Trojan.DownLoader45.22507

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-oe139.tmp\is-sr8ir.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-a2fvp.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-fj935.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-2end7.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-iuqtn.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-uo07h.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-n05ct.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-lof8b.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-chbac.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-5osd1.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-41mfq.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-5ftqi.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-3gc6f.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ffch9.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-khgjk.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ejosh.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-hh97r.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-dtih4.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-bl6ep.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-d0qp4.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-i0ak1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-n675r.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2c7m6.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1ntk6.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7ak7c.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-96ppk.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-r74g2.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-udc8g.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-o3bc1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-qjmbu.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-pbqg0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-m4bb7.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-q778f.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-4s14v.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-5mi6p.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-qitg1.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-gvbvl.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-581bd.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-pqdrc.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-m6v42.tmp
%ProgramFiles(x86)%\universal extractor\uniextract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-osudn.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-p18q4.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-ftr63.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-ou7o3.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-1m21c.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-mhms2.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-e6tum.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-71v6b.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-lr81j.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-1d3u4.tmp
%ProgramFiles(x86)%\universal extractor\is-1s4cg.tmp
%ProgramFiles(x86)%\universal extractor\is-0s8u5.tmp
%ProgramFiles(x86)%\universal extractor\is-9j7tm.tmp
%ProgramFiles(x86)%\universal extractor\is-t4jvi.tmp
%ProgramFiles(x86)%\universal extractor\is-00du8.tmp
%ProgramFiles(x86)%\universal extractor\unins000.dat
%ProgramFiles(x86)%\universal extractor\bin\unp\is-aimmg.tmp
%ProgramFiles(x86)%\universal extractor\is-aj4ok.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-9em7u.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-cuu73.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-bl1ec.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-lcbcb.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-kq2gs.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-bb8sr.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-mte2v.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-anakn.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-pfedr.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-n1icm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-2sqc9.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-k53d5.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-qt7in.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-5uak0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ur0sk.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-h8rj0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-5p1r7.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-31ctf.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-01773.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-rhien.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0mvuh.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-vuogp.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-5fs5l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-s2ro1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-sss43.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-4t7p5.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-bfatl.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-suesd.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-81fvd.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-cmvsm.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2qvv1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-id1gb.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2obmb.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-6habv.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-eggpr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9i8ve.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-d01sk.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-076kq.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-t4fcu.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1rrqr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-f8u6l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-c5gnk.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ksn60.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-bsm6t.tmp
%TEMP%\is-5266j.tmp\_isetup\_shfoldr.dll
%TEMP%\is-5266j.tmp\_iscrypt.dll
%ProgramFiles(x86)%\universal extractor\is-6f3em.tmp
%ProgramFiles(x86)%\universal extractor\is-h63mc.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-qgip0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pubjd.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pnipl.tmp
%TEMP%\is-5266j.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-n5m45.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9fmac.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-52j7k.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pteh1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-egkkc.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9dfab.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8r9ic.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-lmsto.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1fbh0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1to1t.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-3jg8s.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-5ivv4.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9498c.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-sl97v.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ns2tq.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-dqqb8.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-scafl.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-p4abt.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-6ctoh.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-30ieh.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-q5t12.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-3iajr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-14ohj.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ptl43.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-i5ppu.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-sa65b.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-qgkln.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-72oro.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7le9m.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-s2pp4.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-5498l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-a81rh.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9s075.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ca83l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ilcu0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-jpios.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pbsji.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pmku7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-i5qdr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8iov7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-lv9u1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-v4967.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-edsm8.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2j7g4.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-r61to.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-dh3v8.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-debos.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-loekb.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-m5g5u.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-s7nqg.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7t6ab.tmp
%TEMP%\jdegg.txt

Перемещает следующие файлы

%ProgramFiles(x86)%\universal extractor\is-6f3em.tmp в %ProgramFiles(x86)%\universal extractor\unins000.exe
%ProgramFiles(x86)%\universal extractor\bin\is-fj935.tmp в %ProgramFiles(x86)%\universal extractor\bin\e_wise_w.exe
%ProgramFiles(x86)%\universal extractor\bin\is-2end7.tmp в %ProgramFiles(x86)%\universal extractor\bin\forcelibrary.dll
%ProgramFiles(x86)%\universal extractor\bin\is-iuqtn.tmp в %ProgramFiles(x86)%\universal extractor\bin\helpdeco.exe
%ProgramFiles(x86)%\universal extractor\bin\is-uo07h.tmp в %ProgramFiles(x86)%\universal extractor\bin\i3comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-n05ct.tmp в %ProgramFiles(x86)%\universal extractor\bin\i5comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-581bd.tmp в %ProgramFiles(x86)%\universal extractor\bin\7z.dll
%ProgramFiles(x86)%\universal extractor\bin\is-5osd1.tmp в %ProgramFiles(x86)%\universal extractor\bin\i6comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-dtih4.tmp в %ProgramFiles(x86)%\universal extractor\bin\instexpl.dll
%ProgramFiles(x86)%\universal extractor\bin\is-41mfq.tmp в %ProgramFiles(x86)%\universal extractor\bin\instexpl.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-5ftqi.tmp в %ProgramFiles(x86)%\universal extractor\bin\isxunpack.exe
%ProgramFiles(x86)%\universal extractor\bin\is-3gc6f.tmp в %ProgramFiles(x86)%\universal extractor\bin\lzop.exe
%ProgramFiles(x86)%\universal extractor\bin\is-ffch9.tmp в %ProgramFiles(x86)%\universal extractor\bin\mhtunp.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-khgjk.tmp в %ProgramFiles(x86)%\universal extractor\bin\msi.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-lof8b.tmp в %ProgramFiles(x86)%\universal extractor\bin\extract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-hh97r.tmp в %ProgramFiles(x86)%\universal extractor\bin\innounp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-a2fvp.tmp в %ProgramFiles(x86)%\universal extractor\bin\e_wise.ini
%ProgramFiles(x86)%\universal extractor\bin\is-chbac.tmp в %ProgramFiles(x86)%\universal extractor\bin\extractmht.exe
%ProgramFiles(x86)%\universal extractor\bin\is-bl6ep.tmp в %ProgramFiles(x86)%\universal extractor\bin\dbxplug.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-d0qp4.tmp в %ProgramFiles(x86)%\universal extractor\bin\cmdtotal.exe
%ProgramFiles(x86)%\universal extractor\docs\is-1ntk6.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7ak7c.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-96ppk.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-r74g2.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-udc8g.tmp в %ProgramFiles(x86)%\universal extractor\docs\uudeview_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-ejosh.tmp в %ProgramFiles(x86)%\universal extractor\bin\msix.exe
%ProgramFiles(x86)%\universal extractor\docs\is-qjmbu.tmp в %ProgramFiles(x86)%\universal extractor\docs\uudeview_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-o3bc1.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-pbqg0.tmp в %ProgramFiles(x86)%\universal extractor\bin\7z.exe
%ProgramFiles(x86)%\universal extractor\bin\is-q778f.tmp в %ProgramFiles(x86)%\universal extractor\bin\arj.exe
%ProgramFiles(x86)%\universal extractor\bin\is-4s14v.tmp в %ProgramFiles(x86)%\universal extractor\bin\aspackdie.exe
%ProgramFiles(x86)%\universal extractor\bin\is-5mi6p.tmp в %ProgramFiles(x86)%\universal extractor\bin\bin2iso.exe
%ProgramFiles(x86)%\universal extractor\bin\is-qitg1.tmp в %ProgramFiles(x86)%\universal extractor\bin\booz.exe
%ProgramFiles(x86)%\universal extractor\bin\is-gvbvl.tmp в %ProgramFiles(x86)%\universal extractor\bin\cdirip.exe
%ProgramFiles(x86)%\universal extractor\docs\is-n675r.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_man.txt
%ProgramFiles(x86)%\universal extractor\bin\is-i0ak1.tmp в %ProgramFiles(x86)%\universal extractor\bin\clit.exe
%ProgramFiles(x86)%\universal extractor\bin\is-m4bb7.tmp в %ProgramFiles(x86)%\universal extractor\bin\arc.exe
%ProgramFiles(x86)%\universal extractor\docs\is-2c7m6.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_readme.txt
%ProgramFiles(x86)%\universal extractor\bin\is-pqdrc.tmp в %ProgramFiles(x86)%\universal extractor\bin\nbhextract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-2sqc9.tmp в %ProgramFiles(x86)%\universal extractor\bin\raiu.exe
%ProgramFiles(x86)%\universal extractor\bin\unp\is-71v6b.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_2.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-lr81j.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_3.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-p18q4.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\eschalon.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-ftr63.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\gentee.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-ou7o3.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate1.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-1m21c.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate2.unp
%ProgramFiles(x86)%\universal extractor\bin\is-01773.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd50149.dll
%ProgramFiles(x86)%\universal extractor\bin\unp\is-mhms2.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate3.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-1d3u4.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\pkware.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-aimmg.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\vise.unp
%ProgramFiles(x86)%\universal extractor\is-aj4ok.tmp в %ProgramFiles(x86)%\universal extractor\changelog.txt
%ProgramFiles(x86)%\universal extractor\is-1s4cg.tmp в %ProgramFiles(x86)%\universal extractor\license.txt
%ProgramFiles(x86)%\universal extractor\is-0s8u5.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.ico
%ProgramFiles(x86)%\universal extractor\is-9j7tm.tmp в %ProgramFiles(x86)%\universal extractor\turbosearch.exe
%ProgramFiles(x86)%\universal extractor\bin\is-cuu73.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd55131.dll
%ProgramFiles(x86)%\universal extractor\bin\unp\is-9em7u.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_1.unp
%ProgramFiles(x86)%\universal extractor\bin\is-bl1ec.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd51145.dll
%ProgramFiles(x86)%\universal extractor\bin\is-31ctf.tmp в %ProgramFiles(x86)%\universal extractor\bin\wun.exe
%ProgramFiles(x86)%\universal extractor\docs\is-edsm8.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-lcbcb.tmp в %ProgramFiles(x86)%\universal extractor\bin\stix_d.exe
%ProgramFiles(x86)%\universal extractor\bin\is-kq2gs.tmp в %ProgramFiles(x86)%\universal extractor\bin\tee.exe
%ProgramFiles(x86)%\universal extractor\bin\is-bb8sr.tmp в %ProgramFiles(x86)%\universal extractor\bin\trid.exe
%ProgramFiles(x86)%\universal extractor\bin\is-mte2v.tmp в %ProgramFiles(x86)%\universal extractor\bin\triddefs.trd
%ProgramFiles(x86)%\universal extractor\bin\is-anakn.tmp в %ProgramFiles(x86)%\universal extractor\bin\uharc02.exe
%ProgramFiles(x86)%\universal extractor\bin\is-vuogp.tmp в %ProgramFiles(x86)%\universal extractor\bin\nrg2iso.exe
%ProgramFiles(x86)%\universal extractor\bin\is-osudn.tmp в %ProgramFiles(x86)%\universal extractor\bin\peid.exe
%ProgramFiles(x86)%\universal extractor\bin\is-m6v42.tmp в %ProgramFiles(x86)%\universal extractor\bin\pdunsis.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-pfedr.tmp в %ProgramFiles(x86)%\universal extractor\bin\uharc04.exe
%ProgramFiles(x86)%\universal extractor\bin\is-qt7in.tmp в %ProgramFiles(x86)%\universal extractor\bin\unzip.exe
%ProgramFiles(x86)%\universal extractor\bin\is-5uak0.tmp в %ProgramFiles(x86)%\universal extractor\bin\upx.exe
%ProgramFiles(x86)%\universal extractor\bin\is-ur0sk.tmp в %ProgramFiles(x86)%\universal extractor\bin\userdb.txt
%ProgramFiles(x86)%\universal extractor\bin\is-h8rj0.tmp в %ProgramFiles(x86)%\universal extractor\bin\uudeview.exe
%ProgramFiles(x86)%\universal extractor\bin\is-5p1r7.tmp в %ProgramFiles(x86)%\universal extractor\bin\wdosxle.exe
%ProgramFiles(x86)%\universal extractor\bin\is-n1icm.tmp в %ProgramFiles(x86)%\universal extractor\bin\unlzx.exe
%ProgramFiles(x86)%\universal extractor\bin\is-k53d5.tmp в %ProgramFiles(x86)%\universal extractor\bin\unrar.exe
%ProgramFiles(x86)%\universal extractor\bin\is-rhien.tmp в %ProgramFiles(x86)%\universal extractor\bin\unuharc06.exe
%ProgramFiles(x86)%\universal extractor\docs\is-0mvuh.tmp в %ProgramFiles(x86)%\universal extractor\docs\unrar_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-5fs5l.tmp в %ProgramFiles(x86)%\universal extractor\docs\unrar_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7t6ab.tmp в %ProgramFiles(x86)%\universal extractor\docs\unlzx_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-81fvd.tmp в %ProgramFiles(x86)%\universal extractor\docs\dbxplug_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-cmvsm.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_author.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2obmb.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-1rrqr.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-f8u6l.tmp в %ProgramFiles(x86)%\universal extractor\docs\extractmht_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-6habv.tmp в %ProgramFiles(x86)%\universal extractor\docs\extractmht_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9498c.tmp в %ProgramFiles(x86)%\universal extractor\docs\i5comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-eggpr.tmp в %ProgramFiles(x86)%\universal extractor\docs\extract_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-d01sk.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-076kq.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-t4fcu.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-1to1t.tmp в %ProgramFiles(x86)%\universal extractor\docs\hwun_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-s2ro1.tmp в %ProgramFiles(x86)%\universal extractor\docs\hwun_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-4t7p5.tmp в %ProgramFiles(x86)%\universal extractor\docs\cmdtotal_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-sss43.tmp в %ProgramFiles(x86)%\universal extractor\docs\cmdtotal_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-suesd.tmp в %ProgramFiles(x86)%\universal extractor\docs\convertlit_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-id1gb.tmp в %ProgramFiles(x86)%\universal extractor\docs\cdrip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2qvv1.tmp в %ProgramFiles(x86)%\universal extractor\docs\cdirip_readme.txt
%ProgramFiles(x86)%\universal extractor\is-h63mc.tmp в %ProgramFiles(x86)%\universal extractor\english.ini
%ProgramFiles(x86)%\universal extractor\docs\is-pubjd.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-pnipl.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-n5m45.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-1fbh0.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9fmac.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-3jg8s.tmp в %ProgramFiles(x86)%\universal extractor\docs\i3comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-52j7k.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9i8ve.tmp в %ProgramFiles(x86)%\universal extractor\docs\extract_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-egkkc.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8r9ic.tmp в %ProgramFiles(x86)%\universal extractor\docs\aspackdie_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-lmsto.tmp в %ProgramFiles(x86)%\universal extractor\docs\bin2iso_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-bsm6t.tmp в %ProgramFiles(x86)%\universal extractor\docs\bin2iso_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ksn60.tmp в %ProgramFiles(x86)%\universal extractor\docs\booz_readme.doc
%ProgramFiles(x86)%\universal extractor\docs\is-c5gnk.tmp в %ProgramFiles(x86)%\universal extractor\docs\booz_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-pteh1.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-qgip0.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9dfab.tmp в %ProgramFiles(x86)%\universal extractor\docs\aspackdie_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-bfatl.tmp в %ProgramFiles(x86)%\universal extractor\docs\convertlit_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-lv9u1.tmp в %ProgramFiles(x86)%\universal extractor\docs\i5comp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-sl97v.tmp в %ProgramFiles(x86)%\universal extractor\docs\nrg2iso_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-dqqb8.tmp в %ProgramFiles(x86)%\universal extractor\docs\pdunsis_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-scafl.tmp в %ProgramFiles(x86)%\universal extractor\docs\pdunsis_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-p4abt.tmp в %ProgramFiles(x86)%\universal extractor\docs\peid_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-6ctoh.tmp в %ProgramFiles(x86)%\universal extractor\docs\peid_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-3iajr.tmp в %ProgramFiles(x86)%\universal extractor\docs\stix_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-q5t12.tmp в %ProgramFiles(x86)%\universal extractor\docs\nbgextract_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ca83l.tmp в %ProgramFiles(x86)%\universal extractor\docs\i6comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ns2tq.tmp в %ProgramFiles(x86)%\universal extractor\docs\nrg2iso_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7le9m.tmp в %ProgramFiles(x86)%\universal extractor\docs\stix_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-i5ppu.tmp в %ProgramFiles(x86)%\universal extractor\docs\trid_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-sa65b.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_license.doc
%ProgramFiles(x86)%\universal extractor\docs\is-qgkln.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_readme.doc
%ProgramFiles(x86)%\universal extractor\docs\is-72oro.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-5ivv4.tmp в %ProgramFiles(x86)%\universal extractor\docs\unlzx_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-s2pp4.tmp в %ProgramFiles(x86)%\universal extractor\docs\tee_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-14ohj.tmp в %ProgramFiles(x86)%\universal extractor\docs\tee_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ptl43.tmp в %ProgramFiles(x86)%\universal extractor\docs\trid_readme_e.txt
%ProgramFiles(x86)%\universal extractor\bin\unp\is-e6tum.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\lzma.unp
%ProgramFiles(x86)%\universal extractor\is-t4jvi.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.exe
%ProgramFiles(x86)%\universal extractor\docs\is-a81rh.tmp в %ProgramFiles(x86)%\universal extractor\docs\msix_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-jpios.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-pbsji.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_readme.htm
%ProgramFiles(x86)%\universal extractor\docs\is-pmku7.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-i5qdr.tmp в %ProgramFiles(x86)%\universal extractor\docs\installexplorer_readme_en.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8iov7.tmp в %ProgramFiles(x86)%\universal extractor\docs\installexplorer_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-v4967.tmp в %ProgramFiles(x86)%\universal extractor\docs\isxunpack_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-5498l.tmp в %ProgramFiles(x86)%\universal extractor\docs\msi_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-30ieh.tmp в %ProgramFiles(x86)%\universal extractor\docs\msi_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-s7nqg.tmp в %ProgramFiles(x86)%\universal extractor\docs\isxunpack_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-r61to.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-dh3v8.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-debos.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-loekb.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-m5g5u.tmp в %ProgramFiles(x86)%\universal extractor\docs\mhtunp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9s075.tmp в %ProgramFiles(x86)%\universal extractor\docs\mhtunp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ilcu0.tmp в %ProgramFiles(x86)%\universal extractor\docs\i6comp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2j7g4.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_readme.txt
%ProgramFiles(x86)%\universal extractor\is-00du8.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.ini

Сетевая активность

Подключается к

'os##etxi.ga':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?69########

Запросы HTTP POST

http://os##etxi.ga/new/net_api

UDP

DNS ASK os##etxi.ga

Другое

Ищет следующие окна

ClassName: '{5c199CF5-54FF-11D3-8BDA-9203068aB1B6}' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-oe139.tmp\is-sr8ir.tmp' /SL4 $B0232 "<Полный путь к файлу>" 7468644 52224
'%ProgramFiles(x86)%\universal extractor\uniextract.exe'
'%ProgramFiles(x86)%\universal extractor\uniextract.exe' f1d1ad90abda9e47a77040e669796f6c

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "UniExtract 31"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней