Trojan.DownLoader35.64317

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-ok3mr.tmp\<Имя файла>.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-hipj7.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-bpr4v.tmp
%ProgramFiles(x86)%\uwis copy\is-fhjq2.tmp
%ProgramFiles(x86)%\uwis copy\is-mjbgq.tmp
%ProgramFiles(x86)%\uwis copy\is-t7o4p.tmp
%ProgramFiles(x86)%\uwis copy\is-bidjt.tmp
%ProgramFiles(x86)%\uwis copy\is-aignm.tmp
%ProgramFiles(x86)%\uwis copy\is-e8v3u.tmp
%ProgramFiles(x86)%\uwis copy\is-o88vd.tmp
%ProgramFiles(x86)%\uwis copy\is-3mbvt.tmp
%WINDIR%\is-pjrmn.tmp
%ProgramFiles(x86)%\uwis copy\help\is-fmle0.tmp
%ProgramFiles(x86)%\uwis copy\is-culso.tmp
%WINDIR%\syswow64\is-7av9o.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\uwis copy\uwis copy.lnk
%ProgramFiles(x86)%\uwis copy\skins\0\is-4bglt.tmp
%ProgramFiles(x86)%\uwis copy\windvdcopy.url
%ProgramFiles(x86)%\uwis copy\skins\0\is-ljqu3.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-lirks.tmp
%TEMP%\is-ssog1.tmp\_isetup\_setup64.tmp
%TEMP%\is-ssog1.tmp\_isetup\_shfoldr.dll
%TEMP%\is-ssog1.tmp\_isetup\_isdecmp.dll
%TEMP%\is-ssog1.tmp\_isetup\_iscrypt.dll
%ProgramFiles(x86)%\uwis copy\is-t4jp2.tmp
%ProgramFiles(x86)%\uwis copy\language\is-485ig.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-urles.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-vavf2.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-rmub6.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-7j102.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-dgvhm.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-efmo3.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-kcavc.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-ipp80.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-10m8e.tmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-2e46c.tmp
%ProgramFiles(x86)%\uwis copy\unins000.dat

Перемещает следующие файлы

%ProgramFiles(x86)%\uwis copy\is-t4jp2.tmp в %ProgramFiles(x86)%\uwis copy\unins000.exe
%ProgramFiles(x86)%\uwis copy\help\is-fmle0.tmp в %ProgramFiles(x86)%\uwis copy\help\winavi dvd copy help.chm
%WINDIR%\is-pjrmn.tmp в %WINDIR%\windvdbootrecdoe.sys
%ProgramFiles(x86)%\uwis copy\is-3mbvt.tmp в %ProgramFiles(x86)%\uwis copy\readme.txt
%ProgramFiles(x86)%\uwis copy\is-o88vd.tmp в %ProgramFiles(x86)%\uwis copy\videoburn.dll
%ProgramFiles(x86)%\uwis copy\is-e8v3u.tmp в %ProgramFiles(x86)%\uwis copy\fileio.dll
%ProgramFiles(x86)%\uwis copy\is-aignm.tmp в %ProgramFiles(x86)%\uwis copy\aspi.dll
%ProgramFiles(x86)%\uwis copy\is-bidjt.tmp в %ProgramFiles(x86)%\uwis copy\dvdcopy.dll
%ProgramFiles(x86)%\uwis copy\is-t7o4p.tmp в %ProgramFiles(x86)%\uwis copy\core.dll
%ProgramFiles(x86)%\uwis copy\is-mjbgq.tmp в %ProgramFiles(x86)%\uwis copy\dvd2one.dll
%ProgramFiles(x86)%\uwis copy\is-fhjq2.tmp в %ProgramFiles(x86)%\uwis copy\mpeg2videotranslator.dll
%ProgramFiles(x86)%\uwis copy\skins\0\is-bpr4v.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\animation.gif
%ProgramFiles(x86)%\uwis copy\skins\0\is-hipj7.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\copynow.bmp
%ProgramFiles(x86)%\uwis copy\is-culso.tmp в %ProgramFiles(x86)%\uwis copy\mwiscopy.exe
%ProgramFiles(x86)%\uwis copy\skins\0\is-4bglt.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\setting.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-2e46c.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\down.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-lirks.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\wizard.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-10m8e.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\splash.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-ipp80.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\min.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-kcavc.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\menu.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-efmo3.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\help.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-dgvhm.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\close.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-7j102.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\web.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-rmub6.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\buynow.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-vavf2.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\background.bmp
%ProgramFiles(x86)%\uwis copy\skins\0\is-urles.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\skin.ini
%ProgramFiles(x86)%\uwis copy\language\is-485ig.tmp в %ProgramFiles(x86)%\uwis copy\language\english.ini
%ProgramFiles(x86)%\uwis copy\skins\0\is-ljqu3.tmp в %ProgramFiles(x86)%\uwis copy\skins\0\select.bmp
%WINDIR%\syswow64\is-7av9o.tmp в %WINDIR%\syswow64\sqlite3.dll