Trojan.Siggen22.18452

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-0tvau.tmp\<File name>.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-chcel.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-8hq6b.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-efcch.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-c4hgk.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-jp703.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-do9ue.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-4tcgb.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-2gah6.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-th2tj.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-9tt2h.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-0rljc.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-574ec.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-4njae.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-mrfct.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-gvhse.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-aiuqr.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-meltr.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-3surp.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-6oj01.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-5r4jn.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-n1d33.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-08the.tmp
%ProgramFiles(x86)%\audio recorder\is-ssqg5.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-d5bgb.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-ceppe.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-693k3.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-h65cf.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-p9oij.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-49lk3.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-c41e1.tmp
%ProgramFiles(x86)%\audio recorder\pf\is-uhrsf.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-c47ml.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-ge241.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-gdgq1.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-et7mt.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-u60c5.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-9iv5m.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-4gihk.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-u8qag.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-msbp6.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-cist6.tmp
%ProgramFiles(x86)%\audio recorder\audiorecorder.exe
%ProgramFiles(x86)%\audio recorder\audiences\is-hhf3a.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-tnog7.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-sgno0.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-asd34.tmp
%ProgramFiles(x86)%\audio recorder\is-qctg2.tmp
%ProgramFiles(x86)%\audio recorder\unins000.dat
%ProgramFiles(x86)%\audio recorder\audiences\is-mikgm.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-mirit.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-2d93d.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-0tpdo.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-kmeel.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-i1lsm.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-f5at5.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-p7l89.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-mej3p.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-9c3ea.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-grerm.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-9cejq.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-6guc9.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-d8871.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-lnk57.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-k5ghg.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-mdn8d.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-c9la9.tmp
%ProgramFiles(x86)%\audio recorder\audiences\is-9rvtq.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-sggup.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-2qg9t.tmp
%ProgramFiles(x86)%\audio recorder\is-8sgbu.tmp
%ProgramFiles(x86)%\audio recorder\is-c1632.tmp
%ProgramFiles(x86)%\audio recorder\is-rfoba.tmp
%ProgramFiles(x86)%\audio recorder\is-ddgce.tmp
%ProgramFiles(x86)%\audio recorder\is-79u2a.tmp
%ProgramFiles(x86)%\audio recorder\is-jj63a.tmp
%ProgramFiles(x86)%\audio recorder\is-rcrkp.tmp
%ProgramFiles(x86)%\audio recorder\is-fgk8h.tmp
%ProgramFiles(x86)%\audio recorder\is-p0p2t.tmp
%ProgramFiles(x86)%\audio recorder\is-rtls1.tmp
%ProgramFiles(x86)%\audio recorder\is-dsvj4.tmp
%ProgramFiles(x86)%\audio recorder\is-tjav6.tmp
%ProgramFiles(x86)%\audio recorder\is-aahc2.tmp
%ProgramFiles(x86)%\audio recorder\is-72a6f.tmp
%ProgramFiles(x86)%\audio recorder\is-7k7jl.tmp
%ProgramFiles(x86)%\audio recorder\is-m6puj.tmp
%ProgramFiles(x86)%\audio recorder\is-bcavu.tmp
%ProgramFiles(x86)%\audio recorder\is-kalfr.tmp
%ProgramFiles(x86)%\audio recorder\is-nhpjf.tmp
%ProgramFiles(x86)%\audio recorder\is-6g0t8.tmp
%ProgramFiles(x86)%\audio recorder\is-fvg4s.tmp
%ProgramFiles(x86)%\audio recorder\is-4jhpe.tmp
%ProgramFiles(x86)%\audio recorder\is-ll8i0.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-0sen5.tmp
%ProgramFiles(x86)%\audio recorder\is-sr351.tmp
%TEMP%\is-klaof.tmp\_isetup\_iscrypt.dll
%TEMP%\is-klaof.tmp\_isetup\_isdecmp.dll
%TEMP%\is-klaof.tmp\_isetup\_shfoldr.dll
%TEMP%\is-klaof.tmp\_isetup\_setup64.tmp
%TEMP%\is-klaof.tmp\_isetup\_regdll.tmp
%ProgramFiles(x86)%\audio recorder\is-ipgrm.tmp
%ProgramFiles(x86)%\audio recorder\is-spn2g.tmp
%ProgramFiles(x86)%\audio recorder\is-nfklv.tmp
%ProgramFiles(x86)%\audio recorder\is-uj25j.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-s7lja.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-sl1ku.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-fn8nd.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-d1a6v.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-apg53.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-a8ecr.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-annag.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-6nhdf.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-kflpo.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-rov36.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-j4a4m.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-p7o7c.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-khot2.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-jg7io.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-cmbk1.tmp
%ProgramFiles(x86)%\audio recorder\is-43abd.tmp
%ProgramFiles(x86)%\audio recorder\is-s08ko.tmp
%ProgramFiles(x86)%\audio recorder\is-k0qsl.tmp
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-2kast.tmp
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-b2g86.tmp
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-4d0pg.tmp
%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-hnttd.tmp
%ProgramFiles(x86)%\audio recorder\is-hn60r.tmp
%ProgramFiles(x86)%\audio recorder\is-64bjv.tmp
%ProgramFiles(x86)%\audio recorder\is-k2v4f.tmp
%ProgramFiles(x86)%\audio recorder\is-5j7lq.tmp
%ProgramFiles(x86)%\audio recorder\is-k13j4.tmp
%ProgramFiles(x86)%\audio recorder\is-c5lp1.tmp
%ProgramFiles(x86)%\audio recorder\is-seqas.tmp
%ProgramFiles(x86)%\audio recorder\is-jcea3.tmp
%ProgramFiles(x86)%\audio recorder\is-m7cqv.tmp
%ProgramFiles(x86)%\audio recorder\lang\is-jtcqa.tmp
%TEMP%\license.txt

Deletes the following files

%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\audio recorder\msvcm90.dll
%ProgramFiles(x86)%\audio recorder\wait.gif

Moves the following files

from %ProgramFiles(x86)%\audio recorder\is-sr351.tmp to %ProgramFiles(x86)%\audio recorder\unins000.exe
from %ProgramFiles(x86)%\audio recorder\audiences\is-chcel.tmp to %ProgramFiles(x86)%\audio recorder\audiences\16k substream for 28k dial-up.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-8hq6b.tmp to %ProgramFiles(x86)%\audio recorder\audiences\150k lan.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-efcch.tmp to %ProgramFiles(x86)%\audio recorder\audiences\12k substream for 28k dial-up.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-c4hgk.tmp to %ProgramFiles(x86)%\audio recorder\audiences\128k dual isdn.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-jp703.tmp to %ProgramFiles(x86)%\audio recorder\audiences\100% quality download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\pf\is-do9ue.tmp to %ProgramFiles(x86)%\audio recorder\pf\wma.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-4tcgb.tmp to %ProgramFiles(x86)%\audio recorder\pf\wav.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-2gah6.tmp to %ProgramFiles(x86)%\audio recorder\pf\voc.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-th2tj.tmp to %ProgramFiles(x86)%\audio recorder\pf\ra.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-9tt2h.tmp to %ProgramFiles(x86)%\audio recorder\pf\ogg.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-0rljc.tmp to %ProgramFiles(x86)%\audio recorder\pf\mp3.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-574ec.tmp to %ProgramFiles(x86)%\audio recorder\pf\mp2.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-4njae.tmp to %ProgramFiles(x86)%\audio recorder\pf\mka.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-mrfct.tmp to %ProgramFiles(x86)%\audio recorder\pf\m4r.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-aiuqr.tmp to %ProgramFiles(x86)%\audio recorder\pf\m4b.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-uhrsf.tmp to %ProgramFiles(x86)%\audio recorder\pf\m4a.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-meltr.tmp to %ProgramFiles(x86)%\audio recorder\pf\flac.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-3surp.tmp to %ProgramFiles(x86)%\audio recorder\pf\au.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-6oj01.tmp to %ProgramFiles(x86)%\audio recorder\pf\amr.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-5r4jn.tmp to %ProgramFiles(x86)%\audio recorder\pf\aiff.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-n1d33.tmp to %ProgramFiles(x86)%\audio recorder\pf\ac3.pf
from %ProgramFiles(x86)%\audio recorder\pf\is-08the.tmp to %ProgramFiles(x86)%\audio recorder\pf\aac.pf
from %ProgramFiles(x86)%\audio recorder\lang\is-d5bgb.tmp to %ProgramFiles(x86)%\audio recorder\lang\index.ini
from %ProgramFiles(x86)%\audio recorder\lang\is-ceppe.tmp to %ProgramFiles(x86)%\audio recorder\lang\waverec_spanish.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-693k3.tmp to %ProgramFiles(x86)%\audio recorder\lang\waverec_russian.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-h65cf.tmp to %ProgramFiles(x86)%\audio recorder\lang\waverec_portugues.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-p9oij.tmp to %ProgramFiles(x86)%\audio recorder\lang\waverec_frence.dat
from %ProgramFiles(x86)%\audio recorder\audiences\is-gvhse.tmp to %ProgramFiles(x86)%\audio recorder\audiences\1m download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-c47ml.tmp to %ProgramFiles(x86)%\audio recorder\audiences\1m multichannel (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-ge241.tmp to %ProgramFiles(x86)%\audio recorder\audiences\1m surround stereo (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-gdgq1.tmp to %ProgramFiles(x86)%\audio recorder\audiences\256k dsl or cable.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-sgno0.tmp to %ProgramFiles(x86)%\audio recorder\audiences\lossless audio.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-tnog7.tmp to %ProgramFiles(x86)%\audio recorder\audiences\general mobile streaming.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-hhf3a.tmp to %ProgramFiles(x86)%\audio recorder\audiences\general mobile local playback.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-cist6.tmp to %ProgramFiles(x86)%\audio recorder\audiences\90% quality download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-9rvtq.tmp to %ProgramFiles(x86)%\audio recorder\audiences\80% quality download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-msbp6.tmp to %ProgramFiles(x86)%\audio recorder\audiences\768k dsl or cable.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-u8qag.tmp to %ProgramFiles(x86)%\audio recorder\audiences\750k surround stereo (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-4gihk.tmp to %ProgramFiles(x86)%\audio recorder\audiences\750k multichannel (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-9iv5m.tmp to %ProgramFiles(x86)%\audio recorder\audiences\750k download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-u60c5.tmp to %ProgramFiles(x86)%\audio recorder\audiences\70% quality download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-et7mt.tmp to %ProgramFiles(x86)%\audio recorder\audiences\64k single isdn.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-mikgm.tmp to %ProgramFiles(x86)%\audio recorder\audiences\5m surround stereo (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-mirit.tmp to %ProgramFiles(x86)%\audio recorder\audiences\5m multichannel (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-0tpdo.tmp to %ProgramFiles(x86)%\audio recorder\audiences\56k dial-up.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-2d93d.tmp to %ProgramFiles(x86)%\audio recorder\audiences\5m download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-kmeel.tmp to %ProgramFiles(x86)%\audio recorder\audiences\512k dsl or cable.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-i1lsm.tmp to %ProgramFiles(x86)%\audio recorder\audiences\450k surround stereo (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-f5at5.tmp to %ProgramFiles(x86)%\audio recorder\audiences\450k multichannel (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-p7l89.tmp to %ProgramFiles(x86)%\audio recorder\audiences\450k download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-mej3p.tmp to %ProgramFiles(x86)%\audio recorder\audiences\384k dsl or cable.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-9c3ea.tmp to %ProgramFiles(x86)%\audio recorder\audiences\350k surround stereo (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-grerm.tmp to %ProgramFiles(x86)%\audio recorder\audiences\350k multichannel (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-9cejq.tmp to %ProgramFiles(x86)%\audio recorder\audiences\350k download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-6guc9.tmp to %ProgramFiles(x86)%\audio recorder\audiences\2m surround stereo (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-d8871.tmp to %ProgramFiles(x86)%\audio recorder\audiences\2m multichannel (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-lnk57.tmp to %ProgramFiles(x86)%\audio recorder\audiences\2m download (vbr).rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-k5ghg.tmp to %ProgramFiles(x86)%\audio recorder\audiences\28k dial-up.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-mdn8d.tmp to %ProgramFiles(x86)%\audio recorder\audiences\26k substream for 56k dial-up.rpad
from %ProgramFiles(x86)%\audio recorder\audiences\is-asd34.tmp to %ProgramFiles(x86)%\audio recorder\audiences\pocketpc local playback.rpad
from %ProgramFiles(x86)%\audio recorder\lang\is-49lk3.tmp to %ProgramFiles(x86)%\audio recorder\lang\waverec_italian.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-c41e1.tmp to %ProgramFiles(x86)%\audio recorder\lang\waverec_english.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-c9la9.tmp to %ProgramFiles(x86)%\audio recorder\lang\waverec_chinese(traditional).dat
from %ProgramFiles(x86)%\audio recorder\is-nfklv.tmp to %ProgramFiles(x86)%\audio recorder\servicectrl.dll
from %ProgramFiles(x86)%\audio recorder\is-spn2g.tmp to %ProgramFiles(x86)%\audio recorder\screenhook.dll
from %ProgramFiles(x86)%\audio recorder\is-7k7jl.tmp to %ProgramFiles(x86)%\audio recorder\rmvbencodesync.dll
from %ProgramFiles(x86)%\audio recorder\is-8sgbu.tmp to %ProgramFiles(x86)%\audio recorder\recwin7.dll
from %ProgramFiles(x86)%\audio recorder\is-c1632.tmp to %ProgramFiles(x86)%\audio recorder\recordaudio.dll
from %ProgramFiles(x86)%\audio recorder\is-rfoba.tmp to %ProgramFiles(x86)%\audio recorder\recodeaudiokernel_old.dll
from %ProgramFiles(x86)%\audio recorder\is-ddgce.tmp to %ProgramFiles(x86)%\audio recorder\recodeaudiokernel.dll
from %ProgramFiles(x86)%\audio recorder\is-79u2a.tmp to %ProgramFiles(x86)%\audio recorder\pthreadvc2.dll
from %ProgramFiles(x86)%\audio recorder\is-jj63a.tmp to %ProgramFiles(x86)%\audio recorder\pthreadgc2.dll
from %ProgramFiles(x86)%\audio recorder\is-rcrkp.tmp to %ProgramFiles(x86)%\audio recorder\postproc-52.dll
from %ProgramFiles(x86)%\audio recorder\is-fgk8h.tmp to %ProgramFiles(x86)%\audio recorder\msvcm90.dll
from %ProgramFiles(x86)%\audio recorder\is-p0p2t.tmp to %ProgramFiles(x86)%\audio recorder\mp3player.dll
from %ProgramFiles(x86)%\audio recorder\is-rtls1.tmp to %ProgramFiles(x86)%\audio recorder\mp3infp.dll
from %ProgramFiles(x86)%\audio recorder\is-dsvj4.tmp to %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt.manifest
from %ProgramFiles(x86)%\audio recorder\is-tjav6.tmp to %ProgramFiles(x86)%\audio recorder\mediaencoderimp.dll
from %ProgramFiles(x86)%\audio recorder\is-aahc2.tmp to %ProgramFiles(x86)%\audio recorder\magicskin.dll
from %ProgramFiles(x86)%\audio recorder\is-72a6f.tmp to %ProgramFiles(x86)%\audio recorder\loadernonelevator64.exe
from %ProgramFiles(x86)%\audio recorder\is-m6puj.tmp to %ProgramFiles(x86)%\audio recorder\loadernonelevator32.exe
from %ProgramFiles(x86)%\audio recorder\is-ipgrm.tmp to %ProgramFiles(x86)%\audio recorder\istask.dll
from %ProgramFiles(x86)%\audio recorder\is-bcavu.tmp to %ProgramFiles(x86)%\audio recorder\intelhw.dll
from %ProgramFiles(x86)%\audio recorder\is-kalfr.tmp to %ProgramFiles(x86)%\audio recorder\installhelp.dll
from %ProgramFiles(x86)%\audio recorder\is-nhpjf.tmp to %ProgramFiles(x86)%\audio recorder\gsdownload.dll
from %ProgramFiles(x86)%\audio recorder\is-6g0t8.tmp to %ProgramFiles(x86)%\audio recorder\gsarservice.exe
from %ProgramFiles(x86)%\audio recorder\is-fvg4s.tmp to %ProgramFiles(x86)%\audio recorder\avutil-52.dll
from %ProgramFiles(x86)%\audio recorder\is-4jhpe.tmp to %ProgramFiles(x86)%\audio recorder\avdevice-55.dll
from %ProgramFiles(x86)%\audio recorder\is-ll8i0.tmp to %ProgramFiles(x86)%\audio recorder\audioresample.dll
from %ProgramFiles(x86)%\audio recorder\lang\is-0sen5.tmp to %ProgramFiles(x86)%\audio recorder\lang\settings.ini
from %ProgramFiles(x86)%\audio recorder\is-uj25j.tmp to %ProgramFiles(x86)%\audio recorder\swresample-0.dll
from %ProgramFiles(x86)%\audio recorder\is-m7cqv.tmp to %ProgramFiles(x86)%\audio recorder\swscale-2.dll
from %ProgramFiles(x86)%\audio recorder\is-jcea3.tmp to %ProgramFiles(x86)%\audio recorder\ve32.dll
from %ProgramFiles(x86)%\audio recorder\is-seqas.tmp to %ProgramFiles(x86)%\audio recorder\ve64.dll
from %ProgramFiles(x86)%\audio recorder\lang\is-jtcqa.tmp to %ProgramFiles(x86)%\audio recorder\lang\autosettings_spanish.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-6nhdf.tmp to %ProgramFiles(x86)%\audio recorder\lang\autosettings_russian.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-jg7io.tmp to %ProgramFiles(x86)%\audio recorder\lang\autosettings_portugues.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-khot2.tmp to %ProgramFiles(x86)%\audio recorder\lang\autosettings_frence.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-p7o7c.tmp to %ProgramFiles(x86)%\audio recorder\lang\autosettings_italian.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-j4a4m.tmp to %ProgramFiles(x86)%\audio recorder\lang\autosettings_english.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-rov36.tmp to %ProgramFiles(x86)%\audio recorder\lang\autosettings_chinese(traditional).dat
from %ProgramFiles(x86)%\audio recorder\lang\is-kflpo.tmp to %ProgramFiles(x86)%\audio recorder\lang\autosettings_japanese.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-annag.tmp to %ProgramFiles(x86)%\audio recorder\lang\audiorecorder.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-2qg9t.tmp to %ProgramFiles(x86)%\audio recorder\lang\spanish.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-a8ecr.tmp to %ProgramFiles(x86)%\audio recorder\lang\russian.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-apg53.tmp to %ProgramFiles(x86)%\audio recorder\lang\portugues.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-d1a6v.tmp to %ProgramFiles(x86)%\audio recorder\lang\frence.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-sl1ku.tmp to %ProgramFiles(x86)%\audio recorder\lang\english.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-fn8nd.tmp to %ProgramFiles(x86)%\audio recorder\lang\italian.dat
from %ProgramFiles(x86)%\audio recorder\lang\is-s7lja.tmp to %ProgramFiles(x86)%\audio recorder\lang\chinese(traditional).dat
from %ProgramFiles(x86)%\audio recorder\lang\is-cmbk1.tmp to %ProgramFiles(x86)%\audio recorder\lang\japanese.dat
from %ProgramFiles(x86)%\audio recorder\is-43abd.tmp to %ProgramFiles(x86)%\audio recorder\notips.mp3
from %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-2kast.tmp to %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\msvcr90.dll
from %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-b2g86.tmp to %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\msvcp90.dll
from %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-4d0pg.tmp to %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\msvcm90.dll
from %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\is-hnttd.tmp to %ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt\microsoft.vc90.crt.manifest
from %ProgramFiles(x86)%\audio recorder\is-hn60r.tmp to %ProgramFiles(x86)%\audio recorder\xvidcore.dll
from %ProgramFiles(x86)%\audio recorder\is-64bjv.tmp to %ProgramFiles(x86)%\audio recorder\wmadecode.dll
from %ProgramFiles(x86)%\audio recorder\is-k2v4f.tmp to %ProgramFiles(x86)%\audio recorder\webrtc.dll
from %ProgramFiles(x86)%\audio recorder\is-5j7lq.tmp to %ProgramFiles(x86)%\audio recorder\waverec.dll
from %ProgramFiles(x86)%\audio recorder\is-k13j4.tmp to %ProgramFiles(x86)%\audio recorder\wait.gif
from %ProgramFiles(x86)%\audio recorder\is-c5lp1.tmp to %ProgramFiles(x86)%\audio recorder\verify.dll
from %ProgramFiles(x86)%\audio recorder\lang\is-sggup.tmp to %ProgramFiles(x86)%\audio recorder\lang\waverec_japanese.dat
from %ProgramFiles(x86)%\audio recorder\is-qctg2.tmp to %ProgramFiles(x86)%\audio recorder\audiorecorder.exe

Substitutes the following files

%ProgramFiles(x86)%\audio recorder\microsoft.vc90.crt.manifest
%ProgramFiles(x86)%\audio recorder\msvcm90.dll
%ProgramFiles(x86)%\audio recorder\wait.gif

Network activity

Connects to

'mi####njobs.works':80

TCP

HTTP GET requests

http://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/authrootstl.cab?43######

HTTP POST requests

http://mi####njobs.works/new/net_api

UDP

DNS ASK mi####njobs.works

Miscellaneous

Searches for the following windows

ClassName: 'v5d3d5_audio10202Class_v5d3d5' WindowName: ''

Creates and executes the following

'%TEMP%\is-0tvau.tmp\<File name>.tmp' /SL5="$50236,6985467,366592,<Full path to file>"
'%ProgramFiles(x86)%\audio recorder\audiorecorder.exe'
'%ProgramFiles(x86)%\audio recorder\audiorecorder.exe' d057d6625692c213c233e4e9cd1d19c2

Executes the following

'%WINDIR%\syswow64\schtasks.exe' /Delete /F /TN "AREC1020-3"
'%WINDIR%\syswow64\schtasks.exe' /Query

TECHNOLOGIES

TERMINOLOGIE

COURS ET EDU

MYTHES

Technical Information

Recommandations pour le traitement

Free trial