Trojan.MulDrop8.24285

Technical Information

To ensure autorun and distribution:

Modifies the following registry keys:

[<HKLM>\SOFTWARE\Classes\CLSID\{00000000-0000-0000-0000-100000000001}\shell\Open\Command] '' = '%ProgramFiles%\Internet Explorer 11\iexplorer.exe'
[<HKLM>\SOFTWARE\Classes\HTTP\shell\open\command] '' = '%ProgramFiles%\Internet Explorer 11\iexplorer.exe'
[<HKLM>\SOFTWARE\Clients\StartMenuInternet\iexplorer.exe\shell\open\command] '' = '"%ProgramFiles%\Internet Explorer 11\iexplorer.exe"'

Malicious functions:

To complicate detection of its presence in the operating system,

modifies the following system settings:

[<HKCU>\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer] 'NoInternetIcon' = '00000001'

Modifies file system:

Creates the following files:

%TEMP%\is-JAC1Q.tmp\<File name>.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-C2BMJ.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-85ALU.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-MR2C2.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-F501N.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-RG1MA.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-S2ETM.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-AHSPD.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-PFI46.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-R4GQJ.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-6PUFU.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-6BUIE.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-MUR5Q.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-L32EN.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-SRE65.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-PN6EV.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-GRR2Q.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-2IEHU.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-TIA10.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-60DGL.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-BBSRE.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-FKLNE.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-M1KGA.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-J2QCA.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-10OJV.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-L3R6I.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-3CBB4.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-U620M.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-DHLKL.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-OQF4F.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-7QJ13.tmp
%ALLUSERSPROFILE%\Desktop\Internet Explorer 11.lnk
%ProgramFiles%\Internet Explorer 11\locales\is-5OQ47.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Internet Explorer 11\Internet Explorer 11.lnk
%ProgramFiles%\Internet Explorer 11\newtab\is-RILCI.tmp
%ProgramFiles%\Internet Explorer 11\newtab\is-MF2OI.tmp
%ProgramFiles%\Internet Explorer 11\newtab\is-PFVP1.tmp
%ProgramFiles%\Internet Explorer 11\newtab\is-MKJFP.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-6GAH5.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-GMU59.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-5BIRC.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-6F6QE.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-84EUA.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-3J83N.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-4IUAR.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-U43AU.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-F3UQG.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-FL6M6.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-IMH3N.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-6L40G.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-KCRV4.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-I6OUM.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-46L68.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-OCSED.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-B3H39.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-LT5HN.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-PRHML.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-PJIRT.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-L9IH0.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-V403F.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-V6CT7.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-GKLH5.tmp
%ProgramFiles%\Internet Explorer 11\locales\is-V38QF.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-ME03N.tmp
%ProgramFiles%\Internet Explorer 11\Cache\databases\is-HT9DV.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-S833D.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-6I0RM.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-8MAA0.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-CJRU4.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-KO3IC.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-VSOPM.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-BAQ8J.tmp
%ProgramFiles%\Internet Explorer 11\is-P5TGR.tmp
%ProgramFiles%\Internet Explorer 11\is-H5DPU.tmp
%ProgramFiles%\Internet Explorer 11\is-9IC66.tmp
%ProgramFiles%\Internet Explorer 11\is-21R6T.tmp
%ProgramFiles%\Internet Explorer 11\is-SLB6M.tmp
%ProgramFiles%\Internet Explorer 11\is-S455A.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-V7DM9.tmp
%ProgramFiles%\Internet Explorer 11\is-4KQ3F.tmp
%ProgramFiles%\Internet Explorer 11\is-E86RU.tmp
%ProgramFiles%\Internet Explorer 11\is-60RJO.tmp
%ProgramFiles%\Internet Explorer 11\is-E3NNO.tmp
%ProgramFiles%\Internet Explorer 11\is-QGDBK.tmp
%ProgramFiles%\Internet Explorer 11\is-PPTGR.tmp
%ProgramFiles%\Internet Explorer 11\is-N8BOH.tmp
%ProgramFiles%\Internet Explorer 11\is-UU2DA.tmp
%ProgramFiles%\Internet Explorer 11\is-9PI8H.tmp
%TEMP%\is-BR99K.tmp\_isetup\_shfoldr.dll
%TEMP%\is-BR99K.tmp\_isetup\_RegDLL.tmp
%TEMP%\is-7M586.tmp\<File name>.tmp
%TEMP%\is-3EOM9.tmp\_isetup\_shfoldr.dll
%TEMP%\is-3EOM9.tmp\_isetup\_RegDLL.tmp
%ProgramFiles%\Internet Explorer 11\is-2TUI5.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-F71KQ.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-GDC9N.tmp
%ProgramFiles%\Internet Explorer 11\Cache\databases\is-G6TLP.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-UPN2G.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-JR2GA.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-688SH.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-NL83D.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-DMB1R.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-AMIB6.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-BAKQG.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-BH9M0.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-H8CFO.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-B8HII.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-TA8U6.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-RD8PO.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-L1HNG.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-D86B0.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-I5M8N.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-KEMAS.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-Q1FOB.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-4NSJS.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-T12VK.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-IJU9K.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-1LK5G.tmp
%ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-2NOUA.tmp
%ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-0H2JU.tmp
%ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-4C9QA.tmp
%ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-2TV67.tmp
%ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-Q79M8.tmp
%ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-6DHQT.tmp
%ProgramFiles%\Internet Explorer 11\Cache\databases\http_download.cnet.com_0\is-1P153.tmp
%ProgramFiles%\Internet Explorer 11\Cache\is-ED7HR.tmp
%ProgramFiles%\Internet Explorer 11\unins000.dat

Deletes the following files:

%TEMP%\is-3EOM9.tmp\_isetup\_RegDLL.tmp
%TEMP%\is-3EOM9.tmp\_isetup\_shfoldr.dll
%TEMP%\is-JAC1Q.tmp\<File name>.tmp
%TEMP%\is-BR99K.tmp\_isetup\_RegDLL.tmp
%TEMP%\is-BR99K.tmp\_isetup\_shfoldr.dll
%TEMP%\is-7M586.tmp\<File name>.tmp

Moves the following files:

from %ProgramFiles%\Internet Explorer 11\is-9PI8H.tmp to %ProgramFiles%\Internet Explorer 11\unins000.exe
from %ProgramFiles%\Internet Explorer 11\locales\is-85ALU.tmp to %ProgramFiles%\Internet Explorer 11\locales\it.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-MR2C2.tmp to %ProgramFiles%\Internet Explorer 11\locales\id.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-F501N.tmp to %ProgramFiles%\Internet Explorer 11\locales\hu.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-RG1MA.tmp to %ProgramFiles%\Internet Explorer 11\locales\hr.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-S2ETM.tmp to %ProgramFiles%\Internet Explorer 11\locales\hi.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-AHSPD.tmp to %ProgramFiles%\Internet Explorer 11\locales\he.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-PFI46.tmp to %ProgramFiles%\Internet Explorer 11\locales\gu.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-R4GQJ.tmp to %ProgramFiles%\Internet Explorer 11\locales\fr.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-6PUFU.tmp to %ProgramFiles%\Internet Explorer 11\locales\fil.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-6BUIE.tmp to %ProgramFiles%\Internet Explorer 11\locales\fi.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-MUR5Q.tmp to %ProgramFiles%\Internet Explorer 11\locales\fa.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-L32EN.tmp to %ProgramFiles%\Internet Explorer 11\locales\et.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-OQF4F.tmp to %ProgramFiles%\Internet Explorer 11\locales\es-419.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-SRE65.tmp to %ProgramFiles%\Internet Explorer 11\locales\kn.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-GRR2Q.tmp to %ProgramFiles%\Internet Explorer 11\locales\en-US.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-2IEHU.tmp to %ProgramFiles%\Internet Explorer 11\locales\en-GB.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-TIA10.tmp to %ProgramFiles%\Internet Explorer 11\locales\el.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-60DGL.tmp to %ProgramFiles%\Internet Explorer 11\locales\de.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-BBSRE.tmp to %ProgramFiles%\Internet Explorer 11\locales\da.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-FKLNE.tmp to %ProgramFiles%\Internet Explorer 11\locales\cs.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-M1KGA.tmp to %ProgramFiles%\Internet Explorer 11\locales\ca.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-J2QCA.tmp to %ProgramFiles%\Internet Explorer 11\locales\bn.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-10OJV.tmp to %ProgramFiles%\Internet Explorer 11\locales\bg.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-L3R6I.tmp to %ProgramFiles%\Internet Explorer 11\locales\ar.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-3CBB4.tmp to %ProgramFiles%\Internet Explorer 11\locales\am.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-PN6EV.tmp to %ProgramFiles%\Internet Explorer 11\locales\es.pak
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-RD8PO.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_news.ifeng.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\locales\is-GKLH5.tmp to %ProgramFiles%\Internet Explorer 11\locales\ko.pak
from %ProgramFiles%\Internet Explorer 11\newtab\is-PFVP1.tmp to %ProgramFiles%\Internet Explorer 11\newtab\google.png
from %ProgramFiles%\Internet Explorer 11\newtab\is-MKJFP.tmp to %ProgramFiles%\Internet Explorer 11\newtab\error.htm
from %ProgramFiles%\Internet Explorer 11\locales\is-6GAH5.tmp to %ProgramFiles%\Internet Explorer 11\locales\zh-TW.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-GMU59.tmp to %ProgramFiles%\Internet Explorer 11\locales\zh-CN.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-5BIRC.tmp to %ProgramFiles%\Internet Explorer 11\locales\vi.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-6F6QE.tmp to %ProgramFiles%\Internet Explorer 11\locales\uk.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-84EUA.tmp to %ProgramFiles%\Internet Explorer 11\locales\tr.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-3J83N.tmp to %ProgramFiles%\Internet Explorer 11\locales\th.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-4IUAR.tmp to %ProgramFiles%\Internet Explorer 11\locales\te.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-U43AU.tmp to %ProgramFiles%\Internet Explorer 11\locales\ta.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-FL6M6.tmp to %ProgramFiles%\Internet Explorer 11\locales\sw.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-7QJ13.tmp to %ProgramFiles%\Internet Explorer 11\locales\sv.pak
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-U620M.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.taobao.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\locales\is-C2BMJ.tmp to %ProgramFiles%\Internet Explorer 11\locales\ja.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-KCRV4.tmp to %ProgramFiles%\Internet Explorer 11\locales\sk.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-I6OUM.tmp to %ProgramFiles%\Internet Explorer 11\locales\ru.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-46L68.tmp to %ProgramFiles%\Internet Explorer 11\locales\ro.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-OCSED.tmp to %ProgramFiles%\Internet Explorer 11\locales\pt-PT.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-B3H39.tmp to %ProgramFiles%\Internet Explorer 11\locales\pt-BR.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-LT5HN.tmp to %ProgramFiles%\Internet Explorer 11\locales\pl.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-PRHML.tmp to %ProgramFiles%\Internet Explorer 11\locales\nl.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-PJIRT.tmp to %ProgramFiles%\Internet Explorer 11\locales\nb.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-L9IH0.tmp to %ProgramFiles%\Internet Explorer 11\locales\ms.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-V403F.tmp to %ProgramFiles%\Internet Explorer 11\locales\mr.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-V6CT7.tmp to %ProgramFiles%\Internet Explorer 11\locales\ml.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-5OQ47.tmp to %ProgramFiles%\Internet Explorer 11\locales\lv.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-6L40G.tmp to %ProgramFiles%\Internet Explorer 11\locales\sl.pak
from %ProgramFiles%\Internet Explorer 11\locales\is-V38QF.tmp to %ProgramFiles%\Internet Explorer 11\locales\lt.pak
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-DHLKL.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.taobao.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-F3UQG.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.pc6.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-ME03N.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.pc6.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\is-9IC66.tmp to %ProgramFiles%\Internet Explorer 11\libEGL.dll
from %ProgramFiles%\Internet Explorer 11\Cache\databases\is-HT9DV.tmp to %ProgramFiles%\Internet Explorer 11\Cache\databases\Databases.db
from %ProgramFiles%\Internet Explorer 11\Cache\is-ED7HR.tmp to %ProgramFiles%\Internet Explorer 11\Cache\QuotaManager-journal
from %ProgramFiles%\Internet Explorer 11\Cache\is-V7DM9.tmp to %ProgramFiles%\Internet Explorer 11\Cache\QuotaManager
from %ProgramFiles%\Internet Explorer 11\Cache\is-S833D.tmp to %ProgramFiles%\Internet Explorer 11\Cache\index
from %ProgramFiles%\Internet Explorer 11\Cache\is-6I0RM.tmp to %ProgramFiles%\Internet Explorer 11\Cache\data_3
from %ProgramFiles%\Internet Explorer 11\Cache\is-8MAA0.tmp to %ProgramFiles%\Internet Explorer 11\Cache\data_2
from %ProgramFiles%\Internet Explorer 11\Cache\is-CJRU4.tmp to %ProgramFiles%\Internet Explorer 11\Cache\data_1
from %ProgramFiles%\Internet Explorer 11\Cache\is-KO3IC.tmp to %ProgramFiles%\Internet Explorer 11\Cache\data_0
from %ProgramFiles%\Internet Explorer 11\Cache\is-VSOPM.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Cookies-journal
from %ProgramFiles%\Internet Explorer 11\Cache\is-BAQ8J.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Cookies
from %ProgramFiles%\Internet Explorer 11\is-P5TGR.tmp to %ProgramFiles%\Internet Explorer 11\pdf.dll
from %ProgramFiles%\Internet Explorer 11\newtab\is-MF2OI.tmp to %ProgramFiles%\Internet Explorer 11\newtab\main.css
from %ProgramFiles%\Internet Explorer 11\Cache\databases\http_download.cnet.com_0\is-1P153.tmp to %ProgramFiles%\Internet Explorer 11\Cache\databases\http_download.cnet.com_0\1
from %ProgramFiles%\Internet Explorer 11\is-21R6T.tmp to %ProgramFiles%\Internet Explorer 11\libcef.dll
from %ProgramFiles%\Internet Explorer 11\is-SLB6M.tmp to %ProgramFiles%\Internet Explorer 11\iexplorer.exe
from %ProgramFiles%\Internet Explorer 11\is-S455A.tmp to %ProgramFiles%\Internet Explorer 11\icudtl.dat
from %ProgramFiles%\Internet Explorer 11\is-4KQ3F.tmp to %ProgramFiles%\Internet Explorer 11\ffmpegsumo.dll
from %ProgramFiles%\Internet Explorer 11\is-2TUI5.tmp to %ProgramFiles%\Internet Explorer 11\devtools_resources.pak
from %ProgramFiles%\Internet Explorer 11\is-E86RU.tmp to %ProgramFiles%\Internet Explorer 11\d3dx9_43.dll
from %ProgramFiles%\Internet Explorer 11\is-60RJO.tmp to %ProgramFiles%\Internet Explorer 11\d3dcompiler_46.dll
from %ProgramFiles%\Internet Explorer 11\is-E3NNO.tmp to %ProgramFiles%\Internet Explorer 11\d3dcompiler_43.dll
from %ProgramFiles%\Internet Explorer 11\is-QGDBK.tmp to %ProgramFiles%\Internet Explorer 11\cef_200_percent.pak
from %ProgramFiles%\Internet Explorer 11\is-PPTGR.tmp to %ProgramFiles%\Internet Explorer 11\cef_100_percent.pak
from %ProgramFiles%\Internet Explorer 11\is-N8BOH.tmp to %ProgramFiles%\Internet Explorer 11\cefclient.drc
from %ProgramFiles%\Internet Explorer 11\is-UU2DA.tmp to %ProgramFiles%\Internet Explorer 11\cef.pak
from %ProgramFiles%\Internet Explorer 11\is-H5DPU.tmp to %ProgramFiles%\Internet Explorer 11\libGLESv2.dll
from %ProgramFiles%\Internet Explorer 11\locales\is-IMH3N.tmp to %ProgramFiles%\Internet Explorer 11\locales\sr.pak
from %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-6DHQT.tmp to %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\data_0
from %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-4C9QA.tmp to %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\data_3
from %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-Q79M8.tmp to %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\data_1
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-D86B0.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.ifeng.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-GDC9N.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.ifeng.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-UPN2G.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.hao123.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-JR2GA.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.hao123.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-688SH.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.2tu.cc_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-NL83D.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.2tu.cc_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-DMB1R.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.163.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-AMIB6.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_www.163.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-BAKQG.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_pos.baidu.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-BH9M0.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_pos.baidu.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-H8CFO.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_pan.baidu.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-2TV67.tmp to %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\data_2
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-B8HII.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_pan.baidu.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\databases\is-G6TLP.tmp to %ProgramFiles%\Internet Explorer 11\Cache\databases\Databases.db-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-L1HNG.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_img1.126.net_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-I5M8N.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_img1.126.net_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-F71KQ.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_g.163.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-KEMAS.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_g.163.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-Q1FOB.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_cdn.tanx.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-4NSJS.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_cdn.tanx.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-T12VK.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\https_www.baidu.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-IJU9K.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\https_www.baidu.com_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-1LK5G.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\chrome-devtools_devtools_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-2NOUA.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\chrome-devtools_devtools_0.localstorage
from %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\is-0H2JU.tmp to %ProgramFiles%\Internet Explorer 11\Cache\GPUCache\index
from %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\is-TA8U6.tmp to %ProgramFiles%\Internet Explorer 11\Cache\Local Storage\http_news.ifeng.com_0.localstorage-journal
from %ProgramFiles%\Internet Explorer 11\newtab\is-RILCI.tmp to %ProgramFiles%\Internet Explorer 11\newtab\search.htm

Miscellaneous:

Creates and executes the following:

'%TEMP%\is-JAC1Q.tmp\<File name>.tmp' /SL5="$30092,22831628,74752,<Full path to file>"
'<Full path to file>' /VERYSILENT /SP-
'%TEMP%\is-7M586.tmp\<File name>.tmp' /SL5="$50036,22831628,74752,<Full path to file>" /VERYSILENT /SP-
'%ProgramFiles%\Internet Explorer 11\iexplorer.exe' /install
'%ProgramFiles%\Internet Explorer 11\iexplorer.exe'

Технології

Терміни

Навчання

Міфи

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней