Техническая информация
Вредоносные функции:
Создает и запускает на исполнение:
- '%TEMP%\radiocube_homeI_demo.exe_Install\Setup.exe'
Запускает на исполнение:
- '<SYSTEM32>\msiexec.exe' -Embedding 86714D57A43275CF9F17035E15ADDF58 C
- '<SYSTEM32>\wbem\wmiadap.exe' /R /T
- '<SYSTEM32>\msiexec.exe' /i "%TEMP%\radiocube_homeI_demo.exe_Install\Radiocube.msi"
- '<SYSTEM32>\msiexec.exe' /V
Изменения в файловой системе:
Создает следующие файлы:
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Timeless.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Miami.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Up and Down.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - Radiocube Drop In.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Peter Gabriel - Sledgehammer.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Gregorian Song.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Flouncing Around.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Hot Wheels.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Just Do It.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Impressions.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Ricky Martin - Livin' La Vida Loca.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\BS\Radiocube Home - The Playback Audio Solution for Home Entertainment.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Santana - Smooth.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Sting - Desert Rose.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Simply Red - Something Got Me Started.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - The all in one Solution for an inexpensive Solution....mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - Thank you for choosing Radiocube Software.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - The all in one Solution for the Radio industry..mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - Try before you buy.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - The all in one Solution for the Radio Industry.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Playlist\BS\Demo-Playlist - Home I.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Playlist\BS\Demo-Playlist - Home I.bak.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\demo1.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\demo3.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\demo2.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Alanis Morissette - Ironic.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\digital.ttf
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\CartM\cartmachine.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Deep Blue Something - Breakfast At Tiffanys.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Christina Aguilera - Genie In A Bottle.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Big Challenge.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Attraction.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Big Moment.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Fascination.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Fantasy.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Eric Clapton - Layla.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\demo4.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Everything But The Girl - Missing You.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Attraction 2 (+15% Pitch).mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Ginuwine - Pony.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - Radiocube Drop In.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Peter Gabriel - Sledgehammer.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - Thank you for choosing Radiocube Software.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - The all in one Solution for the Radio industry..mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - The all in one Solution for an inexpensive Solution....mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Just Do It.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Impressions.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Miami.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Up and Down.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Timeless.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Sting - Desert Rose.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Simply Red - Something Got Me Started.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\The Cars - Drive.mp3
- %TEMP%\MSI1.tmp
- %TEMP%\43574.msi
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - Try before you buy.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\Radiocube - The all in one Solution for the Radio Industry.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Jingles\BS\Radiocube Home - The Playback Audio Solution for Home Entertainment.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Santana - Smooth.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Ricky Martin - Livin' La Vida Loca.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\demo3.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\demo2.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\demo4.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Everything But The Girl - Missing You.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Eric Clapton - Layla.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Alanis Morissette - Ironic.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\The Cars - Drive.mp3.xml
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Christina Aguilera - Genie In A Bottle.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\demo1.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Deep Blue Something - Breakfast At Tiffanys.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Fascination.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Fantasy.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Flouncing Around.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Hot Wheels.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Gregorian Song.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Attraction 2 (+15% Pitch).mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Ginuwine - Pony.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Attraction.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Big Moment.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Sound\Music\Occasions - Big Challenge.mp3
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\mfc70enu.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\mfc70deu.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\mfc70esp.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\mfc70ita.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\mfc70fra.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\AudioToolsMsh.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\AudioToolsMsh.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\LogServerIp.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\mfc70.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\LogServerIp.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\PegIcon.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\olepro32.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\de.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\en.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\de.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\msvcirt.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\mfc70u.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\msvcp70.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\oleaut32.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\msvcr70.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Msi\9x\InstMsi.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\ASDXREVERBLIGHT.HLP
- %TEMP%\radiocube_homeI_demo.exe_Install\Msi\Nt\InstMsi.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\9x\Radiocube.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\Msi\MsiZap.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\Data\Muc\example 3rd party.log
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\ReadMe.txt
- %TEMP%\radiocube_homeI_demo.exe_Install\setup.ini
- %TEMP%\radiocube_homeI_demo.exe_Install\uninstall.bat
- %TEMP%\radiocube_homeI_demo.exe_Install\forget_Radiocube.bat
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\atl70.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\ASDXReverbLight.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\atl70.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\AudioTools.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\AudioTools.dll
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\9x\Radiocube.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\NT\Radiocube.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\NT\Radiocube.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\Setup.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\RegOcx.exe
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\Shortcuts_de.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\Manual_en.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\Shortcuts_de.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\Shortcuts_en.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\Shortcuts_en.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\PercentBar.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\PercentBar.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\vsflex8l.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\Manual_en.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\vsflex8n.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\Shortcuts_pt.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\Shortcuts_it.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\Shortcuts_pt.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\Shortcuts_ru.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\Shortcuts_ru.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\Shortcuts_es.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\Shortcuts_es.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\Shortcuts_fr.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\Shortcuts_it.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\Shortcuts_fr.pdf
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\it.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\it.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\pt.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\ru.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\pt.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\es.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\en.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\es.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\fr.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\BS\Common\fr.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\ColStatic.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\ColStatic.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\LClock.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\Common\msmask32.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\LClock.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\rar_pack.js
- %TEMP%\radiocube_homeI_demo.exe_Install\BS_DEMO\Common\ru.dat
- %TEMP%\radiocube_homeI_demo.exe_Install\Radiocube.msi
- %TEMP%\radiocube_homeI_demo.exe_Install\NT\ColButton.ocx
- %TEMP%\radiocube_homeI_demo.exe_Install\9x\ColButton.ocx
Удаляет следующие файлы:
- <SYSTEM32>\PerfStringBackup.TMP
- <SYSTEM32>\wbem\Performance\WmiApRpl.ini
- %TEMP%\MSI1.tmp
Другое:
Ищет следующие окна:
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
