Trojan.Siggen22.18452

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-0tvau.tmp\<Имя файла>.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-chcel.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-8hq6b.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-efcch.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-c4hgk.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-jp703.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-do9ue.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-4tcgb.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-2gah6.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-th2tj.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-9tt2h.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-0rljc.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-574ec.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-4njae.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-mrfct.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-gvhse.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-aiuqr.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-meltr.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-3surp.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-6oj01.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-5r4jn.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-n1d33.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-08the.tmp
%ProgramFiles(x86)%\audio recorder\is-ssqg5.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-d5bgb.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-ceppe.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-693k3.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-h65cf.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-p9oij.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-49lk3.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-c41e1.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-uhrsf.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-c47ml.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-ge241.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-gdgq1.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-et7mt.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-u60c5.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-9iv5m.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-4gihk.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-u8qag.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-msbp6.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-cist6.tmp
%ProgramFiles(x86)%\audio recorder\audiorecorder.exe
%ProgramFiles(x86)%\audio recorder\audiences\is-hhf3a.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-tnog7.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-sgno0.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-asd34.tmp
%ProgramFiles(x86)%\audio recorder\is-qctg2.tmp
%ProgramFiles(x86)%\audio recorder\unins000.dat
%ProgramFiles(x86)%\audio recorder\audiences\is-mikgm.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-mirit.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-2d93d.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-0tpdo.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-kmeel.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-i1lsm.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-f5at5.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-p7l89.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-mej3p.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-9c3ea.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-grerm.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-9cejq.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-6guc9.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-d8871.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-lnk57.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-k5ghg.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-mdn8d.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-c9la9.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-9rvtq.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-sggup.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-2qg9t.tmp
%ProgramFiles(x86)%\audio recorder\is-8sgbu.tmp
%ProgramFiles(x86)%\audio recorder\is-c1632.tmp
%ProgramFiles(x86)%\audio recorder\is-rfoba.tmp
%ProgramFiles(x86)%\audio recorder\is-ddgce.tmp
%ProgramFiles(x86)%\audio recorder\is-79u2a.tmp
%ProgramFiles(x86)%\audio recorder\is-jj63a.tmp
%ProgramFiles(x86)%\audio recorder\is-rcrkp.tmp
%ProgramFiles(x86)%\audio recorder\is-fgk8h.tmp
%ProgramFiles(x86)%\audio recorder\is-p0p2t.tmp
%ProgramFiles(x86)%\audio recorder\is-rtls1.tmp
%ProgramFiles(x86)%\audio recorder\is-dsvj4.tmp
%ProgramFiles(x86)%\audio recorder\is-tjav6.tmp
%ProgramFiles(x86)%\audio recorder\is-aahc2.tmp
%ProgramFiles(x86)%\audio recorder\is-72a6f.tmp
%ProgramFiles(x86)%\audio recorder\is-7k7jl.tmp
%ProgramFiles(x86)%\audio recorder\is-m6puj.tmp
%ProgramFiles(x86)%\audio recorder\is-bcavu.tmp
%ProgramFiles(x86)%\audio recorder\is-kalfr.tmp
%ProgramFiles(x86)%\audio recorder\is-nhpjf.tmp
%ProgramFiles(x86)%\audio recorder\is-6g0t8.tmp
%ProgramFiles(x86)%\audio recorder\is-fvg4s.tmp
%ProgramFiles(x86)%\audio recorder\is-4jhpe.tmp
%ProgramFiles(x86)%\audio recorder\is-ll8i0.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-0sen5.tmp
%ProgramFiles(x86)%\audio recorder\is-sr351.tmp
%TEMP%\is-klaof.tmp\_isetup\_iscrypt.dll
%TEMP%\is-klaof.tmp\_isetup\_isdecmp.dll
%TEMP%\is-klaof.tmp\_isetup\_shfoldr.dll
%TEMP%\is-klaof.tmp\_isetup\_setup64.tmp
%TEMP%\is-klaof.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\audio recorder\is-ipgrm.tmp
%ProgramFiles(x86)%\audio recorder\is-spn2g.tmp
%ProgramFiles(x86)%\audio recorder\is-nfklv.tmp
%ProgramFiles(x86)%\audio recorder\is-uj25j.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-s7lja.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-sl1ku.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-fn8nd.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-d1a6v.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-apg53.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-a8ecr.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-annag.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-6nhdf.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-kflpo.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-rov36.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-j4a4m.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-p7o7c.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-khot2.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-jg7io.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-cmbk1.tmp
%ProgramFiles(x86)%\audio recorder\is-43abd.tmp
%ProgramFiles(x86)%\audio recorder\is-s08ko.tmp
%ProgramFiles(x86)%\audio recorder\is-k0qsl.tmp
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-2kast.tmp
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-b2g86.tmp
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-4d0pg.tmp
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-hnttd.tmp
%ProgramFiles(x86)%\audio recorder\is-hn60r.tmp
%ProgramFiles(x86)%\audio recorder\is-64bjv.tmp
%ProgramFiles(x86)%\audio recorder\is-k2v4f.tmp
%ProgramFiles(x86)%\audio recorder\is-5j7lq.tmp
%ProgramFiles(x86)%\audio recorder\is-k13j4.tmp
%ProgramFiles(x86)%\audio recorder\is-c5lp1.tmp
%ProgramFiles(x86)%\audio recorder\is-seqas.tmp
%ProgramFiles(x86)%\audio recorder\is-jcea3.tmp
%ProgramFiles(x86)%\audio recorder\is-m7cqv.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-jtcqa.tmp
%TEMP%\license.txt

Удаляет следующие файлы

%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\audio recorder\msvcm90.dll
%ProgramFiles(x86)%\audio recorder\wait.gif

Перемещает следующие файлы

%ProgramFiles(x86)%\audio recorder\is-sr351.tmp в %ProgramFiles(x86)%\audio recorder\unins000.exe
%ProgramFiles(x86)%\audio recorder\audiences\is-chcel.tmp в %ProgramFiles(x86)%\audio recorder\audiences\16k substream for 28k dial-up.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-8hq6b.tmp в %ProgramFiles(x86)%\audio recorder\audiences\150k lan.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-efcch.tmp в %ProgramFiles(x86)%\audio recorder\audiences\12k substream for 28k dial-up.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-c4hgk.tmp в %ProgramFiles(x86)%\audio recorder\audiences\128k dual isdn.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-jp703.tmp в %ProgramFiles(x86)%\audio recorder\audiences\100% quality download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\pf\is-do9ue.tmp в %ProgramFiles(x86)%\audio recorder\pf\wma.pf
%ProgramFiles(x86)%\audio recorder\pf\is-4tcgb.tmp в %ProgramFiles(x86)%\audio recorder\pf\wav.pf
%ProgramFiles(x86)%\audio recorder\pf\is-2gah6.tmp в %ProgramFiles(x86)%\audio recorder\pf\voc.pf
%ProgramFiles(x86)%\audio recorder\pf\is-th2tj.tmp в %ProgramFiles(x86)%\audio recorder\pf\ra.pf
%ProgramFiles(x86)%\audio recorder\pf\is-9tt2h.tmp в %ProgramFiles(x86)%\audio recorder\pf\ogg.pf
%ProgramFiles(x86)%\audio recorder\pf\is-0rljc.tmp в %ProgramFiles(x86)%\audio recorder\pf\mp3.pf
%ProgramFiles(x86)%\audio recorder\pf\is-574ec.tmp в %ProgramFiles(x86)%\audio recorder\pf\mp2.pf
%ProgramFiles(x86)%\audio recorder\pf\is-4njae.tmp в %ProgramFiles(x86)%\audio recorder\pf\mka.pf
%ProgramFiles(x86)%\audio recorder\pf\is-mrfct.tmp в %ProgramFiles(x86)%\audio recorder\pf\m4r.pf
%ProgramFiles(x86)%\audio recorder\pf\is-aiuqr.tmp в %ProgramFiles(x86)%\audio recorder\pf\m4b.pf
%ProgramFiles(x86)%\audio recorder\pf\is-uhrsf.tmp в %ProgramFiles(x86)%\audio recorder\pf\m4a.pf
%ProgramFiles(x86)%\audio recorder\pf\is-meltr.tmp в %ProgramFiles(x86)%\audio recorder\pf\flac.pf
%ProgramFiles(x86)%\audio recorder\pf\is-3surp.tmp в %ProgramFiles(x86)%\audio recorder\pf\au.pf
%ProgramFiles(x86)%\audio recorder\pf\is-6oj01.tmp в %ProgramFiles(x86)%\audio recorder\pf\amr.pf
%ProgramFiles(x86)%\audio recorder\pf\is-5r4jn.tmp в %ProgramFiles(x86)%\audio recorder\pf\aiff.pf
%ProgramFiles(x86)%\audio recorder\pf\is-n1d33.tmp в %ProgramFiles(x86)%\audio recorder\pf\ac3.pf
%ProgramFiles(x86)%\audio recorder\pf\is-08the.tmp в %ProgramFiles(x86)%\audio recorder\pf\aac.pf
%ProgramFiles(x86)%\audio recorder\lang\is-d5bgb.tmp в %ProgramFiles(x86)%\audio recorder\lang\index.ini
%ProgramFiles(x86)%\audio recorder\lang\is-ceppe.tmp в %ProgramFiles(x86)%\audio recorder\lang\waverec_spanish.dat
%ProgramFiles(x86)%\audio recorder\lang\is-693k3.tmp в %ProgramFiles(x86)%\audio recorder\lang\waverec_russian.dat
%ProgramFiles(x86)%\audio recorder\lang\is-h65cf.tmp в %ProgramFiles(x86)%\audio recorder\lang\waverec_portugues.dat
%ProgramFiles(x86)%\audio recorder\lang\is-p9oij.tmp в %ProgramFiles(x86)%\audio recorder\lang\waverec_frence.dat
%ProgramFiles(x86)%\audio recorder\audiences\is-gvhse.tmp в %ProgramFiles(x86)%\audio recorder\audiences\1m download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-c47ml.tmp в %ProgramFiles(x86)%\audio recorder\audiences\1m multichannel (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-ge241.tmp в %ProgramFiles(x86)%\audio recorder\audiences\1m surround stereo (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-gdgq1.tmp в %ProgramFiles(x86)%\audio recorder\audiences\256k dsl or cable.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-sgno0.tmp в %ProgramFiles(x86)%\audio recorder\audiences\lossless audio.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-tnog7.tmp в %ProgramFiles(x86)%\audio recorder\audiences\general mobile streaming.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-hhf3a.tmp в %ProgramFiles(x86)%\audio recorder\audiences\general mobile local playback.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-cist6.tmp в %ProgramFiles(x86)%\audio recorder\audiences\90% quality download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-9rvtq.tmp в %ProgramFiles(x86)%\audio recorder\audiences\80% quality download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-msbp6.tmp в %ProgramFiles(x86)%\audio recorder\audiences\768k dsl or cable.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-u8qag.tmp в %ProgramFiles(x86)%\audio recorder\audiences\750k surround stereo (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-4gihk.tmp в %ProgramFiles(x86)%\audio recorder\audiences\750k multichannel (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-9iv5m.tmp в %ProgramFiles(x86)%\audio recorder\audiences\750k download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-u60c5.tmp в %ProgramFiles(x86)%\audio recorder\audiences\70% quality download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-et7mt.tmp в %ProgramFiles(x86)%\audio recorder\audiences\64k single isdn.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-mikgm.tmp в %ProgramFiles(x86)%\audio recorder\audiences\5m surround stereo (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-mirit.tmp в %ProgramFiles(x86)%\audio recorder\audiences\5m multichannel (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-0tpdo.tmp в %ProgramFiles(x86)%\audio recorder\audiences\56k dial-up.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-2d93d.tmp в %ProgramFiles(x86)%\audio recorder\audiences\5m download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-kmeel.tmp в %ProgramFiles(x86)%\audio recorder\audiences\512k dsl or cable.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-i1lsm.tmp в %ProgramFiles(x86)%\audio recorder\audiences\450k surround stereo (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-f5at5.tmp в %ProgramFiles(x86)%\audio recorder\audiences\450k multichannel (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-p7l89.tmp в %ProgramFiles(x86)%\audio recorder\audiences\450k download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-mej3p.tmp в %ProgramFiles(x86)%\audio recorder\audiences\384k dsl or cable.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-9c3ea.tmp в %ProgramFiles(x86)%\audio recorder\audiences\350k surround stereo (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-grerm.tmp в %ProgramFiles(x86)%\audio recorder\audiences\350k multichannel (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-9cejq.tmp в %ProgramFiles(x86)%\audio recorder\audiences\350k download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-6guc9.tmp в %ProgramFiles(x86)%\audio recorder\audiences\2m surround stereo (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-d8871.tmp в %ProgramFiles(x86)%\audio recorder\audiences\2m multichannel (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-lnk57.tmp в %ProgramFiles(x86)%\audio recorder\audiences\2m download (vbr).rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-k5ghg.tmp в %ProgramFiles(x86)%\audio recorder\audiences\28k dial-up.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-mdn8d.tmp в %ProgramFiles(x86)%\audio recorder\audiences\26k substream for 56k dial-up.rpad
%ProgramFiles(x86)%\audio recorder\audiences\is-asd34.tmp в %ProgramFiles(x86)%\audio recorder\audiences\pocketpc local playback.rpad
%ProgramFiles(x86)%\audio recorder\lang\is-49lk3.tmp в %ProgramFiles(x86)%\audio recorder\lang\waverec_italian.dat
%ProgramFiles(x86)%\audio recorder\lang\is-c41e1.tmp в %ProgramFiles(x86)%\audio recorder\lang\waverec_english.dat
%ProgramFiles(x86)%\audio recorder\lang\is-c9la9.tmp в %ProgramFiles(x86)%\audio recorder\lang\waverec_chinese(traditional).dat
%ProgramFiles(x86)%\audio recorder\is-nfklv.tmp в %ProgramFiles(x86)%\audio recorder\servicectrl.dll
%ProgramFiles(x86)%\audio recorder\is-spn2g.tmp в %ProgramFiles(x86)%\audio recorder\screenhook.dll
%ProgramFiles(x86)%\audio recorder\is-7k7jl.tmp в %ProgramFiles(x86)%\audio recorder\rmvbencodesync.dll
%ProgramFiles(x86)%\audio recorder\is-8sgbu.tmp в %ProgramFiles(x86)%\audio recorder\recwin7.dll
%ProgramFiles(x86)%\audio recorder\is-c1632.tmp в %ProgramFiles(x86)%\audio recorder\recordaudio.dll
%ProgramFiles(x86)%\audio recorder\is-rfoba.tmp в %ProgramFiles(x86)%\audio recorder\recodeaudiokernel_old.dll
%ProgramFiles(x86)%\audio recorder\is-ddgce.tmp в %ProgramFiles(x86)%\audio recorder\recodeaudiokernel.dll
%ProgramFiles(x86)%\audio recorder\is-79u2a.tmp в %ProgramFiles(x86)%\audio recorder\pthreadvc2.dll
%ProgramFiles(x86)%\audio recorder\is-jj63a.tmp в %ProgramFiles(x86)%\audio recorder\pthreadgc2.dll
%ProgramFiles(x86)%\audio recorder\is-rcrkp.tmp в %ProgramFiles(x86)%\audio recorder\postproc-52.dll
%ProgramFiles(x86)%\audio recorder\is-fgk8h.tmp в %ProgramFiles(x86)%\audio recorder\msvcm90.dll
%ProgramFiles(x86)%\audio recorder\is-p0p2t.tmp в %ProgramFiles(x86)%\audio recorder\mp3player.dll
%ProgramFiles(x86)%\audio recorder\is-rtls1.tmp в %ProgramFiles(x86)%\audio recorder\mp3infp.dll
%ProgramFiles(x86)%\audio recorder\is-dsvj4.tmp в %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\audio recorder\is-tjav6.tmp в %ProgramFiles(x86)%\audio recorder\mediaencoderimp.dll
%ProgramFiles(x86)%\audio recorder\is-aahc2.tmp в %ProgramFiles(x86)%\audio recorder\magicskin.dll
%ProgramFiles(x86)%\audio recorder\is-72a6f.tmp в %ProgramFiles(x86)%\audio recorder\loadernonelevator64.exe
%ProgramFiles(x86)%\audio recorder\is-m6puj.tmp в %ProgramFiles(x86)%\audio recorder\loadernonelevator32.exe
%ProgramFiles(x86)%\audio recorder\is-ipgrm.tmp в %ProgramFiles(x86)%\audio recorder\istask.dll
%ProgramFiles(x86)%\audio recorder\is-bcavu.tmp в %ProgramFiles(x86)%\audio recorder\intelhw.dll
%ProgramFiles(x86)%\audio recorder\is-kalfr.tmp в %ProgramFiles(x86)%\audio recorder\installhelp.dll
%ProgramFiles(x86)%\audio recorder\is-nhpjf.tmp в %ProgramFiles(x86)%\audio recorder\gsdownload.dll
%ProgramFiles(x86)%\audio recorder\is-6g0t8.tmp в %ProgramFiles(x86)%\audio recorder\gsarservice.exe
%ProgramFiles(x86)%\audio recorder\is-fvg4s.tmp в %ProgramFiles(x86)%\audio recorder\avutil-52.dll
%ProgramFiles(x86)%\audio recorder\is-4jhpe.tmp в %ProgramFiles(x86)%\audio recorder\avdevice-55.dll
%ProgramFiles(x86)%\audio recorder\is-ll8i0.tmp в %ProgramFiles(x86)%\audio recorder\audioresample.dll
%ProgramFiles(x86)%\audio recorder\lang\is-0sen5.tmp в %ProgramFiles(x86)%\audio recorder\lang\settings.ini
%ProgramFiles(x86)%\audio recorder\is-uj25j.tmp в %ProgramFiles(x86)%\audio recorder\swresample-0.dll
%ProgramFiles(x86)%\audio recorder\is-m7cqv.tmp в %ProgramFiles(x86)%\audio recorder\swscale-2.dll
%ProgramFiles(x86)%\audio recorder\is-jcea3.tmp в %ProgramFiles(x86)%\audio recorder\ve32.dll
%ProgramFiles(x86)%\audio recorder\is-seqas.tmp в %ProgramFiles(x86)%\audio recorder\ve64.dll
%ProgramFiles(x86)%\audio recorder\lang\is-jtcqa.tmp в %ProgramFiles(x86)%\audio recorder\lang\autosettings_spanish.dat
%ProgramFiles(x86)%\audio recorder\lang\is-6nhdf.tmp в %ProgramFiles(x86)%\audio recorder\lang\autosettings_russian.dat
%ProgramFiles(x86)%\audio recorder\lang\is-jg7io.tmp в %ProgramFiles(x86)%\audio recorder\lang\autosettings_portugues.dat
%ProgramFiles(x86)%\audio recorder\lang\is-khot2.tmp в %ProgramFiles(x86)%\audio recorder\lang\autosettings_frence.dat
%ProgramFiles(x86)%\audio recorder\lang\is-p7o7c.tmp в %ProgramFiles(x86)%\audio recorder\lang\autosettings_italian.dat
%ProgramFiles(x86)%\audio recorder\lang\is-j4a4m.tmp в %ProgramFiles(x86)%\audio recorder\lang\autosettings_english.dat
%ProgramFiles(x86)%\audio recorder\lang\is-rov36.tmp в %ProgramFiles(x86)%\audio recorder\lang\autosettings_chinese(traditional).dat
%ProgramFiles(x86)%\audio recorder\lang\is-kflpo.tmp в %ProgramFiles(x86)%\audio recorder\lang\autosettings_japanese.dat
%ProgramFiles(x86)%\audio recorder\lang\is-annag.tmp в %ProgramFiles(x86)%\audio recorder\lang\audiorecorder.dat
%ProgramFiles(x86)%\audio recorder\lang\is-2qg9t.tmp в %ProgramFiles(x86)%\audio recorder\lang\spanish.dat
%ProgramFiles(x86)%\audio recorder\lang\is-a8ecr.tmp в %ProgramFiles(x86)%\audio recorder\lang\russian.dat
%ProgramFiles(x86)%\audio recorder\lang\is-apg53.tmp в %ProgramFiles(x86)%\audio recorder\lang\portugues.dat
%ProgramFiles(x86)%\audio recorder\lang\is-d1a6v.tmp в %ProgramFiles(x86)%\audio recorder\lang\frence.dat
%ProgramFiles(x86)%\audio recorder\lang\is-sl1ku.tmp в %ProgramFiles(x86)%\audio recorder\lang\english.dat
%ProgramFiles(x86)%\audio recorder\lang\is-fn8nd.tmp в %ProgramFiles(x86)%\audio recorder\lang\italian.dat
%ProgramFiles(x86)%\audio recorder\lang\is-s7lja.tmp в %ProgramFiles(x86)%\audio recorder\lang\chinese(traditional).dat
%ProgramFiles(x86)%\audio recorder\lang\is-cmbk1.tmp в %ProgramFiles(x86)%\audio recorder\lang\japanese.dat
%ProgramFiles(x86)%\audio recorder\is-43abd.tmp в %ProgramFiles(x86)%\audio recorder\notips.mp3
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-2kast.tmp в %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\msvcr90.dll
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-b2g86.tmp в %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\msvcp90.dll
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-4d0pg.tmp в %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\msvcm90.dll
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-hnttd.tmp в %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\audio recorder\is-hn60r.tmp в %ProgramFiles(x86)%\audio recorder\xvidcore.dll
%ProgramFiles(x86)%\audio recorder\is-64bjv.tmp в %ProgramFiles(x86)%\audio recorder\wmadecode.dll
%ProgramFiles(x86)%\audio recorder\is-k2v4f.tmp в %ProgramFiles(x86)%\audio recorder\webrtc.dll
%ProgramFiles(x86)%\audio recorder\is-5j7lq.tmp в %ProgramFiles(x86)%\audio recorder\waverec.dll
%ProgramFiles(x86)%\audio recorder\is-k13j4.tmp в %ProgramFiles(x86)%\audio recorder\wait.gif
%ProgramFiles(x86)%\audio recorder\is-c5lp1.tmp в %ProgramFiles(x86)%\audio recorder\verify.dll
%ProgramFiles(x86)%\audio recorder\lang\is-sggup.tmp в %ProgramFiles(x86)%\audio recorder\lang\waverec_japanese.dat
%ProgramFiles(x86)%\audio recorder\is-qctg2.tmp в %ProgramFiles(x86)%\audio recorder\audiorecorder.exe

Подменяет следующие файлы

%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\audio recorder\msvcm90.dll
%ProgramFiles(x86)%\audio recorder\wait.gif

Сетевая активность

Подключается к

'mi####njobs.works':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######

Запросы HTTP POST

http://mi####njobs.works/new/net_api

UDP

DNS ASK mi####njobs.works

Другое

Ищет следующие окна

ClassName: 'v5d3d5_audio10202Class_v5d3d5' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-0tvau.tmp\<Имя файла>.tmp' /SL5="$50236,6985467,366592,<Полный путь к файлу>"
'%ProgramFiles(x86)%\audio recorder\audiorecorder.exe'
'%ProgramFiles(x86)%\audio recorder\audiorecorder.exe' d057d6625692c213c233e4e9cd1d19c2

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "AREC1020-3"
'%WINDIR%\syswow64\schtasks.exe' /Query

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней