Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zse69e.tmp\setup.exe
- %ProgramFiles(x86)%\internet download manager\is-k3io4.tmp
- %ProgramFiles(x86)%\internet download manager\is-3vhl8.tmp
- %ProgramFiles(x86)%\internet download manager\is-emo27.tmp
- %ProgramFiles(x86)%\internet download manager\is-86rba.tmp
- %ProgramFiles(x86)%\internet download manager\is-ak421.tmp
- %ProgramFiles(x86)%\internet download manager\is-qnh1t.tmp
- %ProgramFiles(x86)%\internet download manager\is-j418h.tmp
- %ProgramFiles(x86)%\internet download manager\is-ur6dt.tmp
- %ProgramFiles(x86)%\internet download manager\is-emctu.tmp
- %ProgramFiles(x86)%\internet download manager\is-u0kob.tmp
- %ProgramFiles(x86)%\internet download manager\is-0h8fm.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-eii4k.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-78deh.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-vbl69.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-gnvsd.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-r9h77.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-e8rai.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-p0mtg.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-pam7f.tmp
- %ProgramFiles(x86)%\internet download manager\is-4d5hf.tmp
- %ProgramFiles(x86)%\internet download manager\is-qcnsq.tmp
- %HOMEPATH%\desktop\internet download manager.lnk
- %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\internet download manager.lnk
- %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\uninstall idm.lnk
- %ProgramFiles(x86)%\internet download manager\unins000.dat
- %TEMP%\ztmp\tmp95857.bat
- %TEMP%\ztmp\tmp96347.exe
- %ProgramFiles(x86)%\internet download manager\is-6bf94.tmp
- <DRIVERS>\etc\hosts.ydk.ako
- %ProgramFiles(x86)%\internet download manager\is-afhc0.tmp
- %ProgramFiles(x86)%\internet download manager\is-euohc.tmp
- %TEMP%\is-9mir0.tmp\setup.tmp
- %TEMP%\is-q3vhp.tmp\_isetup\_setup64.tmp
- %TEMP%\is-q3vhp.tmp\_isetup\_shfoldr.dll
- %ProgramFiles(x86)%\internet download manager\is-lufa9.tmp
- %ProgramFiles(x86)%\internet download manager\is-aeoj2.tmp
- %ProgramFiles(x86)%\internet download manager\is-chj67.tmp
- %ProgramFiles(x86)%\internet download manager\is-85ta7.tmp
- %ProgramFiles(x86)%\internet download manager\is-lmhjh.tmp
- %ProgramFiles(x86)%\internet download manager\is-ku7cb.tmp
- %ProgramFiles(x86)%\internet download manager\is-ptdrn.tmp
- %ProgramFiles(x86)%\internet download manager\is-vgm8q.tmp
- %ProgramFiles(x86)%\internet download manager\is-7dgbg.tmp
- %ProgramFiles(x86)%\internet download manager\is-flav6.tmp
- %ProgramFiles(x86)%\internet download manager\is-v1h0q.tmp
- %ProgramFiles(x86)%\internet download manager\is-uus59.tmp
- %ProgramFiles(x86)%\internet download manager\is-ans8t.tmp
- %ProgramFiles(x86)%\internet download manager\is-c9et8.tmp
- %ProgramFiles(x86)%\internet download manager\is-diee8.tmp
- %ProgramFiles(x86)%\internet download manager\is-l7vrd.tmp
- %ProgramFiles(x86)%\internet download manager\is-hv1mh.tmp
- %ProgramFiles(x86)%\internet download manager\is-9c8sc.tmp
- %ProgramFiles(x86)%\internet download manager\is-5mago.tmp
- %ProgramFiles(x86)%\internet download manager\is-0ffau.tmp
- %ProgramFiles(x86)%\internet download manager\is-tbuj3.tmp
- %ProgramFiles(x86)%\internet download manager\is-h16m7.tmp
- %ProgramFiles(x86)%\internet download manager\is-tg293.tmp
- %ProgramFiles(x86)%\internet download manager\is-osjnj.tmp
- %ProgramFiles(x86)%\internet download manager\is-hjs8k.tmp
- nul
Присваивает атрибут 'скрытый' для следующих файлов
- %ProgramFiles(x86)%\internet download manager\acac.exe
- %ProgramFiles(x86)%\internet download manager\keskes.exe
Удаляет следующие файлы
- %TEMP%\is-q3vhp.tmp\_isetup\_setup64.tmp
- %TEMP%\is-q3vhp.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-9mir0.tmp\setup.tmp
- %TEMP%\7zse69e.tmp\setup.exe
- %TEMP%\ztmp\tmp96347.exe
Перемещает следующие файлы
- %ProgramFiles(x86)%\internet download manager\is-lufa9.tmp в %ProgramFiles(x86)%\internet download manager\unins000.exe
- %ProgramFiles(x86)%\internet download manager\is-afhc0.tmp в %ProgramFiles(x86)%\internet download manager\idmwfp.inf
- %ProgramFiles(x86)%\internet download manager\is-6bf94.tmp в %ProgramFiles(x86)%\internet download manager\idmwfp32.sys
- %ProgramFiles(x86)%\internet download manager\is-k3io4.tmp в %ProgramFiles(x86)%\internet download manager\idmwfp64.sys
- %ProgramFiles(x86)%\internet download manager\is-3vhl8.tmp в %ProgramFiles(x86)%\internet download manager\ieext.htm
- %ProgramFiles(x86)%\internet download manager\is-emo27.tmp в %ProgramFiles(x86)%\internet download manager\iegetall.htm
- %ProgramFiles(x86)%\internet download manager\is-86rba.tmp в %ProgramFiles(x86)%\internet download manager\iegetvl.htm
- %ProgramFiles(x86)%\internet download manager\is-ak421.tmp в %ProgramFiles(x86)%\internet download manager\iegetvl2.htm
- %ProgramFiles(x86)%\internet download manager\is-qnh1t.tmp в %ProgramFiles(x86)%\internet download manager\iemonitor.exe
- %ProgramFiles(x86)%\internet download manager\is-j418h.tmp в %ProgramFiles(x86)%\internet download manager\license.txt
- %ProgramFiles(x86)%\internet download manager\is-ur6dt.tmp в %ProgramFiles(x86)%\internet download manager\scheduler.chm
- %ProgramFiles(x86)%\internet download manager\is-emctu.tmp в %ProgramFiles(x86)%\internet download manager\tips.txt
- %ProgramFiles(x86)%\internet download manager\is-u0kob.tmp в %ProgramFiles(x86)%\internet download manager\tutor.chm
- %ProgramFiles(x86)%\internet download manager\is-0h8fm.tmp в %ProgramFiles(x86)%\internet download manager\uninstall.exe
- %ProgramFiles(x86)%\internet download manager\languages\is-eii4k.tmp в %ProgramFiles(x86)%\internet download manager\languages\idm_tr.lng
- %ProgramFiles(x86)%\internet download manager\languages\is-78deh.tmp в %ProgramFiles(x86)%\internet download manager\languages\template.lng
- %ProgramFiles(x86)%\internet download manager\languages\is-vbl69.tmp в %ProgramFiles(x86)%\internet download manager\languages\tips_tr.txt
- %ProgramFiles(x86)%\internet download manager\toolbar\is-gnvsd.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-r9h77.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-e8rai.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_smallhot_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-p0mtg.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_small_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-pam7f.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_style_3.tbi
- %ProgramFiles(x86)%\internet download manager\is-hjs8k.tmp в %ProgramFiles(x86)%\internet download manager\idmwfp.cat
- %ProgramFiles(x86)%\internet download manager\is-4d5hf.tmp в %ProgramFiles(x86)%\internet download manager\acac.exe
- %ProgramFiles(x86)%\internet download manager\is-euohc.tmp в %ProgramFiles(x86)%\internet download manager\idmtdi64.sys
- %ProgramFiles(x86)%\internet download manager\is-tg293.tmp в %ProgramFiles(x86)%\internet download manager\idmtdi.inf
- %ProgramFiles(x86)%\internet download manager\is-aeoj2.tmp в %ProgramFiles(x86)%\internet download manager\defexclist.txt
- %ProgramFiles(x86)%\internet download manager\is-chj67.tmp в %ProgramFiles(x86)%\internet download manager\downlwithidm.dll
- %ProgramFiles(x86)%\internet download manager\is-85ta7.tmp в %ProgramFiles(x86)%\internet download manager\grabber.chm
- %ProgramFiles(x86)%\internet download manager\is-lmhjh.tmp в %ProgramFiles(x86)%\internet download manager\idman.chm
- %ProgramFiles(x86)%\internet download manager\is-ku7cb.tmp в %ProgramFiles(x86)%\internet download manager\idman.exe
- %ProgramFiles(x86)%\internet download manager\is-ptdrn.tmp в %ProgramFiles(x86)%\internet download manager\idmantypeinfo.tlb
- %ProgramFiles(x86)%\internet download manager\is-vgm8q.tmp в %ProgramFiles(x86)%\internet download manager\idmbrbtn.dll
- %ProgramFiles(x86)%\internet download manager\is-7dgbg.tmp в %ProgramFiles(x86)%\internet download manager\idmbrbtn64.dll
- %ProgramFiles(x86)%\internet download manager\is-flav6.tmp в %ProgramFiles(x86)%\internet download manager\idmfsa.dll
- %ProgramFiles(x86)%\internet download manager\is-v1h0q.tmp в %ProgramFiles(x86)%\internet download manager\idmftype.dat
- %ProgramFiles(x86)%\internet download manager\is-uus59.tmp в %ProgramFiles(x86)%\internet download manager\idmftype.dll
- %ProgramFiles(x86)%\internet download manager\is-ans8t.tmp в %ProgramFiles(x86)%\internet download manager\idmftype64.dll
- %ProgramFiles(x86)%\internet download manager\is-c9et8.tmp в %ProgramFiles(x86)%\internet download manager\idmgetall.dll
- %ProgramFiles(x86)%\internet download manager\is-diee8.tmp в %ProgramFiles(x86)%\internet download manager\idmgrhlp.exe
- %ProgramFiles(x86)%\internet download manager\is-l7vrd.tmp в %ProgramFiles(x86)%\internet download manager\idmiecc.dll
- %ProgramFiles(x86)%\internet download manager\is-hv1mh.tmp в %ProgramFiles(x86)%\internet download manager\idmmkb.dll
- %ProgramFiles(x86)%\internet download manager\is-9c8sc.tmp в %ProgramFiles(x86)%\internet download manager\idmmzcc.xpi
- %ProgramFiles(x86)%\internet download manager\is-5mago.tmp в %ProgramFiles(x86)%\internet download manager\idmnetmon.dll
- %ProgramFiles(x86)%\internet download manager\is-0ffau.tmp в %ProgramFiles(x86)%\internet download manager\idmsetup2.log
- %ProgramFiles(x86)%\internet download manager\is-tbuj3.tmp в %ProgramFiles(x86)%\internet download manager\idmshellext.dll
- %ProgramFiles(x86)%\internet download manager\is-h16m7.tmp в %ProgramFiles(x86)%\internet download manager\idmtdi.cat
- %ProgramFiles(x86)%\internet download manager\is-osjnj.tmp в %ProgramFiles(x86)%\internet download manager\idmtdi32.sys
- %ProgramFiles(x86)%\internet download manager\is-qcnsq.tmp в %ProgramFiles(x86)%\internet download manager\keskes.exe
Изменяет файл HOSTS.
Другое
Создает и запускает на исполнение
- '%TEMP%\7zse69e.tmp\setup.exe' /VERYSILENT /NORESTART
- '%TEMP%\is-9mir0.tmp\setup.tmp' /SL5="$70236,3215776,138752,%TEMP%\7zSE69E.tmp\setup.exe" /VERYSILENT /NORESTART
- '%ProgramFiles(x86)%\internet download manager\keskes.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\downlWithIDM.dll"
- '%WINDIR%\syswow64\find.exe' /C /I "www.mi#####.###ernetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "mirror2.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.mi####.###ernetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "mirror.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.se####.###ernetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "secure.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.in#######ownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.se####.registeridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "secure.registeridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.re####eridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "registeridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.to##c.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "tonec.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\ztmp\tmp95857.bat
- '%WINDIR%\syswow64\cmd.exe' /c if exist "%TEMP%\ztmp\tmp96347.exe" del "%TEMP%\ztmp\tmp96347.exe"
- '%WINDIR%\syswow64\cmd.exe' /c if exist "%TEMP%\ztmp\tmp95857.bat" del "%TEMP%\ztmp\tmp95857.bat"
- '%WINDIR%\syswow64\attrib.exe' +h %TEMP%\ztmp
- '%WINDIR%\syswow64\cmd.exe' /c attrib +h %TEMP%\ztmp
- '%WINDIR%\syswow64\cmd.exe' /c if not exist "%TEMP%\ztmp" mkdir "%TEMP%\ztmp"
- '%WINDIR%\syswow64\cmd.exe' /c if not exist "%TEMP%\afolder" mkdir "%TEMP%\afolder"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMShellExt.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMNetMon.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\idmmkb.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMIECC.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMGetAll.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\idmfsa.dll"
- '%WINDIR%\syswow64\find.exe' /C /I "mirror3.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "AkozdemiR@TNCTR.com" <DRIVERS>\etc\hosts
