Trojan.DownLoader45.25273

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-l63pe.tmp\is-9mj22.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-q949l.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-2mru0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-r682u.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-6fqnq.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-9jddf.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-4strv.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-5uroe.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-hvr0e.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-1cnfn.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-cs3cu.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-bc9bj.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-47cp6.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-vu22d.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-589am.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-0q5na.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-qg4aq.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-m7cbe.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-gk8ta.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-rhhla.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-75t8v.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-nnob0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-rvu3g.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0a0o6.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-54j2r.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-5tg8d.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-amhlh.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-rreda.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-k690o.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-voijg.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-2lmk0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-aqhgn.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-3flrg.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-rd8pl.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-bl1pm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-fga84.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-tklni.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-holun.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-uok6n.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-a22iu.tmp
%ProgramFiles(x86)%\universal extractor\uniextract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-qf37j.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-suvra.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-cgrbe.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-p4pgc.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-v9ve9.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-9ogu5.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-aajgp.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-1bjfr.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-tjhsn.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-cuvu1.tmp
%ProgramFiles(x86)%\universal extractor\is-cm0gm.tmp
%ProgramFiles(x86)%\universal extractor\is-g6h0i.tmp
%ProgramFiles(x86)%\universal extractor\is-lg9da.tmp
%ProgramFiles(x86)%\universal extractor\is-9q8v6.tmp
%ProgramFiles(x86)%\universal extractor\is-c4ajt.tmp
%ProgramFiles(x86)%\universal extractor\unins000.dat
%ProgramFiles(x86)%\universal extractor\bin\unp\is-cv3hi.tmp
%ProgramFiles(x86)%\universal extractor\is-lrp9i.tmp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-mlkbu.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-19a36.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-qmda3.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-dt1q5.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-mm67f.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-m4d57.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-l1c27.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-0frsf.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-0tte0.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-bm9ct.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-tc3r5.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-bq2bl.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-4ghg9.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-kqufd.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-5dvb8.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-ngbnm.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-alps4.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-0uphg.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-cnson.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-5aoqn.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-h2afi.tmp
%ProgramFiles(x86)%\universal extractor\bin\is-e2752.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-vgqn6.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2qpph.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-7sf8u.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-n5fmq.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-l1bdf.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0ftl3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-a77ab.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ur80r.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-u3icm.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-rjsm6.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-qh5en.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-a8ejh.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-jrbb4.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-anofc.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-fhlbs.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ptluk.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1qhhh.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-mt267.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ua9n2.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-j689l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-vgda3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-v2j7r.tmp
%TEMP%\is-55gli.tmp\_isetup\_shfoldr.dll
%TEMP%\is-55gli.tmp\_iscrypt.dll
%ProgramFiles(x86)%\universal extractor\is-5jrmu.tmp
%ProgramFiles(x86)%\universal extractor\is-vg0j4.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-e05aa.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ik2hi.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-32om1.tmp
%TEMP%\is-55gli.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-sc3dj.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ghbl5.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-atcb0.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-nt45g.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-s39c7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-lhhp3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-opbhk.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9335k.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-f3d9l.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-fbuqa.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-in3lr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-5jaog.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-i7c4k.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-q58a3.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-sfljt.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-lasj8.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-actn7.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-982fa.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-mgtsu.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-pjeqv.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-p2omp.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-501ba.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-cotok.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-n82gs.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-9fd9b.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-059vs.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-2d3tq.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-dd1ln.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ibu6g.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-14gek.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-0frqr.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-rtbb9.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-892kd.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-4ot4o.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-ahegu.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-t14r5.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-6dpgf.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-1e26a.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-57sbm.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-j3gvt.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-cfhko.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-tjp36.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-hb05r.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-bp7hj.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-8dr6m.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-uqfjc.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-s0o34.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-6rn30.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-j60om.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-f9eau.tmp
%ProgramFiles(x86)%\universal extractor\docs\is-o75uo.tmp
%TEMP%\jdegg.txt

Перемещает следующие файлы

%ProgramFiles(x86)%\universal extractor\is-5jrmu.tmp в %ProgramFiles(x86)%\universal extractor\unins000.exe
%ProgramFiles(x86)%\universal extractor\bin\is-2mru0.tmp в %ProgramFiles(x86)%\universal extractor\bin\e_wise_w.exe
%ProgramFiles(x86)%\universal extractor\bin\is-r682u.tmp в %ProgramFiles(x86)%\universal extractor\bin\forcelibrary.dll
%ProgramFiles(x86)%\universal extractor\bin\is-6fqnq.tmp в %ProgramFiles(x86)%\universal extractor\bin\helpdeco.exe
%ProgramFiles(x86)%\universal extractor\bin\is-9jddf.tmp в %ProgramFiles(x86)%\universal extractor\bin\i3comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-4strv.tmp в %ProgramFiles(x86)%\universal extractor\bin\i5comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-holun.tmp в %ProgramFiles(x86)%\universal extractor\bin\7z.dll
%ProgramFiles(x86)%\universal extractor\bin\is-1cnfn.tmp в %ProgramFiles(x86)%\universal extractor\bin\i6comp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-m7cbe.tmp в %ProgramFiles(x86)%\universal extractor\bin\instexpl.dll
%ProgramFiles(x86)%\universal extractor\bin\is-cs3cu.tmp в %ProgramFiles(x86)%\universal extractor\bin\instexpl.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-bc9bj.tmp в %ProgramFiles(x86)%\universal extractor\bin\isxunpack.exe
%ProgramFiles(x86)%\universal extractor\bin\is-47cp6.tmp в %ProgramFiles(x86)%\universal extractor\bin\lzop.exe
%ProgramFiles(x86)%\universal extractor\bin\is-vu22d.tmp в %ProgramFiles(x86)%\universal extractor\bin\mhtunp.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-589am.tmp в %ProgramFiles(x86)%\universal extractor\bin\msi.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-5uroe.tmp в %ProgramFiles(x86)%\universal extractor\bin\extract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-qg4aq.tmp в %ProgramFiles(x86)%\universal extractor\bin\innounp.exe
%ProgramFiles(x86)%\universal extractor\bin\is-q949l.tmp в %ProgramFiles(x86)%\universal extractor\bin\e_wise.ini
%ProgramFiles(x86)%\universal extractor\bin\is-hvr0e.tmp в %ProgramFiles(x86)%\universal extractor\bin\extractmht.exe
%ProgramFiles(x86)%\universal extractor\bin\is-gk8ta.tmp в %ProgramFiles(x86)%\universal extractor\bin\dbxplug.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-rhhla.tmp в %ProgramFiles(x86)%\universal extractor\bin\cmdtotal.exe
%ProgramFiles(x86)%\universal extractor\docs\is-0a0o6.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-54j2r.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-5tg8d.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-amhlh.tmp в %ProgramFiles(x86)%\universal extractor\docs\upx_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-rreda.tmp в %ProgramFiles(x86)%\universal extractor\docs\uudeview_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-0q5na.tmp в %ProgramFiles(x86)%\universal extractor\bin\msix.exe
%ProgramFiles(x86)%\universal extractor\docs\is-voijg.tmp в %ProgramFiles(x86)%\universal extractor\docs\uudeview_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-k690o.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-2lmk0.tmp в %ProgramFiles(x86)%\universal extractor\bin\7z.exe
%ProgramFiles(x86)%\universal extractor\bin\is-3flrg.tmp в %ProgramFiles(x86)%\universal extractor\bin\arj.exe
%ProgramFiles(x86)%\universal extractor\bin\is-rd8pl.tmp в %ProgramFiles(x86)%\universal extractor\bin\aspackdie.exe
%ProgramFiles(x86)%\universal extractor\bin\is-bl1pm.tmp в %ProgramFiles(x86)%\universal extractor\bin\bin2iso.exe
%ProgramFiles(x86)%\universal extractor\bin\is-fga84.tmp в %ProgramFiles(x86)%\universal extractor\bin\booz.exe
%ProgramFiles(x86)%\universal extractor\bin\is-tklni.tmp в %ProgramFiles(x86)%\universal extractor\bin\cdirip.exe
%ProgramFiles(x86)%\universal extractor\docs\is-nnob0.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_man.txt
%ProgramFiles(x86)%\universal extractor\bin\is-75t8v.tmp в %ProgramFiles(x86)%\universal extractor\bin\clit.exe
%ProgramFiles(x86)%\universal extractor\bin\is-aqhgn.tmp в %ProgramFiles(x86)%\universal extractor\bin\arc.exe
%ProgramFiles(x86)%\universal extractor\docs\is-rvu3g.tmp в %ProgramFiles(x86)%\universal extractor\docs\unzip_readme.txt
%ProgramFiles(x86)%\universal extractor\bin\is-uok6n.tmp в %ProgramFiles(x86)%\universal extractor\bin\nbhextract.exe
%ProgramFiles(x86)%\universal extractor\bin\is-tc3r5.tmp в %ProgramFiles(x86)%\universal extractor\bin\raiu.exe
%ProgramFiles(x86)%\universal extractor\bin\unp\is-1bjfr.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_2.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-tjhsn.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_3.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-suvra.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\eschalon.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-cgrbe.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\gentee.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-p4pgc.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate1.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-v9ve9.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate2.unp
%ProgramFiles(x86)%\universal extractor\bin\is-cnson.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd50149.dll
%ProgramFiles(x86)%\universal extractor\bin\unp\is-9ogu5.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\inflate3.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-cuvu1.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\pkware.unp
%ProgramFiles(x86)%\universal extractor\bin\unp\is-cv3hi.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\vise.unp
%ProgramFiles(x86)%\universal extractor\is-lrp9i.tmp в %ProgramFiles(x86)%\universal extractor\changelog.txt
%ProgramFiles(x86)%\universal extractor\is-cm0gm.tmp в %ProgramFiles(x86)%\universal extractor\license.txt
%ProgramFiles(x86)%\universal extractor\is-g6h0i.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.ico
%ProgramFiles(x86)%\universal extractor\is-lg9da.tmp в %ProgramFiles(x86)%\universal extractor\turbosearch.exe
%ProgramFiles(x86)%\universal extractor\bin\is-19a36.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd55131.dll
%ProgramFiles(x86)%\universal extractor\bin\unp\is-mlkbu.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\bzip2_1.unp
%ProgramFiles(x86)%\universal extractor\bin\is-qmda3.tmp в %ProgramFiles(x86)%\universal extractor\bin\zd51145.dll
%ProgramFiles(x86)%\universal extractor\bin\is-0uphg.tmp в %ProgramFiles(x86)%\universal extractor\bin\wun.exe
%ProgramFiles(x86)%\universal extractor\docs\is-hb05r.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_license.txt
%ProgramFiles(x86)%\universal extractor\bin\is-dt1q5.tmp в %ProgramFiles(x86)%\universal extractor\bin\stix_d.exe
%ProgramFiles(x86)%\universal extractor\bin\is-mm67f.tmp в %ProgramFiles(x86)%\universal extractor\bin\tee.exe
%ProgramFiles(x86)%\universal extractor\bin\is-m4d57.tmp в %ProgramFiles(x86)%\universal extractor\bin\trid.exe
%ProgramFiles(x86)%\universal extractor\bin\is-l1c27.tmp в %ProgramFiles(x86)%\universal extractor\bin\triddefs.trd
%ProgramFiles(x86)%\universal extractor\bin\is-0frsf.tmp в %ProgramFiles(x86)%\universal extractor\bin\uharc02.exe
%ProgramFiles(x86)%\universal extractor\bin\is-e2752.tmp в %ProgramFiles(x86)%\universal extractor\bin\nrg2iso.exe
%ProgramFiles(x86)%\universal extractor\bin\is-qf37j.tmp в %ProgramFiles(x86)%\universal extractor\bin\peid.exe
%ProgramFiles(x86)%\universal extractor\bin\is-a22iu.tmp в %ProgramFiles(x86)%\universal extractor\bin\pdunsis.wcx
%ProgramFiles(x86)%\universal extractor\bin\is-0tte0.tmp в %ProgramFiles(x86)%\universal extractor\bin\uharc04.exe
%ProgramFiles(x86)%\universal extractor\bin\is-4ghg9.tmp в %ProgramFiles(x86)%\universal extractor\bin\unzip.exe
%ProgramFiles(x86)%\universal extractor\bin\is-kqufd.tmp в %ProgramFiles(x86)%\universal extractor\bin\upx.exe
%ProgramFiles(x86)%\universal extractor\bin\is-5dvb8.tmp в %ProgramFiles(x86)%\universal extractor\bin\userdb.txt
%ProgramFiles(x86)%\universal extractor\bin\is-ngbnm.tmp в %ProgramFiles(x86)%\universal extractor\bin\uudeview.exe
%ProgramFiles(x86)%\universal extractor\bin\is-alps4.tmp в %ProgramFiles(x86)%\universal extractor\bin\wdosxle.exe
%ProgramFiles(x86)%\universal extractor\bin\is-bm9ct.tmp в %ProgramFiles(x86)%\universal extractor\bin\unlzx.exe
%ProgramFiles(x86)%\universal extractor\bin\is-bq2bl.tmp в %ProgramFiles(x86)%\universal extractor\bin\unrar.exe
%ProgramFiles(x86)%\universal extractor\bin\is-5aoqn.tmp в %ProgramFiles(x86)%\universal extractor\bin\unuharc06.exe
%ProgramFiles(x86)%\universal extractor\docs\is-h2afi.tmp в %ProgramFiles(x86)%\universal extractor\docs\unrar_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-vgqn6.tmp в %ProgramFiles(x86)%\universal extractor\docs\unrar_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-o75uo.tmp в %ProgramFiles(x86)%\universal extractor\docs\unlzx_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-a77ab.tmp в %ProgramFiles(x86)%\universal extractor\docs\dbxplug_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ur80r.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_author.txt
%ProgramFiles(x86)%\universal extractor\docs\is-qh5en.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-mt267.tmp в %ProgramFiles(x86)%\universal extractor\docs\ewise_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ua9n2.tmp в %ProgramFiles(x86)%\universal extractor\docs\extractmht_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-a8ejh.tmp в %ProgramFiles(x86)%\universal extractor\docs\extractmht_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-i7c4k.tmp в %ProgramFiles(x86)%\universal extractor\docs\i5comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-jrbb4.tmp в %ProgramFiles(x86)%\universal extractor\docs\extract_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-fhlbs.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ptluk.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-1qhhh.tmp в %ProgramFiles(x86)%\universal extractor\docs\helpdeco_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-fbuqa.tmp в %ProgramFiles(x86)%\universal extractor\docs\hwun_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-2qpph.tmp в %ProgramFiles(x86)%\universal extractor\docs\hwun_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-n5fmq.tmp в %ProgramFiles(x86)%\universal extractor\docs\cmdtotal_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-7sf8u.tmp в %ProgramFiles(x86)%\universal extractor\docs\cmdtotal_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0ftl3.tmp в %ProgramFiles(x86)%\universal extractor\docs\convertlit_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-rjsm6.tmp в %ProgramFiles(x86)%\universal extractor\docs\cdrip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-u3icm.tmp в %ProgramFiles(x86)%\universal extractor\docs\cdirip_readme.txt
%ProgramFiles(x86)%\universal extractor\is-vg0j4.tmp в %ProgramFiles(x86)%\universal extractor\english.ini
%ProgramFiles(x86)%\universal extractor\docs\is-ik2hi.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-32om1.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-sc3dj.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-f3d9l.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ghbl5.tmp в %ProgramFiles(x86)%\universal extractor\docs\arc_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-in3lr.tmp в %ProgramFiles(x86)%\universal extractor\docs\i3comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-atcb0.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-anofc.tmp в %ProgramFiles(x86)%\universal extractor\docs\extract_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-s39c7.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-opbhk.tmp в %ProgramFiles(x86)%\universal extractor\docs\aspackdie_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9335k.tmp в %ProgramFiles(x86)%\universal extractor\docs\bin2iso_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-v2j7r.tmp в %ProgramFiles(x86)%\universal extractor\docs\bin2iso_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-vgda3.tmp в %ProgramFiles(x86)%\universal extractor\docs\booz_readme.doc
%ProgramFiles(x86)%\universal extractor\docs\is-j689l.tmp в %ProgramFiles(x86)%\universal extractor\docs\booz_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-nt45g.tmp в %ProgramFiles(x86)%\universal extractor\docs\arj_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-e05aa.tmp в %ProgramFiles(x86)%\universal extractor\docs\7zip_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-lhhp3.tmp в %ProgramFiles(x86)%\universal extractor\docs\aspackdie_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-l1bdf.tmp в %ProgramFiles(x86)%\universal extractor\docs\convertlit_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-cfhko.tmp в %ProgramFiles(x86)%\universal extractor\docs\i5comp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-q58a3.tmp в %ProgramFiles(x86)%\universal extractor\docs\nrg2iso_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-lasj8.tmp в %ProgramFiles(x86)%\universal extractor\docs\pdunsis_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-actn7.tmp в %ProgramFiles(x86)%\universal extractor\docs\pdunsis_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-982fa.tmp в %ProgramFiles(x86)%\universal extractor\docs\peid_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-mgtsu.tmp в %ProgramFiles(x86)%\universal extractor\docs\peid_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-501ba.tmp в %ProgramFiles(x86)%\universal extractor\docs\stix_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-p2omp.tmp в %ProgramFiles(x86)%\universal extractor\docs\nbgextract_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-4ot4o.tmp в %ProgramFiles(x86)%\universal extractor\docs\i6comp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-sfljt.tmp в %ProgramFiles(x86)%\universal extractor\docs\nrg2iso_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ibu6g.tmp в %ProgramFiles(x86)%\universal extractor\docs\stix_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-9fd9b.tmp в %ProgramFiles(x86)%\universal extractor\docs\trid_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-059vs.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_license.doc
%ProgramFiles(x86)%\universal extractor\docs\is-2d3tq.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_readme.doc
%ProgramFiles(x86)%\universal extractor\docs\is-dd1ln.tmp в %ProgramFiles(x86)%\universal extractor\docs\uharc_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-5jaog.tmp в %ProgramFiles(x86)%\universal extractor\docs\unlzx_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-14gek.tmp в %ProgramFiles(x86)%\universal extractor\docs\tee_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-cotok.tmp в %ProgramFiles(x86)%\universal extractor\docs\tee_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-n82gs.tmp в %ProgramFiles(x86)%\universal extractor\docs\trid_readme_e.txt
%ProgramFiles(x86)%\universal extractor\bin\unp\is-aajgp.tmp в %ProgramFiles(x86)%\universal extractor\bin\unp\lzma.unp
%ProgramFiles(x86)%\universal extractor\is-9q8v6.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.exe
%ProgramFiles(x86)%\universal extractor\docs\is-rtbb9.tmp в %ProgramFiles(x86)%\universal extractor\docs\msix_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-t14r5.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-6dpgf.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_readme.htm
%ProgramFiles(x86)%\universal extractor\docs\is-1e26a.tmp в %ProgramFiles(x86)%\universal extractor\docs\innounp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-57sbm.tmp в %ProgramFiles(x86)%\universal extractor\docs\installexplorer_readme_en.txt
%ProgramFiles(x86)%\universal extractor\docs\is-j3gvt.tmp в %ProgramFiles(x86)%\universal extractor\docs\installexplorer_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-tjp36.tmp в %ProgramFiles(x86)%\universal extractor\docs\isxunpack_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-0frqr.tmp в %ProgramFiles(x86)%\universal extractor\docs\msi_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-pjeqv.tmp в %ProgramFiles(x86)%\universal extractor\docs\msi_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-f9eau.tmp в %ProgramFiles(x86)%\universal extractor\docs\isxunpack_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-8dr6m.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-uqfjc.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_license.txt
%ProgramFiles(x86)%\universal extractor\docs\is-s0o34.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-6rn30.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzop_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-j60om.tmp в %ProgramFiles(x86)%\universal extractor\docs\mhtunp_readme.txt
%ProgramFiles(x86)%\universal extractor\docs\is-892kd.tmp в %ProgramFiles(x86)%\universal extractor\docs\mhtunp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-ahegu.tmp в %ProgramFiles(x86)%\universal extractor\docs\i6comp_url.txt
%ProgramFiles(x86)%\universal extractor\docs\is-bp7hj.tmp в %ProgramFiles(x86)%\universal extractor\docs\lzma_readme.txt
%ProgramFiles(x86)%\universal extractor\is-c4ajt.tmp в %ProgramFiles(x86)%\universal extractor\uniextract.ini

Сетевая активность

Подключается к

'os##etxi.ga':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?69########

Запросы HTTP POST

http://os##etxi.ga/new/net_api

UDP

DNS ASK os##etxi.ga

Другое

Ищет следующие окна

ClassName: '{195c9CF5-54FF-11D3-8BDA-0892036aB1B6}' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-l63pe.tmp\is-9mj22.tmp' /SL4 $11022C "<Полный путь к файлу>" 7472578 52224
'%ProgramFiles(x86)%\universal extractor\uniextract.exe'
'%ProgramFiles(x86)%\universal extractor\uniextract.exe' 2a0f7f17ca472925e2798833ff7378fc

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "UniExtract 31"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней