Trojan.Siggen22.18460

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-bohvf.tmp\<Имя файла>.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-1te4b.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-vsupu.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-sjmpt.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-0su4h.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-80gdt.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-qt3u1.tmp
%ProgramFiles(x86)%\diz recorder\is-kj1na.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-cjiu7.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-6fn18.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-ve0k4.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-6ubl4.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-pd7bm.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-j7a80.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-spkdc.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-8p63j.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-39p53.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-vgo27.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-om8f3.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-88nmu.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-a8vco.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-9k08c.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-17pih.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-30u7d.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-q51a8.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-em7kk.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-5qcgk.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-1rhah.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-478i9.tmp
%ProgramFiles(x86)%\diz recorder\unins000.dat
%ProgramFiles(x86)%\diz recorder\is-vgmdp.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-geeiq.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-i389s.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-hdh9u.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-2dji0.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-t5dc8.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-0vpri.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-mpqu2.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-mt8k7.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-qrcet.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-8mnbt.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-4ikrh.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-pk2en.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-65000.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-5pmf4.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-421pj.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-c5vvn.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-b5voq.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-8sjtf.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-k1p3f.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-vm49g.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-v7h6i.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-ejlj7.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-8e0od.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-04c98.tmp
%ProgramFiles(x86)%\diz recorder\dizrecorder.exe
%ProgramFiles(x86)%\diz recorder\lang\is-7u24t.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-sb1sq.tmp
%ProgramFiles(x86)%\diz recorder\is-kglg9.tmp
%ProgramFiles(x86)%\diz recorder\is-juooc.tmp
%ProgramFiles(x86)%\diz recorder\is-9g5m8.tmp
%ProgramFiles(x86)%\diz recorder\is-v0kl2.tmp
%ProgramFiles(x86)%\diz recorder\is-f141f.tmp
%ProgramFiles(x86)%\diz recorder\is-naai0.tmp
%ProgramFiles(x86)%\diz recorder\is-e238o.tmp
%ProgramFiles(x86)%\diz recorder\is-q4gdc.tmp
%ProgramFiles(x86)%\diz recorder\is-tg7i4.tmp
%ProgramFiles(x86)%\diz recorder\is-ouarh.tmp
%ProgramFiles(x86)%\diz recorder\is-6b9ks.tmp
%ProgramFiles(x86)%\diz recorder\is-jc0a1.tmp
%ProgramFiles(x86)%\diz recorder\is-49116.tmp
%ProgramFiles(x86)%\diz recorder\is-0m8t7.tmp
%ProgramFiles(x86)%\diz recorder\is-ln0lq.tmp
%ProgramFiles(x86)%\diz recorder\is-7o02p.tmp
%ProgramFiles(x86)%\diz recorder\is-kukaq.tmp
%ProgramFiles(x86)%\diz recorder\is-99539.tmp
%ProgramFiles(x86)%\diz recorder\is-156qq.tmp
%TEMP%\is-eo58c.tmp\_isetup\_iscrypt.dll
%TEMP%\is-eo58c.tmp\_isetup\_isdecmp.dll
%TEMP%\is-eo58c.tmp\_isetup\_shfoldr.dll
%TEMP%\is-eo58c.tmp\_isetup\_setup64.tmp
%TEMP%\is-eo58c.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\diz recorder\is-2nkbg.tmp
%ProgramFiles(x86)%\diz recorder\is-r85m1.tmp
%ProgramFiles(x86)%\diz recorder\is-l9lac.tmp
%ProgramFiles(x86)%\diz recorder\is-5oj98.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-ieeb6.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-o047g.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-hi0kq.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-84snn.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-jggob.tmp
%ProgramFiles(x86)%\diz recorder\is-2kjfh.tmp
%ProgramFiles(x86)%\diz recorder\is-rftm7.tmp
%ProgramFiles(x86)%\diz recorder\is-re027.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-r57v2.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-3mv69.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-2pltp.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-rt6nh.tmp
%ProgramFiles(x86)%\diz recorder\is-lv4hh.tmp
%ProgramFiles(x86)%\diz recorder\is-99s8v.tmp
%ProgramFiles(x86)%\diz recorder\is-abonn.tmp
%ProgramFiles(x86)%\diz recorder\is-fji6t.tmp
%ProgramFiles(x86)%\diz recorder\is-05560.tmp
%ProgramFiles(x86)%\diz recorder\is-gmf8s.tmp
%ProgramFiles(x86)%\diz recorder\is-9sok9.tmp
%ProgramFiles(x86)%\diz recorder\is-304jk.tmp
%ProgramFiles(x86)%\diz recorder\is-g08mo.tmp
%ProgramFiles(x86)%\diz recorder\is-j8mb7.tmp
%ProgramFiles(x86)%\diz recorder\is-39d7o.tmp
%ProgramFiles(x86)%\diz recorder\is-r8qkt.tmp
%ProgramFiles(x86)%\diz recorder\is-sa020.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-uagh9.tmp
%TEMP%\license.txt

Удаляет следующие файлы

%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\wait.gif

Перемещает следующие файлы

%ProgramFiles(x86)%\diz recorder\is-156qq.tmp в %ProgramFiles(x86)%\diz recorder\unins000.exe
%ProgramFiles(x86)%\diz recorder\pf\is-1te4b.tmp в %ProgramFiles(x86)%\diz recorder\pf\flac.pf
%ProgramFiles(x86)%\diz recorder\pf\is-vsupu.tmp в %ProgramFiles(x86)%\diz recorder\pf\au.pf
%ProgramFiles(x86)%\diz recorder\pf\is-sjmpt.tmp в %ProgramFiles(x86)%\diz recorder\pf\amr.pf
%ProgramFiles(x86)%\diz recorder\pf\is-0su4h.tmp в %ProgramFiles(x86)%\diz recorder\pf\aiff.pf
%ProgramFiles(x86)%\diz recorder\pf\is-80gdt.tmp в %ProgramFiles(x86)%\diz recorder\pf\ac3.pf
%ProgramFiles(x86)%\diz recorder\pf\is-qt3u1.tmp в %ProgramFiles(x86)%\diz recorder\pf\aac.pf
%ProgramFiles(x86)%\diz recorder\lang\is-cjiu7.tmp в %ProgramFiles(x86)%\diz recorder\lang\index.ini
%ProgramFiles(x86)%\diz recorder\lang\is-6fn18.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_spanish.dat
%ProgramFiles(x86)%\diz recorder\lang\is-ve0k4.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-6ubl4.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-j7a80.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-em7kk.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-spkdc.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_english.dat
%ProgramFiles(x86)%\diz recorder\lang\is-8p63j.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-39p53.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_japanese.dat
%ProgramFiles(x86)%\diz recorder\lang\is-vgo27.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_spanish.dat
%ProgramFiles(x86)%\diz recorder\lang\is-om8f3.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-88nmu.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-a8vco.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-9k08c.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-17pih.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_english.dat
%ProgramFiles(x86)%\diz recorder\pf\is-pd7bm.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4a.pf
%ProgramFiles(x86)%\diz recorder\pf\is-5qcgk.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4b.pf
%ProgramFiles(x86)%\diz recorder\pf\is-1rhah.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4r.pf
%ProgramFiles(x86)%\diz recorder\pf\is-478i9.tmp в %ProgramFiles(x86)%\diz recorder\pf\mka.pf
%ProgramFiles(x86)%\diz recorder\audiences\is-i389s.tmp в %ProgramFiles(x86)%\diz recorder\audiences\350k download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-hdh9u.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m surround stereo (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-2dji0.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-t5dc8.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-0vpri.tmp в %ProgramFiles(x86)%\diz recorder\audiences\28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-mpqu2.tmp в %ProgramFiles(x86)%\diz recorder\audiences\26k substream for 56k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-mt8k7.tmp в %ProgramFiles(x86)%\diz recorder\audiences\256k dsl or cable.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-qrcet.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m surround stereo (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-8mnbt.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-4ikrh.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-65000.tmp в %ProgramFiles(x86)%\diz recorder\audiences\150k lan.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-pk2en.tmp в %ProgramFiles(x86)%\diz recorder\audiences\16k substream for 28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-5pmf4.tmp в %ProgramFiles(x86)%\diz recorder\audiences\12k substream for 28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-421pj.tmp в %ProgramFiles(x86)%\diz recorder\audiences\128k dual isdn.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-c5vvn.tmp в %ProgramFiles(x86)%\diz recorder\audiences\100% quality download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\pf\is-b5voq.tmp в %ProgramFiles(x86)%\diz recorder\pf\wma.pf
%ProgramFiles(x86)%\diz recorder\pf\is-8sjtf.tmp в %ProgramFiles(x86)%\diz recorder\pf\wav.pf
%ProgramFiles(x86)%\diz recorder\pf\is-k1p3f.tmp в %ProgramFiles(x86)%\diz recorder\pf\voc.pf
%ProgramFiles(x86)%\diz recorder\pf\is-vm49g.tmp в %ProgramFiles(x86)%\diz recorder\pf\ra.pf
%ProgramFiles(x86)%\diz recorder\pf\is-v7h6i.tmp в %ProgramFiles(x86)%\diz recorder\pf\ogg.pf
%ProgramFiles(x86)%\diz recorder\pf\is-ejlj7.tmp в %ProgramFiles(x86)%\diz recorder\pf\mp3.pf
%ProgramFiles(x86)%\diz recorder\pf\is-8e0od.tmp в %ProgramFiles(x86)%\diz recorder\pf\mp2.pf
%ProgramFiles(x86)%\diz recorder\audiences\is-geeiq.tmp в %ProgramFiles(x86)%\diz recorder\audiences\350k multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\lang\is-30u7d.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-q51a8.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_japanese.dat
%ProgramFiles(x86)%\diz recorder\lang\is-04c98.tmp в %ProgramFiles(x86)%\diz recorder\lang\audiorecorder.dat
%ProgramFiles(x86)%\diz recorder\is-l9lac.tmp в %ProgramFiles(x86)%\diz recorder\recordaudio.dll
%ProgramFiles(x86)%\diz recorder\is-r85m1.tmp в %ProgramFiles(x86)%\diz recorder\recodeaudiokernel_old.dll
%ProgramFiles(x86)%\diz recorder\is-jc0a1.tmp в %ProgramFiles(x86)%\diz recorder\recodeaudiokernel.dll
%ProgramFiles(x86)%\diz recorder\is-kglg9.tmp в %ProgramFiles(x86)%\diz recorder\pthreadvc2.dll
%ProgramFiles(x86)%\diz recorder\is-juooc.tmp в %ProgramFiles(x86)%\diz recorder\pthreadgc2.dll
%ProgramFiles(x86)%\diz recorder\is-9g5m8.tmp в %ProgramFiles(x86)%\diz recorder\postproc-52.dll
%ProgramFiles(x86)%\diz recorder\is-v0kl2.tmp в %ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\is-f141f.tmp в %ProgramFiles(x86)%\diz recorder\mp3player.dll
%ProgramFiles(x86)%\diz recorder\is-naai0.tmp в %ProgramFiles(x86)%\diz recorder\mp3infp.dll
%ProgramFiles(x86)%\diz recorder\is-e238o.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\is-q4gdc.tmp в %ProgramFiles(x86)%\diz recorder\mediaencoderimp.dll
%ProgramFiles(x86)%\diz recorder\is-tg7i4.tmp в %ProgramFiles(x86)%\diz recorder\magicskin.dll
%ProgramFiles(x86)%\diz recorder\is-ouarh.tmp в %ProgramFiles(x86)%\diz recorder\loadernonelevator64.exe
%ProgramFiles(x86)%\diz recorder\is-6b9ks.tmp в %ProgramFiles(x86)%\diz recorder\loadernonelevator32.exe
%ProgramFiles(x86)%\diz recorder\is-49116.tmp в %ProgramFiles(x86)%\diz recorder\istask.dll
%ProgramFiles(x86)%\diz recorder\is-2nkbg.tmp в %ProgramFiles(x86)%\diz recorder\intelhw.dll
%ProgramFiles(x86)%\diz recorder\is-0m8t7.tmp в %ProgramFiles(x86)%\diz recorder\installhelp.dll
%ProgramFiles(x86)%\diz recorder\is-ln0lq.tmp в %ProgramFiles(x86)%\diz recorder\gsdownload.dll
%ProgramFiles(x86)%\diz recorder\is-7o02p.tmp в %ProgramFiles(x86)%\diz recorder\gsarservice.exe
%ProgramFiles(x86)%\diz recorder\is-kukaq.tmp в %ProgramFiles(x86)%\diz recorder\avutil-52.dll
%ProgramFiles(x86)%\diz recorder\is-99539.tmp в %ProgramFiles(x86)%\diz recorder\avdevice-55.dll
%ProgramFiles(x86)%\diz recorder\is-5oj98.tmp в %ProgramFiles(x86)%\diz recorder\recwin7.dll
%ProgramFiles(x86)%\diz recorder\is-sa020.tmp в %ProgramFiles(x86)%\diz recorder\rmvbencodesync.dll
%ProgramFiles(x86)%\diz recorder\is-r8qkt.tmp в %ProgramFiles(x86)%\diz recorder\screenhook.dll
%ProgramFiles(x86)%\diz recorder\is-39d7o.tmp в %ProgramFiles(x86)%\diz recorder\servicectrl.dll
%ProgramFiles(x86)%\diz recorder\lang\is-uagh9.tmp в %ProgramFiles(x86)%\diz recorder\lang\russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-sb1sq.tmp в %ProgramFiles(x86)%\diz recorder\lang\portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-ieeb6.tmp в %ProgramFiles(x86)%\diz recorder\lang\frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-o047g.tmp в %ProgramFiles(x86)%\diz recorder\lang\italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-hi0kq.tmp в %ProgramFiles(x86)%\diz recorder\lang\english.dat
%ProgramFiles(x86)%\diz recorder\lang\is-84snn.tmp в %ProgramFiles(x86)%\diz recorder\lang\chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-jggob.tmp в %ProgramFiles(x86)%\diz recorder\lang\japanese.dat
%ProgramFiles(x86)%\diz recorder\is-2kjfh.tmp в %ProgramFiles(x86)%\diz recorder\notips.mp3
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-r57v2.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcr90.dll
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-3mv69.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcp90.dll
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-rt6nh.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-2pltp.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\is-lv4hh.tmp в %ProgramFiles(x86)%\diz recorder\xvidcore.dll
%ProgramFiles(x86)%\diz recorder\is-99s8v.tmp в %ProgramFiles(x86)%\diz recorder\wmadecode.dll
%ProgramFiles(x86)%\diz recorder\is-abonn.tmp в %ProgramFiles(x86)%\diz recorder\webrtc.dll
%ProgramFiles(x86)%\diz recorder\is-fji6t.tmp в %ProgramFiles(x86)%\diz recorder\waverec.dll
%ProgramFiles(x86)%\diz recorder\is-05560.tmp в %ProgramFiles(x86)%\diz recorder\wait.gif
%ProgramFiles(x86)%\diz recorder\is-gmf8s.tmp в %ProgramFiles(x86)%\diz recorder\verify.dll
%ProgramFiles(x86)%\diz recorder\is-9sok9.tmp в %ProgramFiles(x86)%\diz recorder\ve64.dll
%ProgramFiles(x86)%\diz recorder\is-304jk.tmp в %ProgramFiles(x86)%\diz recorder\ve32.dll
%ProgramFiles(x86)%\diz recorder\is-g08mo.tmp в %ProgramFiles(x86)%\diz recorder\swscale-2.dll
%ProgramFiles(x86)%\diz recorder\is-j8mb7.tmp в %ProgramFiles(x86)%\diz recorder\swresample-0.dll
%ProgramFiles(x86)%\diz recorder\lang\is-7u24t.tmp в %ProgramFiles(x86)%\diz recorder\lang\spanish.dat
%ProgramFiles(x86)%\diz recorder\is-vgmdp.tmp в %ProgramFiles(x86)%\diz recorder\dizrecorder.exe

Подменяет следующие файлы

%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\wait.gif

Сетевая активность

Подключается к

'mi####njobs.works':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######

Запросы HTTP POST

http://mi####njobs.works/new/net_api

UDP

DNS ASK mi####njobs.works

Другое

Ищет следующие окна

ClassName: 'va6b15_diz10245Class_va6b15' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-bohvf.tmp\<Имя файла>.tmp' /SL5="$9024A,6937842,319488,<Полный путь к файлу>"
'%ProgramFiles(x86)%\diz recorder\dizrecorder.exe'
'%ProgramFiles(x86)%\diz recorder\dizrecorder.exe' 680290c5d1cf39902e05a2b737b4be51

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "DIZREC1024-5"
'%WINDIR%\syswow64\schtasks.exe' /Query

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней