Техническая информация
Для обеспечения автозапуска и распространения
Устанавливает следующие настройки сервисов
- [HKLM\System\CurrentControlSet\Services\IPTV Channel Browser 6.6] 'Start' = '00000002'
- [HKLM\System\CurrentControlSet\Services\IPTV Channel Browser 6.6] 'ImagePath' = '%ALLUSERSPROFILE%\IPTV Channel Browser 6.6\IPTV Channel Browser 6.6.exe'
Создает следующие сервисы
- 'IPTV Channel Browser 6.6' %ALLUSERSPROFILE%\IPTV Channel Browser 6.6\IPTV Channel Browser 6.6.exe
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\is-eg2sg.tmp\<Имя файла>.tmp
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-udk7m.tmp
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-tiq22.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-sr6t8.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-5ctpg.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-s89c0.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-tc92m.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-hacnb.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ov0et.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-8kim1.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-r23fq.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-rcc00.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-9o4t7.tmp
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-7mgt0.tmp
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-lbkl8.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-g1hcg.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-fiag5.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-gkqa6.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-pfkqk.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-kjqk2.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-3e5nf.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-7pbtq.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-ojs7q.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-jnccu.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-3uu6u.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-5r4a5.tmp
- %LOCALAPPDATA%\aac audio converter\is-51c0g.tmp
- %LOCALAPPDATA%\aac audio converter\unins000.dat
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-8u7b7.tmp
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-icj00.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-4ocg7.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-nqfma.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-juluc.tmp
- %TEMP%\is-i4ilm.tmp\_isetup\_setup64.tmp
- %TEMP%\is-i4ilm.tmp\_isetup\_shfoldr.dll
- %TEMP%\is-i4ilm.tmp\_isetup\_iscrypt.dll
- %LOCALAPPDATA%\aac audio converter\is-9vu7e.tmp
- %LOCALAPPDATA%\aac audio converter\is-b7vkb.tmp
- %LOCALAPPDATA%\aac audio converter\is-38kq3.tmp
- %LOCALAPPDATA%\aac audio converter\is-rjdh6.tmp
- %LOCALAPPDATA%\aac audio converter\is-3gr7s.tmp
- %LOCALAPPDATA%\aac audio converter\is-rl29k.tmp
- %LOCALAPPDATA%\aac audio converter\is-tnq3g.tmp
- %LOCALAPPDATA%\aac audio converter\is-h2vr6.tmp
- %LOCALAPPDATA%\aac audio converter\is-7ce0t.tmp
- %LOCALAPPDATA%\aac audio converter\is-nak9p.tmp
- %TEMP%\is-i4ilm.tmp\_isetup\_regdll.tmp
- %LOCALAPPDATA%\aac audio converter\is-p0ojb.tmp
- %LOCALAPPDATA%\aac audio converter\is-iu7r9.tmp
- %LOCALAPPDATA%\aac audio converter\is-n340j.tmp
- %LOCALAPPDATA%\aac audio converter\is-7bg4d.tmp
- %LOCALAPPDATA%\aac audio converter\is-umh5o.tmp
- %LOCALAPPDATA%\aac audio converter\is-89kjn.tmp
- %LOCALAPPDATA%\aac audio converter\is-q44tq.tmp
- %LOCALAPPDATA%\aac audio converter\is-3rq5e.tmp
- %LOCALAPPDATA%\aac audio converter\is-keulq.tmp
- %LOCALAPPDATA%\aac audio converter\is-fh0r0.tmp
- %LOCALAPPDATA%\aac audio converter\is-i2dl4.tmp
- %LOCALAPPDATA%\aac audio converter\is-d4vp4.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-3ksjc.tmp
- %LOCALAPPDATA%\aac audio converter\lang\is-c1vlr.tmp
- %LOCALAPPDATA%\aac audio converter\is-hgelf.tmp
- %LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe
- %ALLUSERSPROFILE%\iptv channel browser 6.6\iptv channel browser 6.6.exe
Удаляет следующие файлы
- %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
- %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
- %LOCALAPPDATA%\aac audio converter\lang\feedback.dat
- %LOCALAPPDATA%\aac audio converter\lang\musictype.txt
- %LOCALAPPDATA%\aac audio converter\lang\update.log
Перемещает следующие файлы
- %LOCALAPPDATA%\aac audio converter\is-9vu7e.tmp в %LOCALAPPDATA%\aac audio converter\unins000.exe
- %LOCALAPPDATA%\aac audio converter\lang\is-4ocg7.tmp в %LOCALAPPDATA%\aac audio converter\lang\update.log
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-7mgt0.tmp в %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\microsoft.vc90.crt.manifest
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-lbkl8.tmp в %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcm90.dll
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-udk7m.tmp в %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcp90.dll
- %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-tiq22.tmp в %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcr90.dll
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-sr6t8.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\aac.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-5ctpg.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\ac3.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-s89c0.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\aiff.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-tc92m.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\amr.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-hacnb.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\ape.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-8kim1.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\flac.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-3e5nf.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\wma.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-r23fq.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\m4a.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-rcc00.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\m4b.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-9o4t7.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\m4r.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-g1hcg.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\mka.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-8u7b7.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\mp2.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-icj00.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\mp3.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-fiag5.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\ogg.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-gkqa6.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\ra.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-pfkqk.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\voc.pf
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-kjqk2.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\wav.pf
- %LOCALAPPDATA%\aac audio converter\lang\is-nqfma.tmp в %LOCALAPPDATA%\aac audio converter\lang\musictype.txt
- %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ov0et.tmp в %LOCALAPPDATA%\aac audio converter\pf\common audio\au.pf
- %LOCALAPPDATA%\aac audio converter\lang\is-juluc.tmp в %LOCALAPPDATA%\aac audio converter\lang\feedback.dat
- %LOCALAPPDATA%\aac audio converter\is-hgelf.tmp в %LOCALAPPDATA%\aac audio converter\rmvbencode.dll
- %LOCALAPPDATA%\aac audio converter\is-b7vkb.tmp в %LOCALAPPDATA%\aac audio converter\msvcp60.dll
- %LOCALAPPDATA%\aac audio converter\is-38kq3.tmp в %LOCALAPPDATA%\aac audio converter\msvcr71.dll
- %LOCALAPPDATA%\aac audio converter\is-rjdh6.tmp в %LOCALAPPDATA%\aac audio converter\musiccd.exe
- %LOCALAPPDATA%\aac audio converter\is-3gr7s.tmp в %LOCALAPPDATA%\aac audio converter\nvencoderkernel.dll
- %LOCALAPPDATA%\aac audio converter\is-rl29k.tmp в %LOCALAPPDATA%\aac audio converter\ocxhelper.exe
- %LOCALAPPDATA%\aac audio converter\is-tnq3g.tmp в %LOCALAPPDATA%\aac audio converter\postproc-52.dll
- %LOCALAPPDATA%\aac audio converter\is-h2vr6.tmp в %LOCALAPPDATA%\aac audio converter\productcontrol.dll
- %LOCALAPPDATA%\aac audio converter\is-7ce0t.tmp в %LOCALAPPDATA%\aac audio converter\pthreadgc2.dll
- %LOCALAPPDATA%\aac audio converter\is-nak9p.tmp в %LOCALAPPDATA%\aac audio converter\pthreadvc2.dll
- %LOCALAPPDATA%\aac audio converter\is-p0ojb.tmp в %LOCALAPPDATA%\aac audio converter\realquickjoin.dll
- %LOCALAPPDATA%\aac audio converter\is-iu7r9.tmp в %LOCALAPPDATA%\aac audio converter\rmvbencodesync.dll
- %LOCALAPPDATA%\aac audio converter\lang\is-3ksjc.tmp в %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
- %LOCALAPPDATA%\aac audio converter\is-n340j.tmp в %LOCALAPPDATA%\aac audio converter\simage.dll
- %LOCALAPPDATA%\aac audio converter\is-7bg4d.tmp в %LOCALAPPDATA%\aac audio converter\soundtouch.dll
- %LOCALAPPDATA%\aac audio converter\is-umh5o.tmp в %LOCALAPPDATA%\aac audio converter\ssleay32.dll
- %LOCALAPPDATA%\aac audio converter\is-89kjn.tmp в %LOCALAPPDATA%\aac audio converter\swresample-0.dll
- %LOCALAPPDATA%\aac audio converter\is-q44tq.tmp в %LOCALAPPDATA%\aac audio converter\uitoolkit.dll.intermediate.manifest
- %LOCALAPPDATA%\aac audio converter\is-3rq5e.tmp в %LOCALAPPDATA%\aac audio converter\ve32.dll
- %LOCALAPPDATA%\aac audio converter\is-keulq.tmp в %LOCALAPPDATA%\aac audio converter\ve64.dll
- %LOCALAPPDATA%\aac audio converter\is-fh0r0.tmp в %LOCALAPPDATA%\aac audio converter\wait.gif
- %LOCALAPPDATA%\aac audio converter\is-i2dl4.tmp в %LOCALAPPDATA%\aac audio converter\webrtc.dll
- %LOCALAPPDATA%\aac audio converter\is-d4vp4.tmp в %LOCALAPPDATA%\aac audio converter\wmadecode.dll
- %LOCALAPPDATA%\aac audio converter\lang\is-c1vlr.tmp в %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
- %LOCALAPPDATA%\aac audio converter\is-51c0g.tmp в %LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe
Подменяет следующие файлы
- %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
- %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
- %LOCALAPPDATA%\aac audio converter\lang\feedback.dat
- %LOCALAPPDATA%\aac audio converter\lang\musictype.txt
- %LOCALAPPDATA%\aac audio converter\lang\update.log
Другое
Ищет следующие окна
- ClassName: '' WindowName: 'Xa72f1_AACAC1241FlashFixClass_Xa72f1'
Создает и запускает на исполнение
- '%TEMP%\is-eg2sg.tmp\<Имя файла>.tmp' /SL5="$100186,3652187,54272,<Полный путь к файлу>"
- '%LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe' -i
- '%LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe' -s
