Trojan.Siggen32.63493

Техническая информация

Для обеспечения автозапуска и распространения

Модифицирует следующие ключи реестра

[HKLM\Software\Classes\TeraCopy.MD5File\Shell\Open\command] '' = '"%ProgramFiles%\TeraCopy\TeraCopy.exe" "%1"'
[HKLM\Software\Classes\TeraCopy.SFVFile\Shell\Open\command] '' = '"%ProgramFiles%\TeraCopy\TeraCopy.exe" "%1"'
[HKLM\Software\Classes\TeraCopy.SHAFile\Shell\Open\command] '' = '"%ProgramFiles%\TeraCopy\TeraCopy.exe" "%1"'
[HKLM\Software\Classes\TeraCopy\Shell\Open\command] '' = '"%ProgramFiles%\TeraCopy\TeraCopy.exe" "%1"'

Изменения в файловой системе

Создает следующие файлы

%TEMP%\rarsfx0\cybermania.url
%TEMP%\rarsfx0\teracopy4.exe
%TEMP%\is-vier5tqcok.tmp\teracopy4.tmp
%ProgramFiles%\teracopy\is-t609ez8j5z.tmp
%ProgramFiles%\teracopy\is-syvjudicq7.tmp
%ProgramFiles%\teracopy\is-5hzzn0p8mm.tmp
%ProgramFiles%\teracopy\is-71teshhl0n.tmp
%ProgramFiles%\teracopy\is-m619yj9b43.tmp
%ProgramFiles%\teracopy\is-b8dun1bcf1.tmp
%ProgramFiles%\teracopy\is-z0od50w3h0.tmp
%ProgramFiles%\teracopy\is-9ii21u0m4y.tmp
%ProgramFiles%\teracopy\is-qgs7zyo0lw.tmp
%ProgramFiles%\teracopy\is-f834vgiort.tmp
%ProgramFiles%\teracopy\is-uy85gu6a9p.tmp
%ProgramFiles%\teracopy\is-8r27j2pv4t.tmp
%APPDATA%\teracopy\is-srjx1zud49.tmp
%ProgramFiles%\teracopy\is-srf1udo2u0.tmp
%ProgramFiles%\teracopy\is-8s26lmakyr.tmp
%ProgramFiles%\teracopy\is-0r7ybvdivq.tmp
%ProgramFiles%\teracopy\is-9w9z85t5ws.tmp
%ProgramFiles%\teracopy\is-rw5qm2p2gg.tmp
%ProgramFiles%\teracopy\is-650rf9lwcz.tmp
%ProgramFiles%\teracopy\is-ieixm6hprh.tmp
%ProgramFiles%\teracopy\is-6p0mz4neez.tmp
%ProgramFiles%\teracopy\app\defaultdata\is-fuljid1fl9.tmp
%ProgramFiles%\teracopy\app\locale\af\is-738daibc6b.tmp
%ProgramFiles%\teracopy\app\locale\af\is-webvivpcr2.tmp
%ProgramFiles%\teracopy\app\locale\ar\is-hvwzdl03j1.tmp
%ProgramFiles%\teracopy\app\locale\ar\is-xfkqy0ssfp.tmp
%ProgramFiles%\teracopy\app\locale\bg\is-2gqm94n355.tmp
%ProgramFiles%\teracopy\app\locale\bg\is-8njpndyylr.tmp
%ProgramFiles%\teracopy\app\locale\bn\is-bsdx0170e1.tmp
%ProgramFiles%\teracopy\app\locale\bn\is-89kloabf9s.tmp
%ProgramFiles%\teracopy\app\locale\ca\is-r0sqakmsk7.tmp
%ProgramFiles%\teracopy\app\locale\ca\is-vs8bane6fu.tmp
%ProgramFiles%\teracopy\app\locale\cs\is-lwjee3p2mv.tmp
%ProgramFiles%\teracopy\app\locale\cs\is-y9gshy5ks8.tmp
%ProgramFiles%\teracopy\app\locale\da\is-5yg06aeirr.tmp
%ProgramFiles%\teracopy\app\locale\da\is-r6coqpkptx.tmp
%ProgramFiles%\teracopy\app\locale\de\is-2v63uvgyjn.tmp
%ProgramFiles%\teracopy\app\locale\de\is-8uk90d46qe.tmp
%ProgramFiles%\teracopy\app\locale\el\is-u53d548ekk.tmp
%ProgramFiles%\teracopy\app\locale\el\is-8bxves10yi.tmp
%ProgramFiles%\teracopy\app\locale\es-ar\is-vmgi6hm9m8.tmp
%ProgramFiles%\teracopy\app\locale\es-ar\is-r32uemjat1.tmp
%ProgramFiles%\teracopy\app\locale\es-es\is-46ey3t93n9.tmp
%ProgramFiles%\teracopy\app\locale\es-es\is-0pan7w9491.tmp
%ProgramFiles%\teracopy\app\locale\es-mx\is-9nvro488av.tmp
%ProgramFiles%\teracopy\app\locale\es-mx\is-5blt3lsc98.tmp
%ProgramFiles%\teracopy\app\locale\et\is-1460bnq80r.tmp
%ProgramFiles%\teracopy\app\locale\et\is-qdvzh2q0qy.tmp
%ProgramFiles%\teracopy\app\locale\fa\is-padvcoquhd.tmp
%ProgramFiles%\teracopy\app\locale\fa\is-m9u1cvz00x.tmp
%ProgramFiles%\teracopy\app\locale\fi\is-5ewn0e865s.tmp
%ProgramFiles%\teracopy\app\locale\fi\is-7x3uc3of3b.tmp
%ProgramFiles%\teracopy\app\locale\fr\is-mc1jbs9gqi.tmp
%ProgramFiles%\teracopy\app\locale\fr\is-yya4y3cf56.tmp
%ProgramFiles%\teracopy\app\locale\he\is-iizzpyp757.tmp
%ProgramFiles%\teracopy\app\locale\he\is-iv1y1vdo7s.tmp
%ProgramFiles%\teracopy\app\locale\hi\is-5a6z28t41b.tmp
%ProgramFiles%\teracopy\app\locale\hi\is-ft95daysvx.tmp
%ProgramFiles%\teracopy\app\locale\hr\is-nb1w2kpd46.tmp
%ProgramFiles%\teracopy\app\locale\hr\is-uuvnboz7jo.tmp
%ProgramFiles%\teracopy\app\locale\hu\is-u4uzzbq786.tmp
%ProgramFiles%\teracopy\app\locale\hu\is-1ghdx1j4b1.tmp
%ProgramFiles%\teracopy\app\locale\id\is-execqgjj4b.tmp
%ProgramFiles%\teracopy\app\locale\id\is-sldcf8et14.tmp
%ProgramFiles%\teracopy\app\locale\it\is-7nee1y8bpa.tmp
%ProgramFiles%\teracopy\app\locale\it\is-b49htk42se.tmp
%ProgramFiles%\teracopy\app\locale\ja\is-gqnfp2fzt2.tmp
%ProgramFiles%\teracopy\app\locale\ja\is-sn10k9shel.tmp
%ProgramFiles%\teracopy\app\locale\ka\is-1dkzy2286g.tmp
%ProgramFiles%\teracopy\app\locale\ka\is-e6j279d9xm.tmp
%ProgramFiles%\teracopy\app\locale\ko\is-po1hoqh6sx.tmp
%ProgramFiles%\teracopy\app\locale\ko\is-8p6fahpbw9.tmp
%ProgramFiles%\teracopy\app\locale\lt\is-vc9kmmmmht.tmp
%ProgramFiles%\teracopy\app\locale\lt\is-7g08p3m1e9.tmp
%ProgramFiles%\teracopy\app\locale\ms\is-t1esmhfl3g.tmp
%ProgramFiles%\teracopy\app\locale\ms\is-7nwg0cp8mq.tmp
%ProgramFiles%\teracopy\app\locale\nl\is-st66sthoiw.tmp
%ProgramFiles%\teracopy\app\locale\nl\is-fwl4n5gj0r.tmp
%ProgramFiles%\teracopy\app\locale\no\is-lror5acos6.tmp
%ProgramFiles%\teracopy\app\locale\no\is-ntu7c7ce3z.tmp
%ProgramFiles%\teracopy\app\locale\pl\is-jerch0o3fj.tmp
%ProgramFiles%\teracopy\app\locale\pl\is-kve33l4qhp.tmp
%ProgramFiles%\teracopy\app\locale\pt-br\is-j9ivb26b7u.tmp
%ProgramFiles%\teracopy\app\locale\pt-br\is-2mis0d7r4k.tmp
%ProgramFiles%\teracopy\app\locale\pt-pt\is-5x8yof5f5z.tmp
%ProgramFiles%\teracopy\app\locale\pt-pt\is-5xxqnvwr77.tmp
%ProgramFiles%\teracopy\app\locale\ro\is-h3heevx19w.tmp
%ProgramFiles%\teracopy\app\locale\ro\is-1yd2vbgdmy.tmp
%ProgramFiles%\teracopy\app\locale\ru\is-uvcn6cbjx9.tmp
%ProgramFiles%\teracopy\app\locale\ru\is-ym9uwtp3ut.tmp
%ProgramFiles%\teracopy\app\locale\sat\is-n0cqm9mlmn.tmp
%ProgramFiles%\teracopy\app\locale\sat\is-jspmfe6ar8.tmp
%ProgramFiles%\teracopy\app\locale\sk\is-b29mamhgna.tmp
%ProgramFiles%\teracopy\app\locale\sk\is-zd92r06bkv.tmp
%ProgramFiles%\teracopy\app\locale\sl\is-y5vrfxcz32.tmp
%ProgramFiles%\teracopy\app\locale\sl\is-0r4bwtmt7h.tmp
%ProgramFiles%\teracopy\app\locale\sr\is-sep5tc9o2r.tmp
%ProgramFiles%\teracopy\app\locale\sr\is-mvsk1mb3co.tmp
%ProgramFiles%\teracopy\app\locale\sv-se\is-b5w3pzbgsl.tmp
%ProgramFiles%\teracopy\app\locale\sv-se\is-s7v1ktyluu.tmp
%ProgramFiles%\teracopy\app\locale\th\is-ocg6d7n8cy.tmp
%ProgramFiles%\teracopy\app\locale\th\is-he4pgvhny0.tmp
%ProgramFiles%\teracopy\app\locale\tr\is-jllmspgppk.tmp
%ProgramFiles%\teracopy\app\locale\tr\is-ypza5v9m4r.tmp
%ProgramFiles%\teracopy\app\locale\uk\is-gmo2w502e6.tmp
%ProgramFiles%\teracopy\app\locale\uk\is-3c0pda8uxs.tmp
%ProgramFiles%\teracopy\app\locale\vi\is-0j25pnp0w3.tmp
%ProgramFiles%\teracopy\app\locale\vi\is-b2cdvwhzlz.tmp
%ProgramFiles%\teracopy\app\locale\zh-cn\is-sm0q5bklhh.tmp
%ProgramFiles%\teracopy\app\locale\zh-cn\is-k8w0y8yhxp.tmp
%ProgramFiles%\teracopy\app\locale\zh-tw\is-p26evixaeu.tmp
%ProgramFiles%\teracopy\app\locale\zh-tw\is-g2wmsmncgx.tmp
%ProgramFiles%\teracopy\app\sounds\is-ev6b7c92el.tmp
%ProgramFiles%\teracopy\app\sounds\is-pimoggtd9w.tmp
%ProgramFiles%\teracopy\is-me4kr45lec.tmp
%ProgramFiles%\teracopy\is-2worayoknf.tmp
%ProgramFiles%\teracopy\is-hus93z2v10.tmp
%APPDATA%\teracopy\ignore\is-4hfs1gme5o.tmp
%APPDATA%\teracopy\ignore\is-4lka450r6f.tmp
%APPDATA%\teracopy\scripts\is-navpooxh3m.tmp
%APPDATA%\teracopy\scripts\is-4hgxdvcdne.tmp
%APPDATA%\teracopy\scripts\is-a8e21bvgfb.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\teracopy.lnk
%ProgramFiles%\teracopy\unins000.dat
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a4eef48-350.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a4eef4a-740.pma
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000002
%LOCALAPPDATA%\microsoft\edge\user data\default\000002.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\log
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_0
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_2
%LOCALAPPDATA%\microsoft\edge\user data\default\gpucache\data_3
%LOCALAPPDATA%\microsoft\edge\user data\default\cookies-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\cookies
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\log
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\log
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\index
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_0
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_2
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\data_3
%LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\reporting and nel
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000001
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\9e5c59d5a0eec716_0
%TEMP%\8d2d95ed-7a38-4495-b927-ee1ccf8b5b95.tmp
%LOCALAPPDATA%\microsoft\edge\user data\default\code cache\js\index-dir\temp-index
%LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\heavy_ad_intervention_opt_out.db
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000002
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000002.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\previews_opt_out.db
%LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\shortcuts
%LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\network action predictor
%LOCALAPPDATA%\microsoft\edge\user data\last browser
%LOCALAPPDATA%\microsoft\edge\user data\default\preferredapps
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\log
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\log
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\functional data-wal
%LOCALAPPDATA%\microsoft\edge\user data\functional san data-wal
%LOCALAPPDATA%\microsoft\edge\user data\default\cache\f_000002

Удаляет файлы, которые сам же создал

%TEMP%\is-vier5tqcok.tmp\teracopy4.tmp
%LOCALAPPDATA%\microsoft\edge\user data\default\manifest-000001
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a4eef48-350.pma
%LOCALAPPDATA%\microsoft\edge\user data\browsermetrics\browsermetrics-6a4eef4a-740.pma
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\manifest-000001
%TEMP%\edge_bits_1856_553054938\01f25ed6-a822-49f8-87db-59f5a6eed3ac

Перемещает следующие файлы

%ProgramFiles%\teracopy\is-t609ez8j5z.tmp в %ProgramFiles%\teracopy\unins000.exe
%ProgramFiles%\teracopy\is-syvjudicq7.tmp в %ProgramFiles%\teracopy\appxsignature.p7x
%ProgramFiles%\teracopy\is-5hzzn0p8mm.tmp в %ProgramFiles%\teracopy\[content_types].xml
%ProgramFiles%\teracopy\is-71teshhl0n.tmp в %ProgramFiles%\teracopy\appxblockmap.xml
%ProgramFiles%\teracopy\is-m619yj9b43.tmp в %ProgramFiles%\teracopy\appxmanifest.xml
%ProgramFiles%\teracopy\is-b8dun1bcf1.tmp в %ProgramFiles%\teracopy\teracopy.appx
%ProgramFiles%\teracopy\is-z0od50w3h0.tmp в %ProgramFiles%\teracopy\resources.scale-125.pri
%ProgramFiles%\teracopy\is-9ii21u0m4y.tmp в %ProgramFiles%\teracopy\resources.scale-150.pri
%ProgramFiles%\teracopy\is-qgs7zyo0lw.tmp в %ProgramFiles%\teracopy\resources.scale-200.pri
%ProgramFiles%\teracopy\is-f834vgiort.tmp в %ProgramFiles%\teracopy\resources.scale-400.pri
%ProgramFiles%\teracopy\is-uy85gu6a9p.tmp в %ProgramFiles%\teracopy\priconfig.xml
%ProgramFiles%\teracopy\is-8r27j2pv4t.tmp в %ProgramFiles%\teracopy\resources.pri
%APPDATA%\teracopy\is-srjx1zud49.tmp в %APPDATA%\teracopy\options.ini
%ProgramFiles%\teracopy\is-srf1udo2u0.tmp в %ProgramFiles%\teracopy\directory opus.txt
%ProgramFiles%\teracopy\is-8s26lmakyr.tmp в %ProgramFiles%\teracopy\license.txt
%ProgramFiles%\teracopy\is-0r7ybvdivq.tmp в %ProgramFiles%\teracopy\portable.txt
%ProgramFiles%\teracopy\is-9w9z85t5ws.tmp в %ProgramFiles%\teracopy\readme.txt
%ProgramFiles%\teracopy\is-rw5qm2p2gg.tmp в %ProgramFiles%\teracopy\sorttable.js
%ProgramFiles%\teracopy\is-650rf9lwcz.tmp в %ProgramFiles%\teracopy\total commander.txt
%ProgramFiles%\teracopy\is-ieixm6hprh.tmp в %ProgramFiles%\teracopy\whatsnew.txt
%ProgramFiles%\teracopy\is-6p0mz4neez.tmp в %ProgramFiles%\teracopy\xyplorer.txt
%ProgramFiles%\teracopy\app\defaultdata\is-fuljid1fl9.tmp в %ProgramFiles%\teracopy\app\defaultdata\poweroff.cmd
%ProgramFiles%\teracopy\app\locale\af\is-738daibc6b.tmp в %ProgramFiles%\teracopy\app\locale\af\default.mo
%ProgramFiles%\teracopy\app\locale\af\is-webvivpcr2.tmp в %ProgramFiles%\teracopy\app\locale\af\default.po
%ProgramFiles%\teracopy\app\locale\ar\is-hvwzdl03j1.tmp в %ProgramFiles%\teracopy\app\locale\ar\default.mo
%ProgramFiles%\teracopy\app\locale\ar\is-xfkqy0ssfp.tmp в %ProgramFiles%\teracopy\app\locale\ar\default.po
%ProgramFiles%\teracopy\app\locale\bg\is-2gqm94n355.tmp в %ProgramFiles%\teracopy\app\locale\bg\default.mo
%ProgramFiles%\teracopy\app\locale\bg\is-8njpndyylr.tmp в %ProgramFiles%\teracopy\app\locale\bg\default.po
%ProgramFiles%\teracopy\app\locale\bn\is-bsdx0170e1.tmp в %ProgramFiles%\teracopy\app\locale\bn\default.mo
%ProgramFiles%\teracopy\app\locale\bn\is-89kloabf9s.tmp в %ProgramFiles%\teracopy\app\locale\bn\default.po
%ProgramFiles%\teracopy\app\locale\ca\is-r0sqakmsk7.tmp в %ProgramFiles%\teracopy\app\locale\ca\default.mo
%ProgramFiles%\teracopy\app\locale\ca\is-vs8bane6fu.tmp в %ProgramFiles%\teracopy\app\locale\ca\default.po
%ProgramFiles%\teracopy\app\locale\cs\is-lwjee3p2mv.tmp в %ProgramFiles%\teracopy\app\locale\cs\default.mo
%ProgramFiles%\teracopy\app\locale\cs\is-y9gshy5ks8.tmp в %ProgramFiles%\teracopy\app\locale\cs\default.po
%ProgramFiles%\teracopy\app\locale\da\is-5yg06aeirr.tmp в %ProgramFiles%\teracopy\app\locale\da\default.mo
%ProgramFiles%\teracopy\app\locale\da\is-r6coqpkptx.tmp в %ProgramFiles%\teracopy\app\locale\da\default.po
%ProgramFiles%\teracopy\app\locale\de\is-2v63uvgyjn.tmp в %ProgramFiles%\teracopy\app\locale\de\default.mo
%ProgramFiles%\teracopy\app\locale\de\is-8uk90d46qe.tmp в %ProgramFiles%\teracopy\app\locale\de\default.po
%ProgramFiles%\teracopy\app\locale\el\is-u53d548ekk.tmp в %ProgramFiles%\teracopy\app\locale\el\default.mo
%ProgramFiles%\teracopy\app\locale\el\is-8bxves10yi.tmp в %ProgramFiles%\teracopy\app\locale\el\default.po
%ProgramFiles%\teracopy\app\locale\es-ar\is-vmgi6hm9m8.tmp в %ProgramFiles%\teracopy\app\locale\es-ar\default.mo
%ProgramFiles%\teracopy\app\locale\es-ar\is-r32uemjat1.tmp в %ProgramFiles%\teracopy\app\locale\es-ar\default.po
%ProgramFiles%\teracopy\app\locale\es-es\is-46ey3t93n9.tmp в %ProgramFiles%\teracopy\app\locale\es-es\default.mo
%ProgramFiles%\teracopy\app\locale\es-es\is-0pan7w9491.tmp в %ProgramFiles%\teracopy\app\locale\es-es\default.po
%ProgramFiles%\teracopy\app\locale\es-mx\is-9nvro488av.tmp в %ProgramFiles%\teracopy\app\locale\es-mx\default.mo
%ProgramFiles%\teracopy\app\locale\es-mx\is-5blt3lsc98.tmp в %ProgramFiles%\teracopy\app\locale\es-mx\default.po
%ProgramFiles%\teracopy\app\locale\et\is-1460bnq80r.tmp в %ProgramFiles%\teracopy\app\locale\et\default.mo
%ProgramFiles%\teracopy\app\locale\et\is-qdvzh2q0qy.tmp в %ProgramFiles%\teracopy\app\locale\et\default.po
%ProgramFiles%\teracopy\app\locale\fa\is-padvcoquhd.tmp в %ProgramFiles%\teracopy\app\locale\fa\default.mo
%ProgramFiles%\teracopy\app\locale\fa\is-m9u1cvz00x.tmp в %ProgramFiles%\teracopy\app\locale\fa\default.po
%ProgramFiles%\teracopy\app\locale\fi\is-5ewn0e865s.tmp в %ProgramFiles%\teracopy\app\locale\fi\default.mo
%ProgramFiles%\teracopy\app\locale\fi\is-7x3uc3of3b.tmp в %ProgramFiles%\teracopy\app\locale\fi\default.po
%ProgramFiles%\teracopy\app\locale\fr\is-mc1jbs9gqi.tmp в %ProgramFiles%\teracopy\app\locale\fr\default.mo
%ProgramFiles%\teracopy\app\locale\fr\is-yya4y3cf56.tmp в %ProgramFiles%\teracopy\app\locale\fr\default.po
%ProgramFiles%\teracopy\app\locale\he\is-iizzpyp757.tmp в %ProgramFiles%\teracopy\app\locale\he\default.mo
%ProgramFiles%\teracopy\app\locale\he\is-iv1y1vdo7s.tmp в %ProgramFiles%\teracopy\app\locale\he\default.po
%ProgramFiles%\teracopy\app\locale\hi\is-5a6z28t41b.tmp в %ProgramFiles%\teracopy\app\locale\hi\default.mo
%ProgramFiles%\teracopy\app\locale\hi\is-ft95daysvx.tmp в %ProgramFiles%\teracopy\app\locale\hi\default.po
%ProgramFiles%\teracopy\app\locale\hr\is-nb1w2kpd46.tmp в %ProgramFiles%\teracopy\app\locale\hr\default.mo
%ProgramFiles%\teracopy\app\locale\hr\is-uuvnboz7jo.tmp в %ProgramFiles%\teracopy\app\locale\hr\default.po
%ProgramFiles%\teracopy\app\locale\hu\is-u4uzzbq786.tmp в %ProgramFiles%\teracopy\app\locale\hu\default.mo
%ProgramFiles%\teracopy\app\locale\hu\is-1ghdx1j4b1.tmp в %ProgramFiles%\teracopy\app\locale\hu\default.po
%ProgramFiles%\teracopy\app\locale\id\is-execqgjj4b.tmp в %ProgramFiles%\teracopy\app\locale\id\default.mo
%ProgramFiles%\teracopy\app\locale\id\is-sldcf8et14.tmp в %ProgramFiles%\teracopy\app\locale\id\default.po
%ProgramFiles%\teracopy\app\locale\it\is-7nee1y8bpa.tmp в %ProgramFiles%\teracopy\app\locale\it\default.mo
%ProgramFiles%\teracopy\app\locale\it\is-b49htk42se.tmp в %ProgramFiles%\teracopy\app\locale\it\default.po
%ProgramFiles%\teracopy\app\locale\ja\is-gqnfp2fzt2.tmp в %ProgramFiles%\teracopy\app\locale\ja\default.mo
%ProgramFiles%\teracopy\app\locale\ja\is-sn10k9shel.tmp в %ProgramFiles%\teracopy\app\locale\ja\default.po
%ProgramFiles%\teracopy\app\locale\ka\is-1dkzy2286g.tmp в %ProgramFiles%\teracopy\app\locale\ka\default.mo
%ProgramFiles%\teracopy\app\locale\ka\is-e6j279d9xm.tmp в %ProgramFiles%\teracopy\app\locale\ka\default.po
%ProgramFiles%\teracopy\app\locale\ko\is-po1hoqh6sx.tmp в %ProgramFiles%\teracopy\app\locale\ko\default.mo
%ProgramFiles%\teracopy\app\locale\ko\is-8p6fahpbw9.tmp в %ProgramFiles%\teracopy\app\locale\ko\default.po
%ProgramFiles%\teracopy\app\locale\lt\is-vc9kmmmmht.tmp в %ProgramFiles%\teracopy\app\locale\lt\default.mo
%ProgramFiles%\teracopy\app\locale\lt\is-7g08p3m1e9.tmp в %ProgramFiles%\teracopy\app\locale\lt\default.po
%ProgramFiles%\teracopy\app\locale\ms\is-t1esmhfl3g.tmp в %ProgramFiles%\teracopy\app\locale\ms\default.mo
%ProgramFiles%\teracopy\app\locale\ms\is-7nwg0cp8mq.tmp в %ProgramFiles%\teracopy\app\locale\ms\default.po
%ProgramFiles%\teracopy\app\locale\nl\is-st66sthoiw.tmp в %ProgramFiles%\teracopy\app\locale\nl\default.mo
%ProgramFiles%\teracopy\app\locale\nl\is-fwl4n5gj0r.tmp в %ProgramFiles%\teracopy\app\locale\nl\default.po
%ProgramFiles%\teracopy\app\locale\no\is-lror5acos6.tmp в %ProgramFiles%\teracopy\app\locale\no\default.mo
%ProgramFiles%\teracopy\app\locale\no\is-ntu7c7ce3z.tmp в %ProgramFiles%\teracopy\app\locale\no\default.po
%ProgramFiles%\teracopy\app\locale\pl\is-jerch0o3fj.tmp в %ProgramFiles%\teracopy\app\locale\pl\default.mo
%ProgramFiles%\teracopy\app\locale\pl\is-kve33l4qhp.tmp в %ProgramFiles%\teracopy\app\locale\pl\default.po
%ProgramFiles%\teracopy\app\locale\pt-br\is-j9ivb26b7u.tmp в %ProgramFiles%\teracopy\app\locale\pt-br\default.mo
%ProgramFiles%\teracopy\app\locale\pt-br\is-2mis0d7r4k.tmp в %ProgramFiles%\teracopy\app\locale\pt-br\default.po
%ProgramFiles%\teracopy\app\locale\pt-pt\is-5x8yof5f5z.tmp в %ProgramFiles%\teracopy\app\locale\pt-pt\default.mo
%ProgramFiles%\teracopy\app\locale\pt-pt\is-5xxqnvwr77.tmp в %ProgramFiles%\teracopy\app\locale\pt-pt\default.po
%ProgramFiles%\teracopy\app\locale\ro\is-h3heevx19w.tmp в %ProgramFiles%\teracopy\app\locale\ro\default.mo
%ProgramFiles%\teracopy\app\locale\ro\is-1yd2vbgdmy.tmp в %ProgramFiles%\teracopy\app\locale\ro\default.po
%ProgramFiles%\teracopy\app\locale\ru\is-uvcn6cbjx9.tmp в %ProgramFiles%\teracopy\app\locale\ru\default.mo
%ProgramFiles%\teracopy\app\locale\ru\is-ym9uwtp3ut.tmp в %ProgramFiles%\teracopy\app\locale\ru\default.po
%ProgramFiles%\teracopy\app\locale\sat\is-n0cqm9mlmn.tmp в %ProgramFiles%\teracopy\app\locale\sat\default.mo
%ProgramFiles%\teracopy\app\locale\sat\is-jspmfe6ar8.tmp в %ProgramFiles%\teracopy\app\locale\sat\default.po
%ProgramFiles%\teracopy\app\locale\sk\is-b29mamhgna.tmp в %ProgramFiles%\teracopy\app\locale\sk\default.mo
%ProgramFiles%\teracopy\app\locale\sk\is-zd92r06bkv.tmp в %ProgramFiles%\teracopy\app\locale\sk\default.po
%ProgramFiles%\teracopy\app\locale\sl\is-y5vrfxcz32.tmp в %ProgramFiles%\teracopy\app\locale\sl\default.mo
%ProgramFiles%\teracopy\app\locale\sl\is-0r4bwtmt7h.tmp в %ProgramFiles%\teracopy\app\locale\sl\default.po
%ProgramFiles%\teracopy\app\locale\sr\is-sep5tc9o2r.tmp в %ProgramFiles%\teracopy\app\locale\sr\default.mo
%ProgramFiles%\teracopy\app\locale\sr\is-mvsk1mb3co.tmp в %ProgramFiles%\teracopy\app\locale\sr\default.po
%ProgramFiles%\teracopy\app\locale\sv-se\is-b5w3pzbgsl.tmp в %ProgramFiles%\teracopy\app\locale\sv-se\default.mo
%ProgramFiles%\teracopy\app\locale\sv-se\is-s7v1ktyluu.tmp в %ProgramFiles%\teracopy\app\locale\sv-se\default.po
%ProgramFiles%\teracopy\app\locale\th\is-ocg6d7n8cy.tmp в %ProgramFiles%\teracopy\app\locale\th\default.mo
%ProgramFiles%\teracopy\app\locale\th\is-he4pgvhny0.tmp в %ProgramFiles%\teracopy\app\locale\th\default.po
%ProgramFiles%\teracopy\app\locale\tr\is-jllmspgppk.tmp в %ProgramFiles%\teracopy\app\locale\tr\default.mo
%ProgramFiles%\teracopy\app\locale\tr\is-ypza5v9m4r.tmp в %ProgramFiles%\teracopy\app\locale\tr\default.po
%ProgramFiles%\teracopy\app\locale\uk\is-gmo2w502e6.tmp в %ProgramFiles%\teracopy\app\locale\uk\default.mo
%ProgramFiles%\teracopy\app\locale\uk\is-3c0pda8uxs.tmp в %ProgramFiles%\teracopy\app\locale\uk\default.po
%ProgramFiles%\teracopy\app\locale\vi\is-0j25pnp0w3.tmp в %ProgramFiles%\teracopy\app\locale\vi\default.mo
%ProgramFiles%\teracopy\app\locale\vi\is-b2cdvwhzlz.tmp в %ProgramFiles%\teracopy\app\locale\vi\default.po
%ProgramFiles%\teracopy\app\locale\zh-cn\is-sm0q5bklhh.tmp в %ProgramFiles%\teracopy\app\locale\zh-cn\default.mo
%ProgramFiles%\teracopy\app\locale\zh-cn\is-k8w0y8yhxp.tmp в %ProgramFiles%\teracopy\app\locale\zh-cn\default.po
%ProgramFiles%\teracopy\app\locale\zh-tw\is-p26evixaeu.tmp в %ProgramFiles%\teracopy\app\locale\zh-tw\default.mo
%ProgramFiles%\teracopy\app\locale\zh-tw\is-g2wmsmncgx.tmp в %ProgramFiles%\teracopy\app\locale\zh-tw\default.po
%ProgramFiles%\teracopy\app\sounds\is-ev6b7c92el.tmp в %ProgramFiles%\teracopy\app\sounds\complete.wav
%ProgramFiles%\teracopy\app\sounds\is-pimoggtd9w.tmp в %ProgramFiles%\teracopy\app\sounds\error.wav
%ProgramFiles%\teracopy\is-me4kr45lec.tmp в %ProgramFiles%\teracopy\teracopy.exe
%ProgramFiles%\teracopy\is-2worayoknf.tmp в %ProgramFiles%\teracopy\teracopy.dll
%ProgramFiles%\teracopy\is-hus93z2v10.tmp в %ProgramFiles%\teracopy\blake3.dll
%APPDATA%\teracopy\ignore\is-4hfs1gme5o.tmp в %APPDATA%\teracopy\ignore\temp files.txt
%APPDATA%\teracopy\ignore\is-4lka450r6f.tmp в %APPDATA%\teracopy\ignore\video files.txt
%APPDATA%\teracopy\scripts\is-navpooxh3m.tmp в %APPDATA%\teracopy\scripts\eject drives.ps1
%APPDATA%\teracopy\scripts\is-4hgxdvcdne.tmp в %APPDATA%\teracopy\scripts\notify via ifttt.ps1
%APPDATA%\teracopy\scripts\is-a8e21bvgfb.tmp в %APPDATA%\teracopy\scripts\notify via ntfy.ps1
%LOCALAPPDATA%\microsoft\edge\user data\default\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\current
%LOCALAPPDATA%\microsoft\edge\user data\default\session storage\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\session storage\current
%LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\shared_proto_db\metadata\current
%LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\data_reduction_proxy_leveldb\current
%LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\budgetdatabase\current
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\eventdb\current
%LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\feature engagement tracker\availabilitydb\current
%LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\000001.dbtmp в %LOCALAPPDATA%\microsoft\edge\user data\default\autofillstrikedatabase\current

Изменяет следующие файлы

%LOCALAPPDATA%\microsoft\edge\user data\last version
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\log
%LOCALAPPDATA%\microsoft\edge\user data\default\site characteristics database\log
%LOCALAPPDATA%\microsoft\edge\user data\default\sync data\leveldb\000003.log
%LOCALAPPDATA%\microsoft\edge\user data\default\web data-journal
%LOCALAPPDATA%\microsoft\edge\user data\default\web data
%LOCALAPPDATA%\microsoft\edge\user data\default\visited links
%LOCALAPPDATA%\microsoft\edge\user data\default\history-journal
%LOCALAPPDATA%\microsoft\tokenbroker\cache\9cd93bc6dcf544bae69531052e64647ec02f2bb4.tbres
%LOCALAPPDATA%\microsoft\edge\user data\default\history
%TEMP%\.ses

Подменяет следующие файлы

%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
%LOCALAPPDATA%\Microsoft\Edge\User Data\Default\Platform Notifications\LOG

Сетевая активность

Подключается к

'co####.edge.skype.com':443
'cy###mania.ws':80
'cy###mania.ws':443
'go#####agmanager.com':443
'dr#######bidk.cloudfront.net':443
'cr#.####g2.amazontrust.com':80
'a###ytics.google.com':443
'st###.#.doubleclick.net':443
'a.###.#loudflare.com':443
'st####e.ko-fi.com':443

TCP

Запросы HTTP GET

http://www.cy###mania.ws/
http://cr#.####g2.amazontrust.com/rootg2.cer

Другие

'co####.edge.skype.com':443
'cy###mania.ws':443
'go#####agmanager.com':443
'dr#######bidk.cloudfront.net':443
'a###ytics.google.com':443
'st###.#.doubleclick.net':443
'a.###.#loudflare.com':443
'st####e.ko-fi.com':443

UDP

DNS ASK co####.edge.skype.com
DNS ASK cy###mania.ws
DNS ASK go#####agmanager.com
DNS ASK fo###.#oogleapis.com
DNS ASK dr#######bidk.cloudfront.net
DNS ASK cr#.####g2.amazontrust.com
DNS ASK x.##2.us
DNS ASK a###ytics.google.com
DNS ASK st###.#.doubleclick.net
DNS ASK a.###.#loudflare.com
DNS ASK st####e.ko-fi.com

Другое

Ищет следующие окна

ClassName: 'Edit' WindowName: ''
ClassName: 'Chrome_MessageWindow' WindowName: '%LOCALAPPDATA%\Microsoft\Edge\User Data'

Создает и запускает на исполнение

'%TEMP%\rarsfx0\teracopy4.exe' /silent
'%TEMP%\is-vier5tqcok.tmp\teracopy4.tmp' /SL5="$F0042,10359153,1101312,%TEMP%\RarSFX0\teracopy4.exe" /silent

Запускает на исполнение

'<SYSTEM32>\regsvr32.exe' /s "%ProgramFiles%\TeraCopy\TeraCopy.dll"
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --single-argument http://www.cybermania.ws/
'%ProgramFiles(x86)%\microsoft\edge\application\msedge.exe' --flag-switches-begin --flag-switches-end --do-not-de-elevate http://www.cybermania.ws/ (со скрытым окном)
'%ProgramFiles(x86)%\microsoft\edge\application\89.0.774.68\identity_helper.exe' --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=1876,16265607917710948018,1662409052570562180,131072 --lang=en-US --service-sandbox-type=none --mojo-...

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней