Trojan.MulDrop28.35741

Техническая информация

Для обеспечения автозапуска и распространения

Устанавливает следующие настройки сервисов

[HKLM\System\CurrentControlSet\Services\DX Video Converter 10.31.47] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\DX Video Converter 10.31.47] 'ImagePath' = '%ALLUSERSPROFILE%\DX Video Converter 10.31.47\DX Video Converter 10.31.47.exe'

Создает следующие сервисы

'DX Video Converter 10.31.47' %ALLUSERSPROFILE%\DX Video Converter 10.31.47\DX Video Converter 10.31.47.exe

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-0gdfb.tmp\<Имя файла>.tmp
%LOCALAPPDATA%\softarts video converter\is-4abd3.tmp
%LOCALAPPDATA%\softarts video converter\is-ghs5n.tmp
%LOCALAPPDATA%\softarts video converter\is-5s8q1.tmp
%LOCALAPPDATA%\softarts video converter\is-f9btp.tmp
%LOCALAPPDATA%\softarts video converter\is-uen7r.tmp
%LOCALAPPDATA%\softarts video converter\is-hs2ef.tmp
%LOCALAPPDATA%\softarts video converter\is-fejet.tmp
%LOCALAPPDATA%\softarts video converter\softartsvc.exe
%LOCALAPPDATA%\softarts video converter\is-5p7ke.tmp
%LOCALAPPDATA%\softarts video converter\is-8pa0c.tmp
%LOCALAPPDATA%\softarts video converter\is-a8hdc.tmp
%LOCALAPPDATA%\softarts video converter\is-eo84h.tmp
%LOCALAPPDATA%\softarts video converter\is-2mq7j.tmp
%LOCALAPPDATA%\softarts video converter\unins000.dat
%LOCALAPPDATA%\softarts video converter\is-7n3je.tmp
%LOCALAPPDATA%\softarts video converter\is-3nvkr.tmp
%LOCALAPPDATA%\softarts video converter\is-ddla5.tmp
%LOCALAPPDATA%\softarts video converter\is-jg24a.tmp
%TEMP%\is-7tahc.tmp\_isetup\_setup64.tmp
%TEMP%\is-7tahc.tmp\_isetup\_shfoldr.dll
%TEMP%\is-7tahc.tmp\_isetup\_iscrypt.dll
%LOCALAPPDATA%\softarts video converter\is-q7kf2.tmp
%LOCALAPPDATA%\softarts video converter\is-tfhco.tmp
%LOCALAPPDATA%\softarts video converter\is-se2ff.tmp
%LOCALAPPDATA%\softarts video converter\is-pnrgp.tmp
%LOCALAPPDATA%\softarts video converter\is-4j53e.tmp
%LOCALAPPDATA%\softarts video converter\is-r0a49.tmp
%LOCALAPPDATA%\softarts video converter\is-4f9g1.tmp
%LOCALAPPDATA%\softarts video converter\is-83tu3.tmp
%LOCALAPPDATA%\softarts video converter\is-un24j.tmp
%LOCALAPPDATA%\softarts video converter\is-7ql6f.tmp
%LOCALAPPDATA%\softarts video converter\is-19im3.tmp
%LOCALAPPDATA%\softarts video converter\is-r542b.tmp
%ALLUSERSPROFILE%\dx video converter 10.31.47\dx video converter 10.31.47.exe

Перемещает следующие файлы

%LOCALAPPDATA%\softarts video converter\is-q7kf2.tmp в %LOCALAPPDATA%\softarts video converter\unins000.exe
%LOCALAPPDATA%\softarts video converter\is-a8hdc.tmp в %LOCALAPPDATA%\softarts video converter\libtiff-5.dll
%LOCALAPPDATA%\softarts video converter\is-8pa0c.tmp в %LOCALAPPDATA%\softarts video converter\libsigc-2.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-5p7ke.tmp в %LOCALAPPDATA%\softarts video converter\librsvg-2-2.dll
%LOCALAPPDATA%\softarts video converter\is-fejet.tmp в %LOCALAPPDATA%\softarts video converter\libpng16-16.dll
%LOCALAPPDATA%\softarts video converter\is-3nvkr.tmp в %LOCALAPPDATA%\softarts video converter\libpixman-1-0.dll
%LOCALAPPDATA%\softarts video converter\is-hs2ef.tmp в %LOCALAPPDATA%\softarts video converter\libpcre-1.dll
%LOCALAPPDATA%\softarts video converter\is-uen7r.tmp в %LOCALAPPDATA%\softarts video converter\libpangowin32-1.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-f9btp.tmp в %LOCALAPPDATA%\softarts video converter\libpangomm-1.4-1.dll
%LOCALAPPDATA%\softarts video converter\is-5s8q1.tmp в %LOCALAPPDATA%\softarts video converter\libpangoft2-1.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-ghs5n.tmp в %LOCALAPPDATA%\softarts video converter\libpangocairo-1.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-4abd3.tmp в %LOCALAPPDATA%\softarts video converter\libpango-1.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-7n3je.tmp в %LOCALAPPDATA%\softarts video converter\liblzma-5.dll
%LOCALAPPDATA%\softarts video converter\is-ddla5.tmp в %LOCALAPPDATA%\softarts video converter\liblcms2-2.dll
%LOCALAPPDATA%\softarts video converter\is-r542b.tmp в %LOCALAPPDATA%\softarts video converter\libjpeg-8.dll
%LOCALAPPDATA%\softarts video converter\is-4j53e.tmp в %LOCALAPPDATA%\softarts video converter\libintl-8.dll
%LOCALAPPDATA%\softarts video converter\is-19im3.tmp в %LOCALAPPDATA%\softarts video converter\libharfbuzz-0.dll
%LOCALAPPDATA%\softarts video converter\is-7ql6f.tmp в %LOCALAPPDATA%\softarts video converter\libgraphite2.dll
%LOCALAPPDATA%\softarts video converter\is-un24j.tmp в %LOCALAPPDATA%\softarts video converter\libgomp-1.dll
%LOCALAPPDATA%\softarts video converter\is-83tu3.tmp в %LOCALAPPDATA%\softarts video converter\libgobject-2.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-4f9g1.tmp в %LOCALAPPDATA%\softarts video converter\libgmodule-2.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-r0a49.tmp в %LOCALAPPDATA%\softarts video converter\libglibmm-2.4-1.dll
%LOCALAPPDATA%\softarts video converter\is-pnrgp.tmp в %LOCALAPPDATA%\softarts video converter\libgdk_pixbuf-2.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-jg24a.tmp в %LOCALAPPDATA%\softarts video converter\libgdkmm-2.4-1.dll
%LOCALAPPDATA%\softarts video converter\is-se2ff.tmp в %LOCALAPPDATA%\softarts video converter\libgdk-win32-2.0-0.dll
%LOCALAPPDATA%\softarts video converter\is-tfhco.tmp в %LOCALAPPDATA%\softarts video converter\libgcc_s_dw2-1.dll
%LOCALAPPDATA%\softarts video converter\is-eo84h.tmp в %LOCALAPPDATA%\softarts video converter\libwinpthread-1.dll
%LOCALAPPDATA%\softarts video converter\is-2mq7j.tmp в %LOCALAPPDATA%\softarts video converter\softartsvc.exe