Trojan.Inject6.18247

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\easybcd\app\easybcd\profiles\boot0
%TEMP%\easybcd\app\easybcd\profiles\detect
%TEMP%\easybcd\app\easybcd\profiles\easyldr2
%TEMP%\easybcd\app\easybcd\profiles\grldr
%TEMP%\easybcd\app\easybcd\license
%TEMP%\easybcd\app\easybcd\profiles\pmbr
%TEMP%\easybcd\app\easybcd\lang\readme.md
%TEMP%\easybcd\app\easybcd\profiles\nst_mac.iso
%TEMP%\easybcd\app\easybcd\profiles\plop.iso
%TEMP%\easybcd\app\easybcd\lang\en-us\aboutbox.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\aboutbox.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\bcdlibrary.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\bcdlibrary.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\defragdialog.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\defragdialog.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\donationdialog.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\donationdialog.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\driveselect.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\driveselect.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\easybcd.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\easybcd.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\languagedialog.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\languagedialog.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\licensedialog.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\licensedialog.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\mainui.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\mainui.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\optionsdialog.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\optionsdialog.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\progressdialog.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\progressdialog.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\properties.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\properties.xml
%TEMP%\easybcd\app\easybcd\lang\en-us\sdimaker.xml
%TEMP%\easybcd\app\easybcd\lang\zh-chs\sdimaker.xml
%TEMP%\easybcd\app\easybcd\profiles\menu.txt
%TEMP%\easybcd\data\settings\easybcd.reg
%TEMP%\easybcd\app\appinfo\launcher\easybcdportable.ini
%TEMP%\easybcd\data\settings\easybcdportablesettings.ini
%TEMP%\easybcd\app\easybcd\profiles\neosmart.bcd
%TEMP%\easybcd\app\easybcd\easybcd.exe.config
%TEMP%\easybcd\data\settings\user.config
%TEMP%\easybcd\app\easybcd\profiles\grldr.mbr
%TEMP%\easybcd\app\easybcd\profiles\nst_mac.mbr
%TEMP%\easybcd\app\appinfo\launcher\custom.nsh
%TEMP%\easybcd\app\appinfo\launcher\source\!launcher\languages.nsh
%TEMP%\easybcd\app\appinfo\launcher\source\!launcher\portableapps.comlauncher.nsi
%TEMP%\easybcd\app\easybcd\bin\bcdboot.exe
%TEMP%\easybcd\app\easybcd\bin\bcdedit.exe
%TEMP%\easybcd\app\easybcd\bin\bootgrabber.exe
%TEMP%\easybcd\app\easybcd\bin\bootsect.exe
%TEMP%\easybcd\app\easybcd\easybcd.exe
%TEMP%\easybcd\easybcdportable.exe
%TEMP%\easybcd\app\easybcd\bin\nettest.exe
%TEMP%\easybcd\app\easybcd\bin\nst downloader.exe
%TEMP%\easybcd\app\easybcd\bin\udefrag.exe
%TEMP%\easybcd\app\easybcd\bin\utfredirect.exe
%TEMP%\easybcd\app\easybcd\neosmart.localization.dll
%TEMP%\easybcd\app\easybcd\newtonsoft.json.dll
%TEMP%\easybcd\app\easybcd\bin\udefrag-kernel.dll
%TEMP%\easybcd\app\easybcd\bin\udefrag.dll
%TEMP%\easybcd\app\easybcd\bin\zenwinx.dll
%TEMP%\nst852a.tmp
%TEMP%\nsj853b.tmp\system.dll
%TEMP%\nsj853b.tmp\uac.dll
%TEMP%\nsj853b.tmp\launcher.ini
%TEMP%\nsj853b.tmp\banner.dll
%TEMP%\easybcd\data\portableapps.comlauncherruntimedata-easybcdportable.ini
%TEMP%\nsj853b.tmp\runtimedata.ini
%TEMP%\nsj853b.tmp\nsisxml.dll
%TEMP%\nsj853b.tmp\registry.dll
%TEMP%\nsj853b.tmp\execdos.dll
%TEMP%\easybcdportabletemp\content\2772-2040-easybcd.exe-00-34-21-775.dump

Перемещает следующие файлы

%TEMP%\easybcd\data\settings\user.config в %LOCALAPPDATA%\neosmart_technologies\easybcd.exe_strongname_ge4xjewlvhidmksvx1etlpptdtrgpnqg\2.3.0.207\user.config

Другое

Создает и запускает на исполнение