Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\7zsaf90.tmp\setup.exe
- %ProgramFiles(x86)%\internet download manager\languages\is-23t53.tmp
- %ProgramFiles(x86)%\internet download manager\is-ksc27.tmp
- %ProgramFiles(x86)%\internet download manager\is-s5cf3.tmp
- %ProgramFiles(x86)%\internet download manager\is-o5bmu.tmp
- %ProgramFiles(x86)%\internet download manager\is-cl3co.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-76odc.tmp
- %ProgramFiles(x86)%\internet download manager\is-p9k8c.tmp
- %ProgramFiles(x86)%\internet download manager\is-9ni7d.tmp
- %ProgramFiles(x86)%\internet download manager\is-135a8.tmp
- %ProgramFiles(x86)%\internet download manager\is-n4098.tmp
- %ProgramFiles(x86)%\internet download manager\is-oh64t.tmp
- %ProgramFiles(x86)%\internet download manager\is-gr4h9.tmp
- %ProgramFiles(x86)%\internet download manager\is-or5sq.tmp
- %ProgramFiles(x86)%\internet download manager\is-motih.tmp
- %ProgramFiles(x86)%\internet download manager\is-v3anh.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-6nrkk.tmp
- %TEMP%\ztmp\tmp22160.exe
- %TEMP%\ztmp\tmp86940.bat
- %ProgramFiles(x86)%\internet download manager\unins000.dat
- %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\anlatım.lnk
- %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\uninstall idm.lnk
- %PROGRAMDATA%\microsoft\windows\start menu\programs\internet download manager\internet download manager.lnk
- %ProgramFiles(x86)%\internet download manager\is-do2b6.tmp
- %ProgramFiles(x86)%\internet download manager\languages\is-6rq3j.tmp
- %ProgramFiles(x86)%\internet download manager\is-u67u1.tmp
- %ProgramFiles(x86)%\internet download manager\is-u1lna.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-79mu7.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-e7b18.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-pp4k4.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-86vl4.tmp
- %ProgramFiles(x86)%\internet download manager\is-se4dt.tmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-vfe80.tmp
- %ProgramFiles(x86)%\internet download manager\is-sl87g.tmp
- %ProgramFiles(x86)%\internet download manager\is-kskkq.tmp
- %ProgramFiles(x86)%\internet download manager\is-r70nn.tmp
- %ProgramFiles(x86)%\internet download manager\is-1jpg9.tmp
- %TEMP%\is-5hhao.tmp\setup.tmp
- %TEMP%\is-o681f.tmp\_isetup\_setup64.tmp
- %TEMP%\is-o681f.tmp\_isetup\_shfoldr.dll
- %ProgramFiles(x86)%\internet download manager\is-gq8l2.tmp
- %ProgramFiles(x86)%\internet download manager\is-mg9m8.tmp
- <DRIVERS>\etc\hosts.ydk.ako
- %ProgramFiles(x86)%\internet download manager\is-ovcoc.tmp
- %ProgramFiles(x86)%\internet download manager\is-37qb7.tmp
- %ProgramFiles(x86)%\internet download manager\is-am9m1.tmp
- %ProgramFiles(x86)%\internet download manager\is-6g9ac.tmp
- %ProgramFiles(x86)%\internet download manager\is-fpn98.tmp
- %ProgramFiles(x86)%\internet download manager\is-ifk20.tmp
- %ProgramFiles(x86)%\internet download manager\is-u4ukt.tmp
- %ProgramFiles(x86)%\internet download manager\is-orka1.tmp
- %HOMEPATH%\desktop\internet download manager.lnk
- %ProgramFiles(x86)%\internet download manager\is-3rsmo.tmp
- %ProgramFiles(x86)%\internet download manager\is-vjj8s.tmp
- %ProgramFiles(x86)%\internet download manager\is-qa8jk.tmp
- %ProgramFiles(x86)%\internet download manager\is-044ob.tmp
- %ProgramFiles(x86)%\internet download manager\is-4bnfh.tmp
- %ProgramFiles(x86)%\internet download manager\is-4khm7.tmp
- %ProgramFiles(x86)%\internet download manager\is-m2427.tmp
- %ProgramFiles(x86)%\internet download manager\is-m2rv2.tmp
- %ProgramFiles(x86)%\internet download manager\is-2fck9.tmp
- %ProgramFiles(x86)%\internet download manager\is-rg369.tmp
- %ProgramFiles(x86)%\internet download manager\is-lm17o.tmp
- %ProgramFiles(x86)%\internet download manager\is-c6ohh.tmp
- %ProgramFiles(x86)%\internet download manager\is-0508v.tmp
- %ProgramFiles(x86)%\internet download manager\is-u4cnn.tmp
- %ProgramFiles(x86)%\internet download manager\is-cbm6t.tmp
- %ProgramFiles(x86)%\internet download manager\is-emp60.tmp
- %ProgramFiles(x86)%\internet download manager\is-mo9tp.tmp
- nul
Присваивает атрибут 'скрытый' для следующих файлов
- %ProgramFiles(x86)%\internet download manager\acac.exe
- %ProgramFiles(x86)%\internet download manager\keskes.exe
- %ProgramFiles(x86)%\internet download manager\kay.reg
Удаляет следующие файлы
- %TEMP%\is-o681f.tmp\_isetup\_setup64.tmp
- %TEMP%\is-o681f.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-5hhao.tmp\setup.tmp
- %TEMP%\7zsaf90.tmp\setup.exe
- %TEMP%\ztmp\tmp22160.exe
Перемещает следующие файлы
- %ProgramFiles(x86)%\internet download manager\is-gq8l2.tmp в %ProgramFiles(x86)%\internet download manager\unins000.exe
- %ProgramFiles(x86)%\internet download manager\is-kskkq.tmp в %ProgramFiles(x86)%\internet download manager\idmtdi64.sys
- %ProgramFiles(x86)%\internet download manager\is-sl87g.tmp в %ProgramFiles(x86)%\internet download manager\idmwfp.cat
- %ProgramFiles(x86)%\internet download manager\is-do2b6.tmp в %ProgramFiles(x86)%\internet download manager\idmwfp.inf
- %ProgramFiles(x86)%\internet download manager\is-or5sq.tmp в %ProgramFiles(x86)%\internet download manager\idmwfp32.sys
- %ProgramFiles(x86)%\internet download manager\is-gr4h9.tmp в %ProgramFiles(x86)%\internet download manager\idmwfp64.sys
- %ProgramFiles(x86)%\internet download manager\is-oh64t.tmp в %ProgramFiles(x86)%\internet download manager\ieext.htm
- %ProgramFiles(x86)%\internet download manager\is-n4098.tmp в %ProgramFiles(x86)%\internet download manager\iegetall.htm
- %ProgramFiles(x86)%\internet download manager\is-135a8.tmp в %ProgramFiles(x86)%\internet download manager\iegetvl.htm
- %ProgramFiles(x86)%\internet download manager\is-9ni7d.tmp в %ProgramFiles(x86)%\internet download manager\iegetvl2.htm
- %ProgramFiles(x86)%\internet download manager\is-motih.tmp в %ProgramFiles(x86)%\internet download manager\iemonitor.exe
- %ProgramFiles(x86)%\internet download manager\is-p9k8c.tmp в %ProgramFiles(x86)%\internet download manager\license.txt
- %ProgramFiles(x86)%\internet download manager\is-cl3co.tmp в %ProgramFiles(x86)%\internet download manager\scheduler.chm
- %ProgramFiles(x86)%\internet download manager\is-o5bmu.tmp в %ProgramFiles(x86)%\internet download manager\tips.txt
- %ProgramFiles(x86)%\internet download manager\is-s5cf3.tmp в %ProgramFiles(x86)%\internet download manager\tutor.chm
- %ProgramFiles(x86)%\internet download manager\is-ksc27.tmp в %ProgramFiles(x86)%\internet download manager\uninstall.exe
- %ProgramFiles(x86)%\internet download manager\languages\is-23t53.tmp в %ProgramFiles(x86)%\internet download manager\languages\idm_tr.lng
- %ProgramFiles(x86)%\internet download manager\languages\is-6rq3j.tmp в %ProgramFiles(x86)%\internet download manager\languages\template.lng
- %ProgramFiles(x86)%\internet download manager\languages\is-76odc.tmp в %ProgramFiles(x86)%\internet download manager\languages\tips_tr.txt
- %ProgramFiles(x86)%\internet download manager\languages\is-6nrkk.tmp в %ProgramFiles(x86)%\internet download manager\languages\tut_tr.chm
- %ProgramFiles(x86)%\internet download manager\toolbar\is-vfe80.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-86vl4.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-pp4k4.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_smallhot_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-e7b18.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_small_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\is-79mu7.tmp в %ProgramFiles(x86)%\internet download manager\toolbar\3d_style_3.tbi
- %ProgramFiles(x86)%\internet download manager\is-u1lna.tmp в %ProgramFiles(x86)%\internet download manager\acac.exe
- %ProgramFiles(x86)%\internet download manager\is-r70nn.tmp в %ProgramFiles(x86)%\internet download manager\idmtdi32.sys
- %ProgramFiles(x86)%\internet download manager\is-u67u1.tmp в %ProgramFiles(x86)%\internet download manager\keskes.exe
- %ProgramFiles(x86)%\internet download manager\is-044ob.tmp в %ProgramFiles(x86)%\internet download manager\idmtdi.inf
- %ProgramFiles(x86)%\internet download manager\is-4khm7.tmp в %ProgramFiles(x86)%\internet download manager\idmshellext64.dll
- %ProgramFiles(x86)%\internet download manager\is-mg9m8.tmp в %ProgramFiles(x86)%\internet download manager\defexclist.txt
- %ProgramFiles(x86)%\internet download manager\is-ovcoc.tmp в %ProgramFiles(x86)%\internet download manager\downlwithidm.dll
- %ProgramFiles(x86)%\internet download manager\is-1jpg9.tmp в %ProgramFiles(x86)%\internet download manager\downlwithidm64.dll
- %ProgramFiles(x86)%\internet download manager\is-orka1.tmp в %ProgramFiles(x86)%\internet download manager\grabber.chm
- %ProgramFiles(x86)%\internet download manager\is-am9m1.tmp в %ProgramFiles(x86)%\internet download manager\idman.chm
- %ProgramFiles(x86)%\internet download manager\is-6g9ac.tmp в %ProgramFiles(x86)%\internet download manager\idman.exe
- %ProgramFiles(x86)%\internet download manager\is-fpn98.tmp в %ProgramFiles(x86)%\internet download manager\idmantypeinfo.tlb
- %ProgramFiles(x86)%\internet download manager\is-ifk20.tmp в %ProgramFiles(x86)%\internet download manager\idmbrbtn.dll
- %ProgramFiles(x86)%\internet download manager\is-u4ukt.tmp в %ProgramFiles(x86)%\internet download manager\idmbrbtn64.dll
- %ProgramFiles(x86)%\internet download manager\is-lm17o.tmp в %ProgramFiles(x86)%\internet download manager\idmfsa.dll
- %ProgramFiles(x86)%\internet download manager\is-37qb7.tmp в %ProgramFiles(x86)%\internet download manager\idmftype.dat
- %ProgramFiles(x86)%\internet download manager\is-3rsmo.tmp в %ProgramFiles(x86)%\internet download manager\idmftype.dll
- %ProgramFiles(x86)%\internet download manager\is-qa8jk.tmp в %ProgramFiles(x86)%\internet download manager\idmftype64.dll
- %ProgramFiles(x86)%\internet download manager\is-2fck9.tmp в %ProgramFiles(x86)%\internet download manager\idmgetall.dll
- %ProgramFiles(x86)%\internet download manager\is-vjj8s.tmp в %ProgramFiles(x86)%\internet download manager\idmgetall64.dll
- %ProgramFiles(x86)%\internet download manager\is-emp60.tmp в %ProgramFiles(x86)%\internet download manager\idmgrhlp.exe
- %ProgramFiles(x86)%\internet download manager\is-cbm6t.tmp в %ProgramFiles(x86)%\internet download manager\idmiecc.dll
- %ProgramFiles(x86)%\internet download manager\is-u4cnn.tmp в %ProgramFiles(x86)%\internet download manager\idmiecc64.dll
- %ProgramFiles(x86)%\internet download manager\is-0508v.tmp в %ProgramFiles(x86)%\internet download manager\idmintegrator64.exe
- %ProgramFiles(x86)%\internet download manager\is-c6ohh.tmp в %ProgramFiles(x86)%\internet download manager\idmmkb.dll
- %ProgramFiles(x86)%\internet download manager\is-v3anh.tmp в %ProgramFiles(x86)%\internet download manager\idmmzcc.xpi
- %ProgramFiles(x86)%\internet download manager\is-mo9tp.tmp в %ProgramFiles(x86)%\internet download manager\idmnetmon.dll
- %ProgramFiles(x86)%\internet download manager\is-rg369.tmp в %ProgramFiles(x86)%\internet download manager\idmnetmon64.dll
- %ProgramFiles(x86)%\internet download manager\is-m2rv2.tmp в %ProgramFiles(x86)%\internet download manager\idmsetup2.log
- %ProgramFiles(x86)%\internet download manager\is-m2427.tmp в %ProgramFiles(x86)%\internet download manager\idmshellext.dll
- %ProgramFiles(x86)%\internet download manager\is-4bnfh.tmp в %ProgramFiles(x86)%\internet download manager\idmtdi.cat
- %ProgramFiles(x86)%\internet download manager\is-se4dt.tmp в %ProgramFiles(x86)%\internet download manager\kay.reg
Изменяет файл HOSTS.
Другое
Ищет следующие окна
- ClassName: 'RegEdit_RegEdit' WindowName: ''
Создает и запускает на исполнение
- '%TEMP%\7zsaf90.tmp\setup.exe' /VERYSILENT /NORESTART
- '%TEMP%\is-5hhao.tmp\setup.tmp' /SL5="$6023C,3155434,138752,%TEMP%\7zSAF90.tmp\setup.exe" /VERYSILENT /NORESTART
- '%ProgramFiles(x86)%\internet download manager\keskes.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\idmfsa.dll"
- '%WINDIR%\syswow64\find.exe' /C /I "www.mi#####.###ernetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "mirror2.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.mi####.###ernetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "mirror.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.se####.###ernetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "secure.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.in#######ownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.se####.registeridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "secure.registeridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.re####eridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "registeridm.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "www.to##c.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\regedit.exe' /s %ProgramFiles(x86)%\Internet Download Manager\kay.reg
- '%WINDIR%\syswow64\find.exe' /C /I "mirror3.internetdownloadmanager.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\find.exe' /C /I "tonec.com" <DRIVERS>\etc\hosts
- '%WINDIR%\syswow64\cmd.exe' /c %TEMP%\ztmp\tmp86940.bat
- '%WINDIR%\syswow64\cmd.exe' /c if exist "%TEMP%\ztmp\tmp22160.exe" del "%TEMP%\ztmp\tmp22160.exe"
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\IDMShellExt64.dll
- '%WINDIR%\syswow64\cmd.exe' /c if exist "%TEMP%\ztmp\tmp86940.bat" del "%TEMP%\ztmp\tmp86940.bat"
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\IDMNetMon64.dll
- '%WINDIR%\syswow64\attrib.exe' +h %TEMP%\ztmp
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\IDMGetAll64.dll
- '%WINDIR%\syswow64\cmd.exe' /c attrib +h %TEMP%\ztmp
- '%WINDIR%\syswow64\cmd.exe' /c if not exist "%TEMP%\ztmp" mkdir "%TEMP%\ztmp"
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\idmftype64.dll
- '%WINDIR%\syswow64\cmd.exe' /c if not exist "%TEMP%\afolder" mkdir "%TEMP%\afolder"
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\idmbrbtn64.dll
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\IDMIECC64.dll
- '%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\idmmkb.dll"
- '%WINDIR%\syswow64\regsvr32.exe' /S %ProgramFiles(x86)%\Internet Download Manager\downlWithIDM64.dll
- '%WINDIR%\syswow64\find.exe' /C /I "AkozdemiR@TNCTR.com" <DRIVERS>\etc\hosts
