Trojan.DownLoader45.21826

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-vqo68.tmp\is-98a95.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-sfbo3.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-3d94c.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-lgpq4.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-n8a02.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-dsiru.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-v1uuk.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-pn318.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ijd4m.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-vs20c.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-s5fin.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-3dqnp.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-e3i2d.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-85cdm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-1mklc.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-tcs83.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-pmqec.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-a3aei.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-lej37.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-q7198.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-4bntg.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-87qvs.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8rg92.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-qgs69.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0i74l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2tipn.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9itlb.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-o6eql.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-cqg2g.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-dnitf.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ietnk.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-7hfd3.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-0gmsm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-2lfvq.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-4lnpm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-riqec.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-hapm0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-iamkp.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-2g22s.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-efcfc.tmp
%ProgramFiles(x86)%\universal extractor\uniextract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-qrlt1.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-9din6.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-klh63.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-du41u.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-h6f3a.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-11dpf.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-olkkh.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-ks2t9.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-nl9h2.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-mi1p1.tmp
%ProgramFiles(x86)%\universal extractor\is-m1rlj.tmp
%ProgramFiles(x86)%\universal extractor\is-uhltb.tmp
%ProgramFiles(x86)%\universal extractor\is-03ric.tmp
%ProgramFiles(x86)%\universal extractor\is-g4c2p.tmp
%ProgramFiles(x86)%\universal extractor\is-oibp1.tmp
%ProgramFiles(x86)%\universal extractor\unins000.dat
%ProgramFiles(x86)%\universal extractor\bin\unp\is-eq21r.tmp
%ProgramFiles(x86)%\universal extractor\is-au493.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-23gui.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-osnpf.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-dna9a.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ei9sg.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-iuvte.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-vrc6b.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-p6886.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-salrm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-hp8ga.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-fnmnq.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-fcfai.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-o3quh.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-0amcq.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-mbu96.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-3tb4b.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-b1eeb.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-91mbj.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-pgqm6.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-9284a.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-hd96c.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-06rj8.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-i96r3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8ped2.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-dsgcc.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2rmoq.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-kdlee.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-3mhcs.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-u8i08.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-e259c.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-gfv08.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-hlrir.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-nut74.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-kb60t.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0u9m0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-f6eom.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-mdtpe.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-n7std.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2p4if.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-35f21.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-mohbe.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-i4r4a.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2rdhr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-4de2s.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-moh3b.tmp
%TEMP%\is-0o56j.tmp\_isetup\_shfoldr.dll
%TEMP%\is-0o56j.tmp\_iscrypt.dll
%ProgramFiles(x86)%\universal extractor\is-mts8e.tmp
%ProgramFiles(x86)%\universal extractor\is-l6cnt.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0qp4f.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-dp0vf.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-me1jo.tmp
%TEMP%\is-0o56j.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-41brc.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-or3rv.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-h4f17.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8c9pr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-mn6c4.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2verr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8u1fm.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-jefd3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0vaco.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-l00f1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-264cc.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2dfb7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-4j6ej.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-hsv4d.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-e6uom.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1c5hd.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-d1qd7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-q09pg.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-jt1t4.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-3eeho.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-qffs0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8gqek.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-3jt2r.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-fb026.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2gdn2.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-o5jop.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0j2vi.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-aeboq.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2et2a.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ahpi1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-s3r3o.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-07vs0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-vkmmt.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-fmqd0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-rtpeg.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-acuk7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-lsi7v.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-3ssv1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-hm5ni.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9npci.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-5ff4v.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7iaoq.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-6qiqb.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-rmulf.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pmoc7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-t6pa7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-307tj.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0jagj.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7fvau.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-uul66.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-bmvcf.tmp
%TEMP%\jdegg.txt

Перемещает следующие файлы

%ProgramFiles(x86)%\universal extractor\is-mts8e.tmp в %ProgramFiles(x86)%\universal extractor\unins000.exe
%ProgramFiles(x86)%\universal extractor\bin\is-3d94c.tmp в %ProgramFiles(x86)%\universal extractor\bin\e_wise_w.exe
%ProgramFiles(x86)%\universal extractor\bin\is-lgpq4.tmp в %ProgramFiles(x86)%\universal extractor\bin\forcelibrary.dll
%ProgramFiles(x86)%\universal extractor\bin\is-n8a02.tmp в %ProgramFiles(x86)%\universal extractor\bin\helpdeco.exe
%ProgramFiles(x86)%\universal extractor\bin\is-dsiru.tmp в %ProgramFiles(x86)%\universal extractor\bin\i3comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-v1uuk.tmp в %ProgramFiles(x86)%\universal extractor\bin\i5comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-iamkp.tmp в %ProgramFiles(x86)%\universal extractor\bin\7z.dll
%ProgramFiles(x86)%\universal extractor\bin\is-vs20c.tmp в %ProgramFiles(x86)%\universal extractor\bin\i6comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-a3aei.tmp в %ProgramFiles(x86)%\universal extractor\bin\instexpl.dll
%ProgramFiles(x86)%\universal extractor\bin\is-s5fin.tmp в %ProgramFiles(x86)%\universal extractor\bin\instexpl.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-3dqnp.tmp в %ProgramFiles(x86)%\universal extractor\bin\isxunpack.exe
%ProgramFiles(x86)%\universal extractor\bin\is-e3i2d.tmp в %ProgramFiles(x86)%\universal extractor\bin\lzop.exe
%ProgramFiles(x86)%\universal extractor\bin\is-85cdm.tmp в %ProgramFiles(x86)%\universal extractor\bin\mhtunp.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-1mklc.tmp в %ProgramFiles(x86)%\universal extractor\bin\msi.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-pn318.tmp в %ProgramFiles(x86)%\universal extractor\bin\extract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-pmqec.tmp в %ProgramFiles(x86)%\universal extractor\bin\innounp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-sfbo3.tmp в %ProgramFiles(x86)%\universal extractor\bin\e_wise.ini
%ProgramFiles(x86)%\universal extractor\bin\is-ijd4m.tmp в %ProgramFiles(x86)%\universal extractor\bin\extractmht.exe
%ProgramFiles(x86)%\universal extractor\bin\is-lej37.tmp в %ProgramFiles(x86)%\universal extractor\bin\dbxplug.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-q7198.tmp в %ProgramFiles(x86)%\universal extractor\bin\cmdtotal.exe
%ProgramFiles(x86)%\universal extractor\docs\is-qgs69.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0i74l.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2tipn.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9itlb.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-o6eql.tmp в %ProgramFiles(x86)%\universal extractor\docs\uudeview_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-tcs83.tmp в %ProgramFiles(x86)%\universal extractor\bin\msix.exe
%ProgramFiles(x86)%\universal extractor\docs\is-dnitf.tmp в %ProgramFiles(x86)%\universal extractor\docs\uudeview_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-cqg2g.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-ietnk.tmp в %ProgramFiles(x86)%\universal extractor\bin\7z.exe
%ProgramFiles(x86)%\universal extractor\bin\is-0gmsm.tmp в %ProgramFiles(x86)%\universal extractor\bin\arj.exe
%ProgramFiles(x86)%\universal extractor\bin\is-2lfvq.tmp в %ProgramFiles(x86)%\universal extractor\bin\aspackdie.exe
%ProgramFiles(x86)%\universal extractor\bin\is-4lnpm.tmp в %ProgramFiles(x86)%\universal extractor\bin\bin2iso.exe
%ProgramFiles(x86)%\universal extractor\bin\is-riqec.tmp в %ProgramFiles(x86)%\universal extractor\bin\booz.exe
%ProgramFiles(x86)%\universal extractor\bin\is-hapm0.tmp в %ProgramFiles(x86)%\universal extractor\bin\cdirip.exe
%ProgramFiles(x86)%\universal extractor\docs\is-87qvs.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_man.txt
%ProgramFiles(x86)%\universal extractor\bin\is-4bntg.tmp в %ProgramFiles(x86)%\universal extractor\bin\clit.exe
%ProgramFiles(x86)%\universal extractor\bin\is-7hfd3.tmp в %ProgramFiles(x86)%\universal extractor\bin\arc.exe
%ProgramFiles(x86)%\universal extractor\docs\is-8rg92.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_readme.txt
%ProgramFiles(x86)%\universal extractor\bin\is-2g22s.tmp в %ProgramFiles(x86)%\universal extractor\bin\nbhextract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-fcfai.tmp в %ProgramFiles(x86)%\universal extractor\bin\raiu.exe
%ProgramFiles(x86)%\universal extractor\bin\unp\is-ks2t9.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_2.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-nl9h2.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_3.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-9din6.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\eschalon.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-klh63.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\gentee.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-du41u.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate1.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-h6f3a.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate2.unp
%ProgramFiles(x86)%\universal extractor\bin\is-9284a.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd50149.dll
%ProgramFiles(x86)%\universal extractor\bin\unp\is-11dpf.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate3.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-mi1p1.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\pkware.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-eq21r.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\vise.unp
%ProgramFiles(x86)%\universal extractor\is-au493.tmp в %ProgramFiles(x86)%\universal extractor\changelog.txt
%ProgramFiles(x86)%\universal extractor\is-m1rlj.tmp в %ProgramFiles(x86)%\universal extractor\license.txt
%ProgramFiles(x86)%\universal extractor\is-uhltb.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.ico
%ProgramFiles(x86)%\universal extractor\is-03ric.tmp в %ProgramFiles(x86)%\universal extractor\turbosearch.exe
%ProgramFiles(x86)%\universal extractor\bin\is-osnpf.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd55131.dll
%ProgramFiles(x86)%\universal extractor\bin\unp\is-23gui.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_1.unp
%ProgramFiles(x86)%\universal extractor\bin\is-dna9a.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd51145.dll
%ProgramFiles(x86)%\universal extractor\bin\is-pgqm6.tmp в %ProgramFiles(x86)%\universal extractor\bin\wun.exe
%ProgramFiles(x86)%\universal extractor\docs\is-6qiqb.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-ei9sg.tmp в %ProgramFiles(x86)%\universal extractor\bin\stix_d.exe
%ProgramFiles(x86)%\universal extractor\bin\is-iuvte.tmp в %ProgramFiles(x86)%\universal extractor\bin\tee.exe
%ProgramFiles(x86)%\universal extractor\bin\is-vrc6b.tmp в %ProgramFiles(x86)%\universal extractor\bin\trid.exe
%ProgramFiles(x86)%\universal extractor\bin\is-p6886.tmp в %ProgramFiles(x86)%\universal extractor\bin\triddefs.trd
%ProgramFiles(x86)%\universal extractor\bin\is-salrm.tmp в %ProgramFiles(x86)%\universal extractor\bin\uharc02.exe
%ProgramFiles(x86)%\universal extractor\bin\is-i96r3.tmp в %ProgramFiles(x86)%\universal extractor\bin\nrg2iso.exe
%ProgramFiles(x86)%\universal extractor\bin\is-qrlt1.tmp в %ProgramFiles(x86)%\universal extractor\bin\peid.exe
%ProgramFiles(x86)%\universal extractor\bin\is-efcfc.tmp в %ProgramFiles(x86)%\universal extractor\bin\pdunsis.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-hp8ga.tmp в %ProgramFiles(x86)%\universal extractor\bin\uharc04.exe
%ProgramFiles(x86)%\universal extractor\bin\is-0amcq.tmp в %ProgramFiles(x86)%\universal extractor\bin\unzip.exe
%ProgramFiles(x86)%\universal extractor\bin\is-mbu96.tmp в %ProgramFiles(x86)%\universal extractor\bin\upx.exe
%ProgramFiles(x86)%\universal extractor\bin\is-3tb4b.tmp в %ProgramFiles(x86)%\universal extractor\bin\userdb.txt
%ProgramFiles(x86)%\universal extractor\bin\is-b1eeb.tmp в %ProgramFiles(x86)%\universal extractor\bin\uudeview.exe
%ProgramFiles(x86)%\universal extractor\bin\is-91mbj.tmp в %ProgramFiles(x86)%\universal extractor\bin\wdosxle.exe
%ProgramFiles(x86)%\universal extractor\bin\is-fnmnq.tmp в %ProgramFiles(x86)%\universal extractor\bin\unlzx.exe
%ProgramFiles(x86)%\universal extractor\bin\is-o3quh.tmp в %ProgramFiles(x86)%\universal extractor\bin\unrar.exe
%ProgramFiles(x86)%\universal extractor\bin\is-hd96c.tmp в %ProgramFiles(x86)%\universal extractor\bin\unuharc06.exe
%ProgramFiles(x86)%\universal extractor\docs\is-06rj8.tmp в %ProgramFiles(x86)%\universal extractor\docs\unrar_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8ped2.tmp в %ProgramFiles(x86)%\universal extractor\docs\unrar_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-bmvcf.tmp в %ProgramFiles(x86)%\universal extractor\docs\unlzx_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-e259c.tmp в %ProgramFiles(x86)%\universal extractor\docs\dbxplug_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-gfv08.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_author.txt
%ProgramFiles(x86)%\universal extractor\docs\is-kb60t.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-mohbe.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-i4r4a.tmp в %ProgramFiles(x86)%\universal extractor\docs\extractmht_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0u9m0.tmp в %ProgramFiles(x86)%\universal extractor\docs\extractmht_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-4j6ej.tmp в %ProgramFiles(x86)%\universal extractor\docs\i5comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-f6eom.tmp в %ProgramFiles(x86)%\universal extractor\docs\extract_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-n7std.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2p4if.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-35f21.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-l00f1.tmp в %ProgramFiles(x86)%\universal extractor\docs\hwun_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-dsgcc.tmp в %ProgramFiles(x86)%\universal extractor\docs\hwun_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-kdlee.tmp в %ProgramFiles(x86)%\universal extractor\docs\cmdtotal_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2rmoq.tmp в %ProgramFiles(x86)%\universal extractor\docs\cmdtotal_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-u8i08.tmp в %ProgramFiles(x86)%\universal extractor\docs\convertlit_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-nut74.tmp в %ProgramFiles(x86)%\universal extractor\docs\cdrip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-hlrir.tmp в %ProgramFiles(x86)%\universal extractor\docs\cdirip_readme.txt
%ProgramFiles(x86)%\universal extractor\is-l6cnt.tmp в %ProgramFiles(x86)%\universal extractor\english.ini
%ProgramFiles(x86)%\universal extractor\docs\is-dp0vf.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-me1jo.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-41brc.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0vaco.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-or3rv.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-264cc.tmp в %ProgramFiles(x86)%\universal extractor\docs\i3comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-h4f17.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-mdtpe.tmp в %ProgramFiles(x86)%\universal extractor\docs\extract_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-mn6c4.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8u1fm.tmp в %ProgramFiles(x86)%\universal extractor\docs\aspackdie_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-jefd3.tmp в %ProgramFiles(x86)%\universal extractor\docs\bin2iso_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-moh3b.tmp в %ProgramFiles(x86)%\universal extractor\docs\bin2iso_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-4de2s.tmp в %ProgramFiles(x86)%\universal extractor\docs\booz_readme.doc
%ProgramFiles(x86)%\universal extractor\docs\is-2rdhr.tmp в %ProgramFiles(x86)%\universal extractor\docs\booz_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8c9pr.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0qp4f.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2verr.tmp в %ProgramFiles(x86)%\universal extractor\docs\aspackdie_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-3mhcs.tmp в %ProgramFiles(x86)%\universal extractor\docs\convertlit_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-5ff4v.tmp в %ProgramFiles(x86)%\universal extractor\docs\i5comp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-hsv4d.tmp в %ProgramFiles(x86)%\universal extractor\docs\nrg2iso_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-1c5hd.tmp в %ProgramFiles(x86)%\universal extractor\docs\pdunsis_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-d1qd7.tmp в %ProgramFiles(x86)%\universal extractor\docs\pdunsis_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-q09pg.tmp в %ProgramFiles(x86)%\universal extractor\docs\peid_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-jt1t4.tmp в %ProgramFiles(x86)%\universal extractor\docs\peid_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8gqek.tmp в %ProgramFiles(x86)%\universal extractor\docs\stix_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-qffs0.tmp в %ProgramFiles(x86)%\universal extractor\docs\nbgextract_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-fmqd0.tmp в %ProgramFiles(x86)%\universal extractor\docs\i6comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-e6uom.tmp в %ProgramFiles(x86)%\universal extractor\docs\nrg2iso_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2et2a.tmp в %ProgramFiles(x86)%\universal extractor\docs\stix_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2gdn2.tmp в %ProgramFiles(x86)%\universal extractor\docs\trid_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-o5jop.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_license.doc
%ProgramFiles(x86)%\universal extractor\docs\is-0j2vi.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_readme.doc
%ProgramFiles(x86)%\universal extractor\docs\is-aeboq.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2dfb7.tmp в %ProgramFiles(x86)%\universal extractor\docs\unlzx_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ahpi1.tmp в %ProgramFiles(x86)%\universal extractor\docs\tee_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-3jt2r.tmp в %ProgramFiles(x86)%\universal extractor\docs\tee_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-fb026.tmp в %ProgramFiles(x86)%\universal extractor\docs\trid_readme_e.txt
%ProgramFiles(x86)%\universal extractor\bin\unp\is-olkkh.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\lzma.unp
%ProgramFiles(x86)%\universal extractor\is-g4c2p.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.exe
%ProgramFiles(x86)%\universal extractor\docs\is-07vs0.tmp в %ProgramFiles(x86)%\universal extractor\docs\msix_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-acuk7.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-lsi7v.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_readme.htm
%ProgramFiles(x86)%\universal extractor\docs\is-3ssv1.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-hm5ni.tmp в %ProgramFiles(x86)%\universal extractor\docs\installexplorer_readme_en.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9npci.tmp в %ProgramFiles(x86)%\universal extractor\docs\installexplorer_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7iaoq.tmp в %ProgramFiles(x86)%\universal extractor\docs\isxunpack_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-s3r3o.tmp в %ProgramFiles(x86)%\universal extractor\docs\msi_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-3eeho.tmp в %ProgramFiles(x86)%\universal extractor\docs\msi_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-uul66.tmp в %ProgramFiles(x86)%\universal extractor\docs\isxunpack_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-pmoc7.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-t6pa7.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-307tj.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0jagj.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7fvau.tmp в %ProgramFiles(x86)%\universal extractor\docs\mhtunp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-vkmmt.tmp в %ProgramFiles(x86)%\universal extractor\docs\mhtunp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-rtpeg.tmp в %ProgramFiles(x86)%\universal extractor\docs\i6comp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-rmulf.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_readme.txt
%ProgramFiles(x86)%\universal extractor\is-oibp1.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.ini

Сетевая активность

Подключается к

'os##etxi.ga':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?69########

Запросы HTTP POST

http://os##etxi.ga/new/net_api

UDP

DNS ASK os##etxi.ga

Другое

Ищет следующие окна

ClassName: '{195c9CF5-54FF-11D3-8BDA-0892036aB1B6}' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-vqo68.tmp\is-98a95.tmp' /SL4 $140174 "<Полный путь к файлу>" 7670362 52224
'%ProgramFiles(x86)%\universal extractor\uniextract.exe'
'%ProgramFiles(x86)%\universal extractor\uniextract.exe' 76161b7ed585dfdc0a46621197ce1b54

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "UniExtract 31"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней