Техническая информация
Изменения в файловой системе
Создает следующие файлы
- %TEMP%\nsu58ab.tmp
- %TEMP%\teamviewer\teamviewer_resource_ro.dll
- %TEMP%\teamviewer\teamviewer_resource_ru.dll
- %TEMP%\teamviewer\teamviewer_resource_sk.dll
- %TEMP%\teamviewer\teamviewer_resource_sr.dll
- %TEMP%\teamviewer\teamviewer_resource_sv.dll
- %TEMP%\teamviewer\teamviewer_resource_th.dll
- %TEMP%\teamviewer\teamviewer_resource_tr.dll
- %TEMP%\teamviewer\teamviewer_resource_uk.dll
- %TEMP%\teamviewer\teamviewer_resource_vi.dll
- %TEMP%\teamviewer\teamviewer_resource_zhcn.dll
- %TEMP%\teamviewer\teamviewer_resource_zhtw.dll
- %TEMP%\teamviewer\teamviewer_staticres.dll
- %TEMP%\teamviewer\teamviewer_resource_da.dll
- %TEMP%\teamviewer\tv_w32.dll
- %TEMP%\teamviewer\tvqsfilesx64.7z
- %TEMP%\teamviewer\x64\tvmonitor.cat
- %TEMP%\teamviewer\x64\tvmonitor.inf
- %TEMP%\teamviewer\x64\tvmonitor.sy_
- %TEMP%\teamviewer\tvinfo.ini
- %APPDATA%\teamviewer\teamviewer11_logfile.log
- %WINDIR%\temp\cab88ce.tmp
- %WINDIR%\temp\tar88cf.tmp
- %WINDIR%\temp\cab8a66.tmp
- %WINDIR%\temp\tar8a76.tmp
- %WINDIR%\temp\cab8ac5.tmp
- %WINDIR%\temp\tar8ac6.tmp
- %TEMP%\teamviewer\teamviewer_resource_pl.dll
- %TEMP%\teamviewer\teamviewer_resource_pt.dll
- %TEMP%\teamviewer\teamviewer_resource_no.dll
- %TEMP%\teamviewer\teamviewer_resource_nl.dll
- %TEMP%\teamviewer\teamviewer_resource_lt.dll
- %TEMP%\nsj5909.tmp\system.dll
- %TEMP%\teamviewer\tvqsfiles.7z
- %TEMP%\nsj5909.tmp\nsis7z.dll
- %TEMP%\teamviewer\teamviewer.exe
- %TEMP%\teamviewer\teamviewer_desktop.exe
- %TEMP%\teamviewer\teamviewer_note.exe
- %TEMP%\teamviewer\teamviewer_service.exe
- %TEMP%\teamviewer\tv_w32.exe
- %TEMP%\teamviewer\tv_x64.exe
- %TEMP%\teamviewer\uninstall.exe
- %TEMP%\teamviewer\teamviewer_resource_ar.dll
- %TEMP%\teamviewer\teamviewer_resource_bg.dll
- %WINDIR%\temp\cab8b92.tmp
- %TEMP%\teamviewer\tv_x64.dll
- %TEMP%\teamviewer\teamviewer_resource_cs.dll
- %TEMP%\teamviewer\teamviewer_resource_el.dll
- %TEMP%\teamviewer\teamviewer_resource_en.dll
- %TEMP%\teamviewer\teamviewer_resource_es.dll
- %TEMP%\teamviewer\teamviewer_resource_fi.dll
- %TEMP%\teamviewer\teamviewer_resource_fr.dll
- %TEMP%\teamviewer\teamviewer_resource_he.dll
- %TEMP%\teamviewer\teamviewer_resource_hr.dll
- %TEMP%\teamviewer\teamviewer_resource_hu.dll
- %TEMP%\teamviewer\teamviewer_resource_id.dll
- %TEMP%\teamviewer\teamviewer_resource_it.dll
- %TEMP%\teamviewer\teamviewer_resource_ja.dll
- %TEMP%\teamviewer\teamviewer_resource_ko.dll
- %TEMP%\nsj5909.tmp\tvgetversion.dll
- %TEMP%\teamviewer\teamviewer_resource_de.dll
- %WINDIR%\temp\tar8b93.tmp
Удаляет следующие файлы
- %TEMP%\teamviewer\tvqsfiles.7z
- %TEMP%\teamviewer\tvqsfilesx64.7z
- %TEMP%\nsj5909.tmp\nsis7z.dll
- %TEMP%\nsj5909.tmp\system.dll
- %TEMP%\nsj5909.tmp\tvgetversion.dll
- %WINDIR%\temp\cab88ce.tmp
- %WINDIR%\temp\tar88cf.tmp
- %WINDIR%\temp\cab8a66.tmp
- %WINDIR%\temp\tar8a76.tmp
- %WINDIR%\temp\cab8ac5.tmp
- %WINDIR%\temp\tar8ac6.tmp
- %WINDIR%\temp\cab8b92.tmp
- %WINDIR%\temp\tar8b93.tmp
Изменяет следующие файлы
- %LOCALAPPDATA%\microsoft\windows\usrclass.dat.log1
- %LOCALAPPDATA%\microsoft\windows\usrclass.dat
- C:\system volume information\syscache.hve.log1
- C:\system volume information\syscache.hve
Сетевая активность
Подключается к
- 'pi###.#eamviewer.com':5938
- 'ma#####3.teamviewer.com':5938
- 'fr#########r004.router.teamviewer.com':5938
- 'cl####.teamviewer.com':443
- 'localhost':49193
TCP
Другие
- 'pi###.#eamviewer.com':5938
- 'ma#####3.teamviewer.com':5938
- 'fr#########r004.router.teamviewer.com':5938
- 'localhost':49193
- 'cl####.teamviewer.com':443
UDP
- DNS ASK pi###.#eamviewer.com
- DNS ASK ma#####3.teamviewer.com
- DNS ASK fr#########r004.router.teamviewer.com
- DNS ASK cl####.teamviewer.com
Другое
Ищет следующие окна
- ClassName: '#32770' WindowName: ''
- ClassName: '' WindowName: 'TeamViewer Manager'
Создает и запускает на исполнение
- '%TEMP%\teamviewer\teamviewer.exe'
- '%TEMP%\teamviewer\tv_w32.exe' --action hooks --log %APPDATA%\TeamViewer\TeamViewer11_Logfile.log
- '%TEMP%\teamviewer\tv_x64.exe' --action hooks --log %APPDATA%\TeamViewer\TeamViewer11_Logfile.log
