Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\rarsfx0\ahmad.exe
- %ProgramFiles(x86)%\internet download manager\languages\idm_tr.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_th.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_ru.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_ptbr.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_pl.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_nl.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_it.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_fr.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_fa.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_es.lng
- %ProgramFiles(x86)%\internet download manager\languages\idm_de.lng
- %ProgramFiles(x86)%\internet download manager\idmshellext64.dll~~
- %ProgramFiles(x86)%\internet download manager\languages\inst_chn.lng
- %ProgramFiles(x86)%\internet download manager\idmshellext.dll~~
- %ProgramFiles(x86)%\internet download manager\idmmkb.dll~~
- %ProgramFiles(x86)%\internet download manager\idmftype.dll~~
- %ProgramFiles(x86)%\internet download manager\idmbrbtn.dll~~
- %ProgramFiles(x86)%\internet download manager\idmftype.dat
- %ProgramFiles(x86)%\internet download manager\idmgcext.crx
- %ProgramFiles(x86)%\internet download manager\idmwfp.cat
- %ProgramFiles(x86)%\internet download manager\idmtdi.cat
- %ProgramFiles(x86)%\internet download manager\toolbar\3d_smallhot_3.bmp
- %ProgramFiles(x86)%\internet download manager\toolbar\3d_small_3.bmp
- %ProgramFiles(x86)%\internet download manager\languages\idm_ar.lng
- %ProgramFiles(x86)%\internet download manager\idmftype64.dll
- %ProgramFiles(x86)%\internet download manager\languages\inst_cz.lng
- %HOMEPATH%\desktop\internet download manager.lnk
- %ProgramFiles(x86)%\internet download manager\tutor.chm
- %ProgramFiles(x86)%\internet download manager\scheduler.chm
- %ProgramFiles(x86)%\internet download manager\idman.chm
- %ProgramFiles(x86)%\internet download manager\grabber.chm
- %ProgramFiles(x86)%\internet download manager\idmmzcc.xpi
- %ProgramFiles(x86)%\internet download manager\idmantypeinfo.tlb
- %ProgramFiles(x86)%\internet download manager\toolbar\3d_style_3.tbi
- %ProgramFiles(x86)%\internet download manager\sarsur.reg
- %ProgramFiles(x86)%\internet download manager\languages\template_inst.lng
- %ProgramFiles(x86)%\internet download manager\languages\template.lng
- %ProgramFiles(x86)%\internet download manager\toolbar\3d_largehot_3.bmp
- %ProgramFiles(x86)%\internet download manager\languages\inst_ar.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_th.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_src.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_ru.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_ptbr.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_kr.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_iw.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_it.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_id.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_fr.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_fa.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_dk.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_tr.lng
- %ProgramFiles(x86)%\internet download manager\languages\inst_de.lng
- %ProgramFiles(x86)%\internet download manager\toolbar\3d_large_3.bmp
- %ProgramFiles(x86)%\internet download manager\idmwfp64.sys
- %ProgramFiles(x86)%\internet download manager\idmwfp32.sys
- %ProgramFiles(x86)%\internet download manager\languages\tips_pl.txt
- %ProgramFiles(x86)%\internet download manager\idmwfp.inf
- %ProgramFiles(x86)%\internet download manager\idmtdi.inf
- %ProgramFiles(x86)%\internet download manager\idmsetup2.log
- %ProgramFiles(x86)%\internet download manager\iegetvl2.htm
- %ProgramFiles(x86)%\internet download manager\iegetvl.htm
- %ProgramFiles(x86)%\internet download manager\iegetall.htm
- %ProgramFiles(x86)%\internet download manager\ieext.htm
- %ProgramFiles(x86)%\internet download manager\languages\tips_tr.txt
- %ProgramFiles(x86)%\internet download manager\languages\tips_th.txt
- %ProgramFiles(x86)%\internet download manager\languages\tips_ru.txt
- %APPDATA%\microsoft\windows\start menu\programs\internet download manager\internet download manager.lnk
- %ProgramFiles(x86)%\internet download manager\idmbroker.exe
- %ProgramFiles(x86)%\internet download manager\languages\tips_nl.txt
- %ProgramFiles(x86)%\internet download manager\languages\tips_it.txt
- %ProgramFiles(x86)%\internet download manager\languages\tips_fr.txt
- %ProgramFiles(x86)%\internet download manager\languages\tips_fa.txt
- %ProgramFiles(x86)%\internet download manager\languages\tips_es.txt
- %ProgramFiles(x86)%\internet download manager\languages\tips_de.txt
- %ProgramFiles(x86)%\internet download manager\languages\tips_ar.txt
- %ProgramFiles(x86)%\internet download manager\tips.txt
- %ProgramFiles(x86)%\internet download manager\license.txt
- %ProgramFiles(x86)%\internet download manager\defexclist.txt
- %TEMP%\rarsfx0\idm.exe
- %ProgramFiles(x86)%\internet download manager\languages\tips_ptbr.txt
- %ProgramFiles(x86)%\internet download manager\languages\inst_ua.lng
- %ProgramFiles(x86)%\internet download manager\idmgrhlp.exe
- %ProgramFiles(x86)%\internet download manager\mediumilstart.exe
- %ProgramFiles(x86)%\internet download manager\idmintegrator64.exe
- %ProgramFiles(x86)%\internet download manager\idmtdi64.sys
- %ProgramFiles(x86)%\internet download manager\idmtdi32.sys
- %ProgramFiles(x86)%\internet download manager\idmvs.dll
- %ProgramFiles(x86)%\internet download manager\idmshellext64.dll
- %ProgramFiles(x86)%\internet download manager\idmshellext.dll
- %ProgramFiles(x86)%\internet download manager\idmnetmon64.dll
- %ProgramFiles(x86)%\internet download manager\idmnetmon.dll
- %ProgramFiles(x86)%\internet download manager\idmmkb.dll
- %ProgramFiles(x86)%\internet download manager\idmiecc64.dll
- %ProgramFiles(x86)%\internet download manager\idmiecc.dll
- %ProgramFiles(x86)%\internet download manager\iemonitor.exe
- %ProgramFiles(x86)%\internet download manager\idmgetall64.dll
- %ProgramFiles(x86)%\internet download manager\idman.exe
- %ProgramFiles(x86)%\internet download manager\idmftype.dll
- %ProgramFiles(x86)%\internet download manager\idmfsa.dll
- %ProgramFiles(x86)%\internet download manager\idmcchandler2_64.dll
- %ProgramFiles(x86)%\internet download manager\idmcchandler2.dll
- %ProgramFiles(x86)%\internet download manager\idmbrbtn64.dll
- %ProgramFiles(x86)%\internet download manager\idmbrbtn.dll
- %ProgramFiles(x86)%\internet download manager\downlwithidm64.dll
- %ProgramFiles(x86)%\internet download manager\downlwithidm.dll
- %ProgramFiles(x86)%\internet download manager\uninstall.exe
- %ProgramFiles(x86)%\internet download manager\sss.exe
- %ProgramFiles(x86)%\internet download manager\idmgetall.dll
- %APPDATA%\microsoft\windows\start menu\programs\internet download manager\uninstall idm.lnk
Удаляет следующие файлы
- %TEMP%\rarsfx0\ahmad.exe
- %TEMP%\rarsfx0\idm.exe
Изменяет файл HOSTS.
Другое
Ищет следующие окна
- ClassName: 'EDIT' WindowName: ''
- ClassName: 'RegEdit_RegEdit' WindowName: ''
Создает и запускает на исполнение
- '%TEMP%\rarsfx0\idm.exe'
- '%TEMP%\rarsfx0\ahmad.exe'
Запускает на исполнение
- '%WINDIR%\syswow64\regedit.exe' /S sarsur.reg
