Trojan.Siggen22.18471

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-p01n3.tmp\<Имя файла>.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-db46e.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-f2j3l.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-b0e1h.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-jv4mi.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-23dkq.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-7frgn.tmp
%ProgramFiles(x86)%\diz recorder\is-dgkrv.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-2innl.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-6lh4r.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-pkte4.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-oo29k.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-aaodm.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-f3p66.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-4lr34.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-gpeor.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-dfcbe.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-rkhuq.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-cc3au.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-11erq.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-13q4k.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-3fkt8.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-6lbkq.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-8358p.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-mvr31.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-k51qo.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-3ivg5.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-fkkjl.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-dmupf.tmp
%ProgramFiles(x86)%\diz recorder\unins000.dat
%ProgramFiles(x86)%\diz recorder\is-d10io.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-n7moa.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-rr7v2.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-72g6m.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-l2osl.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-mrqe3.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-5omhk.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-pdlsj.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-9t4qe.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-n01he.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-g1c3m.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-kf8f6.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-j0lkb.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-8tdtk.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-guk7h.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-rkrrp.tmp
%ProgramFiles(x86)%\diz recorder\audiences\is-0idml.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-gmo1t.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-rnojd.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-7e3jh.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-8n2hk.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-p491g.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-dnj1g.tmp
%ProgramFiles(x86)%\diz recorder\pf\is-60sro.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-ou16a.tmp
%ProgramFiles(x86)%\diz recorder\dizrecorder.exe
%ProgramFiles(x86)%\diz recorder\lang\is-6na41.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-vf1bs.tmp
%ProgramFiles(x86)%\diz recorder\is-lgmbi.tmp
%ProgramFiles(x86)%\diz recorder\is-or5jh.tmp
%ProgramFiles(x86)%\diz recorder\is-u2f8v.tmp
%ProgramFiles(x86)%\diz recorder\is-37ec3.tmp
%ProgramFiles(x86)%\diz recorder\is-1uc0v.tmp
%ProgramFiles(x86)%\diz recorder\is-58osd.tmp
%ProgramFiles(x86)%\diz recorder\is-70h05.tmp
%ProgramFiles(x86)%\diz recorder\is-ojjdb.tmp
%ProgramFiles(x86)%\diz recorder\is-s4f87.tmp
%ProgramFiles(x86)%\diz recorder\is-pd0c2.tmp
%ProgramFiles(x86)%\diz recorder\is-1p729.tmp
%ProgramFiles(x86)%\diz recorder\is-f9nk0.tmp
%ProgramFiles(x86)%\diz recorder\is-mj3jv.tmp
%ProgramFiles(x86)%\diz recorder\is-vo48n.tmp
%ProgramFiles(x86)%\diz recorder\is-c7hgj.tmp
%ProgramFiles(x86)%\diz recorder\is-a9n07.tmp
%ProgramFiles(x86)%\diz recorder\is-7jqt7.tmp
%ProgramFiles(x86)%\diz recorder\is-jv4sl.tmp
%ProgramFiles(x86)%\diz recorder\is-ct20d.tmp
%TEMP%\is-li2md.tmp\_isetup\_iscrypt.dll
%TEMP%\is-li2md.tmp\_isetup\_isdecmp.dll
%TEMP%\is-li2md.tmp\_isetup\_shfoldr.dll
%TEMP%\is-li2md.tmp\_isetup\_setup64.tmp
%TEMP%\is-li2md.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\diz recorder\is-b2h0i.tmp
%ProgramFiles(x86)%\diz recorder\is-629fg.tmp
%ProgramFiles(x86)%\diz recorder\is-lv4f5.tmp
%ProgramFiles(x86)%\diz recorder\is-nnrsn.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-efie9.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-48ffq.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-5iidp.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-aj2od.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-7hbdd.tmp
%ProgramFiles(x86)%\diz recorder\is-5e13e.tmp
%ProgramFiles(x86)%\diz recorder\is-gln6a.tmp
%ProgramFiles(x86)%\diz recorder\is-ha2lu.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-prnvt.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-puiu5.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-8ti9r.tmp
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-u1s5k.tmp
%ProgramFiles(x86)%\diz recorder\is-l9f61.tmp
%ProgramFiles(x86)%\diz recorder\is-tq1j5.tmp
%ProgramFiles(x86)%\diz recorder\is-ccr2l.tmp
%ProgramFiles(x86)%\diz recorder\is-f8bsp.tmp
%ProgramFiles(x86)%\diz recorder\is-a7l42.tmp
%ProgramFiles(x86)%\diz recorder\is-26c9p.tmp
%ProgramFiles(x86)%\diz recorder\is-nd2uv.tmp
%ProgramFiles(x86)%\diz recorder\is-m8q4l.tmp
%ProgramFiles(x86)%\diz recorder\is-fet28.tmp
%ProgramFiles(x86)%\diz recorder\is-31et7.tmp
%ProgramFiles(x86)%\diz recorder\is-bi7h2.tmp
%ProgramFiles(x86)%\diz recorder\is-t64qf.tmp
%ProgramFiles(x86)%\diz recorder\is-flbcq.tmp
%ProgramFiles(x86)%\diz recorder\lang\is-35kq1.tmp
%TEMP%\license.txt

Удаляет следующие файлы

%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\wait.gif

Перемещает следующие файлы

%ProgramFiles(x86)%\diz recorder\is-ct20d.tmp в %ProgramFiles(x86)%\diz recorder\unins000.exe
%ProgramFiles(x86)%\diz recorder\pf\is-db46e.tmp в %ProgramFiles(x86)%\diz recorder\pf\flac.pf
%ProgramFiles(x86)%\diz recorder\pf\is-f2j3l.tmp в %ProgramFiles(x86)%\diz recorder\pf\au.pf
%ProgramFiles(x86)%\diz recorder\pf\is-b0e1h.tmp в %ProgramFiles(x86)%\diz recorder\pf\amr.pf
%ProgramFiles(x86)%\diz recorder\pf\is-jv4mi.tmp в %ProgramFiles(x86)%\diz recorder\pf\aiff.pf
%ProgramFiles(x86)%\diz recorder\pf\is-23dkq.tmp в %ProgramFiles(x86)%\diz recorder\pf\ac3.pf
%ProgramFiles(x86)%\diz recorder\pf\is-7frgn.tmp в %ProgramFiles(x86)%\diz recorder\pf\aac.pf
%ProgramFiles(x86)%\diz recorder\lang\is-2innl.tmp в %ProgramFiles(x86)%\diz recorder\lang\index.ini
%ProgramFiles(x86)%\diz recorder\lang\is-6lh4r.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_spanish.dat
%ProgramFiles(x86)%\diz recorder\lang\is-pkte4.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-oo29k.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-f3p66.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-k51qo.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-4lr34.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_english.dat
%ProgramFiles(x86)%\diz recorder\lang\is-gpeor.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-dfcbe.tmp в %ProgramFiles(x86)%\diz recorder\lang\waverec_japanese.dat
%ProgramFiles(x86)%\diz recorder\lang\is-rkhuq.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_spanish.dat
%ProgramFiles(x86)%\diz recorder\lang\is-cc3au.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-11erq.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-13q4k.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-3fkt8.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-6lbkq.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_english.dat
%ProgramFiles(x86)%\diz recorder\pf\is-aaodm.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4a.pf
%ProgramFiles(x86)%\diz recorder\pf\is-3ivg5.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4b.pf
%ProgramFiles(x86)%\diz recorder\pf\is-fkkjl.tmp в %ProgramFiles(x86)%\diz recorder\pf\m4r.pf
%ProgramFiles(x86)%\diz recorder\pf\is-dmupf.tmp в %ProgramFiles(x86)%\diz recorder\pf\mka.pf
%ProgramFiles(x86)%\diz recorder\audiences\is-rr7v2.tmp в %ProgramFiles(x86)%\diz recorder\audiences\350k download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-72g6m.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m surround stereo (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-l2osl.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-mrqe3.tmp в %ProgramFiles(x86)%\diz recorder\audiences\2m download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-5omhk.tmp в %ProgramFiles(x86)%\diz recorder\audiences\28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-pdlsj.tmp в %ProgramFiles(x86)%\diz recorder\audiences\26k substream for 56k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-9t4qe.tmp в %ProgramFiles(x86)%\diz recorder\audiences\256k dsl or cable.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-n01he.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m surround stereo (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-g1c3m.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-kf8f6.tmp в %ProgramFiles(x86)%\diz recorder\audiences\1m download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-8tdtk.tmp в %ProgramFiles(x86)%\diz recorder\audiences\150k lan.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-j0lkb.tmp в %ProgramFiles(x86)%\diz recorder\audiences\16k substream for 28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-guk7h.tmp в %ProgramFiles(x86)%\diz recorder\audiences\12k substream for 28k dial-up.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-rkrrp.tmp в %ProgramFiles(x86)%\diz recorder\audiences\128k dual isdn.rpad
%ProgramFiles(x86)%\diz recorder\audiences\is-0idml.tmp в %ProgramFiles(x86)%\diz recorder\audiences\100% quality download (vbr).rpad
%ProgramFiles(x86)%\diz recorder\pf\is-gmo1t.tmp в %ProgramFiles(x86)%\diz recorder\pf\wma.pf
%ProgramFiles(x86)%\diz recorder\pf\is-rnojd.tmp в %ProgramFiles(x86)%\diz recorder\pf\wav.pf
%ProgramFiles(x86)%\diz recorder\pf\is-7e3jh.tmp в %ProgramFiles(x86)%\diz recorder\pf\voc.pf
%ProgramFiles(x86)%\diz recorder\pf\is-8n2hk.tmp в %ProgramFiles(x86)%\diz recorder\pf\ra.pf
%ProgramFiles(x86)%\diz recorder\pf\is-p491g.tmp в %ProgramFiles(x86)%\diz recorder\pf\ogg.pf
%ProgramFiles(x86)%\diz recorder\pf\is-dnj1g.tmp в %ProgramFiles(x86)%\diz recorder\pf\mp3.pf
%ProgramFiles(x86)%\diz recorder\pf\is-60sro.tmp в %ProgramFiles(x86)%\diz recorder\pf\mp2.pf
%ProgramFiles(x86)%\diz recorder\audiences\is-n7moa.tmp в %ProgramFiles(x86)%\diz recorder\audiences\350k multichannel (vbr).rpad
%ProgramFiles(x86)%\diz recorder\lang\is-8358p.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-mvr31.tmp в %ProgramFiles(x86)%\diz recorder\lang\autosettings_japanese.dat
%ProgramFiles(x86)%\diz recorder\lang\is-ou16a.tmp в %ProgramFiles(x86)%\diz recorder\lang\audiorecorder.dat
%ProgramFiles(x86)%\diz recorder\is-lv4f5.tmp в %ProgramFiles(x86)%\diz recorder\recordaudio.dll
%ProgramFiles(x86)%\diz recorder\is-629fg.tmp в %ProgramFiles(x86)%\diz recorder\recodeaudiokernel_old.dll
%ProgramFiles(x86)%\diz recorder\is-f9nk0.tmp в %ProgramFiles(x86)%\diz recorder\recodeaudiokernel.dll
%ProgramFiles(x86)%\diz recorder\is-lgmbi.tmp в %ProgramFiles(x86)%\diz recorder\pthreadvc2.dll
%ProgramFiles(x86)%\diz recorder\is-or5jh.tmp в %ProgramFiles(x86)%\diz recorder\pthreadgc2.dll
%ProgramFiles(x86)%\diz recorder\is-u2f8v.tmp в %ProgramFiles(x86)%\diz recorder\postproc-52.dll
%ProgramFiles(x86)%\diz recorder\is-37ec3.tmp в %ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\is-1uc0v.tmp в %ProgramFiles(x86)%\diz recorder\mp3player.dll
%ProgramFiles(x86)%\diz recorder\is-58osd.tmp в %ProgramFiles(x86)%\diz recorder\mp3infp.dll
%ProgramFiles(x86)%\diz recorder\is-70h05.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\is-ojjdb.tmp в %ProgramFiles(x86)%\diz recorder\mediaencoderimp.dll
%ProgramFiles(x86)%\diz recorder\is-s4f87.tmp в %ProgramFiles(x86)%\diz recorder\magicskin.dll
%ProgramFiles(x86)%\diz recorder\is-pd0c2.tmp в %ProgramFiles(x86)%\diz recorder\loadernonelevator64.exe
%ProgramFiles(x86)%\diz recorder\is-1p729.tmp в %ProgramFiles(x86)%\diz recorder\loadernonelevator32.exe
%ProgramFiles(x86)%\diz recorder\is-mj3jv.tmp в %ProgramFiles(x86)%\diz recorder\istask.dll
%ProgramFiles(x86)%\diz recorder\is-b2h0i.tmp в %ProgramFiles(x86)%\diz recorder\intelhw.dll
%ProgramFiles(x86)%\diz recorder\is-vo48n.tmp в %ProgramFiles(x86)%\diz recorder\installhelp.dll
%ProgramFiles(x86)%\diz recorder\is-c7hgj.tmp в %ProgramFiles(x86)%\diz recorder\gsdownload.dll
%ProgramFiles(x86)%\diz recorder\is-a9n07.tmp в %ProgramFiles(x86)%\diz recorder\gsarservice.exe
%ProgramFiles(x86)%\diz recorder\is-7jqt7.tmp в %ProgramFiles(x86)%\diz recorder\avutil-52.dll
%ProgramFiles(x86)%\diz recorder\is-jv4sl.tmp в %ProgramFiles(x86)%\diz recorder\avdevice-55.dll
%ProgramFiles(x86)%\diz recorder\is-nnrsn.tmp в %ProgramFiles(x86)%\diz recorder\recwin7.dll
%ProgramFiles(x86)%\diz recorder\is-flbcq.tmp в %ProgramFiles(x86)%\diz recorder\rmvbencodesync.dll
%ProgramFiles(x86)%\diz recorder\is-t64qf.tmp в %ProgramFiles(x86)%\diz recorder\screenhook.dll
%ProgramFiles(x86)%\diz recorder\is-bi7h2.tmp в %ProgramFiles(x86)%\diz recorder\servicectrl.dll
%ProgramFiles(x86)%\diz recorder\lang\is-35kq1.tmp в %ProgramFiles(x86)%\diz recorder\lang\russian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-vf1bs.tmp в %ProgramFiles(x86)%\diz recorder\lang\portugues.dat
%ProgramFiles(x86)%\diz recorder\lang\is-efie9.tmp в %ProgramFiles(x86)%\diz recorder\lang\frence.dat
%ProgramFiles(x86)%\diz recorder\lang\is-48ffq.tmp в %ProgramFiles(x86)%\diz recorder\lang\italian.dat
%ProgramFiles(x86)%\diz recorder\lang\is-5iidp.tmp в %ProgramFiles(x86)%\diz recorder\lang\english.dat
%ProgramFiles(x86)%\diz recorder\lang\is-aj2od.tmp в %ProgramFiles(x86)%\diz recorder\lang\chinese(traditional).dat
%ProgramFiles(x86)%\diz recorder\lang\is-7hbdd.tmp в %ProgramFiles(x86)%\diz recorder\lang\japanese.dat
%ProgramFiles(x86)%\diz recorder\is-5e13e.tmp в %ProgramFiles(x86)%\diz recorder\notips.mp3
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-prnvt.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcr90.dll
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-puiu5.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcp90.dll
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-u1s5k.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\is-8ti9r.tmp в %ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\is-l9f61.tmp в %ProgramFiles(x86)%\diz recorder\xvidcore.dll
%ProgramFiles(x86)%\diz recorder\is-tq1j5.tmp в %ProgramFiles(x86)%\diz recorder\wmadecode.dll
%ProgramFiles(x86)%\diz recorder\is-ccr2l.tmp в %ProgramFiles(x86)%\diz recorder\webrtc.dll
%ProgramFiles(x86)%\diz recorder\is-f8bsp.tmp в %ProgramFiles(x86)%\diz recorder\waverec.dll
%ProgramFiles(x86)%\diz recorder\is-a7l42.tmp в %ProgramFiles(x86)%\diz recorder\wait.gif
%ProgramFiles(x86)%\diz recorder\is-26c9p.tmp в %ProgramFiles(x86)%\diz recorder\verify.dll
%ProgramFiles(x86)%\diz recorder\is-nd2uv.tmp в %ProgramFiles(x86)%\diz recorder\ve64.dll
%ProgramFiles(x86)%\diz recorder\is-m8q4l.tmp в %ProgramFiles(x86)%\diz recorder\ve32.dll
%ProgramFiles(x86)%\diz recorder\is-fet28.tmp в %ProgramFiles(x86)%\diz recorder\swscale-2.dll
%ProgramFiles(x86)%\diz recorder\is-31et7.tmp в %ProgramFiles(x86)%\diz recorder\swresample-0.dll
%ProgramFiles(x86)%\diz recorder\lang\is-6na41.tmp в %ProgramFiles(x86)%\diz recorder\lang\spanish.dat
%ProgramFiles(x86)%\diz recorder\is-d10io.tmp в %ProgramFiles(x86)%\diz recorder\dizrecorder.exe

Подменяет следующие файлы

%ProgramFiles(x86)%\diz recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\diz recorder\msvcm90.dll
%ProgramFiles(x86)%\diz recorder\wait.gif

Сетевая активность

Подключается к

'mi####njobs.works':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######

Запросы HTTP POST

http://mi####njobs.works/new/net_api

UDP

DNS ASK mi####njobs.works

Другое

Ищет следующие окна

ClassName: 'rd4251_diz10245Class_rd4251' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\is-p01n3.tmp\<Имя файла>.tmp' /SL5="$E0160,6961322,319488,<Полный путь к файлу>"
'%ProgramFiles(x86)%\diz recorder\dizrecorder.exe'
'%ProgramFiles(x86)%\diz recorder\dizrecorder.exe' db6d67e4cd1e9f6e8a160ea6f241490e

Запускает на исполнение

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "DIZREC1024-5"
'%WINDIR%\syswow64\schtasks.exe' /Query

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней