Trojan.Siggen22.18453

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-m07bl.tmp\<Имя файла>.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-rbbaa.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-ha7pe.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-a3tmt.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-mrmu8.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-omgfc.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-cg7e8.tmp
%ProgramFiles(x86)%\diz recorder\is-j6s2s.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-ku4ce.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-3ncuq.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-181l4.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-vj98r.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-54qk0.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-r83fr.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-e6khb.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-d6g33.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-omedm.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-5mb1r.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-n5oq4.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-g4dfr.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-lg2v7.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-0lr1v.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-91rqo.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-sn2hc.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-6ccho.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-b1v8s.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-j53em.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-kt57e.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-5223d.tmp
%ProgramFiles(x86)%\diz recorder\unins000.dat
%ProgramFiles(x86)%\diz recorder\is-m49st.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-39sou.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-u0t6j.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-nsurj.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-0hng7.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-em4q7.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-n5kbf.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-6ngob.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-omec6.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-qqm6q.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-ql22i.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-u2qli.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-4b151.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-k9clv.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-suaa7.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-k1lcg.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-pspj0.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-vk8iv.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-5m54j.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-v0nac.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-3jqic.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-r88t1.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-cfgo1.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-j1ugf.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-2h35f.tmp
%ProgramFiles(x86)%\diz recorder\dizrecorder.exe
%ProgramFiles(x86)%\diz recorder\lang\is-espif.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-v6e6e.tmp
%ProgramFiles(x86)%\diz recorder\is-pbgss.tmp
%ProgramFiles(x86)%\diz recorder\is-3tgkp.tmp
%ProgramFiles(x86)%\diz recorder\is-seepd.tmp
%ProgramFiles(x86)%\diz recorder\is-4hcep.tmp
%ProgramFiles(x86)%\diz recorder\is-cnt6h.tmp
%ProgramFiles(x86)%\diz recorder\is-ekuhn.tmp
%ProgramFiles(x86)%\diz recorder\is-031u7.tmp
%ProgramFiles(x86)%\diz recorder\is-mfolv.tmp
%ProgramFiles(x86)%\diz recorder\is-l3obo.tmp
%ProgramFiles(x86)%\diz recorder\is-4fs45.tmp
%ProgramFiles(x86)%\diz recorder\is-apmtm.tmp
%ProgramFiles(x86)%\diz recorder\is-v6d1h.tmp
%ProgramFiles(x86)%\diz recorder\is-0odv8.tmp
%ProgramFiles(x86)%\diz recorder\is-mrnuc.tmp
%ProgramFiles(x86)%\diz recorder\is-n78l4.tmp
%ProgramFiles(x86)%\diz recorder\is-io9mu.tmp
%ProgramFiles(x86)%\diz recorder\is-ft59u.tmp
%ProgramFiles(x86)%\diz recorder\is-p1emj.tmp
%ProgramFiles(x86)%\diz recorder\is-621lp.tmp
%TEMP%\is-rlcd9.tmp\_isetup\_iscrypt.dll
%TEMP%\is-rlcd9.tmp\_isetup\_isdecmp.dll
%TEMP%\is-rlcd9.tmp\_isetup\_shfoldr.dll
%TEMP%\is-rlcd9.tmp\_isetup\_setup64.tmp
%TEMP%\is-rlcd9.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\diz recorder\is-ecj7q.tmp
%ProgramFiles(x86)%\diz recorder\is-sp863.tmp
%ProgramFiles(x86)%\diz recorder\is-2avv4.tmp
%ProgramFiles(x86)%\diz recorder\is-cff7h.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-kv2cj.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-elmkf.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-glofn.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-vdcij.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-dd4rk.tmp
%ProgramFiles(x86)%\diz recorder\is-c5q83.tmp
%ProgramFiles(x86)%\diz recorder\is-kui51.tmp
%ProgramFiles(x86)%\diz recorder\is-r1nvf.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-ko5qq.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-oi88h.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-cbp04.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-afma9.tmp
%ProgramFiles(x86)%\diz recorder\is-muhmc.tmp
%ProgramFiles(x86)%\diz recorder\is-t2r51.tmp
%ProgramFiles(x86)%\diz recorder\is-vign7.tmp
%ProgramFiles(x86)%\diz recorder\is-jmd4a.tmp
%ProgramFiles(x86)%\diz recorder\is-ar7ui.tmp
%ProgramFiles(x86)%\diz recorder\is-ndu0s.tmp
%ProgramFiles(x86)%\diz recorder\is-agd4j.tmp
%ProgramFiles(x86)%\diz recorder\is-7cbip.tmp
%ProgramFiles(x86)%\diz recorder\is-apt7l.tmp
%ProgramFiles(x86)%\diz recorder\is-696j9.tmp
%ProgramFiles(x86)%\diz recorder\is-8246f.tmp
%ProgramFiles(x86)%\diz recorder\is-kgkev.tmp
%ProgramFiles(x86)%\diz recorder\is-ujt9t.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-ef6dt.tmp
%TEMP%\license.txt

Удаляет следующие файлы

%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\wait.gif

Перемещает следующие файлы

%ProgramFiles(x86)%\diz recorder\is-621lp.tmp в %ProgramFiles(x86)%\diz recorder\unins000.exe
%ProgramFiles(x86)%\diz recorder\pf\is-rbbaa.tmp в %ProgramFiles(x86)%\diz recorder\pf\flac.pf
%ProgramFiles(x86)%\diz recorder\pf\is-ha7pe.tmp в %ProgramFiles(x86)%\diz recorder\pf\au.pf
%ProgramFiles(x86)%\diz recorder\pf\is-a3tmt.tmp в %ProgramFiles(x86)%\diz recorder\pf\amr.pf
%ProgramFiles(x86)%\diz recorder\pf\is-mrmu8.tmp в %ProgramFiles(x86)%\diz recorder\pf\aiff.pf
%ProgramFiles(x86)%\diz recorder\pf\is-omgfc.tmp в %ProgramFiles(x86)%\diz recorder\pf\ac3.pf
%ProgramFiles(x86)%\diz recorder\pf\is-cg7e8.tmp в %ProgramFiles(x86)%\diz recorder\pf\aac.pf
%ProgramFiles(x86)%\diz recorder\lang\is-ku4ce.tmp в %ProgramFiles(x86)%\diz recorder\lang\index.ini
%ProgramFiles(x86)%\diz recorder\lang\is-3ncuq.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_spanish.dat
%ProgramFiles(x86)%\diz recorder\lang\is-181l4.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-vj98r.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-r83fr.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-b1v8s.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-e6khb.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_english.dat
%ProgramFiles(x86)%\diz recorder\lang\is-d6g33.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-omedm.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_japanese.dat
%ProgramFiles(x86)%\diz recorder\lang\is-5mb1r.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_spanish.dat
%ProgramFiles(x86)%\diz recorder\lang\is-n5oq4.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-g4dfr.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-lg2v7.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-0lr1v.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-91rqo.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_english.dat
%ProgramFiles(x86)%\diz recorder\pf\is-54qk0.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4a.pf
%ProgramFiles(x86)%\diz recorder\pf\is-j53em.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4b.pf
%ProgramFiles(x86)%\diz recorder\pf\is-kt57e.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4r.pf
%ProgramFiles(x86)%\diz recorder\pf\is-5223d.tmp в %ProgramFiles(x86)%\diz recorder\pf\mka.pf
%ProgramFiles(x86)%\diz recorder\audiences\is-u0t6j.tmp в %ProgramFiles(x86)%\diz recorder\audiences\350k download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-nsurj.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m surround stereo (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-0hng7.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-em4q7.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-n5kbf.tmp в %ProgramFiles(x86)%\diz recorder\audiences\28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-6ngob.tmp в %ProgramFiles(x86)%\diz recorder\audiences\26k substream for 56k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-omec6.tmp в %ProgramFiles(x86)%\diz recorder\audiences\256k dsl or cable.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-qqm6q.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m surround stereo (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-ql22i.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-u2qli.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-k9clv.tmp в %ProgramFiles(x86)%\diz recorder\audiences\150k lan.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-4b151.tmp в %ProgramFiles(x86)%\diz recorder\audiences\16k substream for 28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-suaa7.tmp в %ProgramFiles(x86)%\diz recorder\audiences\12k substream for 28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-k1lcg.tmp в %ProgramFiles(x86)%\diz recorder\audiences\128k dual isdn.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-pspj0.tmp в %ProgramFiles(x86)%\diz recorder\audiences\100% quality download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\pf\is-vk8iv.tmp в %ProgramFiles(x86)%\diz recorder\pf\wma.pf
%ProgramFiles(x86)%\diz recorder\pf\is-5m54j.tmp в %ProgramFiles(x86)%\diz recorder\pf\wav.pf
%ProgramFiles(x86)%\diz recorder\pf\is-v0nac.tmp в %ProgramFiles(x86)%\diz recorder\pf\voc.pf
%ProgramFiles(x86)%\diz recorder\pf\is-3jqic.tmp в %ProgramFiles(x86)%\diz recorder\pf\ra.pf
%ProgramFiles(x86)%\diz recorder\pf\is-r88t1.tmp в %ProgramFiles(x86)%\diz recorder\pf\ogg.pf
%ProgramFiles(x86)%\diz recorder\pf\is-cfgo1.tmp в %ProgramFiles(x86)%\diz recorder\pf\mp3.pf
%ProgramFiles(x86)%\diz recorder\pf\is-j1ugf.tmp в %ProgramFiles(x86)%\diz recorder\pf\mp2.pf
%ProgramFiles(x86)%\diz recorder\audiences\is-39sou.tmp в %ProgramFiles(x86)%\diz recorder\audiences\350k multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\lang\is-sn2hc.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-6ccho.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_japanese.dat
%ProgramFiles(x86)%\diz recorder\lang\is-2h35f.tmp в %ProgramFiles(x86)%\diz recorder\lang\audiorecorder.dat
%ProgramFiles(x86)%\diz recorder\is-2avv4.tmp в %ProgramFiles(x86)%\diz recorder\recordaudio.dll
%ProgramFiles(x86)%\diz recorder\is-sp863.tmp в %ProgramFiles(x86)%\diz recorder\recodeaudiokernel_old.dll
%ProgramFiles(x86)%\diz recorder\is-v6d1h.tmp в %ProgramFiles(x86)%\diz recorder\recodeaudiokernel.dll
%ProgramFiles(x86)%\diz recorder\is-pbgss.tmp в %ProgramFiles(x86)%\diz recorder\pthreadvc2.dll
%ProgramFiles(x86)%\diz recorder\is-3tgkp.tmp в %ProgramFiles(x86)%\diz recorder\pthreadgc2.dll
%ProgramFiles(x86)%\diz recorder\is-seepd.tmp в %ProgramFiles(x86)%\diz recorder\postproc-52.dll
%ProgramFiles(x86)%\diz recorder\is-4hcep.tmp в %ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\is-cnt6h.tmp в %ProgramFiles(x86)%\diz recorder\mp3player.dll
%ProgramFiles(x86)%\diz recorder\is-ekuhn.tmp в %ProgramFiles(x86)%\diz recorder\mp3infp.dll
%ProgramFiles(x86)%\diz recorder\is-031u7.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\is-mfolv.tmp в %ProgramFiles(x86)%\diz recorder\mediaencoderimp.dll
%ProgramFiles(x86)%\diz recorder\is-l3obo.tmp в %ProgramFiles(x86)%\diz recorder\magicskin.dll
%ProgramFiles(x86)%\diz recorder\is-4fs45.tmp в %ProgramFiles(x86)%\diz recorder\loadernonelevator64.exe
%ProgramFiles(x86)%\diz recorder\is-apmtm.tmp в %ProgramFiles(x86)%\diz recorder\loadernonelevator32.exe
%ProgramFiles(x86)%\diz recorder\is-0odv8.tmp в %ProgramFiles(x86)%\diz recorder\istask.dll
%ProgramFiles(x86)%\diz recorder\is-ecj7q.tmp в %ProgramFiles(x86)%\diz recorder\intelhw.dll
%ProgramFiles(x86)%\diz recorder\is-mrnuc.tmp в %ProgramFiles(x86)%\diz recorder\installhelp.dll
%ProgramFiles(x86)%\diz recorder\is-n78l4.tmp в %ProgramFiles(x86)%\diz recorder\gsdownload.dll
%ProgramFiles(x86)%\diz recorder\is-io9mu.tmp в %ProgramFiles(x86)%\diz recorder\gsarservice.exe
%ProgramFiles(x86)%\diz recorder\is-ft59u.tmp в %ProgramFiles(x86)%\diz recorder\avutil-52.dll
%ProgramFiles(x86)%\diz recorder\is-p1emj.tmp в %ProgramFiles(x86)%\diz recorder\avdevice-55.dll
%ProgramFiles(x86)%\diz recorder\is-cff7h.tmp в %ProgramFiles(x86)%\diz recorder\recwin7.dll
%ProgramFiles(x86)%\diz recorder\is-ujt9t.tmp в %ProgramFiles(x86)%\diz recorder\rmvbencodesync.dll
%ProgramFiles(x86)%\diz recorder\is-kgkev.tmp в %ProgramFiles(x86)%\diz recorder\screenhook.dll
%ProgramFiles(x86)%\diz recorder\is-8246f.tmp в %ProgramFiles(x86)%\diz recorder\servicectrl.dll
%ProgramFiles(x86)%\diz recorder\lang\is-ef6dt.tmp в %ProgramFiles(x86)%\diz recorder\lang\russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-v6e6e.tmp в %ProgramFiles(x86)%\diz recorder\lang\portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-kv2cj.tmp в %ProgramFiles(x86)%\diz recorder\lang\frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-elmkf.tmp в %ProgramFiles(x86)%\diz recorder\lang\italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-glofn.tmp в %ProgramFiles(x86)%\diz recorder\lang\english.dat
%ProgramFiles(x86)%\diz recorder\lang\is-vdcij.tmp в %ProgramFiles(x86)%\diz recorder\lang\chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-dd4rk.tmp в %ProgramFiles(x86)%\diz recorder\lang\japanese.dat
%ProgramFiles(x86)%\diz recorder\is-c5q83.tmp в %ProgramFiles(x86)%\diz recorder\notips.mp3
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-ko5qq.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcr90.dll
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-oi88h.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcp90.dll
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-afma9.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-cbp04.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\is-muhmc.tmp в %ProgramFiles(x86)%\diz recorder\xvidcore.dll
%ProgramFiles(x86)%\diz recorder\is-t2r51.tmp в %ProgramFiles(x86)%\diz recorder\wmadecode.dll
%ProgramFiles(x86)%\diz recorder\is-vign7.tmp в %ProgramFiles(x86)%\diz recorder\webrtc.dll
%ProgramFiles(x86)%\diz recorder\is-jmd4a.tmp в %ProgramFiles(x86)%\diz recorder\waverec.dll
%ProgramFiles(x86)%\diz recorder\is-ar7ui.tmp в %ProgramFiles(x86)%\diz recorder\wait.gif
%ProgramFiles(x86)%\diz recorder\is-ndu0s.tmp в %ProgramFiles(x86)%\diz recorder\verify.dll
%ProgramFiles(x86)%\diz recorder\is-agd4j.tmp в %ProgramFiles(x86)%\diz recorder\ve64.dll
%ProgramFiles(x86)%\diz recorder\is-7cbip.tmp в %ProgramFiles(x86)%\diz recorder\ve32.dll
%ProgramFiles(x86)%\diz recorder\is-apt7l.tmp в %ProgramFiles(x86)%\diz recorder\swscale-2.dll
%ProgramFiles(x86)%\diz recorder\is-696j9.tmp в %ProgramFiles(x86)%\diz recorder\swresample-0.dll
%ProgramFiles(x86)%\diz recorder\lang\is-espif.tmp в %ProgramFiles(x86)%\diz recorder\lang\spanish.dat
%ProgramFiles(x86)%\diz recorder\is-m49st.tmp в %ProgramFiles(x86)%\diz recorder\dizrecorder.exe

Подменяет следующие файлы

%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\wait.gif

Сетевая активность

Подключается к

'mi####njobs.works':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######

Запросы HTTP POST

http://mi####njobs.works/new/net_api

UDP

DNS ASK mi####njobs.works

Другое

Ищет следующие окна

ClassName: 'z600d9_diz10245Class_z600d9' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-m07bl.tmp\<Имя файла>.tmp' /SL5="$A0254,6904682,319488,<Полный путь к файлу>"
'%ProgramFiles(x86)%\diz recorder\dizrecorder.exe'
'%ProgramFiles(x86)%\diz recorder\dizrecorder.exe' 36a58181bae7a2ddeabd89be6f20bf19

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "DIZREC1024-5"
'%WINDIR%\syswow64\schtasks.exe' /Query

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней