Trojan.Siggen23.40731

Technical Information

To ensure autorun and distribution

Sets the following service settings

[HKLM\System\CurrentControlSet\Services\MIME post encoding 71] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\MIME post encoding 71] 'ImagePath' = '%ALLUSERSPROFILE%\MIME post encoding 71\MIME post encoding 71.exe'

Creates the following services

'MIME post encoding 71' %ALLUSERSPROFILE%\MIME post encoding 71\MIME post encoding 71.exe

Modifies file system

Creates the following files

%TEMP%\is-e1145.tmp\is-kifme.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-gb5qr.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-sp35e.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-1apvl.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-ld8su.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-7dbii.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-krpev.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\lessmsi\is-e29ea.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-9jm16.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-ttcer.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-j2pvd.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-oqofd.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\plugins\internal\is-d7vhn.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\plugins\internal\is-efjof.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-skl2f.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-jogtn.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-biek8.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-sb7c5.tmp
%LOCALAPPDATA%\pci device checker\stuff\is-ga07t.tmp
%LOCALAPPDATA%\pci device checker\stuff\is-pum7v.tmp
%LOCALAPPDATA%\pci device checker\stuff\is-a9cih.tmp
%LOCALAPPDATA%\pci device checker\stuff\is-j1dql.tmp
%LOCALAPPDATA%\pci device checker\is-b1k3g.tmp
%LOCALAPPDATA%\pci device checker\unins000.dat
%LOCALAPPDATA%\pci device checker\bin\x86\is-s9136.tmp
%LOCALAPPDATA%\pci device checker\pcidevicechecker.exe
%LOCALAPPDATA%\pci device checker\bin\x86\is-6o3sm.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-pj4iv.tmp
%TEMP%\is-avqri.tmp\_isetup\_setup64.tmp
%TEMP%\is-avqri.tmp\_isetup\_shfoldr.dll
%TEMP%\is-avqri.tmp\_iscrypt.dll
%LOCALAPPDATA%\pci device checker\is-a4oqo.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-74t2v.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-sv298.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-36jqv.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-du9eo.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-ahipt.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-5irqu.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-0ekec.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-6qgmq.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-3ac57.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-nc42i.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-fecvi.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-abo3m.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-3jgom.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-4bp2t.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-n5bs8.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-jkvq6.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-3opc2.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-isein.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-dnbm7.tmp
%LOCALAPPDATA%\pci device checker\bin\x86\is-nrdr2.tmp
%ALLUSERSPROFILE%\mime post encoding 71\mime post encoding 71.exe

Deletes the following files

%LOCALAPPDATA%\pci device checker\stuff\date.txt
%LOCALAPPDATA%\pci device checker\stuff\tagsreplace.txt

Moves the following files

from %LOCALAPPDATA%\pci device checker\is-a4oqo.tmp to %LOCALAPPDATA%\pci device checker\unins000.exe
from %LOCALAPPDATA%\pci device checker\bin\x86\is-sp35e.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\da.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-1apvl.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\daiso.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-ld8su.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\dstt.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-7dbii.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\dsd2pcmt.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-krpev.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\pcm2dsd.exe
from %LOCALAPPDATA%\pci device checker\bin\x86\lessmsi\is-e29ea.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\lessmsi\lessmsi-v1.6.91.zip
from %LOCALAPPDATA%\pci device checker\bin\x86\is-9jm16.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\d_writer.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-s9136.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\dsd2.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-gb5qr.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\lame_enc.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-ttcer.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\libwebp.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\plugins\internal\is-d7vhn.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\plugins\internal\peak_scanner_plugin_c.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\plugins\internal\is-efjof.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\plugins\internal\raw_decode_plugin_c.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-skl2f.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\copying
from %LOCALAPPDATA%\pci device checker\bin\x86\is-jogtn.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\7z.exe
from %LOCALAPPDATA%\pci device checker\bin\x86\is-biek8.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\takdec.exe
from %LOCALAPPDATA%\pci device checker\bin\x86\is-sb7c5.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\tak_deco_lib.dll
from %LOCALAPPDATA%\pci device checker\stuff\is-ga07t.tmp to %LOCALAPPDATA%\pci device checker\stuff\date.txt
from %LOCALAPPDATA%\pci device checker\bin\x86\is-j2pvd.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\libwinpthread-1.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-oqofd.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\sd.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-6o3sm.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\libdtsdec.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-nrdr2.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\utils.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-pj4iv.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\uchardet.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-sv298.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\bassflac.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-36jqv.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\bassmix.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-du9eo.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\bassopus.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-ahipt.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\basswma.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-5irqu.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\basswv.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-0ekec.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\bass_fx.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-6qgmq.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\bassmidi.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-3ac57.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\bass_tta.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-74t2v.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\basscd.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-nc42i.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\copying.lgplv2.1
from %LOCALAPPDATA%\pci device checker\bin\x86\is-abo3m.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\gain_analysis.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-3jgom.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\libflac_dynamic.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-4bp2t.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\bass_ofr.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-n5bs8.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\optimfrog.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-jkvq6.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\mp3gain.exe
from %LOCALAPPDATA%\pci device checker\bin\x86\is-3opc2.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\rg_ebur128.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-isein.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\wavpackdll.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-dnbm7.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\libsoxr.dll
from %LOCALAPPDATA%\pci device checker\bin\x86\is-fecvi.tmp to %LOCALAPPDATA%\pci device checker\bin\x86\ff_helper.dll
from %LOCALAPPDATA%\pci device checker\stuff\is-pum7v.tmp to %LOCALAPPDATA%\pci device checker\stuff\tagsreplace.txt
from %LOCALAPPDATA%\pci device checker\is-b1k3g.tmp to %LOCALAPPDATA%\pci device checker\pcidevicechecker.exe

Substitutes the following files

%LOCALAPPDATA%\pci device checker\stuff\date.txt
%LOCALAPPDATA%\pci device checker\stuff\tagsreplace.txt

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: 'jc73c9_PCIDC1113FlashFixClass_jc73c9'

Creates and executes the following

'%TEMP%\is-e1145.tmp\is-kifme.tmp' /SL4 $B024C "<Full path to file>" 3869455 52224
'%LOCALAPPDATA%\pci device checker\pcidevicechecker.exe' -i
'%LOCALAPPDATA%\pci device checker\pcidevicechecker.exe' -s

Executes the following

'%WINDIR%\syswow64\net.exe' helpmsg 1113
'%WINDIR%\syswow64\net1.exe' helpmsg 1113

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней