Trojan.DownLoader45.23159

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-k4jnp.tmp\is-l8111.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-1104b.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ara4l.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-s76ae.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-6odsl.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-1p121.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-42bg1.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-mp4uk.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-54dih.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-9bsmd.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-utft1.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-sh4q9.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-brepq.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-3cfpm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-4v84a.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-r4ahp.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-6abng.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-hls37.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-e5nm3.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-0r6se.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-hsomb.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-l4im5.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-nlmfe.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2v9p3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-k6k1n.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-c0061.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-h80pp.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-p3vjr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2n9ub.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-bicaf.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ckaat.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ahq0e.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-v05sc.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-h6spc.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-8s10h.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-q5mjj.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-rdcv6.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-a3h0r.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-m2ae9.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-io7im.tmp
%ProgramFiles(x86)%\universal extractor\uniextract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-vt6sl.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-d3cvj.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-cg0v6.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-bkhae.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-vr94t.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-bo6kh.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-f41qq.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-vpfph.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-ng95b.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-b7oji.tmp
%ProgramFiles(x86)%\universal extractor\is-jd9nr.tmp
%ProgramFiles(x86)%\universal extractor\is-hqvjk.tmp
%ProgramFiles(x86)%\universal extractor\is-1dsos.tmp
%ProgramFiles(x86)%\universal extractor\is-in5mc.tmp
%ProgramFiles(x86)%\universal extractor\is-86dq0.tmp
%ProgramFiles(x86)%\universal extractor\unins000.dat
%ProgramFiles(x86)%\universal extractor\bin\unp\is-c5sdh.tmp
%ProgramFiles(x86)%\universal extractor\is-ash6h.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-5kd57.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-p63r0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-p2qp0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-r2c1d.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-iqa8t.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-8dtum.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-vjmst.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-6sca5.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-v0qrm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-1bsvk.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-vdjjo.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-6vegg.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-9dojq.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-p1ob6.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-p9o9a.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-jn6e7.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-mbte0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-7q9h4.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-lgbm2.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-sjgn6.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-iqpfe.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-qgkr5.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7v3i3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8pqgg.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-stpcj.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-m37cf.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ol3a2.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-l64l6.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-jh014.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-6fo21.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pgjtu.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0cthm.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-m140t.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-s7t9a.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-fni0a.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9fk2e.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1gapa.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ai292.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-3mt9u.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9gauh.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-a1d2p.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-13tlr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1781f.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-79gj8.tmp
%TEMP%\is-440jt.tmp\_isetup\_shfoldr.dll
%TEMP%\is-440jt.tmp\_iscrypt.dll
%ProgramFiles(x86)%\universal extractor\is-h59lt.tmp
%ProgramFiles(x86)%\universal extractor\is-6j5i7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ro1qv.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-nhbev.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-54gs7.tmp
%TEMP%\is-440jt.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8suco.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-05acd.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-vrouf.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-91a31.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2phd5.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-nsm00.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-b6kve.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-q502s.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-v866l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-om89l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-4u5rv.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-flm0j.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-p1o3j.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-d8dir.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-n0c7t.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9j30g.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-geg7o.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-g1396.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2iv2m.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7e8sv.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-3g9j3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pf0tc.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0mfbf.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-hm2ga.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-t1tcp.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9ejg9.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-22oc1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-718a3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-kc4b2.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-c20oo.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-hjrld.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-06bqu.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-i1u1a.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-g7io3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-v4ggs.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-lo4n1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-gre94.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-mct3q.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-bhaaf.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ci3hv.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-eeqgv.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7ptmr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ldgvg.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-mb166.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9svit.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-322al.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-skdqo.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ie49d.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-cada1.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-drkbd.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-cfoif.tmp
%TEMP%\jdegg.txt

Перемещает следующие файлы

%ProgramFiles(x86)%\universal extractor\is-h59lt.tmp в %ProgramFiles(x86)%\universal extractor\unins000.exe
%ProgramFiles(x86)%\universal extractor\bin\is-ara4l.tmp в %ProgramFiles(x86)%\universal extractor\bin\e_wise_w.exe
%ProgramFiles(x86)%\universal extractor\bin\is-s76ae.tmp в %ProgramFiles(x86)%\universal extractor\bin\forcelibrary.dll
%ProgramFiles(x86)%\universal extractor\bin\is-6odsl.tmp в %ProgramFiles(x86)%\universal extractor\bin\helpdeco.exe
%ProgramFiles(x86)%\universal extractor\bin\is-1p121.tmp в %ProgramFiles(x86)%\universal extractor\bin\i3comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-42bg1.tmp в %ProgramFiles(x86)%\universal extractor\bin\i5comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-a3h0r.tmp в %ProgramFiles(x86)%\universal extractor\bin\7z.dll
%ProgramFiles(x86)%\universal extractor\bin\is-9bsmd.tmp в %ProgramFiles(x86)%\universal extractor\bin\i6comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-hls37.tmp в %ProgramFiles(x86)%\universal extractor\bin\instexpl.dll
%ProgramFiles(x86)%\universal extractor\bin\is-utft1.tmp в %ProgramFiles(x86)%\universal extractor\bin\instexpl.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-sh4q9.tmp в %ProgramFiles(x86)%\universal extractor\bin\isxunpack.exe
%ProgramFiles(x86)%\universal extractor\bin\is-brepq.tmp в %ProgramFiles(x86)%\universal extractor\bin\lzop.exe
%ProgramFiles(x86)%\universal extractor\bin\is-3cfpm.tmp в %ProgramFiles(x86)%\universal extractor\bin\mhtunp.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-4v84a.tmp в %ProgramFiles(x86)%\universal extractor\bin\msi.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-mp4uk.tmp в %ProgramFiles(x86)%\universal extractor\bin\extract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-6abng.tmp в %ProgramFiles(x86)%\universal extractor\bin\innounp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-1104b.tmp в %ProgramFiles(x86)%\universal extractor\bin\e_wise.ini
%ProgramFiles(x86)%\universal extractor\bin\is-54dih.tmp в %ProgramFiles(x86)%\universal extractor\bin\extractmht.exe
%ProgramFiles(x86)%\universal extractor\bin\is-e5nm3.tmp в %ProgramFiles(x86)%\universal extractor\bin\dbxplug.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-0r6se.tmp в %ProgramFiles(x86)%\universal extractor\bin\cmdtotal.exe
%ProgramFiles(x86)%\universal extractor\docs\is-2v9p3.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-k6k1n.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-c0061.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-h80pp.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-p3vjr.tmp в %ProgramFiles(x86)%\universal extractor\docs\uudeview_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-r4ahp.tmp в %ProgramFiles(x86)%\universal extractor\bin\msix.exe
%ProgramFiles(x86)%\universal extractor\docs\is-bicaf.tmp в %ProgramFiles(x86)%\universal extractor\docs\uudeview_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2n9ub.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-ckaat.tmp в %ProgramFiles(x86)%\universal extractor\bin\7z.exe
%ProgramFiles(x86)%\universal extractor\bin\is-v05sc.tmp в %ProgramFiles(x86)%\universal extractor\bin\arj.exe
%ProgramFiles(x86)%\universal extractor\bin\is-h6spc.tmp в %ProgramFiles(x86)%\universal extractor\bin\aspackdie.exe
%ProgramFiles(x86)%\universal extractor\bin\is-8s10h.tmp в %ProgramFiles(x86)%\universal extractor\bin\bin2iso.exe
%ProgramFiles(x86)%\universal extractor\bin\is-q5mjj.tmp в %ProgramFiles(x86)%\universal extractor\bin\booz.exe
%ProgramFiles(x86)%\universal extractor\bin\is-rdcv6.tmp в %ProgramFiles(x86)%\universal extractor\bin\cdirip.exe
%ProgramFiles(x86)%\universal extractor\docs\is-l4im5.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_man.txt
%ProgramFiles(x86)%\universal extractor\bin\is-hsomb.tmp в %ProgramFiles(x86)%\universal extractor\bin\clit.exe
%ProgramFiles(x86)%\universal extractor\bin\is-ahq0e.tmp в %ProgramFiles(x86)%\universal extractor\bin\arc.exe
%ProgramFiles(x86)%\universal extractor\docs\is-nlmfe.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_readme.txt
%ProgramFiles(x86)%\universal extractor\bin\is-m2ae9.tmp в %ProgramFiles(x86)%\universal extractor\bin\nbhextract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-vdjjo.tmp в %ProgramFiles(x86)%\universal extractor\bin\raiu.exe
%ProgramFiles(x86)%\universal extractor\bin\unp\is-vpfph.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_2.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-ng95b.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_3.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-d3cvj.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\eschalon.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-cg0v6.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\gentee.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-bkhae.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate1.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-vr94t.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate2.unp
%ProgramFiles(x86)%\universal extractor\bin\is-lgbm2.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd50149.dll
%ProgramFiles(x86)%\universal extractor\bin\unp\is-bo6kh.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate3.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-b7oji.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\pkware.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-c5sdh.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\vise.unp
%ProgramFiles(x86)%\universal extractor\is-ash6h.tmp в %ProgramFiles(x86)%\universal extractor\changelog.txt
%ProgramFiles(x86)%\universal extractor\is-jd9nr.tmp в %ProgramFiles(x86)%\universal extractor\license.txt
%ProgramFiles(x86)%\universal extractor\is-hqvjk.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.ico
%ProgramFiles(x86)%\universal extractor\is-1dsos.tmp в %ProgramFiles(x86)%\universal extractor\turbosearch.exe
%ProgramFiles(x86)%\universal extractor\bin\is-p63r0.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd55131.dll
%ProgramFiles(x86)%\universal extractor\bin\unp\is-5kd57.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_1.unp
%ProgramFiles(x86)%\universal extractor\bin\is-p2qp0.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd51145.dll
%ProgramFiles(x86)%\universal extractor\bin\is-7q9h4.tmp в %ProgramFiles(x86)%\universal extractor\bin\wun.exe
%ProgramFiles(x86)%\universal extractor\docs\is-ldgvg.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-r2c1d.tmp в %ProgramFiles(x86)%\universal extractor\bin\stix_d.exe
%ProgramFiles(x86)%\universal extractor\bin\is-iqa8t.tmp в %ProgramFiles(x86)%\universal extractor\bin\tee.exe
%ProgramFiles(x86)%\universal extractor\bin\is-8dtum.tmp в %ProgramFiles(x86)%\universal extractor\bin\trid.exe
%ProgramFiles(x86)%\universal extractor\bin\is-vjmst.tmp в %ProgramFiles(x86)%\universal extractor\bin\triddefs.trd
%ProgramFiles(x86)%\universal extractor\bin\is-6sca5.tmp в %ProgramFiles(x86)%\universal extractor\bin\uharc02.exe
%ProgramFiles(x86)%\universal extractor\bin\is-qgkr5.tmp в %ProgramFiles(x86)%\universal extractor\bin\nrg2iso.exe
%ProgramFiles(x86)%\universal extractor\bin\is-vt6sl.tmp в %ProgramFiles(x86)%\universal extractor\bin\peid.exe
%ProgramFiles(x86)%\universal extractor\bin\is-io7im.tmp в %ProgramFiles(x86)%\universal extractor\bin\pdunsis.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-v0qrm.tmp в %ProgramFiles(x86)%\universal extractor\bin\uharc04.exe
%ProgramFiles(x86)%\universal extractor\bin\is-9dojq.tmp в %ProgramFiles(x86)%\universal extractor\bin\unzip.exe
%ProgramFiles(x86)%\universal extractor\bin\is-p1ob6.tmp в %ProgramFiles(x86)%\universal extractor\bin\upx.exe
%ProgramFiles(x86)%\universal extractor\bin\is-p9o9a.tmp в %ProgramFiles(x86)%\universal extractor\bin\userdb.txt
%ProgramFiles(x86)%\universal extractor\bin\is-jn6e7.tmp в %ProgramFiles(x86)%\universal extractor\bin\uudeview.exe
%ProgramFiles(x86)%\universal extractor\bin\is-mbte0.tmp в %ProgramFiles(x86)%\universal extractor\bin\wdosxle.exe
%ProgramFiles(x86)%\universal extractor\bin\is-1bsvk.tmp в %ProgramFiles(x86)%\universal extractor\bin\unlzx.exe
%ProgramFiles(x86)%\universal extractor\bin\is-6vegg.tmp в %ProgramFiles(x86)%\universal extractor\bin\unrar.exe
%ProgramFiles(x86)%\universal extractor\bin\is-sjgn6.tmp в %ProgramFiles(x86)%\universal extractor\bin\unuharc06.exe
%ProgramFiles(x86)%\universal extractor\docs\is-iqpfe.tmp в %ProgramFiles(x86)%\universal extractor\docs\unrar_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7v3i3.tmp в %ProgramFiles(x86)%\universal extractor\docs\unrar_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-cfoif.tmp в %ProgramFiles(x86)%\universal extractor\docs\unlzx_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-jh014.tmp в %ProgramFiles(x86)%\universal extractor\docs\dbxplug_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-6fo21.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_author.txt
%ProgramFiles(x86)%\universal extractor\docs\is-m140t.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9gauh.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-a1d2p.tmp в %ProgramFiles(x86)%\universal extractor\docs\extractmht_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-s7t9a.tmp в %ProgramFiles(x86)%\universal extractor\docs\extractmht_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-p1o3j.tmp в %ProgramFiles(x86)%\universal extractor\docs\i5comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-fni0a.tmp в %ProgramFiles(x86)%\universal extractor\docs\extract_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-1gapa.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ai292.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-3mt9u.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-om89l.tmp в %ProgramFiles(x86)%\universal extractor\docs\hwun_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8pqgg.tmp в %ProgramFiles(x86)%\universal extractor\docs\hwun_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-m37cf.tmp в %ProgramFiles(x86)%\universal extractor\docs\cmdtotal_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-stpcj.tmp в %ProgramFiles(x86)%\universal extractor\docs\cmdtotal_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-l64l6.tmp в %ProgramFiles(x86)%\universal extractor\docs\convertlit_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0cthm.tmp в %ProgramFiles(x86)%\universal extractor\docs\cdrip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-pgjtu.tmp в %ProgramFiles(x86)%\universal extractor\docs\cdirip_readme.txt
%ProgramFiles(x86)%\universal extractor\is-6j5i7.tmp в %ProgramFiles(x86)%\universal extractor\english.ini
%ProgramFiles(x86)%\universal extractor\docs\is-nhbev.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-54gs7.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8suco.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-v866l.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-05acd.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-4u5rv.tmp в %ProgramFiles(x86)%\universal extractor\docs\i3comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-vrouf.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9fk2e.tmp в %ProgramFiles(x86)%\universal extractor\docs\extract_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2phd5.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-b6kve.tmp в %ProgramFiles(x86)%\universal extractor\docs\aspackdie_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-q502s.tmp в %ProgramFiles(x86)%\universal extractor\docs\bin2iso_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-79gj8.tmp в %ProgramFiles(x86)%\universal extractor\docs\bin2iso_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-1781f.tmp в %ProgramFiles(x86)%\universal extractor\docs\booz_readme.doc
%ProgramFiles(x86)%\universal extractor\docs\is-13tlr.tmp в %ProgramFiles(x86)%\universal extractor\docs\booz_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-91a31.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ro1qv.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-nsm00.tmp в %ProgramFiles(x86)%\universal extractor\docs\aspackdie_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ol3a2.tmp в %ProgramFiles(x86)%\universal extractor\docs\convertlit_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-eeqgv.tmp в %ProgramFiles(x86)%\universal extractor\docs\i5comp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-d8dir.tmp в %ProgramFiles(x86)%\universal extractor\docs\nrg2iso_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9j30g.tmp в %ProgramFiles(x86)%\universal extractor\docs\pdunsis_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-geg7o.tmp в %ProgramFiles(x86)%\universal extractor\docs\pdunsis_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-g1396.tmp в %ProgramFiles(x86)%\universal extractor\docs\peid_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2iv2m.tmp в %ProgramFiles(x86)%\universal extractor\docs\peid_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-pf0tc.tmp в %ProgramFiles(x86)%\universal extractor\docs\stix_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-3g9j3.tmp в %ProgramFiles(x86)%\universal extractor\docs\nbgextract_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-g7io3.tmp в %ProgramFiles(x86)%\universal extractor\docs\i6comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-n0c7t.tmp в %ProgramFiles(x86)%\universal extractor\docs\nrg2iso_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-kc4b2.tmp в %ProgramFiles(x86)%\universal extractor\docs\stix_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-t1tcp.tmp в %ProgramFiles(x86)%\universal extractor\docs\trid_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9ejg9.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_license.doc
%ProgramFiles(x86)%\universal extractor\docs\is-22oc1.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_readme.doc
%ProgramFiles(x86)%\universal extractor\docs\is-718a3.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-flm0j.tmp в %ProgramFiles(x86)%\universal extractor\docs\unlzx_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-c20oo.tmp в %ProgramFiles(x86)%\universal extractor\docs\tee_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0mfbf.tmp в %ProgramFiles(x86)%\universal extractor\docs\tee_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-hm2ga.tmp в %ProgramFiles(x86)%\universal extractor\docs\trid_readme_e.txt
%ProgramFiles(x86)%\universal extractor\bin\unp\is-f41qq.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\lzma.unp
%ProgramFiles(x86)%\universal extractor\is-in5mc.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.exe
%ProgramFiles(x86)%\universal extractor\docs\is-06bqu.tmp в %ProgramFiles(x86)%\universal extractor\docs\msix_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-lo4n1.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-gre94.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_readme.htm
%ProgramFiles(x86)%\universal extractor\docs\is-mct3q.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-bhaaf.tmp в %ProgramFiles(x86)%\universal extractor\docs\installexplorer_readme_en.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ci3hv.tmp в %ProgramFiles(x86)%\universal extractor\docs\installexplorer_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7ptmr.tmp в %ProgramFiles(x86)%\universal extractor\docs\isxunpack_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-hjrld.tmp в %ProgramFiles(x86)%\universal extractor\docs\msi_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7e8sv.tmp в %ProgramFiles(x86)%\universal extractor\docs\msi_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-drkbd.tmp в %ProgramFiles(x86)%\universal extractor\docs\isxunpack_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9svit.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-322al.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-skdqo.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ie49d.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-cada1.tmp в %ProgramFiles(x86)%\universal extractor\docs\mhtunp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-i1u1a.tmp в %ProgramFiles(x86)%\universal extractor\docs\mhtunp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-v4ggs.tmp в %ProgramFiles(x86)%\universal extractor\docs\i6comp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-mb166.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_readme.txt
%ProgramFiles(x86)%\universal extractor\is-86dq0.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.ini

Сетевая активность

Подключается к

'os##etxi.ga':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?69########

Запросы HTTP POST

http://os##etxi.ga/new/net_api

UDP

DNS ASK os##etxi.ga

Другое

Ищет следующие окна

ClassName: '{5c199CF5-54FF-11D3-8BDA-6a089203B1B6}' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-k4jnp.tmp\is-l8111.tmp' /SL4 $B0216 "<Полный путь к файлу>" 7442093 52224
'%ProgramFiles(x86)%\universal extractor\uniextract.exe'
'%ProgramFiles(x86)%\universal extractor\uniextract.exe' 086edeb8d8579ab131480cd14e4a080d

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "UniExtract 31"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней