Trojan.DownLoader22.27696

Technical Information

Malicious functions:

Executes the following:

'<Current directory>\AutoUpdate.exe' NA Menu CA <Current directory>\Menu.exe VA 1.1.1.52 Q
'%TEMP%\arrq.exe'

Modifies file system:

Creates the following files:

<Current directory>\Imagens\Sair\Reiniciar\Restart-100.png.tmp
<Current directory>\Imagens\Sair\Log off\Key-64.png.tmp
<Current directory>\Imagens\Sair\Log off\Key-50.png.tmp
<Current directory>\Imagens\Sair\Sair\Exit-100.png.tmp
<Current directory>\Imagens\Sair\Reiniciar\Restart-64.png.tmp
<Current directory>\Imagens\Sair\Reiniciar\Restart-50.png.tmp
<Current directory>\Imagens\Sair\Log off\Key-100.png.tmp
<Current directory>\Imagens\Relogio\Clock-64.png.tmp
<Current directory>\Imagens\Relogio\Clock-50.png.tmp
<Current directory>\Imagens\Relogio\Clock-100.png.tmp
<Current directory>\Imagens\Sair\Desligar\Shutdown-64.png.tmp
<Current directory>\Imagens\Sair\Desligar\Shutdown-50.png.tmp
<Current directory>\Imagens\Sair\Desligar\Shutdown-100.png.tmp
<Current directory>\Imagens\Sair\Sair\Exit-50.png.tmp
<Current directory>\Imagens\Sim_Nao\Checkmark-26.png.tmp
<Current directory>\Imagens\Sim_Nao\Checkmark-100.png.tmp
<Current directory>\Imagens\Sim_Nao\Checked Checkbox-26.png.tmp
<Current directory>\Imagens\Sim_Nao\Checkmark-64.png.tmp
<Current directory>\Imagens\Sim_Nao\Checkmark-50.png.tmp
<Current directory>\Imagens\Sim_Nao\Checkmark-32.png.tmp
<Current directory>\Imagens\Sair\Voltar Menu\Undo-64.png.tmp
<Current directory>\Imagens\Sair\Sobre\Info-50.png.tmp
<Current directory>\Imagens\Sair\Sobre\Info-100.png.tmp
<Current directory>\Imagens\Sair\Sair\Exit-64.png.tmp
<Current directory>\Imagens\Sair\Voltar Menu\Undo-50.png.tmp
<Current directory>\Imagens\Sair\Voltar Menu\Undo-100.png.tmp
<Current directory>\Imagens\Sair\Sobre\Info-64.png.tmp
<Current directory>\Imagens\Manual\Dossier Folder-50.png.tmp
<Current directory>\Imagens\Manual\Dossier Folder-32.png.tmp
<Current directory>\Imagens\Manual\Dossier Folder-26.png.tmp
<Current directory>\Imagens\NCR\Extranet_PB .png.tmp
<Current directory>\Imagens\NCR\Extranet.png.tmp
<Current directory>\Imagens\Manual\Dossier Folder-64.png.tmp
<Current directory>\Imagens\Manual\Dossier Folder-100.png.tmp
<Current directory>\Imagens\Jelco\Jelco_PB.png.tmp
<Current directory>\Imagens\Jelco\Jelco.png.tmp
<Current directory>\Imagens\Jelco\Facebook.png.tmp
<Current directory>\Imagens\Lixeira\Delete-64.png.tmp
<Current directory>\Imagens\Lixeira\Delete-50.png.tmp
<Current directory>\Imagens\Lixeira\Delete-100.png.tmp
<Current directory>\Imagens\NCR\NCR_LogoOficial.jpg.tmp
<Current directory>\Imagens\Parametros\Edit Property-32.png.tmp
<Current directory>\Imagens\Parametros\Edit Property-26.png.tmp
<Current directory>\Imagens\Parametros\Edit Property-100.png.tmp
<Current directory>\Imagens\Parametros\Plugin.png.tmp
<Current directory>\Imagens\Parametros\Edit Property-64.png.tmp
<Current directory>\Imagens\Parametros\Edit Property-50.png.tmp
<Current directory>\Imagens\NCR\Wiki_PB.png.tmp
<Current directory>\Imagens\NCR\NCR_Logo_Verde.jpeg.tmp
<Current directory>\Imagens\NCR\NCR_logo_branco2.png.tmp
<Current directory>\Imagens\NCR\NCR_logo_branco.png.tmp
<Current directory>\Imagens\NCR\Wiki.png.tmp
<Current directory>\Imagens\NCR\TransactC6pb.png.tmp
<Current directory>\Imagens\NCR\TransactC6.png.tmp
<Current directory>\Imagens\Tools\SuporteJelco.png.tmp
<Current directory>\Imagens\Tools\SQL.png.tmp
<Current directory>\Imagens\Tools\Serial.png.tmp
<Current directory>\Imagens\Windows\Windows Client-50.png.tmp
<Current directory>\Imagens\Windows\Windows Client-100.png.tmp
<Current directory>\Imagens\Windows\Explorer.png.tmp
<Current directory>\Imagens\Tools\MSDOS.png.tmp
<Current directory>\Imagens\Tools\BkpFTP.png.tmp
<Current directory>\Imagens\Tools\Administrative Tools-64.png.tmp
<Current directory>\Imagens\Tools\Administrative Tools-50.png.tmp
<Current directory>\Imagens\Tools\modempreto.png.tmp
<Current directory>\Imagens\Tools\modem.png.tmp
<Current directory>\Imagens\Tools\FTP.png.tmp
<Current directory>\Imagens\Windows\Windows Client-64.png.tmp
%CommonProgramFiles%\systemInfo.jlsFiler
<Current directory>\DotNetZip-qx0nerx4.tmp
<Current directory>\DotNetZip-giebwg2l.tmp
<LS_APPDATA>\Microsoft\Internet Explorer\MSIMGSIZ.DAT
%APPDATA%\MenusystemInfo.jlsFiler
<LS_APPDATA>\MenusystemInfo.jlsFiler
<Current directory>\dados.xml
<Current directory>\Imagens\Windows\Windows8-32.png.tmp
<Current directory>\Imagens\Windows\Windows8-26.png.tmp
<Current directory>\Imagens\Windows\Windows8-100.png.tmp
<Current directory>\Imagens\Windows\windows8_pb-26.png.tmp
<Current directory>\Imagens\Windows\Windows8-64.png.tmp
<Current directory>\Imagens\Windows\Windows8-50.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Assistant-64.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Assistant-50.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Assistant-32.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Maintenance-26.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Maintenance-100.png.tmp
<Current directory>\Imagens\Suporte Tecnico\assistant_pb-26.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Assistant-26.png.tmp
<Current directory>\Imagens\Sim_Nao\Multiply-32.png.tmp
<Current directory>\Imagens\Sim_Nao\Multiply-26.png.tmp
<Current directory>\Imagens\Sim_Nao\Multiply-100.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Assistant-100.png.tmp
<Current directory>\Imagens\Sim_Nao\Multiply-64.png.tmp
<Current directory>\Imagens\Sim_Nao\Multiply-50.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Maintenance-32.png.tmp
<Current directory>\Imagens\Thumbs.db.tmp
<Current directory>\Imagens\Testa Srv\Server-64.png.tmp
<Current directory>\Imagens\Testa Srv\Server-50.png.tmp
<Current directory>\Imagens\Tools\Administrative Tools-32.png.tmp
<Current directory>\Imagens\Tools\Administrative Tools-26.png.tmp
<Current directory>\Imagens\Tools\Administrative Tools-100.png.tmp
<Current directory>\Imagens\Testa Srv\Server-100.png.tmp
<Current directory>\Imagens\Suporte Tecnico\MySuite.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Maintenance-64.png.tmp
<Current directory>\Imagens\Suporte Tecnico\Maintenance-50.png.tmp
<Current directory>\Imagens\Testa Srv\Rede_PC.png.tmp
<Current directory>\Imagens\Testa Srv\Rede.png.tmp
<Current directory>\Imagens\Testa Srv\Computer.png.tmp
<Current directory>\Imagens\Impressoras\Testa Producao\Print-64.png.tmp
<Current directory>\Imagens\Atencao\Whole Hand-64.png.tmp
<Current directory>\Imagens\Atencao\Whole Hand-50.png.tmp
<Current directory>\Imagens\Atencao\Whole Hand-32.png.tmp
<Current directory>\Imagens\Calendario\Calendar-100.png.tmp
<Current directory>\Imagens\Calculadora\Calculator-32.png.tmp
<Current directory>\Imagens\Calculadora\Calculator-26.png.tmp
<Current directory>\Imagens\Atencao\Whole Hand-26.png.tmp
<Current directory>\Imagens\Ajuda\Help-64.png.tmp
<Current directory>\Imagens\Ajuda\Help-50.png.tmp
<Current directory>\Imagens\Ajuda\Help-100.png.tmp
<Current directory>\Imagens\Atencao\Whole Hand-100.png.tmp
<Current directory>\Imagens\Atencao\High Importance-32.png.tmp
<Current directory>\Imagens\Atencao\High Importance-26.png.tmp
<Current directory>\Imagens\Calendario\Calendar-26.png.tmp
<Current directory>\Imagens\Colaboradores\conference_pb-26 .png.tmp
<Current directory>\Imagens\Colaboradores\Conference-64.png.tmp
<Current directory>\Imagens\Colaboradores\Conference-50.png.tmp
<Current directory>\Imagens\Colibri\colibri-amarelo.png.tmp
<Current directory>\Imagens\Colibri\CadastroC6bp.png.tmp
<Current directory>\Imagens\Colibri\CadastroC6.png.tmp
<Current directory>\Imagens\Colaboradores\Conference-32.png.tmp
<Current directory>\Imagens\Calendario\Calendar-64.png.tmp
<Current directory>\Imagens\Calendario\Calendar-50.png.tmp
<Current directory>\Imagens\Calendario\Calendar-32.png.tmp
<Current directory>\Imagens\Colaboradores\Conference-26.png.tmp
<Current directory>\Imagens\Colaboradores\Conference-100.png.tmp
<Current directory>\Imagens\Calendario\calendar_pb-26 .png.tmp
<Current directory>\MonthCalendar.zip
<Current directory>\ExpandableGridView.dll.tmp
<Current directory>\ExpandableGridView.zip
<Current directory>\Microsoft.mshtml.dll.tmp
<Current directory>\Microsoft.mshtml.zip
<Current directory>\MonthCalendar.dll.tmp
%TEMP%\arrq.exe
<Current directory>\AdvancedButton.dll.tmp
<Current directory>\AdvancedButton.zip
<Current directory>\Ionic.Zip.dll
<Current directory>\EditorHTML.dll.tmp
<Current directory>\EditorHTML.zip
<Current directory>\AutoUpdate.exe
<Current directory>\fontes.zip
<Current directory>\Imagens\AcessoRemoto\teamviewer-icon100.png.tmp
<Current directory>\Imagens\AcessoRemoto\LogMeIn-Logo100.png.tmp
<Current directory>\Imagens\AcessoRemoto\LogMeIn-Logo100 cinza.png.tmp
<Current directory>\Update.log
<Current directory>\Imagens\AcessoRemoto\TerminalServer.png.tmp
<Current directory>\Imagens\AcessoRemoto\teamviewer-icon100pretobranco.png.tmp
<Current directory>\Imagens\AcessoRemoto\ammyy100cinza.png.tmp
<Current directory>\Imagens.zip
<Current directory>\Fontes\tahomabd.ttf.tmp
<Current directory>\Fontes\tahoma.ttf.tmp
<Current directory>\Imagens\AcessoRemoto\ammyy100.png.tmp
<Current directory>\Fontes\ARLRDBD.TTF.tmp
<Current directory>\Fontes\ArialNarrow.TTF.tmp
<Current directory>\Imagens\Fone\Phone Office-50.png.tmp
<Current directory>\Imagens\Fone\Phone Office-32.png.tmp
<Current directory>\Imagens\Fone\Phone Office-26.png.tmp
<Current directory>\Imagens\Girassol\Girassol_Logo.png.tmp
<Current directory>\Imagens\Fone\telefone 64.png.tmp
<Current directory>\Imagens\Fone\Phone Office-64.png.tmp
<Current directory>\Imagens\Fone\Phone Office-100.png.tmp
<Current directory>\Imagens\Erro\Error-50 (1).png.tmp
<Current directory>\Imagens\Erro\Error-32.png.tmp
<Current directory>\Imagens\Erro\Error-32 (1).png.tmp
<Current directory>\Imagens\Erro\Error-64.png.tmp
<Current directory>\Imagens\Erro\Error-64 (1).png.tmp
<Current directory>\Imagens\Erro\Error-50.png.tmp
<Current directory>\Imagens\Girassol\Girassol_pb.png.tmp
<Current directory>\Imagens\Impressoras\Testa ECF\Print-64.png.tmp
<Current directory>\Imagens\Impressoras\Testa ECF\Print-50.png.tmp
<Current directory>\Imagens\Impressoras\Testa ECF\Print-100.png.tmp
<Current directory>\Imagens\Impressoras\Testa Producao\Print-50.png.tmp
<Current directory>\Imagens\Impressoras\Testa Producao\Print-100.png.tmp
<Current directory>\Imagens\Impressoras\Testa Producao\Impressora.png.tmp
<Current directory>\Imagens\Impressoras\Testa ECF\ECF_Epson.png.tmp
<Current directory>\Imagens\Home\Home-64.png.tmp
<Current directory>\Imagens\Home\Home-50.png.tmp
<Current directory>\Imagens\Home\Home-100.png.tmp
<Current directory>\Imagens\Impressoras\Testa ECF\ECF.png.tmp
<Current directory>\Imagens\Impressoras\Testa ECF\1437003083_checkWrite.png.tmp
<Current directory>\Imagens\Impressoras\Testa ECF\1437003083_check.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Cloud.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Cinza.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Azul.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Logo branco.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Lilas.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Laranja.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Amarelo.png.tmp
<Current directory>\Imagens\Colibri\colibri-vermelho.png.tmp
<Current directory>\Imagens\Colibri\colibri-verde.png.tmp
<Current directory>\Imagens\Colibri\colibri-azul.png.tmp
<Current directory>\Imagens\Colibri\colibriBranco256Azul.png.tmp
<Current directory>\Imagens\Colibri\colibriBranco256.png.tmp
<Current directory>\Imagens\Colibri\colibriBranco.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Logo preto branco.png.tmp
<Current directory>\Imagens\Erro\Error-100 (1).png.tmp
<Current directory>\Imagens\Colibri\VendasC6pb.png.tmp
<Current directory>\Imagens\Colibri\VendasC6.png.tmp
<Current directory>\Imagens\Erro\Error-26.png.tmp
<Current directory>\Imagens\Erro\Error-26 (1).png.tmp
<Current directory>\Imagens\Erro\Error-100.png.tmp
<Current directory>\Imagens\Colibri\ResetC6bp.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Vermelho.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Verde.png.tmp
<Current directory>\Imagens\Colibri\Colibri_Logo.png.tmp
<Current directory>\Imagens\Colibri\ResetC6.png.tmp
<Current directory>\Imagens\Colibri\RelatoriosC6pb.png.tmp
<Current directory>\Imagens\Colibri\RelatoriosC6.png.tmp

Sets the 'hidden' attribute to the following files:

<Current directory>\Imagens\Thumbs.db

Deletes the following files:

<Current directory>\Imagens.zip
<Current directory>\fontes.zip
<Current directory>\BackupConfig.zip.xpwexfnu.iby
<Current directory>\dados.xml
<Current directory>\Microsoft.mshtml.zip
<Current directory>\EditorHTML.zip
<Current directory>\AdvancedButton.zip
<Current directory>\MonthCalendar.zip
<Current directory>\ExpandableGridView.zip

Moves the following files:

from <Current directory>\Imagens\Sair\Reiniciar\Restart-100.png.tmp to <Current directory>\Imagens\Sair\Reiniciar\Restart-100.png
from <Current directory>\Imagens\Sair\Log off\Key-64.png.tmp to <Current directory>\Imagens\Sair\Log off\Key-64.png
from <Current directory>\Imagens\Sair\Log off\Key-50.png.tmp to <Current directory>\Imagens\Sair\Log off\Key-50.png
from <Current directory>\Imagens\Sair\Sair\Exit-100.png.tmp to <Current directory>\Imagens\Sair\Sair\Exit-100.png
from <Current directory>\Imagens\Sair\Reiniciar\Restart-64.png.tmp to <Current directory>\Imagens\Sair\Reiniciar\Restart-64.png
from <Current directory>\Imagens\Sair\Reiniciar\Restart-50.png.tmp to <Current directory>\Imagens\Sair\Reiniciar\Restart-50.png
from <Current directory>\Imagens\Sair\Desligar\Shutdown-100.png.tmp to <Current directory>\Imagens\Sair\Desligar\Shutdown-100.png
from <Current directory>\Imagens\Relogio\Clock-64.png.tmp to <Current directory>\Imagens\Relogio\Clock-64.png
from <Current directory>\Imagens\Relogio\Clock-50.png.tmp to <Current directory>\Imagens\Relogio\Clock-50.png
from <Current directory>\Imagens\Sair\Log off\Key-100.png.tmp to <Current directory>\Imagens\Sair\Log off\Key-100.png
from <Current directory>\Imagens\Sair\Desligar\Shutdown-64.png.tmp to <Current directory>\Imagens\Sair\Desligar\Shutdown-64.png
from <Current directory>\Imagens\Sair\Desligar\Shutdown-50.png.tmp to <Current directory>\Imagens\Sair\Desligar\Shutdown-50.png
from <Current directory>\Imagens\Sair\Sair\Exit-50.png.tmp to <Current directory>\Imagens\Sair\Sair\Exit-50.png
from <Current directory>\Imagens\Sim_Nao\Checkmark-100.png.tmp to <Current directory>\Imagens\Sim_Nao\Checkmark-100.png
from <Current directory>\Imagens\Sim_Nao\Checked Checkbox-26.png.tmp to <Current directory>\Imagens\Sim_Nao\Checked Checkbox-26.png
from <Current directory>\Imagens\Sair\Voltar Menu\Undo-64.png.tmp to <Current directory>\Imagens\Sair\Voltar Menu\Undo-64.png
from <Current directory>\Imagens\Sim_Nao\Checkmark-50.png.tmp to <Current directory>\Imagens\Sim_Nao\Checkmark-50.png
from <Current directory>\Imagens\Sim_Nao\Checkmark-32.png.tmp to <Current directory>\Imagens\Sim_Nao\Checkmark-32.png
from <Current directory>\Imagens\Sim_Nao\Checkmark-26.png.tmp to <Current directory>\Imagens\Sim_Nao\Checkmark-26.png
from <Current directory>\Imagens\Sair\Sobre\Info-50.png.tmp to <Current directory>\Imagens\Sair\Sobre\Info-50.png
from <Current directory>\Imagens\Sair\Sobre\Info-100.png.tmp to <Current directory>\Imagens\Sair\Sobre\Info-100.png
from <Current directory>\Imagens\Sair\Sair\Exit-64.png.tmp to <Current directory>\Imagens\Sair\Sair\Exit-64.png
from <Current directory>\Imagens\Sair\Voltar Menu\Undo-50.png.tmp to <Current directory>\Imagens\Sair\Voltar Menu\Undo-50.png
from <Current directory>\Imagens\Sair\Voltar Menu\Undo-100.png.tmp to <Current directory>\Imagens\Sair\Voltar Menu\Undo-100.png
from <Current directory>\Imagens\Sair\Sobre\Info-64.png.tmp to <Current directory>\Imagens\Sair\Sobre\Info-64.png
from <Current directory>\Imagens\NCR\Extranet.png.tmp to <Current directory>\Imagens\NCR\Extranet.png
from <Current directory>\Imagens\Manual\Dossier Folder-64.png.tmp to <Current directory>\Imagens\Manual\Dossier Folder-64.png
from <Current directory>\Imagens\Manual\Dossier Folder-50.png.tmp to <Current directory>\Imagens\Manual\Dossier Folder-50.png
from <Current directory>\Imagens\NCR\NCR_logo_branco.png.tmp to <Current directory>\Imagens\NCR\NCR_logo_branco.png
from <Current directory>\Imagens\NCR\NCR_LogoOficial.jpg.tmp to <Current directory>\Imagens\NCR\NCR_LogoOficial.jpg
from <Current directory>\Imagens\NCR\Extranet_PB .png.tmp to <Current directory>\Imagens\NCR\Extranet_PB .png
from <Current directory>\Imagens\Lixeira\Delete-64.png.tmp to <Current directory>\Imagens\Lixeira\Delete-64.png
from <Current directory>\Imagens\Lixeira\Delete-50.png.tmp to <Current directory>\Imagens\Lixeira\Delete-50.png
from <Current directory>\Imagens\Lixeira\Delete-100.png.tmp to <Current directory>\Imagens\Lixeira\Delete-100.png
from <Current directory>\Imagens\Manual\Dossier Folder-32.png.tmp to <Current directory>\Imagens\Manual\Dossier Folder-32.png
from <Current directory>\Imagens\Manual\Dossier Folder-26.png.tmp to <Current directory>\Imagens\Manual\Dossier Folder-26.png
from <Current directory>\Imagens\Manual\Dossier Folder-100.png.tmp to <Current directory>\Imagens\Manual\Dossier Folder-100.png
from <Current directory>\Imagens\NCR\NCR_logo_branco2.png.tmp to <Current directory>\Imagens\NCR\NCR_logo_branco2.png
from <Current directory>\Imagens\Parametros\Edit Property-50.png.tmp to <Current directory>\Imagens\Parametros\Edit Property-50.png
from <Current directory>\Imagens\Parametros\Edit Property-32.png.tmp to <Current directory>\Imagens\Parametros\Edit Property-32.png
from <Current directory>\Imagens\Parametros\Edit Property-26.png.tmp to <Current directory>\Imagens\Parametros\Edit Property-26.png
from <Current directory>\Imagens\Relogio\Clock-100.png.tmp to <Current directory>\Imagens\Relogio\Clock-100.png
from <Current directory>\Imagens\Parametros\Plugin.png.tmp to <Current directory>\Imagens\Parametros\Plugin.png
from <Current directory>\Imagens\Parametros\Edit Property-64.png.tmp to <Current directory>\Imagens\Parametros\Edit Property-64.png
from <Current directory>\Imagens\NCR\TransactC6pb.png.tmp to <Current directory>\Imagens\NCR\TransactC6pb.png
from <Current directory>\Imagens\NCR\TransactC6.png.tmp to <Current directory>\Imagens\NCR\TransactC6.png
from <Current directory>\Imagens\NCR\NCR_Logo_Verde.jpeg.tmp to <Current directory>\Imagens\NCR\NCR_Logo_Verde.jpeg
from <Current directory>\Imagens\Parametros\Edit Property-100.png.tmp to <Current directory>\Imagens\Parametros\Edit Property-100.png
from <Current directory>\Imagens\NCR\Wiki_PB.png.tmp to <Current directory>\Imagens\NCR\Wiki_PB.png
from <Current directory>\Imagens\NCR\Wiki.png.tmp to <Current directory>\Imagens\NCR\Wiki.png
from <Current directory>\Imagens\Tools\modempreto.png.tmp to <Current directory>\Imagens\Tools\modempreto.png
from <Current directory>\Imagens\Tools\modem.png.tmp to <Current directory>\Imagens\Tools\modem.png
from <Current directory>\Imagens\Tools\FTP.png.tmp to <Current directory>\Imagens\Tools\FTP.png
from <Current directory>\Imagens\Tools\SQL.png.tmp to <Current directory>\Imagens\Tools\SQL.png
from <Current directory>\Imagens\Tools\Serial.png.tmp to <Current directory>\Imagens\Tools\Serial.png
from <Current directory>\Imagens\Tools\MSDOS.png.tmp to <Current directory>\Imagens\Tools\MSDOS.png
from <Current directory>\Imagens\Tools\Administrative Tools-32.png.tmp to <Current directory>\Imagens\Tools\Administrative Tools-32.png
from <Current directory>\Imagens\Tools\Administrative Tools-26.png.tmp to <Current directory>\Imagens\Tools\Administrative Tools-26.png
from <Current directory>\Imagens\Tools\Administrative Tools-100.png.tmp to <Current directory>\Imagens\Tools\Administrative Tools-100.png
from <Current directory>\Imagens\Tools\BkpFTP.png.tmp to <Current directory>\Imagens\Tools\BkpFTP.png
from <Current directory>\Imagens\Tools\Administrative Tools-64.png.tmp to <Current directory>\Imagens\Tools\Administrative Tools-64.png
from <Current directory>\Imagens\Tools\Administrative Tools-50.png.tmp to <Current directory>\Imagens\Tools\Administrative Tools-50.png
from <Current directory>\Imagens\Tools\SuporteJelco.png.tmp to <Current directory>\Imagens\Tools\SuporteJelco.png
from <Current directory>\Imagens\Windows\Windows8-64.png.tmp to <Current directory>\Imagens\Windows\Windows8-64.png
from <Current directory>\Imagens\Windows\Windows8-50.png.tmp to <Current directory>\Imagens\Windows\Windows8-50.png
from <Current directory>\Imagens\Windows\Windows8-32.png.tmp to <Current directory>\Imagens\Windows\Windows8-32.png
from <Current directory>\BackupConfig.zip to <Current directory>\BackupConfig.zip.xpwexfnu.iby
from <Current directory>\DotNetZip-giebwg2l.tmp to <Current directory>\BackupConfig.zip
from <Current directory>\Imagens\Windows\windows8_pb-26.png.tmp to <Current directory>\Imagens\Windows\windows8_pb-26.png
from <Current directory>\Imagens\Windows\Windows Client-50.png.tmp to <Current directory>\Imagens\Windows\Windows Client-50.png
from <Current directory>\Imagens\Windows\Windows Client-100.png.tmp to <Current directory>\Imagens\Windows\Windows Client-100.png
from <Current directory>\Imagens\Windows\Explorer.png.tmp to <Current directory>\Imagens\Windows\Explorer.png
from <Current directory>\Imagens\Windows\Windows8-26.png.tmp to <Current directory>\Imagens\Windows\Windows8-26.png
from <Current directory>\Imagens\Windows\Windows8-100.png.tmp to <Current directory>\Imagens\Windows\Windows8-100.png
from <Current directory>\Imagens\Windows\Windows Client-64.png.tmp to <Current directory>\Imagens\Windows\Windows Client-64.png
from <Current directory>\Imagens\Suporte Tecnico\Assistant-32.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Assistant-32.png
from <Current directory>\Imagens\Suporte Tecnico\Assistant-26.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Assistant-26.png
from <Current directory>\Imagens\Suporte Tecnico\Assistant-100.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Assistant-100.png
from <Current directory>\Imagens\Suporte Tecnico\assistant_pb-26.png.tmp to <Current directory>\Imagens\Suporte Tecnico\assistant_pb-26.png
from <Current directory>\Imagens\Suporte Tecnico\Assistant-64.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Assistant-64.png
from <Current directory>\Imagens\Suporte Tecnico\Assistant-50.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Assistant-50.png
from <Current directory>\Imagens\Sim_Nao\Multiply-26.png.tmp to <Current directory>\Imagens\Sim_Nao\Multiply-26.png
from <Current directory>\Imagens\Sim_Nao\Multiply-100.png.tmp to <Current directory>\Imagens\Sim_Nao\Multiply-100.png
from <Current directory>\Imagens\Sim_Nao\Checkmark-64.png.tmp to <Current directory>\Imagens\Sim_Nao\Checkmark-64.png
from <Current directory>\Imagens\Sim_Nao\Multiply-64.png.tmp to <Current directory>\Imagens\Sim_Nao\Multiply-64.png
from <Current directory>\Imagens\Sim_Nao\Multiply-50.png.tmp to <Current directory>\Imagens\Sim_Nao\Multiply-50.png
from <Current directory>\Imagens\Sim_Nao\Multiply-32.png.tmp to <Current directory>\Imagens\Sim_Nao\Multiply-32.png
from <Current directory>\Imagens\Suporte Tecnico\Maintenance-100.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Maintenance-100.png
from <Current directory>\Imagens\Testa Srv\Server-100.png.tmp to <Current directory>\Imagens\Testa Srv\Server-100.png
from <Current directory>\Imagens\Testa Srv\Rede_PC.png.tmp to <Current directory>\Imagens\Testa Srv\Rede_PC.png
from <Current directory>\Imagens\Testa Srv\Rede.png.tmp to <Current directory>\Imagens\Testa Srv\Rede.png
from <Current directory>\Imagens\Thumbs.db.tmp to <Current directory>\Imagens\Thumbs.db
from <Current directory>\Imagens\Testa Srv\Server-64.png.tmp to <Current directory>\Imagens\Testa Srv\Server-64.png
from <Current directory>\Imagens\Testa Srv\Server-50.png.tmp to <Current directory>\Imagens\Testa Srv\Server-50.png
from <Current directory>\Imagens\Suporte Tecnico\Maintenance-50.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Maintenance-50.png
from <Current directory>\Imagens\Suporte Tecnico\Maintenance-32.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Maintenance-32.png
from <Current directory>\Imagens\Suporte Tecnico\Maintenance-26.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Maintenance-26.png
from <Current directory>\Imagens\Testa Srv\Computer.png.tmp to <Current directory>\Imagens\Testa Srv\Computer.png
from <Current directory>\Imagens\Suporte Tecnico\MySuite.png.tmp to <Current directory>\Imagens\Suporte Tecnico\MySuite.png
from <Current directory>\Imagens\Suporte Tecnico\Maintenance-64.png.tmp to <Current directory>\Imagens\Suporte Tecnico\Maintenance-64.png
from <Current directory>\Imagens\Jelco\Jelco_PB.png.tmp to <Current directory>\Imagens\Jelco\Jelco_PB.png
from <Current directory>\Imagens\Calendario\calendar_pb-26 .png.tmp to <Current directory>\Imagens\Calendario\calendar_pb-26 .png
from <Current directory>\Imagens\Calendario\Calendar-64.png.tmp to <Current directory>\Imagens\Calendario\Calendar-64.png
from <Current directory>\Imagens\Calendario\Calendar-50.png.tmp to <Current directory>\Imagens\Calendario\Calendar-50.png
from <Current directory>\Imagens\Colaboradores\Conference-32.png.tmp to <Current directory>\Imagens\Colaboradores\Conference-32.png
from <Current directory>\Imagens\Colaboradores\Conference-26.png.tmp to <Current directory>\Imagens\Colaboradores\Conference-26.png
from <Current directory>\Imagens\Colaboradores\Conference-100.png.tmp to <Current directory>\Imagens\Colaboradores\Conference-100.png
from <Current directory>\Imagens\Calculadora\Calculator-32.png.tmp to <Current directory>\Imagens\Calculadora\Calculator-32.png
from <Current directory>\Imagens\Calculadora\Calculator-26.png.tmp to <Current directory>\Imagens\Calculadora\Calculator-26.png
from <Current directory>\Imagens\Atencao\Whole Hand-64.png.tmp to <Current directory>\Imagens\Atencao\Whole Hand-64.png
from <Current directory>\Imagens\Calendario\Calendar-32.png.tmp to <Current directory>\Imagens\Calendario\Calendar-32.png
from <Current directory>\Imagens\Calendario\Calendar-26.png.tmp to <Current directory>\Imagens\Calendario\Calendar-26.png
from <Current directory>\Imagens\Calendario\Calendar-100.png.tmp to <Current directory>\Imagens\Calendario\Calendar-100.png
from <Current directory>\Imagens\Colaboradores\Conference-50.png.tmp to <Current directory>\Imagens\Colaboradores\Conference-50.png
from <Current directory>\Imagens\Colibri\colibriBranco.png.tmp to <Current directory>\Imagens\Colibri\colibriBranco.png
from <Current directory>\Imagens\Colibri\colibri-vermelho.png.tmp to <Current directory>\Imagens\Colibri\colibri-vermelho.png
from <Current directory>\Imagens\Colibri\colibri-verde.png.tmp to <Current directory>\Imagens\Colibri\colibri-verde.png
from <Current directory>\Imagens\Colibri\Colibri_Amarelo.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Amarelo.png
from <Current directory>\Imagens\Colibri\colibriBranco256Azul.png.tmp to <Current directory>\Imagens\Colibri\colibriBranco256Azul.png
from <Current directory>\Imagens\Colibri\colibriBranco256.png.tmp to <Current directory>\Imagens\Colibri\colibriBranco256.png
from <Current directory>\Imagens\Colibri\CadastroC6.png.tmp to <Current directory>\Imagens\Colibri\CadastroC6.png
from <Current directory>\Imagens\Colaboradores\conference_pb-26 .png.tmp to <Current directory>\Imagens\Colaboradores\conference_pb-26 .png
from <Current directory>\Imagens\Colaboradores\Conference-64.png.tmp to <Current directory>\Imagens\Colaboradores\Conference-64.png
from <Current directory>\Imagens\Colibri\colibri-azul.png.tmp to <Current directory>\Imagens\Colibri\colibri-azul.png
from <Current directory>\Imagens\Colibri\colibri-amarelo.png.tmp to <Current directory>\Imagens\Colibri\colibri-amarelo.png
from <Current directory>\Imagens\Colibri\CadastroC6bp.png.tmp to <Current directory>\Imagens\Colibri\CadastroC6bp.png
from <Current directory>\Fontes\ARLRDBD.TTF.tmp to <Current directory>\Fontes\ARLRDBD.TTF
from <Current directory>\Fontes\ArialNarrow.TTF.tmp to <Current directory>\Fontes\ArialNarrow.TTF
from <Current directory>\Fontes\tahomabd.ttf.tmp to <Current directory>\Fontes\tahomabd.ttf
from <Current directory>\Imagens\AcessoRemoto\LogMeIn-Logo100 cinza.png.tmp to <Current directory>\Imagens\AcessoRemoto\LogMeIn-Logo100 cinza.png
from <Current directory>\Imagens\AcessoRemoto\ammyy100cinza.png.tmp to <Current directory>\Imagens\AcessoRemoto\ammyy100cinza.png
from <Current directory>\Imagens\AcessoRemoto\ammyy100.png.tmp to <Current directory>\Imagens\AcessoRemoto\ammyy100.png
from <Current directory>\ExpandableGridView.dll.tmp to <Current directory>\ExpandableGridView.dll
from <Current directory>\EditorHTML.dll.tmp to <Current directory>\EditorHTML.dll
from <Current directory>\AdvancedButton.dll.tmp to <Current directory>\AdvancedButton.dll
from <Current directory>\Fontes\tahoma.ttf.tmp to <Current directory>\Fontes\tahoma.ttf
from <Current directory>\Microsoft.mshtml.dll.tmp to <Current directory>\Microsoft.mshtml.dll
from <Current directory>\MonthCalendar.dll.tmp to <Current directory>\MonthCalendar.dll
from <Current directory>\Imagens\AcessoRemoto\LogMeIn-Logo100.png.tmp to <Current directory>\Imagens\AcessoRemoto\LogMeIn-Logo100.png
from <Current directory>\Imagens\Atencao\Whole Hand-100.png.tmp to <Current directory>\Imagens\Atencao\Whole Hand-100.png
from <Current directory>\Imagens\Atencao\High Importance-32.png.tmp to <Current directory>\Imagens\Atencao\High Importance-32.png
from <Current directory>\Imagens\Atencao\High Importance-26.png.tmp to <Current directory>\Imagens\Atencao\High Importance-26.png
from <Current directory>\Imagens\Atencao\Whole Hand-50.png.tmp to <Current directory>\Imagens\Atencao\Whole Hand-50.png
from <Current directory>\Imagens\Atencao\Whole Hand-32.png.tmp to <Current directory>\Imagens\Atencao\Whole Hand-32.png
from <Current directory>\Imagens\Atencao\Whole Hand-26.png.tmp to <Current directory>\Imagens\Atencao\Whole Hand-26.png
from <Current directory>\Imagens\AcessoRemoto\TerminalServer.png.tmp to <Current directory>\Imagens\AcessoRemoto\TerminalServer.png
from <Current directory>\Imagens\AcessoRemoto\teamviewer-icon100pretobranco.png.tmp to <Current directory>\Imagens\AcessoRemoto\teamviewer-icon100pretobranco.png
from <Current directory>\Imagens\AcessoRemoto\teamviewer-icon100.png.tmp to <Current directory>\Imagens\AcessoRemoto\teamviewer-icon100.png
from <Current directory>\Imagens\Ajuda\Help-64.png.tmp to <Current directory>\Imagens\Ajuda\Help-64.png
from <Current directory>\Imagens\Ajuda\Help-50.png.tmp to <Current directory>\Imagens\Ajuda\Help-50.png
from <Current directory>\Imagens\Ajuda\Help-100.png.tmp to <Current directory>\Imagens\Ajuda\Help-100.png
from <Current directory>\Imagens\Girassol\Girassol_pb.png.tmp to <Current directory>\Imagens\Girassol\Girassol_pb.png
from <Current directory>\Imagens\Girassol\Girassol_Logo.png.tmp to <Current directory>\Imagens\Girassol\Girassol_Logo.png
from <Current directory>\Imagens\Fone\telefone 64.png.tmp to <Current directory>\Imagens\Fone\telefone 64.png
from <Current directory>\Imagens\Home\Home-64.png.tmp to <Current directory>\Imagens\Home\Home-64.png
from <Current directory>\Imagens\Home\Home-50.png.tmp to <Current directory>\Imagens\Home\Home-50.png
from <Current directory>\Imagens\Home\Home-100.png.tmp to <Current directory>\Imagens\Home\Home-100.png
from <Current directory>\Imagens\Fone\Phone Office-26.png.tmp to <Current directory>\Imagens\Fone\Phone Office-26.png
from <Current directory>\Imagens\Fone\Phone Office-100.png.tmp to <Current directory>\Imagens\Fone\Phone Office-100.png
from <Current directory>\Imagens\Erro\Error-64.png.tmp to <Current directory>\Imagens\Erro\Error-64.png
from <Current directory>\Imagens\Fone\Phone Office-64.png.tmp to <Current directory>\Imagens\Fone\Phone Office-64.png
from <Current directory>\Imagens\Fone\Phone Office-50.png.tmp to <Current directory>\Imagens\Fone\Phone Office-50.png
from <Current directory>\Imagens\Fone\Phone Office-32.png.tmp to <Current directory>\Imagens\Fone\Phone Office-32.png
from <Current directory>\Imagens\Impressoras\Testa ECF\1437003083_check.png.tmp to <Current directory>\Imagens\Impressoras\Testa ECF\1437003083_check.png
from <Current directory>\Imagens\Impressoras\Testa Producao\Print-50.png.tmp to <Current directory>\Imagens\Impressoras\Testa Producao\Print-50.png
from <Current directory>\Imagens\Impressoras\Testa Producao\Print-100.png.tmp to <Current directory>\Imagens\Impressoras\Testa Producao\Print-100.png
from <Current directory>\Imagens\Impressoras\Testa Producao\Impressora.png.tmp to <Current directory>\Imagens\Impressoras\Testa Producao\Impressora.png
from <Current directory>\Imagens\Jelco\Jelco.png.tmp to <Current directory>\Imagens\Jelco\Jelco.png
from <Current directory>\Imagens\Jelco\Facebook.png.tmp to <Current directory>\Imagens\Jelco\Facebook.png
from <Current directory>\Imagens\Impressoras\Testa Producao\Print-64.png.tmp to <Current directory>\Imagens\Impressoras\Testa Producao\Print-64.png
from <Current directory>\Imagens\Impressoras\Testa ECF\ECF_Epson.png.tmp to <Current directory>\Imagens\Impressoras\Testa ECF\ECF_Epson.png
from <Current directory>\Imagens\Impressoras\Testa ECF\ECF.png.tmp to <Current directory>\Imagens\Impressoras\Testa ECF\ECF.png
from <Current directory>\Imagens\Impressoras\Testa ECF\1437003083_checkWrite.png.tmp to <Current directory>\Imagens\Impressoras\Testa ECF\1437003083_checkWrite.png
from <Current directory>\Imagens\Impressoras\Testa ECF\Print-64.png.tmp to <Current directory>\Imagens\Impressoras\Testa ECF\Print-64.png
from <Current directory>\Imagens\Impressoras\Testa ECF\Print-50.png.tmp to <Current directory>\Imagens\Impressoras\Testa ECF\Print-50.png
from <Current directory>\Imagens\Impressoras\Testa ECF\Print-100.png.tmp to <Current directory>\Imagens\Impressoras\Testa ECF\Print-100.png
from <Current directory>\Imagens\Colibri\Colibri_Verde.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Verde.png
from <Current directory>\Imagens\Colibri\Colibri_Logo.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Logo.png
from <Current directory>\Imagens\Colibri\Colibri_Logo preto branco.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Logo preto branco.png
from <Current directory>\Imagens\Colibri\RelatoriosC6pb.png.tmp to <Current directory>\Imagens\Colibri\RelatoriosC6pb.png
from <Current directory>\Imagens\Colibri\RelatoriosC6.png.tmp to <Current directory>\Imagens\Colibri\RelatoriosC6.png
from <Current directory>\Imagens\Colibri\Colibri_Vermelho.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Vermelho.png
from <Current directory>\Imagens\Colibri\Colibri_Cloud.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Cloud.png
from <Current directory>\Imagens\Colibri\Colibri_Cinza.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Cinza.png
from <Current directory>\Imagens\Colibri\Colibri_Azul.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Azul.png
from <Current directory>\Imagens\Colibri\Colibri_Logo branco.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Logo branco.png
from <Current directory>\Imagens\Colibri\Colibri_Lilas.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Lilas.png
from <Current directory>\Imagens\Colibri\Colibri_Laranja.png.tmp to <Current directory>\Imagens\Colibri\Colibri_Laranja.png
from <Current directory>\Imagens\Colibri\ResetC6.png.tmp to <Current directory>\Imagens\Colibri\ResetC6.png
from <Current directory>\Imagens\Erro\Error-32.png.tmp to <Current directory>\Imagens\Erro\Error-32.png
from <Current directory>\Imagens\Erro\Error-32 (1).png.tmp to <Current directory>\Imagens\Erro\Error-32 (1).png
from <Current directory>\Imagens\Erro\Error-26.png.tmp to <Current directory>\Imagens\Erro\Error-26.png
from <Current directory>\Imagens\Erro\Error-64 (1).png.tmp to <Current directory>\Imagens\Erro\Error-64 (1).png
from <Current directory>\Imagens\Erro\Error-50.png.tmp to <Current directory>\Imagens\Erro\Error-50.png
from <Current directory>\Imagens\Erro\Error-50 (1).png.tmp to <Current directory>\Imagens\Erro\Error-50 (1).png
from <Current directory>\Imagens\Colibri\VendasC6pb.png.tmp to <Current directory>\Imagens\Colibri\VendasC6pb.png
from <Current directory>\Imagens\Colibri\VendasC6.png.tmp to <Current directory>\Imagens\Colibri\VendasC6.png
from <Current directory>\Imagens\Colibri\ResetC6bp.png.tmp to <Current directory>\Imagens\Colibri\ResetC6bp.png
from <Current directory>\Imagens\Erro\Error-26 (1).png.tmp to <Current directory>\Imagens\Erro\Error-26 (1).png
from <Current directory>\Imagens\Erro\Error-100.png.tmp to <Current directory>\Imagens\Erro\Error-100.png
from <Current directory>\Imagens\Erro\Error-100 (1).png.tmp to <Current directory>\Imagens\Erro\Error-100 (1).png

Network activity:

Connects to:

'www.je###oz.com.br':80
'wp#d':80

TCP:

HTTP GET requests:

http://www.je###oz.com.br/ws/seuip.php
http://www.je###oz.com.br/jelco/VersaoApp.php?No#########################################################################
http://11#.#11.111.1/wpad.dat via wp#d

HTTP POST requests:

http://www.je###oz.com.br/ws/ValidaLicenca.php

UDP:

DNS ASK www.je###oz.com.br
DNS ASK wp#d

Miscellaneous:

Searches for the following windows:

ClassName: 'MS_WebcheckMonitor' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'Shell_TrayWnd' WindowName: ''

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial