Техническая информация
Для обеспечения автозапуска и распространения
Устанавливает следующие настройки сервисов
- [HKLM\System\CurrentControlSet\Services\IPTV Channel Browser 6.4] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\IPTV Channel Browser 6.4] 'ImagePath' = '%ALLUSERSPROFILE%\IPTV Channel Browser 6.4\IPTV Channel Browser 6.4.exe'
Создает следующие сервисы
- 'IPTV Channel Browser 6.4' %ALLUSERSPROFILE%\IPTV Channel Browser 6.4\IPTV Channel Browser 6.4.exe
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\is-9ut3p.tmp\<Имя файла>.tmp
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-9ref3.tmp
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-2uvc4.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-c0c8h.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-a9eet.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-l1a7v.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-9eh3f.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-74749.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ghvsl.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-bporp.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-6sfhj.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-4na1s.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ab43i.tmp
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-1qids.tmp
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-c2kmh.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-2apta.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-u7fbc.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-hhaj9.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ssud4.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-dl39h.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-a7cvq.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-2irof.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-7d521.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-8bop3.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-prtgk.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-rc7rj.tmp
- %LOCALAPPDATA%\aac audio converter\is-gp0sn.tmp
- %LOCALAPPDATA%\aac audio converter\unins000.dat
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-uhgk7.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-4qqm1.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-akahp.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-2kdid.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-jhijp.tmp
- %TEMP%\is-5rkqs.tmp\_isetup\_setup64.tmp
- %TEMP%\is-5rkqs.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-5rkqs.tmp\_isetup\_iscrypt.dll
- %LOCALAPPDATA%\aac audio converter\is-aqnqb.tmp
- %LOCALAPPDATA%\aac audio converter\is-uc9fr.tmp
- %LOCALAPPDATA%\aac audio converter\is-4inkm.tmp
- %LOCALAPPDATA%\aac audio converter\is-stjb3.tmp
- %LOCALAPPDATA%\aac audio converter\is-cfeif.tmp
- %LOCALAPPDATA%\aac audio converter\is-3hibg.tmp
- %LOCALAPPDATA%\aac audio converter\is-p4nds.tmp
- %LOCALAPPDATA%\aac audio converter\is-rsjk3.tmp
- %LOCALAPPDATA%\aac audio converter\is-semmd.tmp
- %LOCALAPPDATA%\aac audio converter\is-apsi9.tmp
- %TEMP%\is-5rkqs.tmp\_isetup\_regdll.tmp
- %LOCALAPPDATA%\aac audio converter\is-mtiep.tmp
- %LOCALAPPDATA%\aac audio converter\is-n78qu.tmp
- %LOCALAPPDATA%\aac audio converter\is-rrrbu.tmp
- %LOCALAPPDATA%\aac audio converter\is-re0u4.tmp
- %LOCALAPPDATA%\aac audio converter\is-t6hbc.tmp
- %LOCALAPPDATA%\aac audio converter\is-4fi8q.tmp
- %LOCALAPPDATA%\aac audio converter\is-v8948.tmp
- %LOCALAPPDATA%\aac audio converter\is-jdumm.tmp
- %LOCALAPPDATA%\aac audio converter\is-0e315.tmp
- %LOCALAPPDATA%\aac audio converter\is-knqso.tmp
- %LOCALAPPDATA%\aac audio converter\is-o55av.tmp
- %LOCALAPPDATA%\aac audio converter\is-q3177.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-8tqun.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-9hb7h.tmp
- %LOCALAPPDATA%\aac audio converter\is-742jj.tmp
- %LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe
- %ALLUSERSPROFILE%\iptv channel browser 6.4\iptv channel browser 6.4.exe
Удаляет следующие файлы
- %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
- %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
- %LOCALAPPDATA%\aac audio converter\lang\feedback.dat
- %LOCALAPPDATA%\aac audio converter\lang\musictype.txt
- %LOCALAPPDATA%\aac audio converter\lang\update.log
Перемещает следующие файлы
- %LOCALAPPDATA%\aac audio converter\is-aqnqb.tmp в %LOCALAPPDATA%\aac audio converter\unins000.exe
- %LOCALAPPDATA%\aac audio converter\lang\is-akahp.tmp в %LOCALAPPDATA%\aac audio converter\lang\update.log
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-1qids.tmp в %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\microsoft.vc90.crt.manifest
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-c2kmh.tmp в %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcm90.dll
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-9ref3.tmp в %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcp90.dll
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-2uvc4.tmp в %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcr90.dll
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-c0c8h.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\aac.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-a9eet.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\ac3.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-l1a7v.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\aiff.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-9eh3f.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\amr.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-74749.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\ape.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-bporp.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\flac.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-a7cvq.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\wma.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-6sfhj.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\m4a.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-4na1s.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\m4b.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ab43i.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\m4r.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-2apta.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\mka.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-uhgk7.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\mp2.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-4qqm1.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\mp3.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-u7fbc.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\ogg.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-hhaj9.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\ra.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ssud4.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\voc.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-dl39h.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\wav.pf
- %LOCALAPPDATA%\aac audio converter\lang\is-2kdid.tmp в %LOCALAPPDATA%\aac audio converter\lang\musictype.txt
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ghvsl.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\au.pf
- %LOCALAPPDATA%\aac audio converter\lang\is-jhijp.tmp в %LOCALAPPDATA%\aac audio converter\lang\feedback.dat
- %LOCALAPPDATA%\aac audio converter\is-742jj.tmp в %LOCALAPPDATA%\aac audio converter\rmvbencode.dll
- %LOCALAPPDATA%\aac audio converter\is-uc9fr.tmp в %LOCALAPPDATA%\aac audio converter\msvcp60.dll
- %LOCALAPPDATA%\aac audio converter\is-4inkm.tmp в %LOCALAPPDATA%\aac audio converter\msvcr71.dll
- %LOCALAPPDATA%\aac audio converter\is-stjb3.tmp в %LOCALAPPDATA%\aac audio converter\musiccd.exe
- %LOCALAPPDATA%\aac audio converter\is-cfeif.tmp в %LOCALAPPDATA%\aac audio converter\nvencoderkernel.dll
- %LOCALAPPDATA%\aac audio converter\is-3hibg.tmp в %LOCALAPPDATA%\aac audio converter\ocxhelper.exe
- %LOCALAPPDATA%\aac audio converter\is-p4nds.tmp в %LOCALAPPDATA%\aac audio converter\postproc-52.dll
- %LOCALAPPDATA%\aac audio converter\is-rsjk3.tmp в %LOCALAPPDATA%\aac audio converter\productcontrol.dll
- %LOCALAPPDATA%\aac audio converter\is-semmd.tmp в %LOCALAPPDATA%\aac audio converter\pthreadgc2.dll
- %LOCALAPPDATA%\aac audio converter\is-apsi9.tmp в %LOCALAPPDATA%\aac audio converter\pthreadvc2.dll
- %LOCALAPPDATA%\aac audio converter\is-mtiep.tmp в %LOCALAPPDATA%\aac audio converter\realquickjoin.dll
- %LOCALAPPDATA%\aac audio converter\is-n78qu.tmp в %LOCALAPPDATA%\aac audio converter\rmvbencodesync.dll
- %LOCALAPPDATA%\aac audio converter\lang\is-8tqun.tmp в %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
- %LOCALAPPDATA%\aac audio converter\is-rrrbu.tmp в %LOCALAPPDATA%\aac audio converter\simage.dll
- %LOCALAPPDATA%\aac audio converter\is-re0u4.tmp в %LOCALAPPDATA%\aac audio converter\soundtouch.dll
- %LOCALAPPDATA%\aac audio converter\is-t6hbc.tmp в %LOCALAPPDATA%\aac audio converter\ssleay32.dll
- %LOCALAPPDATA%\aac audio converter\is-4fi8q.tmp в %LOCALAPPDATA%\aac audio converter\swresample-0.dll
- %LOCALAPPDATA%\aac audio converter\is-v8948.tmp в %LOCALAPPDATA%\aac audio converter\uitoolkit.dll.intermediate.manifest
- %LOCALAPPDATA%\aac audio converter\is-jdumm.tmp в %LOCALAPPDATA%\aac audio converter\ve32.dll
- %LOCALAPPDATA%\aac audio converter\is-0e315.tmp в %LOCALAPPDATA%\aac audio converter\ve64.dll
- %LOCALAPPDATA%\aac audio converter\is-knqso.tmp в %LOCALAPPDATA%\aac audio converter\wait.gif
- %LOCALAPPDATA%\aac audio converter\is-o55av.tmp в %LOCALAPPDATA%\aac audio converter\webrtc.dll
- %LOCALAPPDATA%\aac audio converter\is-q3177.tmp в %LOCALAPPDATA%\aac audio converter\wmadecode.dll
- %LOCALAPPDATA%\aac audio converter\lang\is-9hb7h.tmp в %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
- %LOCALAPPDATA%\aac audio converter\is-gp0sn.tmp в %LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe
Подменяет следующие файлы
- %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
- %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
- %LOCALAPPDATA%\aac audio converter\lang\feedback.dat
- %LOCALAPPDATA%\aac audio converter\lang\musictype.txt
- %LOCALAPPDATA%\aac audio converter\lang\update.log
Другое
Ищет следующие окна
- ClassName: '' WindowName: 'v3fc95_AACAC1241FlashFixClass_v3fc95'
Создает и запускает на исполнение
- '%TEMP%\is-9ut3p.tmp\<Имя файла>.tmp' /SL5="$A024A,3628718,54272,<Полный путь к файлу>"
- '%LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe' -i
- '%LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe' -s
Запускает на исполнение
- '%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "AACAC1242"
