Trojan.Siggen15.10324

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[<HKLM>\System\CurrentControlSet\Services\TDService] 'Start' = '00000002'
[<HKLM>\System\CurrentControlSet\Services\TDService] 'ImagePath' = '"%ProgramFiles(x86)%\TECHKON GmbH\TECHKON Device Service SDK\TDService.exe" '

Создает следующие сервисы

'TDService' "%ProgramFiles(x86)%\TECHKON GmbH\TECHKON Device Service SDK\TDService.exe"

Изменения в файловой системе

Создает следующие файлы

%TEMP%\mia7a3e.tmp\data\tdservice.msi
%TEMP%\miab75d.tmp\data\offline\a9582285\a1213411\spectrojet_x64.cat
%TEMP%\miab75d.tmp\data\offline\4f94afbb\f3daaa4a\spectrojet_x64.cat
%TEMP%\miab75d.tmp\data\offline\7b6ffc5d\3005f51a\spectroplate_x64.cat
%TEMP%\miab75d.tmp\data\offline\1ece726d\63bf8f16\dens_x64.inf
%TEMP%\miab75d.tmp\data\offline\b0d889f1\42ed5187\spectrodens_ir_x64.inf
%TEMP%\miab75d.tmp\data\offline\eaf53bfc\203cc2c1\spectrodens_x64.inf
%TEMP%\miab75d.tmp\data\offline\31a904bc\64bb0e70\spectrodrive_x64.inf
%TEMP%\miab75d.tmp\data\offline\1f60a5a0\c7c51fa4\spectrodrive_x64.inf
%TEMP%\miab75d.tmp\data\offline\a7f65a27\a1213411\spectrojet_x64.inf
%TEMP%\miab75d.tmp\techkondriver64bit.exe
%TEMP%\miab75d.tmp\data\offline\ea096132\f3daaa4a\spectrojet_x64.inf
%TEMP%\miab75d.tmp\techkondriver64bit.res
%TEMP%\mia2\installaware.png
y:\mdifxexe.dll
%TEMP%\mia2\techkondriver64bit.msi
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\1ece726d\63bf8f16\dens_x64.inf
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\1f60a5a0\c7c51fa4\spectrodrive_x64.inf
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\31a904bc\64bb0e70\spectrodrive_x64.inf
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\3f536ccf\c7c51fa4\spectrodrive_x64.sys
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\4f94afbb\f3daaa4a\spectrojet_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\67aff4a2\42ed5187\spectrodens_ir_x64.sys
%TEMP%\miab75d.tmp\data\offline\e540c79d\203cc2c1\spectrodens_x64.cat
%TEMP%\miab75d.tmp\data\offline\7b015a62\3005f51a\spectroplate_x64.inf
%TEMP%\miab75d.tmp\data\offline\ad4ead4c\64bb0e70\spectrodrive_x64.cat
%TEMP%\miab75d.tmp\data\offline\d06d98f\c7c51fa4\spectrodrive_x64.cat
%TEMP%\miab75d.tmp\data\offline\b2a90acc\42ed5187\spectrodens_ir_x64.cat
%TEMP%\miab75d.tmp\data\offline\855baa23\63bf8f16\dens_x64.cat
%WINDIR%\syswow64\mswinsck.ocx
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\tdservice.exe
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\tdservice.msi
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\tdservice.res
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\mia.lib
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\tdservice.dat
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\tdservice.par
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\instance.dat
%TEMP%\miab75d.tmp\data\techkondriver64bit.msi
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\6bcede9b\a1213411\spectrojet_x64.sys
%TEMP%\miab75d.tmp\techkondriver64bit.msi
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\driver\techkondriver32bit.exe
%TEMP%\miab75d.tmp\data\offline\mdifxide.dll\x64dpinst.exe
%TEMP%\miab75d.tmp\data\offline\mmsi.dll\mmsiexec.dll
%TEMP%\miab75d.tmp\data\offline\9967f460\63bf8f16\dens_x64.sys
%TEMP%\miab75d.tmp\data\offline\67aff4a2\42ed5187\spectrodens_ir_x64.sys
%TEMP%\miab75d.tmp\data\offline\89035efd\203cc2c1\spectrodens_x64.sys
%TEMP%\miab75d.tmp\data\offline\afd17cc5\64bb0e70\spectrodrive_x64.sys
%TEMP%\miab75d.tmp\data\offline\3f536ccf\c7c51fa4\spectrodrive_x64.sys
%TEMP%\miab75d.tmp\data\offline\6bcede9b\a1213411\spectrojet_x64.sys
%TEMP%\miab75d.tmp\data\offline\6e983bf5\f3daaa4a\spectrojet_x64.sys
%TEMP%\miab75d.tmp\data\offline\e5625aed\3005f51a\spectroplate_x64.sys
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\driver\techkondriver64bit.exe
%TEMP%\miab75d.tmp\mia.lib
%TEMP%\miab75d.tmp\data\offline\mdifxide.dll\mdifxexe.dll
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\tdservice.exe.config
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\6e983bf5\f3daaa4a\spectrojet_x64.sys
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\89035efd\203cc2c1\spectrodens_x64.sys
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrojet\spectrojet_x64.cat
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectroplate\spectroplate_x64.sys
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectroplate\spectroplate_x64.inf
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectroplate\spectroplate_x64.cat
%ProgramFiles%\techkon gmbh\techkon driver 64bit\mf-ir\spectrodens_ir_x64.sys
%ProgramFiles%\techkon gmbh\techkon driver 64bit\mf-ir\spectrodens_ir_x64.inf
%ProgramFiles%\techkon gmbh\techkon driver 64bit\mf-ir\spectrodens_ir_x64.cat
%ProgramFiles%\techkon gmbh\techkon driver 64bit\dens\dens_x64.cat
%ProgramFiles%\techkon gmbh\techkon driver 64bit\dens\dens_x64.inf
%ProgramFiles%\techkon gmbh\techkon driver 64bit\dens\dens_x64.sys
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodrivewlan\spectrodrive_x64.inf
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrojet2\spectrojet_x64.sys
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrojet2\spectrojet_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\techkondriver64bit.exe
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\techkondriver64bit.msi
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\techkondriver64bit.res
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\mia.lib
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\techkondriver64bit.dat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\techkondriver64bit.par
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\instance.dat
%WINDIR%\dpinst.log
%TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\setdfc3.tmp
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrojet\spectrojet_x64.sys
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrojet\spectrojet_x64.inf
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodrivewlan\spectrodrive_x64.cat
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodrivewlan\spectrodrive_x64.sys
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\313267a2\44f080c9\dznet.dll
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\9967f460\63bf8f16\dens_x64.sys
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\a7f65a27\a1213411\spectrojet_x64.inf
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\a9582285\a1213411\spectrojet_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\ad4ead4c\64bb0e70\spectrodrive_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\afd17cc5\64bb0e70\spectrodrive_x64.sys
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\b0d889f1\42ed5187\spectrodens_ir_x64.inf
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\b2a90acc\42ed5187\spectrodens_ir_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\d06d98f\c7c51fa4\spectrodrive_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\e540c79d\203cc2c1\spectrodens_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\7b015a62\3005f51a\spectroplate_x64.inf
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\855baa23\63bf8f16\dens_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\7b6ffc5d\3005f51a\spectroplate_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\e5625aed\3005f51a\spectroplate_x64.sys
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\mdifxide.dll\x64dpinst.exe
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\mmsi.dll\mmsiexec.dll
%TEMP%\{55ea8940-b618-47bd-a642-20bfb2a64f78}
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodens\spectrodens_x64.sys
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodens\spectrodens_x64.inf
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodens\spectrodens_x64.cat
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodrive\spectrodrive_x64.sys
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodrive\spectrodrive_x64.inf
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrodrive\spectrodrive_x64.cat
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\ea096132\f3daaa4a\spectrojet_x64.inf
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\eaf53bfc\203cc2c1\spectrodens_x64.inf
%ALLUSERSPROFILE%\{4261a58d-ccd3-4478-ab68-52dad26a4538}\offline\mdifxide.dll\mdifxexe.dll
%WINDIR%\syswow64\tdscon.ocx
%WINDIR%\syswow64\usbiocom.dll
%WINDIR%\syswow64\lcms.dll
%TEMP%\mia7a3e.tmp\data\offline\2b27adb6\52a32845\tdservice.exe.config
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\vbrun60.inf
%TEMP%\mia7a3e.tmp\tdservice.res
%TEMP%\mia7a3e.tmp\data\offline\122686bf\258cead\defaultscan.tss
%TEMP%\mia7a3e.tmp\data\offline\c3192131\258cead\defaultspot.tss
%TEMP%\lang.loc
%TEMP%\mia1\installaware.png
%TEMP%\mia.tmp
y:\componentstree.dfm
y:\destination.dfm
y:\registration.dfm
y:\finish.dfm
y:\licensecheck.dfm
y:\licensecheck.dfm.miaf
y:\maintenance.dfm
y:\prereq.dfm
y:\prereq.dfm.miaf
y:\progress.dfm
y:\progress.dfm.miaf
y:\progressprereq.dfm
y:\readme.dfm
%TEMP%\mia7a3e.tmp\data\offline\39bfd73e\20fed3d5\tdscon.ocx
%TEMP%\mia7a3e.tmp\data\offline\f1534727\69a1609\mswinsck.ocx
%TEMP%\mia7a3e.tmp\mia.lib
%TEMP%\mia7a3e.tmp\data\offline\83b32013\69a1609\mswinsck.ocx
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\w95inf32.dll
%TEMP%\mia7a3e.tmp\tdservice.msi
%TEMP%\mia7a3e.tmp\data\offline\cb1921c3\258cead\tdservice.exe
%TEMP%\mia7a3e.tmp\data\offline\f0378f9\258cead\tdservice.exe
%TEMP%\mia7a3e.tmp\tdservice.exe
%TEMP%\mia7a3e.tmp\data\offline\7eca07d8\58765dd1\tdservicelogmonitor.exe
%TEMP%\mia7a3e.tmp\data\offline\c314ed32\fa6468b3\techkondriver32bit.exe
%TEMP%\mia7a3e.tmp\data\offline\e78d68b2\614ecdac\techkondriver64bit.exe
%TEMP%\mia7a3e.tmp\data\offline\77f75f4d\f9a06a17\techkonspectrodriveupdate.exe
%TEMP%\mia7a3e.tmp\data\offline\f33cd8c2\429ea4ee\techkonspectrojetupdate.exe
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\advpack.dll
y:\readme.dfm.miaf
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\asycfilt.dll
y:\finish.dfm.miaf
%TEMP%\mia7a3e.tmp\data\offline\56ec1950\44f080c9\dzncore.dll
%TEMP%\mia7a3e.tmp\data\offline\3a262dc9\69a1609\lcms.dll
%TEMP%\mia7a3e.tmp\data\offline\mmsi.dll\mmsiexec.dll
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\msvbvm60.dll
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\mvbexec.dll
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\oleaut32.dll
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\olepro32.dll
%TEMP%\mia7a3e.tmp\data\offline\cb893f9a\339c3dfd\tdserviceconnection.dll
%TEMP%\mia7a3e.tmp\data\offline\e5d99e3b\69a1609\usbiocom.dll
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\w95inf16.dll
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\comcat.dll
%TEMP%\mia7a3e.tmp\data\offline\da29bfbb\f16735f0\tdserverapp.exe
%TEMP%\mia7a3e.tmp\data\offline\313267a2\44f080c9\dznet.dll
%TEMP%\mia7a3e.tmp\data\offline\mvb.dll\stdole2.tlb
y:\registration.dfm.miaf
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\f33cd8c2\429ea4ee\techkonspectrojetupdate.exe
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\advpack.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\asycfilt.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\comcat.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\msvbvm60.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\mvbexec.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\oleaut32.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\olepro32.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\stdole2.tlb
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\vbrun60.inf
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\f1534727\69a1609\mswinsck.ocx
y:\registrationwithserial.dfm
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mmsi.dll\mmsiexec.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\w95inf16.dll
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\defaultspot.tss
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\tdservice.exe
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\tdserverapp.exe
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\tdserviceconnection.dll
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\tdservicelogmonitor.exe
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\techkonspectrodriveupdate.exe
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\techkonspectrojetupdate.exe
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\dzncore.dll
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\dznet.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\mvb.dll\w95inf32.dll
%TEMP%\{cd1e6019-47ae-4334-a91e-595ba68b6e06}
%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\defaultscan.tss
%ProgramFiles%\techkon gmbh\techkon driver 64bit\spectrojet2\spectrojet_x64.inf
%TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\sete070.tmp
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\e5d99e3b\69a1609\usbiocom.dll
y:\setuptype.dfm
y:\startinstallation.dfm
y:\startmenu.dfm
y:\startmenu.dfm.miaf
y:\welcome.dfm
y:\wizard.dfm
y:\mmsiexec.dll
y:\mvbexec.dll
%TEMP%\mia1\tdservice.msi
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\122686bf\258cead\defaultscan.tss
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\e78d68b2\614ecdac\techkondriver64bit.exe
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\f0378f9\258cead\tdservice.exe
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\2b27adb6\52a32845\tdservice.exe.config
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\3a262dc9\69a1609\lcms.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\56ec1950\44f080c9\dzncore.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\77f75f4d\f9a06a17\techkonspectrodriveupdate.exe
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\7eca07d8\58765dd1\tdservicelogmonitor.exe
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\83b32013\69a1609\mswinsck.ocx
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\c314ed32\fa6468b3\techkondriver32bit.exe
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\c3192131\258cead\defaultspot.tss
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\cb1921c3\258cead\tdservice.exe
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\cb893f9a\339c3dfd\tdserviceconnection.dll
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\da29bfbb\f16735f0\tdserverapp.exe
y:\registrationwithserial.dfm.miaf
%ALLUSERSPROFILE%\{f6bd91e0-d612-400a-af48-6188465e8422}\offline\39bfd73e\20fed3d5\tdscon.ocx
%TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\sete0fd.tmp

Удаляет следующие файлы

%TEMP%\lang.loc
%TEMP%\mia.tmp
%TEMP%\{cd1e6019-47ae-4334-a91e-595ba68b6e06}
%TEMP%\{55ea8940-b618-47bd-a642-20bfb2a64f78}

Перемещает следующие файлы

%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\tdservice.exe в C:\config.msi\119699.rbf
%TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\setdfc3.tmp в %TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\dens_x64.cat
%TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\sete070.tmp в %TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\dens_x64.inf
%TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\sete0fd.tmp в %TEMP%\{0b2a41d6-aff8-7d97-52ae-8160c6189a0d}\dens_x64.sys

Подменяет следующие файлы

%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\tdservice.exe
%TEMP%\lang.loc
%TEMP%\mia.tmp

Другое

Ищет следующие окна

ClassName: 'MouseZ' WindowName: 'Magellan MSWHEEL'

Создает и запускает на исполнение

'%TEMP%\mia7a3e.tmp\tdservice.exe' /m="<Полный путь к файлу>" /k=""
'%ProgramFiles(x86)%\techkon gmbh\techkon device service sdk\driver\techkondriver64bit.exe' /quiet /norestart
'%TEMP%\miab75d.tmp\techkondriver64bit.exe' /quiet /norestart /m="C:\PROGRA~2\TECHKO~1\TECHKO~1\Driver\TECHKO~2.EXE" /k=""
'%ProgramFiles%\{4261a~1\offline\mdifxide.dll\x64dpinst.exe' \SW \SE \EL \PATH C:\PROGRA~1\\TECHKO~1\TECHKO~1\DENS\ \D \SA \LM \F' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\syswow64\msiexec.exe' /Y "%WINDIR%\SysWOW64\USBIOCOM.dll"
'%WINDIR%\syswow64\msiexec.exe' /Y "%WINDIR%\SysWOW64\TDSCON.ocx"
'%WINDIR%\syswow64\msiexec.exe' /Y "%WINDIR%\SysWOW64\MSWINSCK.OCX"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней