Trojan.Siggen18.48941

Техническая информация

Вредоносные функции

Запускает на исполнение

'%WINDIR%\syswow64\taskkill.exe' /F /IM IDMIntegrator64.exe /T
'%WINDIR%\syswow64\taskkill.exe' /F /IM IDMan.exe /T
'%WINDIR%\syswow64\taskkill.exe' /f /im IDMan.exe
'%WINDIR%\syswow64\taskkill.exe' /f /im IDMGrHlp.exe

Завершает или пытается завершить

следующие системные процессы:

<SYSTEM32>\cmd.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\aut6289.tmp
%ProgramFiles(x86)%\internet download manager\idmmzcc.xpi
%ProgramFiles(x86)%\internet download manager\idmfsa.dll
%ProgramFiles(x86)%\internet download manager\iemonitor.exe
%ProgramFiles(x86)%\internet download manager\scheduler.chm
%ProgramFiles(x86)%\internet download manager\iegetvl.htm
%ProgramFiles(x86)%\internet download manager\iegetvl2.htm
%ProgramFiles(x86)%\internet download manager\defexclist.txt
%ProgramFiles(x86)%\internet download manager\idmbrbtn.dll
%ProgramFiles(x86)%\internet download manager\idmftype.dll
%ProgramFiles(x86)%\internet download manager\languages\idm_tr.lng
%ProgramFiles(x86)%\internet download manager\languages\tips_tr.txt
%ProgramFiles(x86)%\internet download manager\idmshellext.dll
%ProgramFiles(x86)%\internet download manager\idmwfp.inf
%ProgramFiles(x86)%\internet download manager\idmtdi.inf
%ProgramFiles(x86)%\internet download manager\idmwfp32.sys
%ProgramFiles(x86)%\internet download manager\idmtdi32.sys
%ProgramFiles(x86)%\internet download manager\idmshellext64.dll
%ProgramFiles(x86)%\internet download manager\idmbrbtn64.dll
%ProgramFiles(x86)%\internet download manager\idmwfp64.sys
%ProgramFiles(x86)%\internet download manager\idmtdi64.sys
%ProgramFiles(x86)%\internet download manager\idmwfp.cat
%ProgramFiles(x86)%\internet download manager\languages\idm_ru.lng
%ProgramFiles(x86)%\internet download manager\languages\tips_ru.txt
%ProgramFiles(x86)%\internet download manager\languages\idm_th.lng
%ProgramFiles(x86)%\internet download manager\languages\tips_th.txt
%ProgramFiles(x86)%\internet download manager\languages\idm_pl.lng
%ProgramFiles(x86)%\internet download manager\languages\tips_pl.txt
%ProgramFiles(x86)%\internet download manager\grabber.chm
%ProgramFiles(x86)%\internet download manager\languages\tips_fa.txt
%ProgramFiles(x86)%\internet download manager\idmgrhlp.exe
%ProgramFiles(x86)%\internet download manager\toolbar\3d_smallhot_3.bmp
%ProgramFiles(x86)%\internet download manager\idmgetall.dll
%ProgramFiles(x86)%\internet download manager\idmmkb.dll
%ProgramFiles(x86)%\internet download manager\ieext.htm
%ProgramFiles(x86)%\internet download manager\iegetall.htm
%ProgramFiles(x86)%\internet download manager\languages\idm_fa.lng
%ProgramFiles(x86)%\internet download manager\idmtdi.cat
%ProgramFiles(x86)%\internet download manager\tips.txt
%ProgramFiles(x86)%\internet download manager\tutor.chm
%ProgramFiles(x86)%\internet download manager\languages\idm_ar.lng
%ProgramFiles(x86)%\internet download manager\languages\idm_de.lng
%ProgramFiles(x86)%\internet download manager\languages\idm_es.lng
%ProgramFiles(x86)%\internet download manager\languages\idm_fr.lng
%ProgramFiles(x86)%\internet download manager\languages\idm_it.lng
%ProgramFiles(x86)%\internet download manager\languages\idm_ptbr.lng
%ProgramFiles(x86)%\internet download manager\languages\idm_nl.lng
%ProgramFiles(x86)%\internet download manager\languages\template.lng
%ProgramFiles(x86)%\internet download manager\languages\tips_ar.txt
%ProgramFiles(x86)%\internet download manager\languages\tips_de.txt
%ProgramFiles(x86)%\internet download manager\languages\tips_es.txt
%ProgramFiles(x86)%\internet download manager\languages\tips_fr.txt
%ProgramFiles(x86)%\internet download manager\languages\tips_it.txt
%ProgramFiles(x86)%\internet download manager\languages\tips_ptbr.txt
%ProgramFiles(x86)%\internet download manager\languages\tips_nl.txt
%ProgramFiles(x86)%\internet download manager\toolbar\3d_style_3.tbi
%ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\3d_small_3.bmp
%ProgramFiles(x86)%\internet download manager\downlwithidm.dll
%ProgramFiles(x86)%\internet download manager\idmiecc64.dll
%ProgramFiles(x86)%\internet download manager\idmgetall64.dll
%ProgramFiles(x86)%\internet download manager\downlwithidm64.dll
%APPDATA%\microsoft\windows\start menu\programs\internet download manager\license.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\license.lnk
%APPDATA%\microsoft\windows\start menu\programs\internet download manager\idm help.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\idm help.lnk
%APPDATA%\microsoft\windows\start menu\programs\internet download manager\internet download manager.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\internet download manager.lnk
%APPDATA%\microsoft\windows\start menu\programs\internet download manager\tutorials.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\tutorials.lnk
%APPDATA%\microsoft\windows\start menu\programs\internet download manager\grabber help.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\grabber help.lnk
%HOMEPATH%\desktop\internet download manager.lnk
%ProgramFiles(x86)%\internet download manager\idmsetup2.log
%HOMEPATH%\desktop\download free full programs\not.txt
%APPDATA%\idm\defextmap.dat
%APPDATA%\idm\idmfc.dat
%ProgramFiles(x86)%\internet download manager\toolbar\windows_10\windows_10-large_disabled.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\windows_10\windows_10-large_hot.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\windows_10\windows_10-large_normal.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\windows_10\windows_10-small_disabled.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\windows_10\windows_10-small_hot.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\windows_10\windows_10-small_normal.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\windows_10.tbi
%TEMP%\3227.tmp\3237.tmp\3238.bat
%APPDATA%\patch.exe
%APPDATA%\name.reg
%HOMEPATH%\desktop\download free full programs\facebook grup free full programs.url
%APPDATA%\microsoft\windows\start menu\programs\internet download manager\uninstall idm.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\internet download manager\uninstall idm.lnk
%ProgramFiles(x86)%\internet download manager\brotli-license.txt
%ProgramFiles(x86)%\internet download manager\idmedgeext.crx
%ProgramFiles(x86)%\internet download manager\openssl-license.txt
%ProgramFiles(x86)%\internet download manager\idmintegrator64.exe
%ProgramFiles(x86)%\internet download manager\idmftype.dat
%ProgramFiles(x86)%\internet download manager\idmftype64.dll
%ProgramFiles(x86)%\internet download manager\idmnetmon.dll
%ProgramFiles(x86)%\internet download manager\idmnetmon64.dll
%ProgramFiles(x86)%\internet download manager\idmgcext.crx
%ProgramFiles(x86)%\internet download manager\idmvs.dll
%ProgramFiles(x86)%\internet download manager\idmbroker.exe
%ProgramFiles(x86)%\internet download manager\mediumilstart.exe
%ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3_hdpi15.bmp
%ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3_hdpi15.bmp
%ProgramFiles(x86)%\internet download manager\idmindex.dll
%ProgramFiles(x86)%\internet download manager\idmantypeinfo.tlb
%ProgramFiles(x86)%\internet download manager\idmmzcc7.dll
%ProgramFiles(x86)%\internet download manager\idmvconv.dll
%ProgramFiles(x86)%\internet download manager\idmcchandler7.dll
%ProgramFiles(x86)%\internet download manager\idmcchandler7_64.dll
%ProgramFiles(x86)%\internet download manager\idmmzcc2.xpi
%ProgramFiles(x86)%\internet download manager\idmmzcc3.xpi
%ProgramFiles(x86)%\internet download manager\idmmsghost.exe
%ProgramFiles(x86)%\internet download manager\idmmsghost.json
%ProgramFiles(x86)%\internet download manager\idmmsghostmoz.json
%ProgramFiles(x86)%\internet download manager\idmfc.dat
%ProgramFiles(x86)%\internet download manager\idmvmprs.dll
%ProgramFiles(x86)%\internet download manager\idmvmprs64.dll
%ProgramFiles(x86)%\internet download manager\libcrypto.dll
%ProgramFiles(x86)%\internet download manager\libssl.dll
%ProgramFiles(x86)%\internet download manager\idmpla.ini
%ProgramFiles(x86)%\internet download manager\idmmzcc7_64.dll
%APPDATA%\idm\urlexclist.dat
%ProgramFiles(x86)%\internet download manager\idman.exe
%TEMP%\idm_setup_temp\idm90.tmp
%TEMP%\idm_setup_temp\idm13.tmp
%TEMP%\idm_setup_temp\idm14.tmp
%TEMP%\idm_setup_temp\idm15.tmp
%TEMP%\idm_setup_temp\idm16.tmp
%TEMP%\idm_setup_temp\idm17.tmp
%TEMP%\idm_setup_temp\idm18.tmp
%TEMP%\idm_setup_temp\idm19.tmp
%TEMP%\idm_setup_temp\idm20.tmp
%TEMP%\idm_setup_temp\idm21.tmp
%TEMP%\idm_setup_temp\idm22.tmp
%TEMP%\idm_setup_temp\idm23.tmp
%TEMP%\idm_setup_temp\idm24.tmp
%TEMP%\idm_setup_temp\idm25.tmp
%TEMP%\idm_setup_temp\idm26.tmp
%TEMP%\idm_setup_temp\idm27.tmp
%TEMP%\idm_setup_temp\idm28.tmp
%TEMP%\idm_setup_temp\idm29.tmp
%TEMP%\idm_setup_temp\idm30.tmp
%TEMP%\idm_setup_temp\idm31.tmp
%TEMP%\idm_setup_temp\idm32.tmp
%TEMP%\idm_setup_temp\idm33.tmp
%TEMP%\idm_setup_temp\idm34.tmp
%TEMP%\idm_setup_temp\idm35.tmp
%TEMP%\idm_setup_temp\idm36.tmp
%TEMP%\idm_setup_temp\idm37.tmp
%TEMP%\idm_setup_temp\idm38.tmp
%TEMP%\idm_setup_temp\idm39.tmp
%TEMP%\idm_setup_temp\idm12.tmp
%TEMP%\idm_setup_temp\idm40.tmp
%TEMP%\idm_setup_temp\idm11.tmp
%TEMP%\idm_setup_temp\idm9.tmp
C:\gecici_proje_klasoru\grey.gif
%TEMP%\aut629a.tmp
C:\gecici_proje_klasoru\k2.png
%TEMP%\aut629b.tmp
C:\gecici_proje_klasoru\full.exe
%TEMP%\aut62cb.tmp
C:\gecici_proje_klasoru\idm 6.40.x activation.exe
%TEMP%\aut62eb.tmp
C:\gecici_proje_klasoru\idman641_sib.exe
%TEMP%\aut6627.tmp
C:\gecici_proje_klasoru\l.vbs
%TEMP%\aut6637.tmp
C:\gecici_proje_klasoru\lp.exe
%TEMP%\aut6722.tmp
C:\gecici_proje_klasoru\s.vbs
%TEMP%\nsh872a.tmp\uac.dll
%TEMP%\idman641\idman641.exe
%TEMP%\nsh872a.tmp\nact.dll
%TEMP%\idm_setup_temp\idm0.tmp
%TEMP%\idm_setup_temp\idm1.tmp
%TEMP%\idm_setup_temp\idm2.tmp
%TEMP%\idm_setup_temp\idm3.tmp
%TEMP%\idm_setup_temp\idm4.tmp
%TEMP%\idm_setup_temp\idm5.tmp
%TEMP%\idm_setup_temp\idm6.tmp
%TEMP%\idm_setup_temp\idm7.tmp
%TEMP%\idm_setup_temp\idm8.tmp
%TEMP%\idm_setup_temp\idm10.tmp
%TEMP%\idm_setup_temp\idm41.tmp
%TEMP%\idm_setup_temp\idm42.tmp
%TEMP%\idm_setup_temp\idm43.tmp
%TEMP%\idm_setup_temp\idm77.tmp
%TEMP%\idm_setup_temp\idm78.tmp
%TEMP%\idm_setup_temp\idm79.tmp
%TEMP%\idm_setup_temp\idm80.tmp
%TEMP%\idm_setup_temp\idm81.tmp
%TEMP%\idm_setup_temp\idm82.tmp
%TEMP%\idm_setup_temp\idm83.tmp
%TEMP%\idm_setup_temp\idm84.tmp
%TEMP%\idm_setup_temp\idm85.tmp
%TEMP%\idm_setup_temp\idm86.tmp
%TEMP%\idm_setup_temp\idm87.tmp
%TEMP%\idm_setup_temp\idm88.tmp
%ProgramFiles(x86)%\internet download manager\idmiecc.dll
%TEMP%\idm_setup_temp\idm89.tmp
%TEMP%\idm_setup_temp\idm91.tmp
%TEMP%\idm_setup_temp\idm92.tmp
%TEMP%\idm_setup_temp\idm93.tmp
%TEMP%\idm_setup_temp\idm94.tmp
%TEMP%\idm_setup_temp\idm95.tmp
%TEMP%\idm_setup_temp\idm96.tmp
%TEMP%\idm_setup_temp\idm97.tmp
%TEMP%\idm_setup_temp\idm98.tmp
%TEMP%\idm_setup_temp\idm99.tmp
%TEMP%\idm_setup_temp\idmsetup2.log
%ProgramFiles(x86)%\internet download manager\uninstall.exe
%ProgramFiles(x86)%\internet download manager\license.txt
%TEMP%\idm_setup_temp\idm75.tmp
%TEMP%\idm_setup_temp\idm76.tmp
%TEMP%\idm_setup_temp\idm74.tmp
%TEMP%\idm_setup_temp\idm73.tmp
%TEMP%\idm_setup_temp\idm72.tmp
%TEMP%\idm_setup_temp\idm45.tmp
%TEMP%\idm_setup_temp\idm46.tmp
%TEMP%\idm_setup_temp\idm47.tmp
%TEMP%\idm_setup_temp\idm48.tmp
%TEMP%\idm_setup_temp\idm49.tmp
%TEMP%\idm_setup_temp\idm50.tmp
%TEMP%\idm_setup_temp\idm51.tmp
%TEMP%\idm_setup_temp\idm52.tmp
%TEMP%\idm_setup_temp\idm53.tmp
%TEMP%\idm_setup_temp\idm54.tmp
%TEMP%\idm_setup_temp\idm55.tmp
%TEMP%\idm_setup_temp\idm56.tmp
%ProgramFiles(x86)%\internet download manager\idman.chm
%TEMP%\idm_setup_temp\idm58.tmp
%TEMP%\idm_setup_temp\idm57.tmp
%TEMP%\idm_setup_temp\idm60.tmp
%TEMP%\idm_setup_temp\idm61.tmp
%TEMP%\idm_setup_temp\idm62.tmp
%TEMP%\idm_setup_temp\idm63.tmp
%TEMP%\idm_setup_temp\idm64.tmp
%TEMP%\idm_setup_temp\idm65.tmp
%TEMP%\idm_setup_temp\idm66.tmp
%TEMP%\idm_setup_temp\idm67.tmp
%TEMP%\idm_setup_temp\idm68.tmp
%TEMP%\idm_setup_temp\idm69.tmp
%TEMP%\idm_setup_temp\idm70.tmp
%TEMP%\idm_setup_temp\idm71.tmp
%TEMP%\idm_setup_temp\idm44.tmp
%TEMP%\idm_setup_temp\idm59.tmp
%HOMEPATH%\desktop\download free full programs\web sitemiz Гјcretsiz full programlar.url

Удаляет следующие файлы

%TEMP%\aut6289.tmp
%TEMP%\idm_setup_temp\idm81.tmp
%TEMP%\idm_setup_temp\idm80.tmp
%TEMP%\idm_setup_temp\idm8.tmp
%TEMP%\idm_setup_temp\idm79.tmp
%TEMP%\idm_setup_temp\idm78.tmp
%TEMP%\idm_setup_temp\idm77.tmp
%TEMP%\idm_setup_temp\idm76.tmp
%TEMP%\idm_setup_temp\idm75.tmp
%TEMP%\idm_setup_temp\idm74.tmp
%TEMP%\idm_setup_temp\idm73.tmp
%TEMP%\idm_setup_temp\idm72.tmp
%TEMP%\idm_setup_temp\idm71.tmp
%TEMP%\idm_setup_temp\idm83.tmp
%TEMP%\idm_setup_temp\idm82.tmp
%TEMP%\idm_setup_temp\idm69.tmp
%TEMP%\idm_setup_temp\idm68.tmp
%TEMP%\idm_setup_temp\idm67.tmp
%TEMP%\idm_setup_temp\idm66.tmp
%TEMP%\idm_setup_temp\idm65.tmp
%TEMP%\idm_setup_temp\idm64.tmp
%TEMP%\idm_setup_temp\idm63.tmp
%TEMP%\idm_setup_temp\idm62.tmp
%TEMP%\idm_setup_temp\idm61.tmp
%TEMP%\idm_setup_temp\idm60.tmp
%TEMP%\idm_setup_temp\idm6.tmp
%TEMP%\idm_setup_temp\idm59.tmp
%TEMP%\idm_setup_temp\idm70.tmp
%TEMP%\idm_setup_temp\idm29.tmp
%TEMP%\idm_setup_temp\idm84.tmp
C:\gecici_proje_klasoru\l.vbs
C:\gecici_proje_klasoru\k2.png
C:\gecici_proje_klasoru\idman641_sib.exe
C:\gecici_proje_klasoru\idm 6.40.x activation.exe
C:\gecici_proje_klasoru\grey.gif
C:\gecici_proje_klasoru\full.exe
%TEMP%\3227.tmp\3237.tmp\3238.bat
%APPDATA%\name.reg
%APPDATA%\patch.exe
%TEMP%\nsh872a.tmp\uac.dll
%TEMP%\nsh872a.tmp\nact.dll
%TEMP%\idm_setup_temp\idmsetup2.log
%TEMP%\idm_setup_temp\idm99.tmp
%TEMP%\idm_setup_temp\idm98.tmp
%TEMP%\idm_setup_temp\idm97.tmp
%TEMP%\idm_setup_temp\idm96.tmp
%TEMP%\idm_setup_temp\idm95.tmp
%TEMP%\idm_setup_temp\idm94.tmp
%TEMP%\idm_setup_temp\idm93.tmp
%TEMP%\idm_setup_temp\idm92.tmp
%TEMP%\idm_setup_temp\idm91.tmp
%TEMP%\idm_setup_temp\idm90.tmp
%TEMP%\idm_setup_temp\idm9.tmp
%TEMP%\idm_setup_temp\idm89.tmp
%TEMP%\idm_setup_temp\idm88.tmp
%TEMP%\idm_setup_temp\idm87.tmp
%TEMP%\idm_setup_temp\idm86.tmp
%TEMP%\idm_setup_temp\idm58.tmp
%TEMP%\idm_setup_temp\idm7.tmp
%TEMP%\idm_setup_temp\idm57.tmp
%TEMP%\idm_setup_temp\idm56.tmp
%TEMP%\idm_setup_temp\idm55.tmp
%TEMP%\idm_setup_temp\idm14.tmp
%TEMP%\idm_setup_temp\idm25.tmp
%TEMP%\idm_setup_temp\idm24.tmp
%TEMP%\idm_setup_temp\idm23.tmp
%TEMP%\idm_setup_temp\idm22.tmp
%TEMP%\idm_setup_temp\idm21.tmp
%TEMP%\idm_setup_temp\idm20.tmp
%TEMP%\idm_setup_temp\idm2.tmp
%TEMP%\idm_setup_temp\idm19.tmp
%TEMP%\idm_setup_temp\idm18.tmp
%TEMP%\idm_setup_temp\idm17.tmp
%TEMP%\idm_setup_temp\idm16.tmp
%TEMP%\idm_setup_temp\idm15.tmp
%TEMP%\idm_setup_temp\idm13.tmp
%TEMP%\idm_setup_temp\idm27.tmp
%TEMP%\idm_setup_temp\idm12.tmp
%TEMP%\idm_setup_temp\idm11.tmp
%TEMP%\idm_setup_temp\idm10.tmp
%TEMP%\idm_setup_temp\idm1.tmp
%TEMP%\idm_setup_temp\idm0.tmp
%TEMP%\aut6722.tmp
%TEMP%\aut6637.tmp
%TEMP%\aut6627.tmp
%TEMP%\aut62eb.tmp
%TEMP%\aut62cb.tmp
%TEMP%\aut629b.tmp
%TEMP%\aut629a.tmp
C:\gecici_proje_klasoru\lp.exe
%TEMP%\idm_setup_temp\idm85.tmp
%TEMP%\idm_setup_temp\idm28.tmp
%TEMP%\idm_setup_temp\idm30.tmp
%TEMP%\idm_setup_temp\idm26.tmp
%TEMP%\idm_setup_temp\idm54.tmp
%TEMP%\idm_setup_temp\idm53.tmp
%TEMP%\idm_setup_temp\idm52.tmp
%TEMP%\idm_setup_temp\idm51.tmp
%TEMP%\idm_setup_temp\idm50.tmp
%TEMP%\idm_setup_temp\idm5.tmp
%TEMP%\idm_setup_temp\idm49.tmp
%TEMP%\idm_setup_temp\idm48.tmp
%TEMP%\idm_setup_temp\idm47.tmp
%TEMP%\idm_setup_temp\idm46.tmp
%TEMP%\idm_setup_temp\idm45.tmp
%TEMP%\idm_setup_temp\idm44.tmp
%TEMP%\idm_setup_temp\idm43.tmp
%TEMP%\idm_setup_temp\idm42.tmp
%TEMP%\idm_setup_temp\idm41.tmp
%TEMP%\idm_setup_temp\idm40.tmp
%TEMP%\idm_setup_temp\idm4.tmp
%TEMP%\idm_setup_temp\idm39.tmp
%TEMP%\idm_setup_temp\idm38.tmp
%TEMP%\idm_setup_temp\idm37.tmp
%TEMP%\idm_setup_temp\idm36.tmp
%TEMP%\idm_setup_temp\idm35.tmp
%TEMP%\idm_setup_temp\idm34.tmp
%TEMP%\idm_setup_temp\idm33.tmp
%TEMP%\idm_setup_temp\idm32.tmp
%TEMP%\idm_setup_temp\idm31.tmp
%TEMP%\idm_setup_temp\idm3.tmp
C:\gecici_proje_klasoru\s.vbs

Другое

Ищет следующие окна

ClassName: '' WindowName: ''
ClassName: '' WindowName: 'IDM agent for click monitoring in IE-based browsers'
ClassName: 'EDIT' WindowName: ''

Создает и запускает на исполнение

'%WINDIR%\syswow64\wscript.exe' "C:\gecici_proje_klasoru\S.vbs"
'C:\gecici_proje_klasoru\idman641_sib.exe' /S
'%TEMP%\idman641\idman641.exe'
'%TEMP%\idm_setup_temp\idm1.tmp' -d "%TEMP%\IDM_Setup_Temp\"
'%WINDIR%\syswow64\wscript.exe' "C:\gecici_proje_klasoru\L.vbs"
'%ProgramFiles(x86)%\internet download manager\idmbroker.exe' -RegServer
'%ProgramFiles(x86)%\internet download manager\idman.exe' /rtr /setlngid 9
'C:\gecici_proje_klasoru\lp.exe'
'C:\gecici_proje_klasoru\idm 6.40.x activation.exe'
'C:\gecici_proje_klasoru\full.exe'
'%WINDIR%\syswow64\cmd.exe' /Q /C taskkill /F /IM IDMan.exe /T' (со скрытым окном)
'%WINDIR%\syswow64\cmd.exe' /Q /C taskkill /F /IM IDMIntegrator64.exe /T' (со скрытым окном)
'%WINDIR%\syswow64\taskkill.exe' /f /im IDMan.exe' (со скрытым окном)
'%WINDIR%\syswow64\taskkill.exe' /f /im IDMGrHlp.exe' (со скрытым окном)
'%WINDIR%\syswow64\cmd.exe' /Q /C Rd /s /q "\Program Files (x86)\Internet Download Manager\Toolbar"' (со скрытым окном)
'%WINDIR%\syswow64\cmd.exe' /Q /C Rd /s /q "\Program Files\Internet Download Manager\Toolbar"' (со скрытым окном)

Запускает на исполнение

'%WINDIR%\syswow64\cmd.exe' /Q /C taskkill /F /IM IDMan.exe /T
'<SYSTEM32>\cmd.exe' /c reg query "HKEY_CURRENT_USER\Software\DownloadManager" /V ExePath
'<SYSTEM32>\cmd.exe' /c "%TEMP%\3227.tmp\3237.tmp\3238.bat "C:\gecici_proje_klasoru\IDM 6.40.x Activation.exe""
'%WINDIR%\syswow64\cmd.exe' /Q /C Rd /s /q "\Program Files\Internet Download Manager\Toolbar"
'%WINDIR%\syswow64\cmd.exe' /Q /C Rd /s /q "\Program Files (x86)\Internet Download Manager\Toolbar"
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMShellExt64.dll"
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMShellExt64.dll"
'<SYSTEM32>\reg.exe' query "HKEY_CURRENT_USER\Software\DownloadManager" /V ExePath
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\downlWithIDM64.dll"
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMIECC64.dll"
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\downlWithIDM64.dll"
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMGetAll64.dll"
'%WINDIR%\syswow64\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMIECC64.dll"
'%WINDIR%\syswow64\ctfmon.exe'
'%WINDIR%\syswow64\cmd.exe' /Q /C taskkill /F /IM IDMIntegrator64.exe /T
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\Internet Download Manager\IDMGetAll64.dll"
'<SYSTEM32>\timeout.exe' /T 2

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней