tmp\goopdateres_da.dll
%ProgramFiles%\gum1.tmp\goopdateres_cs.dll
%ProgramFiles%\gum1.tmp\goopdateres_ca.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_cs.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_de.dll
%ProgramFiles%\google\google earth pro\client\alchemyext.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_el.dll
%ProgramFiles%\google\update\download\{65e60e95-0de9-43ff-9f3f-4f7d2dff04b5}\7.1.8.3036\googleearth-win-pro-7.1.8.3036.exe
%TEMP%\bitf.tmp
%WINDIR%\temp\tarc.tmp
%WINDIR%\temp\cabb.tmp
%WINDIR%\temp\tara.tmp
%WINDIR%\temp\cab9.tmp
%WINDIR%\temp\tar4.tmp
%WINDIR%\temp\cab3.tmp
%ProgramFiles%\google\update\1.3.33.5\goopdateres_zh-cn.dll
%ProgramFiles%\google\update\1.3.33.5\googleupdatewebplugin.exe
%ProgramFiles%\google\update\1.3.33.5\googleupdatebroker.exe
%ProgramFiles%\google\update\1.3.33.5\npgoogleupdate3.dll
%ProgramFiles%\google\update\1.3.33.5\googleupdatesetup.exe
%ProgramFiles%\google\update\1.3.33.5\psmachine_64.dll
%ProgramFiles%\google\update\1.3.33.5\psmachine.dll
%ProgramFiles%\google\update\1.3.33.5\psuser_64.dll
%ProgramFiles%\google\update\1.3.33.5\psuser.dll
%ProgramFiles%\google\update\1.3.33.5\googleupdatehelper.msi
%ProgramFiles%\google\update\1.3.33.5\googleupdateondemand.exe
%ProgramFiles%\google\update\1.3.33.5\goopdateres_zh-tw.dll
%ProgramFiles%\google\update\install\{f9b4821c-2032-4d34-bbb2-1a55697ca44a}\googleearth-win-pro-7.1.8.3036.exe
%ProgramFiles%\google\google earth pro\client\shaders\atmosphere.glslesf
%ProgramFiles%\google\google earth pro\client\gcs.csv
%ProgramFiles%\google\google earth pro\client\lang\ca.qm
%ProgramFiles%\google\google earth pro\client\shaders\stars.glslesf
%ProgramFiles%\google\google earth pro\client\shaders\stfrond.arbfp1
%ProgramFiles%\google\google earth pro\client\kml_file.ico
%ProgramFiles%\google\google earth pro\client\shaders\stleafmesh.vs_2_0
%ProgramFiles%\google\google earth pro\client\lang\sk.qm
%ProgramFiles%\google\google earth pro\client\lang\th.qm
%TEMP%\googleearth-pro.msi.log
%TEMP%\googleearth-pro.msi
%ProgramFiles%\google\google earth pro\client\res\flightsim\keyboard\generic.ini
%ProgramFiles%\google\google earth pro\client\lang\ru.qm
%ProgramFiles%\google\google earth pro\client\res\flightsim\controller\genius_maxfighter_f16u.ini
C:\config.msi\13d6eb.rbs
%WINDIR%\installer\msi11.tmp
%WINDIR%\installer\13d6ea.ipi
%WINDIR%\installer\msi10.tmp
%WINDIR%\installer\13d6e7.msi
%ProgramFiles%\google\google earth pro\client\shaders\stbillboard.asd
%ProgramFiles%\google\update\1.3.33.5\goopdateres_vi.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ur.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_uk.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_iw.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_it.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_is.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_id.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_hu.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_hr.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_hi.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_kn.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_gu.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_fil.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_fi.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_fa.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_et.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_es-419.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_es.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_en-gb.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_en.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_fr.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ko.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ja.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_lt.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_tr.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ru.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_th.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_te.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ta.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_sw.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_sv.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_sr.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_sl.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_sk.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ro.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_lv.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_pt-pt.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_pt-br.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_pl.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_no.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_nl.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ms.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_mr.dll
%ProgramFiles%\google\update\1.3.33.5\goopdateres_ml.dll
%ProgramFiles%\google\google earth pro\client\lang\hr.qm
%WINDIR%\installer\13d6ec.msi

Присваивает атрибут 'скрытый' для следующих файлов

%TEMP%\bitf.tmp

Удаляет следующие файлы

%TEMP%\sfx.ini
%ProgramFiles%\gum1.tmp\goopdateres_mr.dll
%ProgramFiles%\gum1.tmp\goopdateres_ml.dll
%ProgramFiles%\gum1.tmp\goopdateres_lv.dll
%ProgramFiles%\gum1.tmp\goopdateres_lt.dll
%ProgramFiles%\gum1.tmp\goopdateres_ko.dll
%ProgramFiles%\gum1.tmp\goopdateres_kn.dll
%ProgramFiles%\gum1.tmp\goopdateres_ja.dll
%ProgramFiles%\gum1.tmp\goopdateres_iw.dll
%ProgramFiles%\gum1.tmp\goopdateres_ms.dll
%ProgramFiles%\gum1.tmp\goopdateres_it.dll
%ProgramFiles%\gum1.tmp\goopdateres_id.dll
%ProgramFiles%\gum1.tmp\goopdateres_hu.dll
%ProgramFiles%\gum1.tmp\goopdateres_hr.dll
%ProgramFiles%\gum1.tmp\goopdateres_hi.dll
%ProgramFiles%\gum1.tmp\goopdateres_gu.dll
%ProgramFiles%\gum1.tmp\goopdateres_fr.dll
%ProgramFiles%\gum1.tmp\goopdateres_fil.dll
%ProgramFiles%\gum1.tmp\goopdateres_fi.dll
%ProgramFiles%\gum1.tmp\goopdateres_is.dll
%ProgramFiles%\gum1.tmp\goopdateres_sw.dll
%ProgramFiles%\gut2.tmp
%ProgramFiles%\gum1.tmp\goopdateres_pl.dll
%ProgramFiles%\gum1.tmp\goopdateres_zh-tw.dll
%ProgramFiles%\gum1.tmp\goopdateres_zh-cn.dll
%ProgramFiles%\gum1.tmp\goopdateres_vi.dll
%ProgramFiles%\gum1.tmp\goopdateres_ur.dll
%ProgramFiles%\gum1.tmp\goopdateres_uk.dll
%ProgramFiles%\gum1.tmp\goopdateres_tr.dll
%ProgramFiles%\gum1.tmp\goopdateres_th.dll
%ProgramFiles%\gum1.tmp\goopdateres_te.dll
%ProgramFiles%\gum1.tmp\goopdateres_fa.dll
%ProgramFiles%\gum1.tmp\goopdateres_ta.dll
%ProgramFiles%\gum1.tmp\goopdateres_sv.dll
%ProgramFiles%\gum1.tmp\goopdateres_sr.dll
%ProgramFiles%\gum1.tmp\goopdateres_sl.dll
%ProgramFiles%\gum1.tmp\goopdateres_sk.dll
%ProgramFiles%\gum1.tmp\goopdateres_ru.dll
%ProgramFiles%\gum1.tmp\goopdateres_ro.dll
%ProgramFiles%\gum1.tmp\goopdateres_pt-pt.dll
%ProgramFiles%\gum1.tmp\goopdateres_pt-br.dll
%ProgramFiles%\gum1.tmp\goopdateres_nl.dll
%ProgramFiles%\gum1.tmp\goopdateres_no.dll
%ProgramFiles%\gum1.tmp\goopdateres_et.dll
%ProgramFiles%\gum1.tmp\googleupdateondemand.exe
%ProgramFiles%\gum1.tmp\npgoogleupdate3.dll
%ProgramFiles%\gum1.tmp\goopdate.dll
%ProgramFiles%\gum1.tmp\googlecrashhandler.exe
%ProgramFiles%\gum1.tmp\googleupdate.exe
%TEMP%\googleearth-pro.msi.log
%TEMP%\googleearth-pro.msi
%WINDIR%\installer\13d6e7.msi
%WINDIR%\installer\13d6ea.ipi
%ProgramFiles%\gum1.tmp\googleupdatehelper.msi
C:\config.msi\13d6eb.rbs
%WINDIR%\installer\msi10.tmp
%TEMP%\{be5ae1df-684b-4750-9e04-9a51774fcfc5}-googleearth-win-pro-7.1.8.3036.exe
%WINDIR%\temp\tarc.tmp
%WINDIR%\temp\cabb.tmp
%WINDIR%\temp\tara.tmp
%WINDIR%\temp\cab9.tmp
%WINDIR%\temp\tar4.tmp
%WINDIR%\temp\cab3.tmp
%WINDIR%\installer\msi11.tmp
%ProgramFiles%\gum1.tmp\goopdateres_ar.dll
%ProgramFiles%\gum1.tmp\goopdateres_es.dll
%ProgramFiles%\gum1.tmp\googleupdatecomregistershell64.exe
%ProgramFiles%\gum1.tmp\goopdateres_en-gb.dll
%ProgramFiles%\gum1.tmp\goopdateres_en.dll
%ProgramFiles%\gum1.tmp\goopdateres_el.dll
%ProgramFiles%\gum1.tmp\goopdateres_de.dll
%ProgramFiles%\gum1.tmp\goopdateres_da.dll
%ProgramFiles%\gum1.tmp\goopdateres_cs.dll
%ProgramFiles%\gum1.tmp\goopdateres_ca.dll
%ProgramFiles%\gum1.tmp\goopdateres_bn.dll
%ProgramFiles%\gum1.tmp\goopdateres_es-419.dll
%ProgramFiles%\gum1.tmp\goopdateres_bg.dll
%ProgramFiles%\gum1.tmp\goopdateres_am.dll
%ProgramFiles%\gum1.tmp\googleupdatecore.exe
%ProgramFiles%\gum1.tmp\googlecrashhandler64.exe
%ProgramFiles%\gum1.tmp\psuser_64.dll
%ProgramFiles%\gum1.tmp\psuser.dll
%ProgramFiles%\gum1.tmp\psmachine_64.dll
%ProgramFiles%\gum1.tmp\psmachine.dll
%ProgramFiles%\gum1.tmp\googleupdatewebplugin.exe
%ProgramFiles%\gum1.tmp\googleupdatebroker.exe
%ProgramFiles%\gum1.tmp\googleupdatesetup.exe

Перемещает следующие файлы

%TEMP%\bitf.tmp в %TEMP%\{be5ae1df-684b-4750-9e04-9a51774fcfc5}-googleearth-win-pro-7.1.8.3036.exe

Сетевая активность

TCP

Запросы HTTP GET

http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootseq.txt
http://www.download.windowsupdate.com/msdownload/update/v3/static/trustedr/en/75E0ABB6138512271C04F85FDDDE38E4B7242EFE.crt
http://re####ctor.gvt1.com/edgedl/earth/client/GE7/release_7_1_8/googleearth-win-pro-7.1.8.3036.exe
http://r6######4g5e6n76.gvt1.com/edgedl/earth/client/GE7/release_7_1_8/googleearth-win-pro-7.1.8.3036.exe?cm#####################################################################################...

UDP

DNS ASK wp#d
DNS ASK tools.google.com
DNS ASK re####ctor.gvt1.com
DNS ASK r6######4g5e6n76.gvt1.com

Другое

Создает и запускает на исполнение

'%TEMP%\google-earth-7.3.exe'
'%ProgramFiles%\gum1.tmp\googleupdate.exe' /installsource taggedmi /install "appguid={65E60E95-0DE9-43FF-9F3F-4F7D2DFF04B5}&iid={833A8B3E-2DA5-A9F0-F54C-3045F1A08FF7}&lang=cs&browser=4&usagestats=0&appname=Google%20Earth%20Pro&needsadmi...
'%ProgramFiles%\google\update\install\{f9b4821c-2032-4d34-bbb2-1a55697ca44a}\googleearth-win-pro-7.1.8.3036.exe' REBOOT=ReallySuppress OMAHA=1 OMAHA_AUTO_LAUNCH=1 ALLUSERS=1 REINSTALLMODE=emus
'<SYSTEM32>\wscript.exe' "%TEMP%\Net1.vbs"
'%TEMP%\google-earth-7.3.exe' ' (со скрытым окном)
'<SYSTEM32>\wscript.exe' "%TEMP%\Net1.vbs"' (со скрытым окном)

Запускает на исполнение

'%ProgramFiles%\google\update\googleupdate.exe' /regsvc
'%ProgramFiles%\google\update\googleupdate.exe' /regserver
'%ProgramFiles%\google\update\googleupdate.exe' /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB2ZXJzaW9uPSIxLjMuMzMuNSIgc2hlbGxfdmVyc2lvbj0iMS4zLjI4LjEiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7Qjg5QTdGQzU...
'%ProgramFiles%\google\update\googleupdate.exe' /handoff "appguid={65E60E95-0DE9-43FF-9F3F-4F7D2DFF04B5}&iid={833A8B3E-2DA5-A9F0-F54C-3045F1A08FF7}&lang=cs&browser=4&usagestats=0&appname=Google%20Earth%20Pro&needsadmin=True&brand=GGGE" /inst...
'%ProgramFiles%\google\update\googleupdate.exe' /svc
'<SYSTEM32>\msiexec.exe' -Embedding A80EF4BAD0C1C4CE50F55C56295FE98E
'<SYSTEM32>\verclsid.exe' /C {B5A7F190-DDA6-4420-B3BA-52453494E6CD} /I {00000000-0000-0000-C000-000000000046} /X 0x401

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней