Trojan.Siggen21.36297

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-tqslr.tmp\is-636de.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-pv45a.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-jrf4i.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-lmtdf.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-uva1n.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-3htid.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-61dgj.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-373b9.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-0n4ms.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-4orcu.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\is-jfn2g.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\is-0ldns.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\is-nrdmj.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\is-4k0u6.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-nfu2i.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-q05bc.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-35lkd.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-h38q6.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-hf7ge.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\unins000.dat
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-1ceuc.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\platforms\is-anm19.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-hetqh.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-5cfmd.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-nr0el.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-h9295.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-aaju9.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-9v7dc.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-78uq8.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-qmij8.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-aahig.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-fs4h7.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-4ftod.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-542tt.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-867bm.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\subtitleextractor.exe
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-6snli.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-i4lt0.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-19qhp.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-q0brt.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-ms54d.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-e593h.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-uq9bq.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-o7huh.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-d7d0c.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-olosn.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-8to60.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-ailtv.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-ibnaq.tmp
%TEMP%\is-apsp7.tmp\_iscrypt.dll
%TEMP%\is-apsp7.tmp\_isetup\_shfoldr.dll
%TEMP%\is-apsp7.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-gepnd.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-cbufj.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-p47qt.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-jcofl.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-5i71i.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-465uh.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-vcmdp.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-hsl22.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-5q2sp.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-utrbp.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-1ah2k.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-9un61.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-jvbki.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-7scrh.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-m2sr5.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-luv15.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-r26k6.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-1cjg2.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-t6t4m.tmp
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-74n3c.tmp
%TEMP%\license.txt

Перемещает следующие файлы

%ProgramFiles(x86)%\tuneskit subtitle extractor\is-ibnaq.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\unins000.exe
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\is-nrdmj.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\btn_t.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\is-0ldns.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\loading_trake.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\is-jfn2g.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\loading\loading_trake2.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-4orcu.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\btn_down.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-q05bc.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\btn_down2.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-0n4ms.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\btn_up.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\is-61dgj.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\scrollbar\btn_up2.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-3htid.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-uva1n.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\msvcm90.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-lmtdf.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\msvcp90.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-jrf4i.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\msvcr90.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-pv45a.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qgif.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-373b9.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qicns.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-1cjg2.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_check_on.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-35lkd.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qico.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-hf7ge.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qsvg.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-542tt.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qtga.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-4ftod.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qtiff.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-fs4h7.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qwbmp.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-aahig.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qwebp.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-qmij8.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\bg_msg.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-78uq8.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\btn_close.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-9v7dc.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\btn_common.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-aaju9.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\error.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-h9295.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\help.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-nr0el.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\msg_title_icon.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-5cfmd.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\success.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\pic\is-hetqh.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\pic\warning.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-nfu2i.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\warning.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\is-4k0u6.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\item\btn_delete.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-867bm.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\tag.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-6snli.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\seleted.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-74n3c.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\no_title_logo.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-8to60.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\mmsubtitle.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-gepnd.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\msvcm90.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-olosn.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\msvcp90.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-o7huh.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\msvcr90.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-uq9bq.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\winsparkle.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-e593h.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-ms54d.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\background.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-q0brt.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\background_2.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-19qhp.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\bg_1.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-d7d0c.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\bg_2.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-cbufj.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\bg_combobox3.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-p47qt.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\bg_nofile.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-jcofl.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_add_files.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\platforms\is-anm19.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\platforms\qwindows.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\is-h38q6.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\imageformats\qjpeg.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-t6t4m.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_check_off.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-luv15.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_common1.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-m2sr5.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_convert.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-7scrh.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_edit.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-jvbki.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_menu.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-9un61.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_min.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-1ah2k.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_open.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-utrbp.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_output.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-5q2sp.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_prefer.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-hsl22.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\down.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-vcmdp.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\edit_selections_no.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-465uh.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\edit_selections_yes.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-5i71i.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\main_logo.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-i4lt0.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\new.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-ailtv.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\libmp4v2.dll
%ProgramFiles(x86)%\tuneskit subtitle extractor\images\is-r26k6.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\images\btn_close.png
%ProgramFiles(x86)%\tuneskit subtitle extractor\is-1ceuc.tmp в %ProgramFiles(x86)%\tuneskit subtitle extractor\subtitleextractor.exe

Сетевая активность

Подключается к

'mi####njobs.works':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######

Запросы HTTP POST

http://mi####njobs.works/new/net_api

UDP

DNS ASK mi####njobs.works

Другое

Ищет следующие окна

ClassName: 'jf6509_isetup8197Class_jf6509' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-tqslr.tmp\is-636de.tmp' /SL4 $90256 "<Полный путь к файлу>" 5457658 76288
'%ProgramFiles(x86)%\tuneskit subtitle extractor\subtitleextractor.exe'
'%ProgramFiles(x86)%\tuneskit subtitle extractor\subtitleextractor.exe' ab722d8514dac10f29855ef97d04d20a

Запускает на исполнение

'%WINDIR%\syswow64\net.exe' helpmsg 19
'%WINDIR%\syswow64\net1.exe' helpmsg 19
'%WINDIR%\syswow64\schtasks.exe' /Query
'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "SubtitleExtractor-819"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней