Win32.HLLW.Autohit.15253

Техническая информация

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\wbem\wmiadap.exe' /R /T

Изменения в файловой системе:

Создает следующие файлы:

%TEMP%\error-soft\sbotac\Images\Buttons\button_StartAC.bmp
%TEMP%\aut48.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_SignIn.bmp
%TEMP%\aut4A.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_StopAC.bmp
%TEMP%\aut49.tmp
%TEMP%\aut47.tmp
%TEMP%\aut45.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_saInsert.bmp
%TEMP%\aut44.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_ShowAll.bmp
%TEMP%\aut46.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_saPlay.bmp
%TEMP%\aut4F.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_taMap_Add.bmp
%TEMP%\aut4E.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_TimeRemaining.bmp
%TEMP%\aut50.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_taSetCoords.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_taMap.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_taClearAll.bmp
%TEMP%\aut4B.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_taAdd.bmp
%TEMP%\aut4D.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_taDel.bmp
%TEMP%\aut4C.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_saBrowse.bmp
%TEMP%\aut3B.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_mrStop.bmp
%TEMP%\aut3A.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_plClearList.bmp
%TEMP%\aut3C.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_plAdd.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_mrStart.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_LeaveParty.bmp
%TEMP%\aut37.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_ibR.bmp
%TEMP%\aut39.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_mrRecoverNow.bmp
%TEMP%\aut38.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_RefreshList.bmp
%TEMP%\aut41.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_plLoadList.bmp
%TEMP%\aut43.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_ResetAll.bmp
%TEMP%\aut42.tmp
%TEMP%\aut40.tmp
%TEMP%\aut3E.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_plDelete.bmp
%TEMP%\aut3D.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_plInsert.bmp
%TEMP%\aut3F.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_plExceeded.bmp
%TEMP%\aut51.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\5.bmp
%TEMP%\aut63.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\4.bmp
%TEMP%\aut65.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\6.bmp
%TEMP%\aut64.tmp
%TEMP%\aut62.tmp
%TEMP%\aut60.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\1.bmp
%TEMP%\aut5F.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\3.bmp
%TEMP%\aut61.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\2.bmp
%TEMP%\aut6A.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\confirm2.bmp
%TEMP%\aut69.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\Image.dll
%TEMP%\aut6B.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\confirm_ger.bmp
%TEMP%\error-soft\sbotac\Images\Passcode\confirm.bmp
%TEMP%\error-soft\sbotac\Images\Passcode\8.bmp
%TEMP%\aut66.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\7.bmp
%TEMP%\aut68.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\9.bmp
%TEMP%\aut67.tmp
%TEMP%\error-soft\sbotac\Images\Passcode\0.bmp
%TEMP%\aut56.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_as2Update.bmp
%TEMP%\aut55.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_as2Stop.bmp
%TEMP%\aut57.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_as2Start.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_icGo.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_usDownload.bmp
%TEMP%\aut52.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_usCheck.bmp
%TEMP%\aut54.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_usRun.bmp
%TEMP%\aut53.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_plPartyLeader.bmp
%TEMP%\aut5C.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csAutoTrace.bmp
%TEMP%\aut5E.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csLeaveNote.bmp
%TEMP%\aut5D.tmp
%TEMP%\aut5B.tmp
%TEMP%\aut59.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_as2Reset.bmp
%TEMP%\aut58.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csAutoMastery.bmp
%TEMP%\aut5A.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_help.bmp
%TEMP%\aut13.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiClear.bmp
%TEMP%\aut12.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiDel.bmp
%TEMP%\aut14.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_charstats.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiCancel.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiAdd.bmp
%TEMP%\autF.tmp
%TEMP%\error-soft\sbotac\Images\traffic.JPG
%TEMP%\aut11.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiBrowse.bmp
%TEMP%\aut10.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiUp.bmp
%TEMP%\aut19.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aaiUpdate.bmp
%TEMP%\aut1B.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_asAdd.bmp
%TEMP%\aut1A.tmp
%TEMP%\aut18.tmp
%TEMP%\aut16.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiDown.bmp
%TEMP%\aut15.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aaiAdd.bmp
%TEMP%\aut17.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiEdit.bmp
%TEMP%\autE.tmp
%TEMP%\error-soft\sbotac\Images\JGlv2.PNG
%TEMP%\aut5.tmp
%TEMP%\error-soft\sbotac\Images\JGlv1.PNG
%TEMP%\aut7.tmp
%TEMP%\error-soft\sbotac\Images\JGlv3.PNG
%TEMP%\aut6.tmp
%TEMP%\aut4.tmp
%TEMP%\aut2.tmp
%TEMP%\mjorlti
%TEMP%\aut1.tmp
%TEMP%\error-soft\sbotac\Images\Map.JPG
%TEMP%\aut3.tmp
%TEMP%\error-soft\sbotac\Images\BigMap.JPG
%TEMP%\autC.tmp
%TEMP%\error-soft\sbotac\Images\DWlv4.PNG
%TEMP%\autB.tmp
%TEMP%\error-soft\sbotac\Images\mapdot_dc.PNG
%TEMP%\autD.tmp
%TEMP%\error-soft\sbotac\Images\mapdot.PNG
%TEMP%\error-soft\sbotac\Images\DWlv3.PNG
%TEMP%\error-soft\sbotac\Images\DWlv1.PNG
%TEMP%\aut8.tmp
%TEMP%\error-soft\sbotac\Images\JGlv4.PNG
%TEMP%\autA.tmp
%TEMP%\error-soft\sbotac\Images\DWlv2.PNG
%TEMP%\aut9.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_asDel.bmp
%TEMP%\aut2E.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csRemove.bmp
%TEMP%\aut2D.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csSaveChat.bmp
%TEMP%\aut2F.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csRight.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csLogs.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csGoTo.bmp
%TEMP%\aut2A.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_cSend.bmp
%TEMP%\aut2C.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csLeft.bmp
%TEMP%\aut2B.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_gsUnCheckAll.bmp
%TEMP%\aut34.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_gsCheckAll.bmp
%TEMP%\aut36.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_HideAll.bmp
%TEMP%\aut35.tmp
%TEMP%\aut33.tmp
%TEMP%\aut31.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csSoundAlerts.bmp
%TEMP%\aut30.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_GetHWID.bmp
%TEMP%\aut32.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_eplLeaveParty.bmp
%TEMP%\aut29.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_ClearLog2.bmp
%TEMP%\aut20.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_ClearLog1.bmp
%TEMP%\aut22.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_aiOK.bmp
%TEMP%\aut21.tmp
%TEMP%\aut1F.tmp
%TEMP%\aut1D.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_asDisable.bmp
%TEMP%\aut1C.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_asInsert.bmp
%TEMP%\aut1E.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_asEnable.bmp
%TEMP%\aut27.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csSetAffinity.bmp
%TEMP%\aut26.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csEdit.bmp
%TEMP%\aut28.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_csCastSkill.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_CopyToClipboard.bmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_CLOSE.bmp
%TEMP%\aut23.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_clOK.bmp
%TEMP%\aut25.tmp
%TEMP%\error-soft\sbotac\Images\Buttons\button_clSave.bmp
%TEMP%\aut24.tmp

Удаляет следующие файлы:

%TEMP%\aut48.tmp
%TEMP%\aut49.tmp
%TEMP%\aut4A.tmp
%TEMP%\aut45.tmp
%TEMP%\aut46.tmp
%TEMP%\aut47.tmp
%TEMP%\aut4B.tmp
%TEMP%\aut4F.tmp
%TEMP%\aut50.tmp
%TEMP%\aut51.tmp
%TEMP%\aut4C.tmp
%TEMP%\aut4D.tmp
%TEMP%\aut4E.tmp
%TEMP%\aut44.tmp
%TEMP%\aut3A.tmp
%TEMP%\aut3B.tmp
%TEMP%\aut3C.tmp
%TEMP%\aut37.tmp
%TEMP%\aut38.tmp
%TEMP%\aut39.tmp
%TEMP%\aut3D.tmp
%TEMP%\aut41.tmp
%TEMP%\aut42.tmp
%TEMP%\aut43.tmp
%TEMP%\aut3E.tmp
%TEMP%\aut3F.tmp
%TEMP%\aut40.tmp
%TEMP%\aut52.tmp
%TEMP%\aut64.tmp
%TEMP%\aut65.tmp
%TEMP%\aut66.tmp
%TEMP%\aut61.tmp
%TEMP%\aut62.tmp
%TEMP%\aut63.tmp
%TEMP%\aut67.tmp
%TEMP%\aut6B.tmp
<SYSTEM32>\wbem\Performance\WmiApRpl.ini
<SYSTEM32>\PerfStringBackup.TMP
%TEMP%\aut68.tmp
%TEMP%\aut69.tmp
%TEMP%\aut6A.tmp
%TEMP%\aut60.tmp
%TEMP%\aut56.tmp
%TEMP%\aut57.tmp
%TEMP%\aut58.tmp
%TEMP%\aut53.tmp
%TEMP%\aut54.tmp
%TEMP%\aut55.tmp
%TEMP%\aut59.tmp
%TEMP%\aut5D.tmp
%TEMP%\aut5E.tmp
%TEMP%\aut5F.tmp
%TEMP%\aut5A.tmp
%TEMP%\aut5B.tmp
%TEMP%\aut5C.tmp
%TEMP%\aut11.tmp
%TEMP%\aut12.tmp
%TEMP%\aut13.tmp
%TEMP%\autE.tmp
%TEMP%\autF.tmp
%TEMP%\aut10.tmp
%TEMP%\aut14.tmp
%TEMP%\aut18.tmp
%TEMP%\aut19.tmp
%TEMP%\aut1A.tmp
%TEMP%\aut15.tmp
%TEMP%\aut16.tmp
%TEMP%\aut17.tmp
%TEMP%\autD.tmp
%TEMP%\aut3.tmp
%TEMP%\aut4.tmp
%TEMP%\aut5.tmp
%TEMP%\aut1.tmp
%TEMP%\mjorlti
%TEMP%\aut2.tmp
%TEMP%\aut6.tmp
%TEMP%\autA.tmp
%TEMP%\autB.tmp
%TEMP%\autC.tmp
%TEMP%\aut7.tmp
%TEMP%\aut8.tmp
%TEMP%\aut9.tmp
%TEMP%\aut1B.tmp
%TEMP%\aut2D.tmp
%TEMP%\aut2E.tmp
%TEMP%\aut2F.tmp
%TEMP%\aut2A.tmp
%TEMP%\aut2B.tmp
%TEMP%\aut2C.tmp
%TEMP%\aut30.tmp
%TEMP%\aut34.tmp
%TEMP%\aut35.tmp
%TEMP%\aut36.tmp
%TEMP%\aut31.tmp
%TEMP%\aut32.tmp
%TEMP%\aut33.tmp
%TEMP%\aut29.tmp
%TEMP%\aut1F.tmp
%TEMP%\aut20.tmp
%TEMP%\aut21.tmp
%TEMP%\aut1C.tmp
%TEMP%\aut1D.tmp
%TEMP%\aut1E.tmp
%TEMP%\aut22.tmp
%TEMP%\aut26.tmp
%TEMP%\aut27.tmp
%TEMP%\aut28.tmp
%TEMP%\aut23.tmp
%TEMP%\aut24.tmp
%TEMP%\aut25.tmp

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация