Trojan.MulDrop28.30338

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[HKLM\System\CurrentControlSet\Services\DB Format Viewer 10.14.46] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\DB Format Viewer 10.14.46] 'ImagePath' = '%ALLUSERSPROFILE%\DB Format Viewer 10.14.46\DB Format Viewer 10.14.46.exe'

Создает следующие сервисы

'DB Format Viewer 10.14.46' %ALLUSERSPROFILE%\DB Format Viewer 10.14.46\DB Format Viewer 10.14.46.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-ci4s0.tmp\is-cfv77.tmp
%LOCALAPPDATA%\glass video converter\is-gi4f2.tmp
%LOCALAPPDATA%\glass video converter\is-a1gg0.tmp
%LOCALAPPDATA%\glass video converter\is-i6hfs.tmp
%LOCALAPPDATA%\glass video converter\is-qrmng.tmp
%LOCALAPPDATA%\glass video converter\is-i1q6s.tmp
%LOCALAPPDATA%\glass video converter\is-7v221.tmp
%LOCALAPPDATA%\glass video converter\is-811h2.tmp
%LOCALAPPDATA%\glass video converter\is-o900e.tmp
%LOCALAPPDATA%\glass video converter\is-2j62k.tmp
%LOCALAPPDATA%\glass video converter\is-afgnq.tmp
%LOCALAPPDATA%\glass video converter\is-hubl2.tmp
%LOCALAPPDATA%\glass video converter\is-49m7h.tmp
%LOCALAPPDATA%\glass video converter\is-9g753.tmp
%LOCALAPPDATA%\glass video converter\is-3vfv5.tmp
%LOCALAPPDATA%\glass video converter\uninstall\unins000.dat
%LOCALAPPDATA%\glass video converter\is-525ou.tmp
%LOCALAPPDATA%\glass video converter\glassvideoconverter.exe
%LOCALAPPDATA%\glass video converter\is-5a90o.tmp
%LOCALAPPDATA%\glass video converter\is-n6lcf.tmp
%TEMP%\is-dfhsc.tmp\_isetup\_regdll.tmp
%TEMP%\is-dfhsc.tmp\_isetup\_setup64.tmp
%TEMP%\is-dfhsc.tmp\_isetup\_shfoldr.dll
%TEMP%\is-dfhsc.tmp\_isetup\_iscrypt.dll
%LOCALAPPDATA%\glass video converter\uninstall\is-q5h6g.tmp
%LOCALAPPDATA%\glass video converter\is-i394c.tmp
%LOCALAPPDATA%\glass video converter\is-uqhi3.tmp
%LOCALAPPDATA%\glass video converter\is-krnfr.tmp
%LOCALAPPDATA%\glass video converter\is-s382v.tmp
%LOCALAPPDATA%\glass video converter\is-in1po.tmp
%LOCALAPPDATA%\glass video converter\is-i0bvv.tmp
%LOCALAPPDATA%\glass video converter\is-nan4a.tmp
%LOCALAPPDATA%\glass video converter\is-fmfk7.tmp
%LOCALAPPDATA%\glass video converter\is-tbm6v.tmp
%LOCALAPPDATA%\glass video converter\is-84rl0.tmp
%LOCALAPPDATA%\glass video converter\is-3smnv.tmp
%ALLUSERSPROFILE%\db format viewer 10.14.46\db format viewer 10.14.46.exe

Перемещает следующие файлы

%LOCALAPPDATA%\glass video converter\uninstall\is-q5h6g.tmp в %LOCALAPPDATA%\glass video converter\uninstall\unins000.exe
%LOCALAPPDATA%\glass video converter\is-49m7h.tmp в %LOCALAPPDATA%\glass video converter\libwinpthread-1.dll
%LOCALAPPDATA%\glass video converter\is-hubl2.tmp в %LOCALAPPDATA%\glass video converter\libtiff-5.dll
%LOCALAPPDATA%\glass video converter\is-afgnq.tmp в %LOCALAPPDATA%\glass video converter\libsigc-2.0-0.dll
%LOCALAPPDATA%\glass video converter\is-2j62k.tmp в %LOCALAPPDATA%\glass video converter\librsvg-2-2.dll
%LOCALAPPDATA%\glass video converter\is-o900e.tmp в %LOCALAPPDATA%\glass video converter\libpng16-16.dll
%LOCALAPPDATA%\glass video converter\is-811h2.tmp в %LOCALAPPDATA%\glass video converter\libpixman-1-0.dll
%LOCALAPPDATA%\glass video converter\is-7v221.tmp в %LOCALAPPDATA%\glass video converter\libpcre-1.dll
%LOCALAPPDATA%\glass video converter\is-i1q6s.tmp в %LOCALAPPDATA%\glass video converter\libpangowin32-1.0-0.dll
%LOCALAPPDATA%\glass video converter\is-qrmng.tmp в %LOCALAPPDATA%\glass video converter\libpangomm-1.4-1.dll
%LOCALAPPDATA%\glass video converter\is-i6hfs.tmp в %LOCALAPPDATA%\glass video converter\libpangoft2-1.0-0.dll
%LOCALAPPDATA%\glass video converter\is-a1gg0.tmp в %LOCALAPPDATA%\glass video converter\libpangocairo-1.0-0.dll
%LOCALAPPDATA%\glass video converter\is-gi4f2.tmp в %LOCALAPPDATA%\glass video converter\libpango-1.0-0.dll
%LOCALAPPDATA%\glass video converter\is-9g753.tmp в %LOCALAPPDATA%\glass video converter\zlib1.dll
%LOCALAPPDATA%\glass video converter\is-525ou.tmp в %LOCALAPPDATA%\glass video converter\liblzma-5.dll
%LOCALAPPDATA%\glass video converter\is-3smnv.tmp в %LOCALAPPDATA%\glass video converter\libjpeg-8.dll
%LOCALAPPDATA%\glass video converter\is-n6lcf.tmp в %LOCALAPPDATA%\glass video converter\libintl-8.dll
%LOCALAPPDATA%\glass video converter\is-84rl0.tmp в %LOCALAPPDATA%\glass video converter\libharfbuzz-0.dll
%LOCALAPPDATA%\glass video converter\is-tbm6v.tmp в %LOCALAPPDATA%\glass video converter\libgraphite2.dll
%LOCALAPPDATA%\glass video converter\is-fmfk7.tmp в %LOCALAPPDATA%\glass video converter\libgomp-1.dll
%LOCALAPPDATA%\glass video converter\is-nan4a.tmp в %LOCALAPPDATA%\glass video converter\libgobject-2.0-0.dll
%LOCALAPPDATA%\glass video converter\is-i0bvv.tmp в %LOCALAPPDATA%\glass video converter\libgmodule-2.0-0.dll
%LOCALAPPDATA%\glass video converter\is-in1po.tmp в %LOCALAPPDATA%\glass video converter\libglibmm-2.4-1.dll
%LOCALAPPDATA%\glass video converter\is-s382v.tmp в %LOCALAPPDATA%\glass video converter\libgdk_pixbuf-2.0-0.dll
%LOCALAPPDATA%\glass video converter\is-krnfr.tmp в %LOCALAPPDATA%\glass video converter\libgdkmm-2.4-1.dll
%LOCALAPPDATA%\glass video converter\is-uqhi3.tmp в %LOCALAPPDATA%\glass video converter\libgdk-win32-2.0-0.dll
%LOCALAPPDATA%\glass video converter\is-i394c.tmp в %LOCALAPPDATA%\glass video converter\libgcc_s_dw2-1.dll
%LOCALAPPDATA%\glass video converter\is-5a90o.tmp в %LOCALAPPDATA%\glass video converter\liblcms2-2.dll
%LOCALAPPDATA%\glass video converter\is-3vfv5.tmp в %LOCALAPPDATA%\glass video converter\glassvideoconverter.exe