Trojan.Siggen24.49527

Technical Information

To ensure autorun and distribution

Sets the following service settings

[HKLM\System\CurrentControlSet\Services\IPTV Channel Browser 6.4] 'Start' = '00000002'
[HKLM\System\CurrentControlSet\Services\IPTV Channel Browser 6.4] 'ImagePath' = '%ALLUSERSPROFILE%\IPTV Channel Browser 6.4\IPTV Channel Browser 6.4.exe'

Creates the following services

'IPTV Channel Browser 6.4' %ALLUSERSPROFILE%\IPTV Channel Browser 6.4\IPTV Channel Browser 6.4.exe

Modifies file system

Creates the following files

%TEMP%\is-9ut3p.tmp\<File name>.tmp
%LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-9ref3.tmp
%LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-2uvc4.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-c0c8h.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-a9eet.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-l1a7v.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-9eh3f.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-74749.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-ghvsl.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-bporp.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-6sfhj.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-4na1s.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-ab43i.tmp
%LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-1qids.tmp
%LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-c2kmh.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-2apta.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-u7fbc.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-hhaj9.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-ssud4.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-dl39h.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-a7cvq.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-2irof.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-7d521.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-8bop3.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-prtgk.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-rc7rj.tmp
%LOCALAPPDATA%\aac audio converter\is-gp0sn.tmp
%LOCALAPPDATA%\aac audio converter\unins000.dat
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-uhgk7.tmp
%LOCALAPPDATA%\aac audio converter\pf\common audio\is-4qqm1.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-akahp.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-2kdid.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-jhijp.tmp
%TEMP%\is-5rkqs.tmp\_isetup\_setup64.tmp
%TEMP%\is-5rkqs.tmp\_isetup\_shfoldr.dll
%TEMP%\is-5rkqs.tmp\_isetup\_iscrypt.dll
%LOCALAPPDATA%\aac audio converter\is-aqnqb.tmp
%LOCALAPPDATA%\aac audio converter\is-uc9fr.tmp
%LOCALAPPDATA%\aac audio converter\is-4inkm.tmp
%LOCALAPPDATA%\aac audio converter\is-stjb3.tmp
%LOCALAPPDATA%\aac audio converter\is-cfeif.tmp
%LOCALAPPDATA%\aac audio converter\is-3hibg.tmp
%LOCALAPPDATA%\aac audio converter\is-p4nds.tmp
%LOCALAPPDATA%\aac audio converter\is-rsjk3.tmp
%LOCALAPPDATA%\aac audio converter\is-semmd.tmp
%LOCALAPPDATA%\aac audio converter\is-apsi9.tmp
%TEMP%\is-5rkqs.tmp\_isetup\_regdll.tmp
%LOCALAPPDATA%\aac audio converter\is-mtiep.tmp
%LOCALAPPDATA%\aac audio converter\is-n78qu.tmp
%LOCALAPPDATA%\aac audio converter\is-rrrbu.tmp
%LOCALAPPDATA%\aac audio converter\is-re0u4.tmp
%LOCALAPPDATA%\aac audio converter\is-t6hbc.tmp
%LOCALAPPDATA%\aac audio converter\is-4fi8q.tmp
%LOCALAPPDATA%\aac audio converter\is-v8948.tmp
%LOCALAPPDATA%\aac audio converter\is-jdumm.tmp
%LOCALAPPDATA%\aac audio converter\is-0e315.tmp
%LOCALAPPDATA%\aac audio converter\is-knqso.tmp
%LOCALAPPDATA%\aac audio converter\is-o55av.tmp
%LOCALAPPDATA%\aac audio converter\is-q3177.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-8tqun.tmp
%LOCALAPPDATA%\aac audio converter\lang\is-9hb7h.tmp
%LOCALAPPDATA%\aac audio converter\is-742jj.tmp
%LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe
%ALLUSERSPROFILE%\iptv channel browser 6.4\iptv channel browser 6.4.exe

Deletes the following files

%LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
%LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
%LOCALAPPDATA%\aac audio converter\lang\feedback.dat
%LOCALAPPDATA%\aac audio converter\lang\musictype.txt
%LOCALAPPDATA%\aac audio converter\lang\update.log

Moves the following files

from %LOCALAPPDATA%\aac audio converter\is-aqnqb.tmp to %LOCALAPPDATA%\aac audio converter\unins000.exe
from %LOCALAPPDATA%\aac audio converter\lang\is-akahp.tmp to %LOCALAPPDATA%\aac audio converter\lang\update.log
from %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-1qids.tmp to %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\microsoft.vc90.crt.manifest
from %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-c2kmh.tmp to %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcm90.dll
from %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-9ref3.tmp to %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcp90.dll
from %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\is-2uvc4.tmp to %LOCALAPPDATA%\aac audio converter\microsoft.vc90.crt\msvcr90.dll
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-c0c8h.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\aac.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-a9eet.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\ac3.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-l1a7v.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\aiff.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-9eh3f.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\amr.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-74749.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\ape.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-bporp.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\flac.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-a7cvq.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\wma.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-6sfhj.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\m4a.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-4na1s.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\m4b.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ab43i.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\m4r.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-2apta.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\mka.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-uhgk7.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\mp2.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-4qqm1.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\mp3.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-u7fbc.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\ogg.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-hhaj9.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\ra.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ssud4.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\voc.pf
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-dl39h.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\wav.pf
from %LOCALAPPDATA%\aac audio converter\lang\is-2kdid.tmp to %LOCALAPPDATA%\aac audio converter\lang\musictype.txt
from %LOCALAPPDATA%\aac audio converter\pf\common audio\is-ghvsl.tmp to %LOCALAPPDATA%\aac audio converter\pf\common audio\au.pf
from %LOCALAPPDATA%\aac audio converter\lang\is-jhijp.tmp to %LOCALAPPDATA%\aac audio converter\lang\feedback.dat
from %LOCALAPPDATA%\aac audio converter\is-742jj.tmp to %LOCALAPPDATA%\aac audio converter\rmvbencode.dll
from %LOCALAPPDATA%\aac audio converter\is-uc9fr.tmp to %LOCALAPPDATA%\aac audio converter\msvcp60.dll
from %LOCALAPPDATA%\aac audio converter\is-4inkm.tmp to %LOCALAPPDATA%\aac audio converter\msvcr71.dll
from %LOCALAPPDATA%\aac audio converter\is-stjb3.tmp to %LOCALAPPDATA%\aac audio converter\musiccd.exe
from %LOCALAPPDATA%\aac audio converter\is-cfeif.tmp to %LOCALAPPDATA%\aac audio converter\nvencoderkernel.dll
from %LOCALAPPDATA%\aac audio converter\is-3hibg.tmp to %LOCALAPPDATA%\aac audio converter\ocxhelper.exe
from %LOCALAPPDATA%\aac audio converter\is-p4nds.tmp to %LOCALAPPDATA%\aac audio converter\postproc-52.dll
from %LOCALAPPDATA%\aac audio converter\is-rsjk3.tmp to %LOCALAPPDATA%\aac audio converter\productcontrol.dll
from %LOCALAPPDATA%\aac audio converter\is-semmd.tmp to %LOCALAPPDATA%\aac audio converter\pthreadgc2.dll
from %LOCALAPPDATA%\aac audio converter\is-apsi9.tmp to %LOCALAPPDATA%\aac audio converter\pthreadvc2.dll
from %LOCALAPPDATA%\aac audio converter\is-mtiep.tmp to %LOCALAPPDATA%\aac audio converter\realquickjoin.dll
from %LOCALAPPDATA%\aac audio converter\is-n78qu.tmp to %LOCALAPPDATA%\aac audio converter\rmvbencodesync.dll
from %LOCALAPPDATA%\aac audio converter\lang\is-8tqun.tmp to %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
from %LOCALAPPDATA%\aac audio converter\is-rrrbu.tmp to %LOCALAPPDATA%\aac audio converter\simage.dll
from %LOCALAPPDATA%\aac audio converter\is-re0u4.tmp to %LOCALAPPDATA%\aac audio converter\soundtouch.dll
from %LOCALAPPDATA%\aac audio converter\is-t6hbc.tmp to %LOCALAPPDATA%\aac audio converter\ssleay32.dll
from %LOCALAPPDATA%\aac audio converter\is-4fi8q.tmp to %LOCALAPPDATA%\aac audio converter\swresample-0.dll
from %LOCALAPPDATA%\aac audio converter\is-v8948.tmp to %LOCALAPPDATA%\aac audio converter\uitoolkit.dll.intermediate.manifest
from %LOCALAPPDATA%\aac audio converter\is-jdumm.tmp to %LOCALAPPDATA%\aac audio converter\ve32.dll
from %LOCALAPPDATA%\aac audio converter\is-0e315.tmp to %LOCALAPPDATA%\aac audio converter\ve64.dll
from %LOCALAPPDATA%\aac audio converter\is-knqso.tmp to %LOCALAPPDATA%\aac audio converter\wait.gif
from %LOCALAPPDATA%\aac audio converter\is-o55av.tmp to %LOCALAPPDATA%\aac audio converter\webrtc.dll
from %LOCALAPPDATA%\aac audio converter\is-q3177.tmp to %LOCALAPPDATA%\aac audio converter\wmadecode.dll
from %LOCALAPPDATA%\aac audio converter\lang\is-9hb7h.tmp to %LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
from %LOCALAPPDATA%\aac audio converter\is-gp0sn.tmp to %LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe

Substitutes the following files

%LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.dat
%LOCALAPPDATA%\aac audio converter\lang\audioconverterripper.txt
%LOCALAPPDATA%\aac audio converter\lang\feedback.dat
%LOCALAPPDATA%\aac audio converter\lang\musictype.txt
%LOCALAPPDATA%\aac audio converter\lang\update.log

Miscellaneous

Searches for the following windows

ClassName: '' WindowName: 'v3fc95_AACAC1241FlashFixClass_v3fc95'

Creates and executes the following

'%TEMP%\is-9ut3p.tmp\<File name>.tmp' /SL5="$A024A,3628718,54272,<Full path to file>"
'%LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe' -i
'%LOCALAPPDATA%\aac audio converter\aacaudioconverter.exe' -s

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "AACAC1242"

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней