Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zs9978.tmp\setup.exe
- %ProgramFiles(x86)%\internet download manager\is-01e5p.tmp
- %ProgramFiles(x86)%\internet download manager\is-fhjck.tmp
- %ProgramFiles(x86)%\internet download manager\is-jjrm3.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-25k9m.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-5b30q.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-m2mum.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-6om7c.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-e14j0.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-boeeg.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-mnhu8.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-pm6c7.tmp
- %APPDATA%\dmcache\is-r63e8.tmp
- %APPDATA%\idm\is-nbf5m.tmp
- %APPDATA%\idm\idmmzcc3\is-ogrtc.tmp
- <DRIVERS>\etc\hosts.ydk.ako
- %APPDATA%\idm\idmmzcc3\is-qrnn4.tmp
- %APPDATA%\idm\idmmzcc3\is-srvh2.tmp
- %APPDATA%\idm\idmmzcc3\chrome\is-0fugu.tmp
- %APPDATA%\idm\idmmzcc3\components\is-cnp7k.tmp
- %APPDATA%\idm\idmmzcc3\components\is-ni5dc.tmp
- %APPDATA%\idm\idmmzcc3\meta-inf\is-gibfc.tmp
- %APPDATA%\idm\idmmzcc3\meta-inf\is-udvji.tmp
- %APPDATA%\idm\idmmzcc3\meta-inf\is-bvpbn.tmp
- %APPDATA%\idm\scheduler\is-5abkp.tmp
- %ProgramFiles(x86)%\internet download manager\is-lf6jd.tmp
- %ProgramFiles(x86)%\internet download manager\is-2gj2m.tmp
- %HOMEPATH%\desktop\internet download manager.lnk
- %ProgramFiles(x86)%\internet download manager\unins000.dat
- %ProgramFiles(x86)%\internet download manager\is-2maqf.tmp
- %APPDATA%\idm\is-78lt3.tmp
- %ProgramFiles(x86)%\internet download manager\is-j7jjl.tmp
- %ProgramFiles(x86)%\internet download manager\is-rpr7r.tmp
- %TEMP%\is-m8tb9.tmp\setup.tmp
- %TEMP%\is-vkhtm.tmp\_isetup\_regdll.tmp
- %TEMP%\is-vkhtm.tmp\_isetup\_setup64.tmp
- %TEMP%\is-vkhtm.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-vkhtm.tmp\isskin.dll
- %TEMP%\is-vkhtm.tmp\office2007.cjstyles
- %ProgramFiles(x86)%\internet download manager\is-0l5ad.tmp
- %ProgramFiles(x86)%\internet download manager\is-i7pa7.tmp
- %ProgramFiles(x86)%\internet download manager\is-vr4ag.tmp
- %ProgramFiles(x86)%\internet download manager\is-ck6i4.tmp
- %ProgramFiles(x86)%\internet download manager\is-dphnk.tmp
- %ProgramFiles(x86)%\internet download manager\is-d3hfa.tmp
- %ProgramFiles(x86)%\internet download manager\is-h5vj1.tmp
- %ProgramFiles(x86)%\internet download manager\is-rdmr6.tmp
- %ProgramFiles(x86)%\internet download manager\is-4hmqn.tmp
- %ProgramFiles(x86)%\internet download manager\is-umvk2.tmp
- %ProgramFiles(x86)%\internet download manager\is-43d9p.tmp
- %ProgramFiles(x86)%\internet download manager\is-mp2ki.tmp
- %ProgramFiles(x86)%\internet download manager\is-u1a1q.tmp
- %ProgramFiles(x86)%\internet download manager\is-rl6o7.tmp
- %ProgramFiles(x86)%\internet download manager\is-uakdf.tmp
- %ProgramFiles(x86)%\internet download manager\is-bsni2.tmp
- %ProgramFiles(x86)%\internet download manager\is-ds9c8.tmp
- %ProgramFiles(x86)%\internet download manager\is-7ukvg.tmp
- %ProgramFiles(x86)%\internet download manager\is-1pjgs.tmp
- %ProgramFiles(x86)%\internet download manager\is-25au2.tmp
- %ProgramFiles(x86)%\internet download manager\is-on1f9.tmp
- %ProgramFiles(x86)%\internet download manager\is-lq1hl.tmp
- %ProgramFiles(x86)%\internet download manager\is-6ohqb.tmp
- nul
Присваивает атрибут 'скрытый' для следующих файлов
- %ProgramFiles(x86)%\internet download manager\disable_activation.cmd
- %ProgramFiles(x86)%\internet download manager\kaldir.cmd
Удаляет следующие файлы
- %ProgramFiles(x86)%\internet download manager\disable_activation.cmd
- %TEMP%\is-vkhtm.tmp\isskin.dll
- %TEMP%\is-vkhtm.tmp\office2007.cjstyles
- %TEMP%\is-vkhtm.tmp\_isetup\_regdll.tmp
- %TEMP%\is-vkhtm.tmp\_isetup\_setup64.tmp
- %TEMP%\is-vkhtm.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-m8tb9.tmp\setup.tmp
- %TEMP%\7zs9978.tmp\setup.exe
Перемещает следующие файлы
- %ProgramFiles(x86)%\internet download manager\is-0l5ad.tmp в %ProgramFiles(x86)%\internet download manager\unins000.exe
- %ProgramFiles(x86)%\internet download manager\languages\is-25k9m.tmp в %ProgramFiles(x86)%\internet download manager\languages\idm_tr.lng
- %ProgramFiles(x86)%\internet download manager\languages\is-5b30q.tmp в %ProgramFiles(x86)%\internet download manager\languages\template.lng
- %ProgramFiles(x86)%\internet download manager\languages\is-m2mum.tmp в %ProgramFiles(x86)%\internet download manager\languages\tips_tr.txt
- %ProgramFiles(x86)%\internet download manager\toolbar\is-6om7c.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-e14j0.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-boeeg.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_smallhot_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-mnhu8.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_small_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-pm6c7.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_style_3.tbi
- %APPDATA%\dmcache\is-r63e8.tmp в %APPDATA%\dmcache\settings.bak
- %ProgramFiles(x86)%\internet download manager\is-fhjck.tmp в %ProgramFiles(x86)%\internet download manager\tutor.chm
- %ProgramFiles(x86)%\internet download manager\is-jjrm3.tmp в %ProgramFiles(x86)%\internet download manager\uninstall.exe
- %APPDATA%\idm\is-nbf5m.tmp в %APPDATA%\idm\defextmap.dat
- %APPDATA%\idm\idmmzcc3\is-qrnn4.tmp в %APPDATA%\idm\idmmzcc3\install.js
- %APPDATA%\idm\idmmzcc3\is-srvh2.tmp в %APPDATA%\idm\idmmzcc3\install.rdf
- %APPDATA%\idm\idmmzcc3\chrome\is-0fugu.tmp в %APPDATA%\idm\idmmzcc3\chrome\idmmzcc.jar
- %APPDATA%\idm\idmmzcc3\components\is-cnp7k.tmp в %APPDATA%\idm\idmmzcc3\components\idmmzcc.dll
- %APPDATA%\idm\idmmzcc3\components\is-ni5dc.tmp в %APPDATA%\idm\idmmzcc3\components\iidmmzcc.xpt
- %APPDATA%\idm\idmmzcc3\meta-inf\is-gibfc.tmp в %APPDATA%\idm\idmmzcc3\meta-inf\manifest.mf
- %APPDATA%\idm\idmmzcc3\meta-inf\is-udvji.tmp в %APPDATA%\idm\idmmzcc3\meta-inf\zigbert.rsa
- %APPDATA%\idm\idmmzcc3\meta-inf\is-bvpbn.tmp в %APPDATA%\idm\idmmzcc3\meta-inf\zigbert.sf
- %APPDATA%\idm\scheduler\is-5abkp.tmp в %APPDATA%\idm\scheduler\s_1.dt
- %APPDATA%\idm\is-78lt3.tmp в %APPDATA%\idm\urlexclist.dat
- %APPDATA%\idm\idmmzcc3\is-ogrtc.tmp в %APPDATA%\idm\idmmzcc3\chrome.manifest
- %ProgramFiles(x86)%\internet download manager\is-01e5p.tmp в %ProgramFiles(x86)%\internet download manager\tips.txt
- %ProgramFiles(x86)%\internet download manager\is-2maqf.tmp в %ProgramFiles(x86)%\internet download manager\scheduler.chm
- %ProgramFiles(x86)%\internet download manager\is-j7jjl.tmp в %ProgramFiles(x86)%\internet download manager\np_idm.dll
- %ProgramFiles(x86)%\internet download manager\is-vr4ag.tmp в %ProgramFiles(x86)%\internet download manager\downlwithidm.dll
- %ProgramFiles(x86)%\internet download manager\is-ck6i4.tmp в %ProgramFiles(x86)%\internet download manager\grabber.chm
- %ProgramFiles(x86)%\internet download manager\is-dphnk.tmp в %ProgramFiles(x86)%\internet download manager\idman.chm
- %ProgramFiles(x86)%\internet download manager\is-d3hfa.tmp в %ProgramFiles(x86)%\internet download manager\idman.exe
- %ProgramFiles(x86)%\internet download manager\is-h5vj1.tmp в %ProgramFiles(x86)%\internet download manager\idmantypeinfo.tlb
- %ProgramFiles(x86)%\internet download manager\is-rpr7r.tmp в %ProgramFiles(x86)%\internet download manager\idmbrbtn.dll
- %ProgramFiles(x86)%\internet download manager\is-rdmr6.tmp в %ProgramFiles(x86)%\internet download manager\idmftype.dll
- %ProgramFiles(x86)%\internet download manager\is-umvk2.tmp в %ProgramFiles(x86)%\internet download manager\idmfsa.dll
- %ProgramFiles(x86)%\internet download manager\is-43d9p.tmp в %ProgramFiles(x86)%\internet download manager\idmgetall.dll
- %ProgramFiles(x86)%\internet download manager\is-mp2ki.tmp в %ProgramFiles(x86)%\internet download manager\idmgrhlp.exe
- %ProgramFiles(x86)%\internet download manager\is-i7pa7.tmp в %ProgramFiles(x86)%\internet download manager\defexclist.txt
- %ProgramFiles(x86)%\internet download manager\is-u1a1q.tmp в %ProgramFiles(x86)%\internet download manager\idmiecc.dll
- %ProgramFiles(x86)%\internet download manager\is-uakdf.tmp в %ProgramFiles(x86)%\internet download manager\idmmkb.dll
- %ProgramFiles(x86)%\internet download manager\is-bsni2.tmp в %ProgramFiles(x86)%\internet download manager\idmmzcc.xpi
- %ProgramFiles(x86)%\internet download manager\is-ds9c8.tmp в %ProgramFiles(x86)%\internet download manager\idmsetup.log
- %ProgramFiles(x86)%\internet download manager\is-7ukvg.tmp в %ProgramFiles(x86)%\internet download manager\ieext.htm
- %ProgramFiles(x86)%\internet download manager\is-1pjgs.tmp в %ProgramFiles(x86)%\internet download manager\iegetall.htm
- %ProgramFiles(x86)%\internet download manager\is-25au2.tmp в %ProgramFiles(x86)%\internet download manager\iegetvl.htm
- %ProgramFiles(x86)%\internet download manager\is-on1f9.tmp в %ProgramFiles(x86)%\internet download manager\iegetvl2.htm
- %ProgramFiles(x86)%\internet download manager\is-lq1hl.tmp в %ProgramFiles(x86)%\internet download manager\iemonitor.exe
- %ProgramFiles(x86)%\internet download manager\is-4hmqn.tmp в %ProgramFiles(x86)%\internet download manager\license.txt
- %ProgramFiles(x86)%\internet download manager\is-6ohqb.tmp в %ProgramFiles(x86)%\internet download manager\globalerrors.log
- %ProgramFiles(x86)%\internet download manager\is-rl6o7.tmp в %ProgramFiles(x86)%\internet download manager\idmmbc.dll
- %ProgramFiles(x86)%\internet download manager\is-lf6jd.tmp в %ProgramFiles(x86)%\internet download manager\disable_activation.cmd
- %ProgramFiles(x86)%\internet download manager\is-2gj2m.tmp в %ProgramFiles(x86)%\internet download manager\kaldir.cmd
Изменяет файл HOSTS.
Другое
Создает и запускает на исполнение
- '%TEMP%\7zs9978.tmp\setup.exe' /VERYSILENT /NORESTART
- '%TEMP%\is-m8tb9.tmp\setup.tmp' /SL5="$80232,2368705,53248,%TEMP%\7zS9978.tmp\setup.exe" /VERYSILENT /NORESTART
- '%WINDIR%\syswow64\cmd.exe' /C ""%ProgramFiles(x86)%\Internet Download Manager\disable_activation.cmd""' (со скрытым окном)
Запускает на исполнение
- '%WINDIR%\syswow64\cmd.exe' /C ""%ProgramFiles(x86)%\Internet Download Manager\disable_activation.cmd""
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\idmftype.dll
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\idmmkb.dll
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\idmmbc.dll
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\IDMIECC.dll
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\IDMGetAll.dll
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\idmfsa.dll
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\downlWithIDM.dll
- '%WINDIR%\syswow64\find.exe' /C /I "mirror3.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\idmbrbtn.dll
- '%WINDIR%\syswow64\find.exe' /C /I "mirror2.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "secure.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.in#######ownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "secure.registeridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.re####eridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "registeridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.to##c.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "tonec.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "mirror.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\NP_IDM.dll
