Trojan.Siggen32.27003

Техническая информация

Для обеспечения автозапуска и распространения

Создает или изменяет следующие файлы

<SYSTEM32>\tasks\c__elso_<Имя файла>.exe

Вредоносные функции

Запускает на исполнение

'%WINDIR%\syswow64\taskkill.exe' /f /im "ashpdu.exe"

Изменения в файловой системе

Создает следующие файлы

%TEMP%\78f78be\ashampoo_driver_updater.msi
%TEMP%\78f78be\ashampoo_driver_updater.x64.msi
%TEMP%\shid6f8.tmp
%TEMP%\msid785.tmp
%TEMP%\msid9a9.tmp
%TEMP%\msida85.tmp
%TEMP%\msidae4.tmp
%TEMP%\msidbbf.tmp
%TEMP%\ashampoo driver updater\ashampoo_driver_updater_2.5.1.exe
%TEMP%\ashampoo driver updater\task-kill batch file.bat
%TEMP%\is-p2cpwway4y.tmp\ashampoo_driver_updater_2.5.1.tmp
%TEMP%\is-4lzbjrwatc.tmp\_isetup\_setup64.tmp
%TEMP%\is-4lzbjrwatc.tmp\webbrowser.dll
%TEMP%\is-4lzbjrwatc.tmp\innocallback.dll
%TEMP%\is-4lzbjrwatc.tmp\setup_05.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_enterkey.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_ok.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_false.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_licensefalse.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_01b_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_02a_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_03_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_04_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_01_finished_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_wait.bmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-3wef97uv53.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-q3qsk4hof2.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-0vk32yddnu.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-7pefe199oc.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-w4zx23lim4.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-8epjiw59k4.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-r5l3xl3d04.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-e3b5lbbnu2.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-b8297ucv5k.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-4ecm81e6xm.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-qyfekghfbr.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-ssy2z89urt.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-70xfu8rcac.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-unqurs5flc.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-wukcbur8lb.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-kx23dzu2vq.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-q6gxd9tdxm.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-oie6q2thbz.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-bvhxcz5l39.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-6vqgpwkzv3.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-95f59ppnei.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-sd2uresdpu.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-o5h53pe4c0.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-1uoa9ffrqe.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-bosbu7sksh.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-k8upx8z8y7.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-grxi2fy0tn.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-mu5hn2wfq5.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-kvt2tshkbb.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-figx9a75mf.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-wexf3116gk.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-adhoc65spx.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-px35zmaupg.tmp
%WINDIR%\fonts\is-5a7709ap4w.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-ltm1xinll5.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-gs0xpwld3x.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-wapff50sg6.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-5nw8niffat.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-e8bxzdanqa.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-4j4znfmpc9.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-sakelod018.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-xmbg7423la.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-snmfpj2f24.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-w99dyjy6iy.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-2rxujmrv3t.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-bazfymuh0i.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-5xcijkzv8u.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-gdxccqjt32.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-utij0yk9g7.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\x86\is-d7s19oo9vr.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\x86\is-w0ul24oc45.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-0gzbwkpaeh.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-vi4c6g73qr.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-civpn5ifdj.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-vaivsu3188.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-8ns3k2scl9.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-2kthnx2ybd.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-ugpeikxg9f.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-38n1y1eylh.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-8c9k7rdxr9.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-2vg4ufg63n.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-zn2fkxnnb9.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ppgklarso2.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ngw48jgku0.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-nhalgb2pyr.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-p3w3o8y3tt.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-t1rw1lm2gj.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-hqbh0o7mgv.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-yzfbhhcdsi.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-hduhy0dt5h.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-aruo9tlr1f.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-rxw22zgpsu.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-743d9ezhoq.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-kpkq49j8hk.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ty9tmr9r57.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-i8trqmthmp.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-6mi75kdak2.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ht5lzvo766.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-5pr12xgw8g.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-8pyazh4jic.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-9ajxce8y9k.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-184w2y0957.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-3hiwi4g2qy.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-8mtixj9ero.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ex55wx8qzz.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-kodp11hu9r.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-7los05bvjt.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-arn03wgkc0.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-yygpjvmfg5.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-5cu01d5b71.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-jy185ea0y3.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-qjussvnkix.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-dvf2vch3km.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-icwk8dgg5d.tmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-pruudv0wbl.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\ashampoo\ashampoo driver updater\ashampoo driver updater.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\ashampoo\ashampoo driver updater\uninstall ashampoo driver updater.lnk
C:\users\public\desktop\ashampoo driver updater.lnk
%ProgramFiles%\ashampoo\ashampoo driver updater\unins000.msg
%ProgramFiles%\ashampoo\ashampoo driver updater\unins000.dat
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\appxprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\assocprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\cbsprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\dismcore.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\dismcoreps.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\dismhost.exe
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\dismprov.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\dmiprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\appxprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\assocprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\cbsprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\dismcore.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\dismprov.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\dmiprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\ffuprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\folderprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\genericprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\ibsprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\imagingprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\intlprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\logprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\msiprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\offlinesetupprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\osprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\provprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\setupplatformprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\smiprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\sysprepprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\transmogprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\unattendprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\vhdprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\en-us\wimprovider.dll.mui
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\ffuprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\folderprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\genericprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\ibsprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\imagingprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\intlprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\logprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\msiprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\offlinesetupprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\osprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\provprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\setupplatformprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\smiprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\sysprepprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\transmogprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\unattendprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\vhdprovider.dll
%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\wimprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\appxprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\assocprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\cbsprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\dismcore.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\dismcoreps.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\dismhost.exe
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\dismprov.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\dmiprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\appxprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\assocprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\cbsprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\dismcore.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\dismprov.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\dmiprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\ffuprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\folderprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\genericprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\ibsprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\imagingprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\intlprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\logprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\msiprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\offlinesetupprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\osprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\provprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\setupplatformprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\smiprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\sysprepprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\transmogprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\unattendprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\vhdprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\en-us\wimprovider.dll.mui
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\ffuprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\folderprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\genericprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\ibsprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\imagingprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\intlprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\logprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\msiprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\offlinesetupprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\osprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\provprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\setupplatformprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\smiprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\sysprepprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\transmogprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\unattendprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\vhdprovider.dll
%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\wimprovider.dll
%TEMP%\msi714a.tmp
%TEMP%\78f78be\ashpdu.exe
%WINDIR%\temp\~dfaeca871b94a4ccf7.tmp
%WINDIR%\installer\sourcehash{57a72e31-cd7a-4b75-80d1-377e478f78be}
%WINDIR%\temp\~df79887ac5a5be280b.tmp
%WINDIR%\temp\~dfedd8bfaa32eadc8b.tmp
%WINDIR%\temp\~dfc88e137303561fd9.tmp
%WINDIR%\temp\~dfc673cf5b10a8221a.tmp
%WINDIR%\temp\~df843314599d0b865a.tmp
%WINDIR%\temp\~df076a24c79893fc75.tmp
%WINDIR%\temp\~dfb642b96e012579ac.tmp
%WINDIR%\systemtemp\scr821d.ps1
%WINDIR%\systemtemp\pss822f.ps1
%WINDIR%\temp\~df32b71dc504e000fa.tmp
%WINDIR%\temp\~df63a71b2fe843b409.tmp
%WINDIR%\temp\~dfb3986c7344a053c6.tmp
%WINDIR%\temp\~df7d95e25821b4c881.tmp

Удаляет файлы, которые сам же создал

%TEMP%\shid6f8.tmp
%TEMP%\msid785.tmp
%TEMP%\msid9a9.tmp
%TEMP%\msida85.tmp
%TEMP%\msidae4.tmp
%TEMP%\msidbbf.tmp
<SYSTEM32>\tasks\c__elso_<Имя файла>.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\readme_en_us.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_de.chm
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_en.chm
%TEMP%\is-4lzbjrwatc.tmp\innocallback.dll
%TEMP%\is-4lzbjrwatc.tmp\setup_01b_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_01_finished_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_02a_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_03_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_04_bg.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_05.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_enterkey.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_false.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_licensefalse.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_ok.bmp
%TEMP%\is-4lzbjrwatc.tmp\setup_wait.bmp
%TEMP%\is-4lzbjrwatc.tmp\webbrowser.dll
%TEMP%\is-4lzbjrwatc.tmp\_isetup\_setup64.tmp
%TEMP%\is-p2cpwway4y.tmp\ashampoo_driver_updater_2.5.1.tmp
%TEMP%\msi714a.tmp
%WINDIR%\systemtemp\pss822f.ps1
%WINDIR%\systemtemp\scr821d.ps1
%TEMP%\ashampoo driver updater\ashampoo_driver_updater_2.5.1.exe
%TEMP%\ashampoo driver updater\task-kill batch file.bat
%TEMP%\78f78be\ashampoo_driver_updater.msi
%TEMP%\78f78be\ashpdu.exe

Перемещает следующие файлы

%ProgramFiles%\ashampoo\ashampoo driver updater\is-3wef97uv53.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\unins000.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\is-q3qsk4hof2.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_en_us.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-0vk32yddnu.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_de_de.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-8epjiw59k4.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_da_dk.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-r5l3xl3d04.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_el_gr.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-e3b5lbbnu2.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_es_es.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-b8297ucv5k.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_fr_fr.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-4ecm81e6xm.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_hu_hu.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-qyfekghfbr.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_it_it.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-ssy2z89urt.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_ja_jp.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-unqurs5flc.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_nl_nl.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-wukcbur8lb.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_no_no.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-kx23dzu2vq.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_pl_pl.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-q6gxd9tdxm.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_pt_br.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-oie6q2thbz.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_pt_pt.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-6vqgpwkzv3.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_ru_ru.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-sd2uresdpu.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_sv_se.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-o5h53pe4c0.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_tr_tr.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-bosbu7sksh.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_zh_cn.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-k8upx8z8y7.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\readme_zh_tw.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\is-grxi2fy0tn.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\newtonsoft.json.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-mu5hn2wfq5.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\sysresasync.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\is-kvt2tshkbb.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\sysresasync.exe.config
%ProgramFiles%\ashampoo\ashampoo driver updater\is-figx9a75mf.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\ashpdu.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\is-wexf3116gk.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\ashpdu.exe.config
%ProgramFiles%\ashampoo\ashampoo driver updater\is-adhoc65spx.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\ashduresource.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-px35zmaupg.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\application_icon.png
%WINDIR%\fonts\is-5a7709ap4w.tmp в %WINDIR%\fonts\ashpdufont.ttf
%ProgramFiles%\ashampoo\ashampoo driver updater\is-ltm1xinll5.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\ashpdutoastnotifier.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\is-gs0xpwld3x.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\delimon.win32.io.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-wapff50sg6.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\htmlrenderer.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-5nw8niffat.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\htmlrenderer.winforms.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-e8bxzdanqa.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\interop.iwshruntimelibrary.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-4j4znfmpc9.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\interop.wuapilib.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-sakelod018.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\microsoft.win32.taskscheduler.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-xmbg7423la.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\microsoft.windowsapicodepack.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-snmfpj2f24.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\microsoft.windowsapicodepack.shell.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-w99dyjy6iy.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\system.data.sqlite.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-2rxujmrv3t.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\system.servicemodel.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-bazfymuh0i.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\tafactory.iconpack.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-5xcijkzv8u.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\taskscheduler.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\is-gdxccqjt32.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\top_logo.bmp
%ProgramFiles%\ashampoo\ashampoo driver updater\is-utij0yk9g7.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\windows.winmd
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\x86\is-d7s19oo9vr.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\x86\7z.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\x86\is-w0ul24oc45.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\x86\7z.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-0gzbwkpaeh.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\7z.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-vi4c6g73qr.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\7z.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-civpn5ifdj.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\difxapi.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-vaivsu3188.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\difxapi64.dll
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-8ns3k2scl9.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\dpinst32.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-2kthnx2ybd.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\dpinst64.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-ugpeikxg9f.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\ashdevicepath.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\dp\is-38n1y1eylh.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\dp\ashfilevalidator.exe
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-8c9k7rdxr9.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_de.chm
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-2vg4ufg63n.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_en.chm
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-zn2fkxnnb9.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_ar-sa.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ppgklarso2.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_ca-es.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ngw48jgku0.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_cs-cz.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-nhalgb2pyr.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_da-dk.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-p3w3o8y3tt.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_de-de.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-hqbh0o7mgv.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_de.chw
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-yzfbhhcdsi.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_el-gr.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-hduhy0dt5h.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_en-us.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-rxw22zgpsu.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_es-es.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-743d9ezhoq.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_fr-fr.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-kpkq49j8hk.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_hu-hu.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ty9tmr9r57.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_it-it.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-i8trqmthmp.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_ja-jp.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-6mi75kdak2.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_ko-kr.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ht5lzvo766.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_nl-nl.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-5pr12xgw8g.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_no-no.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-8pyazh4jic.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_pl-pl.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-9ajxce8y9k.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_pl.chm
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-184w2y0957.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_pt-br.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-3hiwi4g2qy.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_pt_pt.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-8mtixj9ero.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_ro-ro.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-ex55wx8qzz.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_ru-ru.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-kodp11hu9r.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_sl-si.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-7los05bvjt.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_sv-se.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-arn03wgkc0.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_tr-tr.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-yygpjvmfg5.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_uk-ua.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-5cu01d5b71.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_zh-cn.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-jy185ea0y3.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_zh-tw.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\is-qjussvnkix.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\langs\english_iss.ini
%ProgramFiles%\ashampoo\ashampoo driver updater\is-dvf2vch3km.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\license-de.txt
%ProgramFiles%\ashampoo\ashampoo driver updater\is-icwk8dgg5d.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\license-en.txt
%ProgramFiles%\ashampoo\ashampoo driver updater\is-pruudv0wbl.tmp в %ProgramFiles%\ashampoo\ashampoo driver updater\product.xml
%ProgramFiles%\ashampoo\ashampoo driver updater\ashpdu.exe в C:\config.msi\e754f.rbf

Подменяет следующие файлы

%ProgramFiles%\ashampoo\ashampoo driver updater\readme_en_us.htm
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_de.chm
%ProgramFiles%\ashampoo\ashampoo driver updater\langs\du_en.chm
%ProgramFiles%\ashampoo\ashampoo driver updater\ashpdu.exe

Сетевая активность

Подключается к

'et.##hampoo.com':443

TCP

Другие

'et.##hampoo.com':443

UDP

DNS ASK li#####get.ashampoo.com
DNS ASK et.##hampoo.com
DNS ASK lo##r.com

Другое

Ищет следующие окна

ClassName: '' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\ashampoo driver updater\ashampoo_driver_updater_2.5.1.exe' /silent
'%TEMP%\is-p2cpwway4y.tmp\ashampoo_driver_updater_2.5.1.tmp' /SL5="$190176,11205602,1135616,%TEMP%\Ashampoo Driver Updater\ashampoo_driver_updater_2.5.1.exe" /silent
'%TEMP%\8215bd9d-bd67-400c-b527-c49f18194a1b\dismhost.exe' {2ABD6A1B-0D6D-44D0-B70A-02BA53D144A0}
'%TEMP%\8d030244-9e94-478f-98b2-07ff9e059de8\dismhost.exe' {0E622C5A-7BCC-46E4-AE6D-009C0BCF9970}
'%ProgramFiles%\ashampoo\ashampoo driver updater\ashpdu.exe' firstshow
'<SYSTEM32>\windowspowershell\v1.0\powershell.exe' -NoProfile -Noninteractive -ExecutionPolicy Bypass -File "%WINDIR%\SystemTemp\pss822F.ps1" -propFile "%WINDIR%\SystemTemp\msi821C.txt" -scriptFile "%WINDIR%\SystemTemp\scr821D.ps1" -scriptArgsF...

Запускает на исполнение

'<SYSTEM32>\dism.exe' /Online /Get-FeatureInfo /FeatureName:NetFx3 (со скрытым окном)
'<SYSTEM32>\dism.exe' /Online /Enable-Feature /FeatureName:NetFx3 /All /NoRestart (со скрытым окном)
'%WINDIR%\syswow64\cmd.exe' /c ""%TEMP%\Ashampoo Driver Updater\Task-Kill Batch File.bat" /silent"
'%WINDIR%\syswow64\msiexec.exe' /i %TEMP%\78F78BE\Ashampoo_Driver_Updater.x64.msi /qn AI_SETUPEXEPATH=<Полный путь к файлу> SETUPEXEDIR=<Текущая директория>\ EXE_CMD_LINE="/exenoupdates /forcecleanup /wintime 1772242258 " ...
'%WINDIR%\syswow64\taskkill.exe' /f /im "ashpdu.exe" (со скрытым окном)

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней