Trojan.Siggen28.58108

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[HKLM\System\CurrentControlSet\Services\PassThru Service] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\PassThru Service] 'ImagePath' = '%ProgramFiles(x86)%\HTC\Internet Pass-Through\PassThruSvr.exe'
[HKLM\System\CurrentControlSet\Services\htcnprot] 'ImagePath' = 'system32\DRIVERS\htcnprot.sys'

Создает следующие сервисы

'PassThru Service' %ProgramFiles(x86)%\HTC\Internet Pass-Through\PassThruSvr.exe
'htcnprot' system32\DRIVERS\htcnprot.sys

Изменения в файловой системе

Создает следующие файлы

%TEMP%\_isf1d.tmp
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\wdfcoinstaller01007.dll
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\htcrndis.inf
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\htcrndis.cat
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\htcusbnet.inf
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\htcusbnet.sys
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\htcusbnet.cat
%ProgramFiles(x86)%\htc\internet pass-through\passthrusvr.exe
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\htcnprot.cat
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\htcnprot.inf
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\_isres.dll
%ProgramFiles(x86)%\htc\internet pass-through\htcnat.exe
%TEMP%\_isb56f.tmp
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\setup.inx
%TEMP%\_isb60c.tmp
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\isrt.dll
%TEMP%\_isb64c.tmp
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\isconfig.ini
%TEMP%\_isb65c.tmp
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\androidusb.sys
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\htcnprot.sys
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\androidusb.inf
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\_isres.dll
%WINDIR%\installer\e80a5.mst
%TEMP%\_is8ea8.tmp
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\setup.inx
%TEMP%\_is8f73.tmp
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\isrt.dll
%TEMP%\_is8fb3.tmp
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\isconfig.ini
%TEMP%\_is8fd3.tmp
%TEMP%\_is9012.tmp
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\wpdmtphw.cat
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\string1033.txt
%TEMP%\_is9033.tmp
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\isbew64.exe
%TEMP%\ddinstaller.log
%WINDIR%\inf\oem0.pnf
%WINDIR%\inf\oem1.pnf
%ProgramFiles(x86)%\spirent communications\uts device drivers\htc_upst_spcs_hero200.dll
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\wpdmtphw.inf
%ProgramFiles(x86)%\htc\htc driver\driver files\win7_x64\androidusb.cat
%WINDIR%\installer\{6d6664a9-3342-4948-9b7e-034efe366f0f}\arpproducticon.exe
<DRIVERSTORE>\filerepository\htcusbnet.inf_amd64_neutral_95ce0b785d0d7234\htcusbnet.pnf
%TEMP%\_isb729.tmp
<DRIVERSTORE>\filerepository\htcrndis.inf_amd64_neutral_9fa85068cbf3dd70\htcrndis.pnf
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem4.cat
%WINDIR%\installer\{6d6664a9-3342-4948-9b7e-034efe366f0f}\1033.mst
%TEMP%\_is38d7.tmp
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\setup.inx
%TEMP%\_is39f1.tmp
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\isrt.dll
%TEMP%\_is3aeb.tmp
%TEMP%\_is3b69.tmp
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\string1033.txt
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\_isres.dll
%TEMP%\_is3bf7.tmp
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\string1033.txt
%TEMP%\_is3c94.tmp
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\isbew64.exe
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\set3d57.tmp
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\set3e61.tmp
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\set3f3c.tmp
%WINDIR%\temp\udd1b9b.tmp
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\isbew64.exe
<DRIVERS>\set168c.tmp
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\setedcb.tmp
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\isbew64.exe
%WINDIR%\dpinst.log
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\setc6b8.tmp
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\setc7c2.tmp
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\setc8cc.tmp
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\setc9a8.tmp
<DRIVERSTORE>\filerepository\androidusb.inf_amd64_neutral_c9b3909eee474f50\androidusb.pnf
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
%TEMP%\_isb6da.tmp
%TEMP%\{705f50a7-a468-1765-705f-937a9e42de00}\set14bf.tmp
%WINDIR%\installer\{6d6664a9-3342-4948-9b7e-034efe366f0f}\uninst_uninstall_h_8ad6f64309cf42c693274cb5a3d89801.exe
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\setef14.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\htc\htc driver\uninstall htc driver.lnk
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\setf03d.tmp
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
<DRIVERSTORE>\filerepository\htcnprot.inf_amd64_neutral_ebc4484c2064acc9\htcnprot.pnf
<SYSTEM32>\catroot\tmpcfd.tmp
%WINDIR%\inf\oem3.pnf
%TEMP%\{705f50a7-a468-1765-705f-937a9e42de00}\set15c9.tmp
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\isconfig.ini
%TEMP%\_is7775.tmp
%TEMP%\msi7031.tmp
%TEMP%\_is1243.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x041d.ini
%TEMP%\_is1254.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0405.ini
%TEMP%\_is1264.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0406.ini
%TEMP%\_is1265.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0408.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0414.ini
%TEMP%\_is1317.tmp
%TEMP%\_is12b5.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0816.ini
%TEMP%\_is12c6.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0413.ini
%TEMP%\_is12e6.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0416.ini
%TEMP%\_is12e7.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0418.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x040a.ini
%TEMP%\_is1286.tmp
%TEMP%\_is1213.tmp
%TEMP%\_is1068.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\setup.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\_ismsidel.ini
%TEMP%\_isf2d.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0409.ini
%TEMP%\_isf4d.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0804.ini
%TEMP%\_isfac.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0404.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0407.ini
%TEMP%\_is11c4.tmp
%TEMP%\_is10b7.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x040c.ini
%TEMP%\_is10e7.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0410.ini
%TEMP%\_is1136.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0411.ini
%TEMP%\_is1175.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0415.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0419.ini
%TEMP%\~1510.tmp
%TEMP%\_is76f7.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0401.ini
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\ddinstaller.exe
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\devcon_x86.exe
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\androidusb.cat
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\androidusb.sys
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\androidusb.inf
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\dpinst_x64.exe
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\devcon_x64.exe
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\ddinstaller.dll
%TEMP%\msi710c.tmp
%TEMP%\_is1337.tmp
%TEMP%\_is74a2.tmp
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\setup.inx
%TEMP%\_is756e.tmp
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\isrt.dll
%TEMP%\_is763a.tmp
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\isconfig.ini
%TEMP%\_is766a.tmp
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\_isres.dll
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\dpinst_x86.exe
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\string1033.txt
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcandroidusbclean.exe
%TEMP%\_is1511.tmp
%TEMP%\_is1367.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0809.ini
%TEMP%\_is1387.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x040b.ini
%TEMP%\_is13a7.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x041e.ini
%TEMP%\_is13c8.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0412.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x041f.ini
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\wdfcoinstaller01007.dll
%TEMP%\_is1531.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\1033.mst
%TEMP%\_is167a.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\htcdriver.msi
%TEMP%\_htc_installer.log
%TEMP%\msi498d.tmp
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcrndis.inf
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcrndis.cat
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcandroidusbclean_x64.exe
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem5.cat

Присваивает атрибут 'скрытый' для следующих файлов

<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem2.cat
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem4.cat
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem5.cat

Удаляет следующие файлы

%TEMP%\_isf1d.tmp
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\isconfig.ini
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\string1033.txt
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\_isres.dll
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\setup.inx
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\htcusbnet.cat
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\htcusbnet.inf
%WINDIR%\installer\e80a5.mst
%TEMP%\{705f50a7-a468-1765-705f-937a9e42de00}\htcrndis.cat
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\androidusb.cat
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\androidusb.inf
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\androidusb.sys
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\ddinstaller.dll
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\ddinstaller.exe
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\devcon_x64.exe
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\isrt.dll
%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\isbew64.exe
%TEMP%\_is3c94.tmp
%TEMP%\_is3bf7.tmp
%TEMP%\_is3b69.tmp
%TEMP%\_is3aeb.tmp
%TEMP%\_is39f1.tmp
%TEMP%\_is38d7.tmp
%TEMP%\{705f50a7-a468-1765-705f-937a9e42de00}\htcrndis.inf
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\htcusbnet.sys
%WINDIR%\temp\udd1b9b.tmp
<SYSTEM32>\catroot\tmpcfd.tmp
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\htcnprot.sys
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\htcnprot.inf
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\htcnprot.cat
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\setup.inx
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\_isres.dll
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\devcon_x86.exe
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0406.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\setup.ini
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcandroidusbclean.exe
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0413.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0414.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0415.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0416.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0418.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0419.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x041e.ini
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\dpinst_x64.exe
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x041f.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0804.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0809.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0816.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\1033.mst
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\htcdriver.msi
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0412.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0411.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0410.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x040c.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x040b.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x040a.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0409.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0408.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0407.ini
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\string1033.txt
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0405.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0404.ini
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x0401.ini
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\wdfcoinstaller01007.dll
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcrndis.inf
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcrndis.cat
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcandroidusbclean_x64.exe
%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\dpinst_x86.exe
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\0x041d.ini
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\isconfig.ini
%TEMP%\_isb64c.tmp
%TEMP%\_is12e6.tmp
%TEMP%\_is12e7.tmp
%TEMP%\_is1317.tmp
%TEMP%\_is1337.tmp
%TEMP%\_is1367.tmp
%TEMP%\_is1387.tmp
%TEMP%\_is13c8.tmp
%TEMP%\_is1175.tmp
%TEMP%\_is1511.tmp
%TEMP%\~1510.tmp
%TEMP%\_is1531.tmp
%TEMP%\_is167a.tmp
%TEMP%\msi498d.tmp
%TEMP%\msi7031.tmp
%TEMP%\_is12c6.tmp
%TEMP%\_is12b5.tmp
%TEMP%\_is1286.tmp
%TEMP%\_is1265.tmp
%TEMP%\_is1264.tmp
%TEMP%\_is1254.tmp
%TEMP%\_is1243.tmp
%TEMP%\_is1213.tmp
%TEMP%\_is11c4.tmp
%TEMP%\_is13a7.tmp
%TEMP%\_is1136.tmp
%TEMP%\_is10e7.tmp
%TEMP%\_is10b7.tmp
%TEMP%\_is1068.tmp
%TEMP%\_isfac.tmp
%TEMP%\_isf4d.tmp
%TEMP%\_isf2d.tmp
%TEMP%\_is74a2.tmp
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\setup.inx
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\isbew64.exe
%TEMP%\_is766a.tmp
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\isconfig.ini
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\string1033.txt
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\_isres.dll
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\setup.inx
%TEMP%\_isb56f.tmp
%TEMP%\_isb60c.tmp
%TEMP%\_isb65c.tmp
%TEMP%\_is756e.tmp
%TEMP%\_isb6da.tmp
%TEMP%\_isb729.tmp
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\androidusb.cat
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\androidusb.inf
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\androidusb.sys
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\wdfcoinstaller01007.dll
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\isrt.dll
%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\isbew64.exe
%TEMP%\_is9033.tmp
%TEMP%\_is9012.tmp
%TEMP%\_is8fd3.tmp
%TEMP%\_is8fb3.tmp
%TEMP%\_is8f73.tmp
%TEMP%\_is8ea8.tmp
%TEMP%\msi710c.tmp
%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\isrt.dll
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\_isres.dll
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\string1033.txt
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\isconfig.ini
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\isrt.dll
%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\isbew64.exe
%TEMP%\_is7775.tmp
%TEMP%\_is76f7.tmp
%TEMP%\_is763a.tmp
%TEMP%\{3bc6d629-f7cc-481f-83db-832b3d8f58e5}\_ismsidel.ini

Перемещает следующие файлы

%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\setc6b8.tmp в %TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\wdfcoinstaller01007.dll
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\setc7c2.tmp в %TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\androidusb.cat
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\setc8cc.tmp в %TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\androidusb.inf
%TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\setc9a8.tmp в %TEMP%\{2188d0a8-51f8-49b2-4354-607116999b15}\androidusb.sys
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\setedcb.tmp в %TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\htcnprot.cat
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\setef14.tmp в %TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\htcnprot.inf
%TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\setf03d.tmp в %TEMP%\{61a349d2-72d8-1827-fda7-8843c923d12f}\htcnprot.sys
<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat в <SYSTEM32>\catroot\tmpd1d.tmp
%TEMP%\{705f50a7-a468-1765-705f-937a9e42de00}\set14bf.tmp в %TEMP%\{705f50a7-a468-1765-705f-937a9e42de00}\htcrndis.cat
%TEMP%\{705f50a7-a468-1765-705f-937a9e42de00}\set15c9.tmp в %TEMP%\{705f50a7-a468-1765-705f-937a9e42de00}\htcrndis.inf
<DRIVERS>\set168c.tmp в <DRIVERS>\htcnprot.sys
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\set3d57.tmp в %TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\htcusbnet.cat
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\set3e61.tmp в %TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\htcusbnet.inf
%TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\set3f3c.tmp в %TEMP%\{1ca417d7-3431-645e-0337-483faf9ccb32}\htcusbnet.sys

Изменяет следующие файлы

Подменяет следующие файлы

<SYSTEM32>\catroot\{f750e6c3-38ee-11d1-85e5-00c04fc295ee}\oem3.cat

Другое

Ищет следующие окна

ClassName: 'MsiDialogCloseClass' WindowName: ''
ClassName: '#32770' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\{7ea96e69-96a1-4862-b935-773e6e7aadb0}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{E8703931-271B-4E5F-A1A5-14FD05A320C1}
'%TEMP%\{a69f18f9-ed2c-4019-8a37-cfcf1b9f0e1b}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{09CC4D24-51BC-475E-969F-2C38F94934CC}
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcandroidusbclean_x64.exe' androidusb SYSTEM\CurrentControlSet\Services\androidusb
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\ddinstaller.exe' /u
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\devcon_x64.exe' remove USB\VID_0BB4&PID_0***&MI_01
'%TEMP%\{c6b4282d-b38e-4887-8970-d6937b85136b}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{79AE816A-B604-44FD-9D68-2A5959199499}
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\dpinst_x64.exe' /LM /SA /SW /A /PATH "%ProgramFiles(x86)%\HTC\HTC Driver\Driver Files\Win7_x64"
'%ProgramFiles(x86)%\htc\internet pass-through\passthrusvr.exe' /install
'%ProgramFiles(x86)%\htc\internet pass-through\passthrusvr.exe' /start
'%ProgramFiles(x86)%\htc\internet pass-through\passthrusvr.exe'
'%WINDIR%\installer\msifd0b.tmp' /Install /p %ProgramFiles(x86)%\HTC\HTC Driver\Driver Files
'%TEMP%\{990754ff-6d80-42db-8e11-4cb69ce950af}\isbew64.exe' {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{48D7EB7C-AFF3-4D47-9553-EDA3012BE69B}
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\devcon_x64.exe' rescan

Запускает на исполнение

'%WINDIR%\syswow64\msiexec.exe' /i "%TEMP%\{3BC6D629-F7CC-481F-83DB-832B3D8F58E5}\HTCDriver.msi" /l*v+ %TEMP%\_HTC_Installer.log TRANSFORMS="%TEMP%\{3BC6D629-F7CC-481F-83DB-832B3D8F58E5}\1033.MST" SETUPEXEDIR="<Текущая директ...
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\htcandroidusbclean_x64.exe' androidusb SYSTEM\CurrentControlSet\Services\androidusb (со скрытым окном)
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\ddinstaller.exe' /u (со скрытым окном)
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\devcon_x64.exe' remove USB\VID_0BB4&PID_0***&MI_01 (со скрытым окном)
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\dpinst_x64.exe' /LM /SA /SW /A /PATH "%ProgramFiles(x86)%\HTC\HTC Driver\Driver Files\Win7_x64" (со скрытым окном)
'%TEMP%\{6d6664a9-3342-4948-9b7e-034efe366f0f}\devcon_x64.exe' rescan (со скрытым окном)

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней