Техническая информация
Для обеспечения автозапуска и распространения
Модифицирует следующие ключи реестра
- [HKLM\SOFTWARE\Classes\LocalServiceControl\shell\open\command] '' = '%ProgramFiles(x86)%\LocalServiceComponents\LocalServiceControl.exe %1'
- [HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] 'LocalServiceControl' = '%ProgramFiles(x86)%\LocalServiceComponents\LocalServiceControl.exe'
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\is-oofhf.tmp\<Имя файла>.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-lka6g.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-9fvhl.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-kt8mn.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-m3mi8.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-b2475.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-64q81.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-n795j.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-atvnj.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-j9k8t.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-5n9fd.tmp
- %ProgramFiles(x86)%\localservicecomponents\unins000.dat
- %ProgramFiles(x86)%\localservicecomponents\is-6nmjn.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-f5hcg.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-qgsom.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-j0p6u.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-kt14b.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-n8h6l.tmp
- %ProgramFiles(x86)%\localservicecomponents\platforms\is-bgjug.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-tm5it.tmp
- %ALLUSERSPROFILE%\microsoft\windows\start menu\programs\localservicecomponents\uninstall localservicecomponents.lnk
- %ProgramFiles(x86)%\localservicecomponents\is-vjr9t.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-95ljp.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-k0041.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-7psf2.tmp
- %TEMP%\is-b2j67.tmp\_isetup\_regdll.tmp
- %TEMP%\is-b2j67.tmp\_isetup\_setup64.tmp
- %TEMP%\is-b2j67.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-b2j67.tmp\istask.dll
- %ProgramFiles(x86)%\localservicecomponents\is-s2oh1.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-fcpnd.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-2588d.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-8o3jn.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-2fhri.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-dbado.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-1t7q5.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-9skpg.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-ng7fe.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-4675c.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-t8osa.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-bdpt9.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-0mh9c.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-0v9a3.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-r8p2r.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-sa68r.tmp
- %ProgramFiles(x86)%\localservicecomponents\is-6jlgt.tmp
- %HOMEPATH%\webcomponents\local.json
Перемещает следующие файлы
- %ProgramFiles(x86)%\localservicecomponents\is-s2oh1.tmp в %ProgramFiles(x86)%\localservicecomponents\unins000.exe
- %ProgramFiles(x86)%\localservicecomponents\is-9fvhl.tmp в %ProgramFiles(x86)%\localservicecomponents\msvcr120.dll
- %ProgramFiles(x86)%\localservicecomponents\is-kt8mn.tmp в %ProgramFiles(x86)%\localservicecomponents\netstream.dll
- %ProgramFiles(x86)%\localservicecomponents\is-m3mi8.tmp в %ProgramFiles(x86)%\localservicecomponents\openal32.dll
- %ProgramFiles(x86)%\localservicecomponents\is-b2475.tmp в %ProgramFiles(x86)%\localservicecomponents\playctrl.dll
- %ProgramFiles(x86)%\localservicecomponents\is-64q81.tmp в %ProgramFiles(x86)%\localservicecomponents\qt5core.dll
- %ProgramFiles(x86)%\localservicecomponents\is-n795j.tmp в %ProgramFiles(x86)%\localservicecomponents\qt5gui.dll
- %ProgramFiles(x86)%\localservicecomponents\is-atvnj.tmp в %ProgramFiles(x86)%\localservicecomponents\qt5network.dll
- %ProgramFiles(x86)%\localservicecomponents\is-95ljp.tmp в %ProgramFiles(x86)%\localservicecomponents\slf.dll
- %ProgramFiles(x86)%\localservicecomponents\platforms\is-bgjug.tmp в %ProgramFiles(x86)%\localservicecomponents\platforms\qwindows.dll
- %ProgramFiles(x86)%\localservicecomponents\is-5n9fd.tmp в %ProgramFiles(x86)%\localservicecomponents\streamtransclient.dll
- %ProgramFiles(x86)%\localservicecomponents\is-6nmjn.tmp в %ProgramFiles(x86)%\localservicecomponents\superrender.dll
- %ProgramFiles(x86)%\localservicecomponents\is-f5hcg.tmp в %ProgramFiles(x86)%\localservicecomponents\systemtransform.dll
- %ProgramFiles(x86)%\localservicecomponents\is-qgsom.tmp в %ProgramFiles(x86)%\localservicecomponents\vcruntime140.dll
- %ProgramFiles(x86)%\localservicecomponents\is-j0p6u.tmp в %ProgramFiles(x86)%\localservicecomponents\video_control.dll
- %ProgramFiles(x86)%\localservicecomponents\is-kt14b.tmp в %ProgramFiles(x86)%\localservicecomponents\yuvprocess.dll
- %ProgramFiles(x86)%\localservicecomponents\is-n8h6l.tmp в %ProgramFiles(x86)%\localservicecomponents\zlib1.dll
- %ProgramFiles(x86)%\localservicecomponents\is-lka6g.tmp в %ProgramFiles(x86)%\localservicecomponents\msvcr100.dll
- %ProgramFiles(x86)%\localservicecomponents\is-j9k8t.tmp в %ProgramFiles(x86)%\localservicecomponents\qt5widgets.dll
- %ProgramFiles(x86)%\localservicecomponents\is-vjr9t.tmp в %ProgramFiles(x86)%\localservicecomponents\msvcp120.dll
- %ProgramFiles(x86)%\localservicecomponents\is-ng7fe.tmp в %ProgramFiles(x86)%\localservicecomponents\hmmerge.dll
- %ProgramFiles(x86)%\localservicecomponents\is-fcpnd.tmp в %ProgramFiles(x86)%\localservicecomponents\localservicecontrol.exe
- %ProgramFiles(x86)%\localservicecomponents\is-2588d.tmp в %ProgramFiles(x86)%\localservicecomponents\localserviceconfig.json
- %ProgramFiles(x86)%\localservicecomponents\is-8o3jn.tmp в %ProgramFiles(x86)%\localservicecomponents\audiointercom.dll
- %ProgramFiles(x86)%\localservicecomponents\is-2fhri.tmp в %ProgramFiles(x86)%\localservicecomponents\audioprocess.dll
- %ProgramFiles(x86)%\localservicecomponents\is-7psf2.tmp в %ProgramFiles(x86)%\localservicecomponents\audiorender.dll
- %ProgramFiles(x86)%\localservicecomponents\is-dbado.tmp в %ProgramFiles(x86)%\localservicecomponents\eagleeyerender.dll
- %ProgramFiles(x86)%\localservicecomponents\is-9skpg.tmp в %ProgramFiles(x86)%\localservicecomponents\hcusbsdk.dll
- %ProgramFiles(x86)%\localservicecomponents\is-4675c.tmp в %ProgramFiles(x86)%\localservicecomponents\hpr.dll
- %ProgramFiles(x86)%\localservicecomponents\is-6jlgt.tmp в %ProgramFiles(x86)%\localservicecomponents\mp_vie.dll
- %ProgramFiles(x86)%\localservicecomponents\is-t8osa.tmp в %ProgramFiles(x86)%\localservicecomponents\hwdecode.dll
- %ProgramFiles(x86)%\localservicecomponents\is-bdpt9.tmp в %ProgramFiles(x86)%\localservicecomponents\hxva.dll
- %ProgramFiles(x86)%\localservicecomponents\is-0mh9c.tmp в %ProgramFiles(x86)%\localservicecomponents\istask.dll
- %ProgramFiles(x86)%\localservicecomponents\is-0v9a3.tmp в %ProgramFiles(x86)%\localservicecomponents\libcrypto-1_1.dll
- %ProgramFiles(x86)%\localservicecomponents\is-r8p2r.tmp в %ProgramFiles(x86)%\localservicecomponents\libssl-1_1.dll
- %ProgramFiles(x86)%\localservicecomponents\is-sa68r.tmp в %ProgramFiles(x86)%\localservicecomponents\libusb-1.0.dll
- %ProgramFiles(x86)%\localservicecomponents\is-1t7q5.tmp в %ProgramFiles(x86)%\localservicecomponents\mp_render.dll
- %ProgramFiles(x86)%\localservicecomponents\is-k0041.tmp в %ProgramFiles(x86)%\localservicecomponents\msvcp100.dll
- %ProgramFiles(x86)%\localservicecomponents\is-tm5it.tmp в %ProgramFiles(x86)%\localservicecomponents\pic.jpg
Сетевая активность
Подключается к
- 'localhost':33686
Другое
Создает и запускает на исполнение
- '%TEMP%\is-oofhf.tmp\<Имя файла>.tmp' /SL5="$A024E,11419075,53760,<Полный путь к файлу>"
- '%ProgramFiles(x86)%\localservicecomponents\localservicecontrol.exe'
