Trojan.MulDrop28.30235

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[HKLM\System\CurrentControlSet\Services\EXXY Game Terminal 10.11.47] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\EXXY Game Terminal 10.11.47] 'ImagePath' = '%ALLUSERSPROFILE%\EXXY Game Terminal 10.11.47\EXXY Game Terminal 10.11.47.exe'

Создает следующие сервисы

'EXXY Game Terminal 10.11.47' %ALLUSERSPROFILE%\EXXY Game Terminal 10.11.47\EXXY Game Terminal 10.11.47.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-a7o7h.tmp\is-euq6h.tmp
%LOCALAPPDATA%\middle media player\is-0bs2l.tmp
%LOCALAPPDATA%\middle media player\is-31vb9.tmp
%LOCALAPPDATA%\middle media player\is-78vmk.tmp
%LOCALAPPDATA%\middle media player\is-2epgi.tmp
%LOCALAPPDATA%\middle media player\is-m2qog.tmp
%LOCALAPPDATA%\middle media player\is-t89vc.tmp
%LOCALAPPDATA%\middle media player\is-mhau3.tmp
%LOCALAPPDATA%\middle media player\is-l704v.tmp
%LOCALAPPDATA%\middle media player\is-1j49i.tmp
%LOCALAPPDATA%\middle media player\is-up3bq.tmp
%LOCALAPPDATA%\middle media player\is-moqf7.tmp
%LOCALAPPDATA%\middle media player\is-510pj.tmp
%LOCALAPPDATA%\middle media player\is-rr6bm.tmp
%LOCALAPPDATA%\middle media player\is-3q7ta.tmp
%LOCALAPPDATA%\middle media player\uninstall\unins000.dat
%LOCALAPPDATA%\middle media player\is-6p8hj.tmp
%LOCALAPPDATA%\middle media player\middlemediaplayer.exe
%LOCALAPPDATA%\middle media player\is-7tft1.tmp
%LOCALAPPDATA%\middle media player\is-704mc.tmp
%TEMP%\is-01ol2.tmp\_isetup\_regdll.tmp
%TEMP%\is-01ol2.tmp\_isetup\_setup64.tmp
%TEMP%\is-01ol2.tmp\_isetup\_shfoldr.dll
%TEMP%\is-01ol2.tmp\_isetup\_iscrypt.dll
%LOCALAPPDATA%\middle media player\uninstall\is-6fub6.tmp
%LOCALAPPDATA%\middle media player\is-5lba3.tmp
%LOCALAPPDATA%\middle media player\is-116lu.tmp
%LOCALAPPDATA%\middle media player\is-79s7a.tmp
%LOCALAPPDATA%\middle media player\is-0mfdf.tmp
%LOCALAPPDATA%\middle media player\is-cisoh.tmp
%LOCALAPPDATA%\middle media player\is-68ad1.tmp
%LOCALAPPDATA%\middle media player\is-ptd5r.tmp
%LOCALAPPDATA%\middle media player\is-hirt3.tmp
%LOCALAPPDATA%\middle media player\is-2thpj.tmp
%LOCALAPPDATA%\middle media player\is-p04hb.tmp
%LOCALAPPDATA%\middle media player\is-vlpmp.tmp
%ALLUSERSPROFILE%\exxy game terminal 10.11.47\exxy game terminal 10.11.47.exe

Перемещает следующие файлы

%LOCALAPPDATA%\middle media player\uninstall\is-6fub6.tmp в %LOCALAPPDATA%\middle media player\uninstall\unins000.exe
%LOCALAPPDATA%\middle media player\is-510pj.tmp в %LOCALAPPDATA%\middle media player\libwinpthread-1.dll
%LOCALAPPDATA%\middle media player\is-moqf7.tmp в %LOCALAPPDATA%\middle media player\libtiff-5.dll
%LOCALAPPDATA%\middle media player\is-up3bq.tmp в %LOCALAPPDATA%\middle media player\libsigc-2.0-0.dll
%LOCALAPPDATA%\middle media player\is-1j49i.tmp в %LOCALAPPDATA%\middle media player\librsvg-2-2.dll
%LOCALAPPDATA%\middle media player\is-l704v.tmp в %LOCALAPPDATA%\middle media player\libpng16-16.dll
%LOCALAPPDATA%\middle media player\is-mhau3.tmp в %LOCALAPPDATA%\middle media player\libpixman-1-0.dll
%LOCALAPPDATA%\middle media player\is-t89vc.tmp в %LOCALAPPDATA%\middle media player\libpcre-1.dll
%LOCALAPPDATA%\middle media player\is-m2qog.tmp в %LOCALAPPDATA%\middle media player\libpangowin32-1.0-0.dll
%LOCALAPPDATA%\middle media player\is-2epgi.tmp в %LOCALAPPDATA%\middle media player\libpangomm-1.4-1.dll
%LOCALAPPDATA%\middle media player\is-78vmk.tmp в %LOCALAPPDATA%\middle media player\libpangoft2-1.0-0.dll
%LOCALAPPDATA%\middle media player\is-31vb9.tmp в %LOCALAPPDATA%\middle media player\libpangocairo-1.0-0.dll
%LOCALAPPDATA%\middle media player\is-0bs2l.tmp в %LOCALAPPDATA%\middle media player\libpango-1.0-0.dll
%LOCALAPPDATA%\middle media player\is-rr6bm.tmp в %LOCALAPPDATA%\middle media player\zlib1.dll
%LOCALAPPDATA%\middle media player\is-6p8hj.tmp в %LOCALAPPDATA%\middle media player\liblzma-5.dll
%LOCALAPPDATA%\middle media player\is-vlpmp.tmp в %LOCALAPPDATA%\middle media player\libjpeg-8.dll
%LOCALAPPDATA%\middle media player\is-704mc.tmp в %LOCALAPPDATA%\middle media player\libintl-8.dll
%LOCALAPPDATA%\middle media player\is-p04hb.tmp в %LOCALAPPDATA%\middle media player\libharfbuzz-0.dll
%LOCALAPPDATA%\middle media player\is-2thpj.tmp в %LOCALAPPDATA%\middle media player\libgraphite2.dll
%LOCALAPPDATA%\middle media player\is-hirt3.tmp в %LOCALAPPDATA%\middle media player\libgomp-1.dll
%LOCALAPPDATA%\middle media player\is-ptd5r.tmp в %LOCALAPPDATA%\middle media player\libgobject-2.0-0.dll
%LOCALAPPDATA%\middle media player\is-68ad1.tmp в %LOCALAPPDATA%\middle media player\libgmodule-2.0-0.dll
%LOCALAPPDATA%\middle media player\is-cisoh.tmp в %LOCALAPPDATA%\middle media player\libglibmm-2.4-1.dll
%LOCALAPPDATA%\middle media player\is-0mfdf.tmp в %LOCALAPPDATA%\middle media player\libgdk_pixbuf-2.0-0.dll
%LOCALAPPDATA%\middle media player\is-79s7a.tmp в %LOCALAPPDATA%\middle media player\libgdkmm-2.4-1.dll
%LOCALAPPDATA%\middle media player\is-116lu.tmp в %LOCALAPPDATA%\middle media player\libgdk-win32-2.0-0.dll
%LOCALAPPDATA%\middle media player\is-5lba3.tmp в %LOCALAPPDATA%\middle media player\libgcc_s_dw2-1.dll
%LOCALAPPDATA%\middle media player\is-7tft1.tmp в %LOCALAPPDATA%\middle media player\liblcms2-2.dll
%LOCALAPPDATA%\middle media player\is-3q7ta.tmp в %LOCALAPPDATA%\middle media player\middlemediaplayer.exe