Trojan.DownLoader40.29643

Technical Information

Malicious functions

Terminates or attempts to terminate

the following user processes:

iexplore.exe
firefox.exe

Modifies file system

Creates the following files

%TEMP%\aut32e2.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-rap1o.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-hdpl8.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-kp2gu.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-i0juj.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-utcj5.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\efi\boot\is-qonb9.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\efi\microsoft\boot\is-3k2q2.tmp
%ProgramFiles%\minitool partition wizard 12\is-759n2.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\efi\microsoft\boot\is-jogj8.tmp
%ProgramFiles%\minitool partition wizard 12\pxeboot\is-g1kdo.tmp
%ProgramFiles%\minitool partition wizard 12\x64\is-17uhf.tmp
%ProgramFiles%\minitool partition wizard 12\x64\is-dbev8.tmp
%ProgramFiles%\minitool partition wizard 12\x64\is-5jucd.tmp
%ProgramFiles%\minitool partition wizard 12\x86\is-j15ne.tmp
%ProgramFiles%\minitool partition wizard 12\x86\is-i2lss.tmp
%ProgramFiles%\minitool partition wizard 12\x86\is-mt7va.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\is-4tvka.tmp
%ProgramFiles%\minitool partition wizard 12\petools\x86\is-tdaog.tmp
%ProgramFiles%\minitool partition wizard 12\pxeboot\is-fg3tf.tmp
%ProgramFiles%\minitool partition wizard 12\is-rggfn.tmp
%ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\is-qrbc8.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-3h8sr.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-amghl.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-h2r80.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-kheuv.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-gugm2.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-tvsum.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-74kk2.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-53mi8.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-uv29c.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-qgeuc.tmp
%ProgramFiles%\minitool partition wizard 12\petools\amd64\is-ergdk.tmp
%ProgramFiles%\minitool partition wizard 12\petools\amd64\is-m5ap3.tmp
%ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\is-8qlek.tmp
%ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\is-jul7i.tmp
%ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\is-s6g6f.tmp
%ProgramFiles%\minitool partition wizard 12\petools\amd64\efi\boot\is-ir11g.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-srurn.tmp
%ProgramFiles%\minitool partition wizard 12\petools\amd64\efi\microsoft\boot\is-eeq4u.tmp
%ProgramFiles%\minitool partition wizard 12\is-vcbvj.tmp
%ProgramFiles%\minitool partition wizard 12\is-0gp62.tmp
%ProgramFiles%\minitool partition wizard 12\is-okg87.tmp
%ProgramFiles%\minitool partition wizard 12\is-1emkv.tmp
%ProgramFiles%\minitool partition wizard 12\diskspd\is-7t8q7.tmp
%ProgramFiles%\minitool partition wizard 12\diskspd\is-cmm2o.tmp
%ProgramFiles%\minitool partition wizard 12\diskspd\is-vuskl.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\minitool partition wizard 12\minitool partition wizard.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\minitool partition wizard 12\minitool partition wizard on the web.url
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\minitool partition wizard 12\uninstall minitool partition wizard.lnk
%ProgramFiles%\minitool partition wizard 12\is-qe546.tmp
C:\users\public\desktop\minitool partition wizard.lnk
%ProgramFiles%\minitool partition wizard 12\ceip.ini
%ProgramFiles%\minitool partition wizard 12\unins000.msg
%ProgramFiles%\minitool partition wizard 12\unins000.dat
%ProgramFiles%\minitool partition wizard 12\log.txt
%TEMP%\aut7bb5.tmp
%TEMP%\aut7d5b.tmp
%ProgramFiles%\minitool partition wizard 12\is-oiojt.tmp
%ProgramFiles%\minitool partition wizard 12\is-compt.tmp
%ProgramFiles%\minitool partition wizard 12\is-mkn8v.tmp
%ProgramFiles%\minitool partition wizard 12\is-5027b.tmp
%ProgramFiles%\minitool partition wizard 12\is-6u3vm.tmp
%ProgramFiles%\minitool partition wizard 12\is-9g1r6.tmp
%ProgramFiles%\minitool partition wizard 12\is-e7mqo.tmp
%ProgramFiles%\minitool partition wizard 12\is-of6im.tmp
%ProgramFiles%\minitool partition wizard 12\is-34b6i.tmp
%ProgramFiles%\minitool partition wizard 12\is-40nn7.tmp
%ProgramFiles%\minitool partition wizard 12\is-p19cn.tmp
%ProgramFiles%\minitool partition wizard 12\is-eb93f.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\x86\is-le0kj.tmp
%ProgramFiles%\minitool partition wizard 12\is-skkdi.tmp
%ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-660qh.tmp
%ProgramFiles%\minitool partition wizard 12\is-eo5hm.tmp
%ProgramFiles%\minitool partition wizard 12\is-84ifu.tmp
%ProgramFiles%\minitool partition wizard 12\is-rumk5.tmp
%ProgramFiles%\minitool partition wizard 12\is-jl83e.tmp
%ProgramFiles%\minitool partition wizard 12\is-cbnj2.tmp
%ProgramFiles%\minitool partition wizard 12\is-245hf.tmp
%ProgramFiles%\minitool partition wizard 12\is-6ulqq.tmp
%ProgramFiles%\minitool partition wizard 12\is-vokp6.tmp
%ProgramFiles%\minitool partition wizard 12\is-tcufd.tmp
%ProgramFiles%\minitool partition wizard 12\is-7lc3b.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\x86\is-fbka1.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\x86\is-djvk5.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\x64\is-k785e.tmp
%ProgramFiles%\minitool partition wizard 12\is-t0m8o.tmp
%ProgramFiles%\minitool partition wizard 12\is-1jvt4.tmp
%ProgramFiles%\minitool partition wizard 12\is-lo6h9.tmp
%ProgramFiles%\minitool partition wizard 12\is-klvta.tmp
%ProgramFiles%\minitool partition wizard 12\is-65vtm.tmp
%ProgramFiles%\minitool partition wizard 12\is-p9dks.tmp
%ProgramFiles%\minitool partition wizard 12\iconengines\is-pouj2.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-rgota.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-dm0gp.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-vv2jb.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-2016d.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-bl74t.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-podpo.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-ub3f8.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-1atsv.tmp
%ProgramFiles%\minitool partition wizard 12\is-t5q9a.tmp
%ProgramFiles%\minitool partition wizard 12\is-5ufl0.tmp
%ProgramFiles%\minitool partition wizard 12\is-u9304.tmp
%ProgramFiles%\minitool partition wizard 12\is-73eu6.tmp
%ProgramFiles%\minitool partition wizard 12\is-rdmf7.tmp
%ProgramFiles%\minitool partition wizard 12\is-gf9m3.tmp
%TEMP%\is-6qe7p.tmp\~gfhsjua.tmp
%TEMP%\is-md0c9.tmp\_isetup\_setup64.tmp
%ProgramFiles%\minitool partition wizard 12\is-ks7ab.tmp
%ProgramFiles%\minitool partition wizard 12\is-423sr.tmp
%ProgramFiles%\minitool partition wizard 12\is-s4s6k.tmp
%ProgramFiles%\minitool partition wizard 12\is-s2cpo.tmp
%ProgramFiles%\minitool partition wizard 12\is-uer4k.tmp
%ProgramFiles%\minitool partition wizard 12\imageformats\is-10gcr.tmp
%TEMP%\aut7f8e.tmp
%ProgramFiles%\minitool partition wizard 12\is-isjjb.tmp
%ProgramFiles%\minitool partition wizard 12\is-9eom0.tmp
%ProgramFiles%\minitool partition wizard 12\is-qr6d7.tmp
%ProgramFiles%\minitool partition wizard 12\is-v636i.tmp
%ProgramFiles%\minitool partition wizard 12\is-99jvf.tmp
%ProgramFiles%\minitool partition wizard 12\is-0ujv7.tmp
%ProgramFiles%\minitool partition wizard 12\is-k3oe8.tmp
%ProgramFiles%\minitool partition wizard 12\is-t2dan.tmp
%CommonProgramFiles(x86)%\~gfhsjua.tmp
%ProgramFiles%\minitool partition wizard 12\is-2jb27.tmp
%ProgramFiles%\minitool partition wizard 12\lang.ini
%ProgramFiles%\minitool partition wizard 12\imageformats\is-0fskc.tmp
%ProgramFiles%\minitool partition wizard 12\x64\is-08v0d.tmp
%ProgramFiles%\minitool partition wizard 12\is-0npkg.tmp
%ProgramFiles%\minitool partition wizard 12\is-ujkvm.tmp
%ProgramFiles%\minitool partition wizard 12\is-2it4t.tmp
%ProgramFiles%\minitool partition wizard 12\is-08b17.tmp
%ProgramFiles%\minitool partition wizard 12\is-grhq2.tmp
%ProgramFiles%\minitool partition wizard 12\is-hn2ee.tmp
%ProgramFiles%\minitool partition wizard 12\is-t65j8.tmp
%ProgramFiles%\minitool partition wizard 12\is-6a7dl.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\is-9af2m.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\is-7vrsj.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\is-rga3b.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\is-7avve.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\is-2svf4.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\x64\is-o0vds.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\x64\is-gvjoo.tmp
%ProgramFiles%\minitool partition wizard 12\is-s80gj.tmp
%ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\is-tr17u.tmp
%ProgramFiles%\minitool partition wizard 12\is-mhihg.tmp
%ProgramFiles%\minitool partition wizard 12\is-5ekac.tmp
%ProgramFiles%\minitool partition wizard 12\is-1n159.tmp
%ProgramFiles%\minitool partition wizard 12\is-04l32.tmp
%ProgramFiles%\minitool partition wizard 12\is-ovrue.tmp
%ProgramFiles%\minitool partition wizard 12\is-pb4eu.tmp
%ProgramFiles%\minitool partition wizard 12\is-91e4m.tmp
%ProgramFiles%\minitool partition wizard 12\is-ji21i.tmp
%ProgramFiles%\minitool partition wizard 12\is-c2v37.tmp
%ProgramFiles%\minitool partition wizard 12\is-p5o1r.tmp
%ProgramFiles%\minitool partition wizard 12\platforms\is-fegjc.tmp
%ProgramFiles%\minitool partition wizard 12\is-op3a3.tmp
%ProgramFiles%\minitool partition wizard 12\x64\is-m1ecj.tmp
%ProgramFiles%\minitool partition wizard 12\is-bth8f.tmp
%ProgramFiles%\minitool partition wizard 12\is-oh0qq.tmp
%ProgramFiles%\minitool partition wizard 12\is-45q69.tmp
%ProgramFiles%\minitool partition wizard 12\is-vot8s.tmp
%ProgramFiles%\minitool partition wizard 12\is-i1a44.tmp
%ProgramFiles%\minitool partition wizard 12\is-6e5jk.tmp
%ProgramFiles%\minitool partition wizard 12\is-0bv5c.tmp
%ProgramFiles%\minitool partition wizard 12\x64\is-u7d1r.tmp
%ProgramFiles%\minitool partition wizard 12\is-u0nj9.tmp
%ProgramFiles%\minitool partition wizard 12\is-fcl6v.tmp
%ProgramFiles%\minitool partition wizard 12\partitionwizard.exe.mfh

Sets the 'hidden' attribute to the following files

%CommonProgramFiles(x86)%\~gfhsjua.tmp

Deletes the following files

%TEMP%\aut32e2.tmp
%TEMP%\is-md0c9.tmp\_isetup\_setup64.tmp
%TEMP%\is-6qe7p.tmp\~gfhsjua.tmp
%CommonProgramFiles(x86)%\~gfhsjua.tmp
%TEMP%\aut7bb5.tmp
%TEMP%\aut7d5b.tmp
%TEMP%\aut7f8e.tmp

Moves the following files

from %ProgramFiles%\minitool partition wizard 12\is-ks7ab.tmp to %ProgramFiles%\minitool partition wizard 12\unins000.exe
from %ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\is-8qlek.tmp to %ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\bcd
from %ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\is-jul7i.tmp to %ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\bootfix.bin
from %ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\is-s6g6f.tmp to %ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\efisys.bin
from %ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\is-qrbc8.tmp to %ProgramFiles%\minitool partition wizard 12\petools\amd64\boot\etfsboot.com
from %ProgramFiles%\minitool partition wizard 12\petools\amd64\efi\boot\is-ir11g.tmp to %ProgramFiles%\minitool partition wizard 12\petools\amd64\efi\boot\bootx64.efi
from %ProgramFiles%\minitool partition wizard 12\petools\amd64\efi\microsoft\boot\is-eeq4u.tmp to %ProgramFiles%\minitool partition wizard 12\petools\amd64\efi\microsoft\boot\bcd
from %ProgramFiles%\minitool partition wizard 12\petools\x86\is-4tvka.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\bootmgr
from %ProgramFiles%\minitool partition wizard 12\petools\x86\is-tdaog.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\bootmgr.efi
from %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-rap1o.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\bcd
from %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-hdpl8.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\boot.sdi
from %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-kp2gu.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\bootfix.bin
from %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-i0juj.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\efisys.bin
from %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\is-utcj5.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\boot\etfsboot.com
from %ProgramFiles%\minitool partition wizard 12\petools\x86\efi\boot\is-qonb9.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\efi\boot\bootia32.efi
from %ProgramFiles%\minitool partition wizard 12\petools\x86\efi\microsoft\boot\is-3k2q2.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\efi\microsoft\boot\bcd
from %ProgramFiles%\minitool partition wizard 12\petools\amd64\is-m5ap3.tmp to %ProgramFiles%\minitool partition wizard 12\petools\amd64\bootmgr.efi
from %ProgramFiles%\minitool partition wizard 12\petools\x86\efi\microsoft\boot\is-jogj8.tmp to %ProgramFiles%\minitool partition wizard 12\petools\x86\efi\microsoft\boot\memtest.efi
from %ProgramFiles%\minitool partition wizard 12\petools\amd64\is-ergdk.tmp to %ProgramFiles%\minitool partition wizard 12\petools\amd64\bootmgr
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-uv29c.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\iastorac.inf
from %ProgramFiles%\minitool partition wizard 12\en-us\x64\is-gvjoo.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\x64\iscsicpl.exe.mui
from %ProgramFiles%\minitool partition wizard 12\en-us\x64\is-k785e.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\x64\iscsilog.dll.mui
from %ProgramFiles%\minitool partition wizard 12\en-us\x86\is-djvk5.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\x86\iscsicpl.dll.mui
from %ProgramFiles%\minitool partition wizard 12\en-us\x86\is-fbka1.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\x86\iscsicpl.exe.mui
from %ProgramFiles%\minitool partition wizard 12\en-us\x86\is-le0kj.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\x86\iscsilog.dll.mui
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-srurn.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\iaahcic.cat
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-660qh.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\iaahcic.inf
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-3h8sr.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\iastora.sys
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-amghl.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\iastorac.cat
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-h2r80.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\iastorac.inf
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\is-kheuv.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x64\f6flpy-x64\iastorf.sys
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-gugm2.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\iaahcic.cat
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-tvsum.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\iaahcic.inf
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-74kk2.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\iastora.sys
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-53mi8.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\iastorac.cat
from %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\is-qgeuc.tmp to %ProgramFiles%\minitool partition wizard 12\pedrivers\x86\f6flpy-x86\iastorf.sys
from %ProgramFiles%\minitool partition wizard 12\pxeboot\is-fg3tf.tmp to %ProgramFiles%\minitool partition wizard 12\pxeboot\boot.sdi
from %ProgramFiles%\minitool partition wizard 12\pxeboot\is-g1kdo.tmp to %ProgramFiles%\minitool partition wizard 12\pxeboot\pxebcd
from %ProgramFiles%\minitool partition wizard 12\x64\is-17uhf.tmp to %ProgramFiles%\minitool partition wizard 12\x64\wimmount.inf
from %ProgramFiles%\minitool partition wizard 12\is-84ifu.tmp to %ProgramFiles%\minitool partition wizard 12\qt.conf
from %ProgramFiles%\minitool partition wizard 12\is-rumk5.tmp to %ProgramFiles%\minitool partition wizard 12\qtbase_de.qm
from %ProgramFiles%\minitool partition wizard 12\is-jl83e.tmp to %ProgramFiles%\minitool partition wizard 12\qtbase_fr.qm
from %ProgramFiles%\minitool partition wizard 12\is-cbnj2.tmp to %ProgramFiles%\minitool partition wizard 12\qtbase_it.qm
from %ProgramFiles%\minitool partition wizard 12\is-245hf.tmp to %ProgramFiles%\minitool partition wizard 12\qtbase_ja.qm
from %ProgramFiles%\minitool partition wizard 12\is-6ulqq.tmp to %ProgramFiles%\minitool partition wizard 12\qtbase_ko.qm
from %ProgramFiles%\minitool partition wizard 12\diskspd\is-cmm2o.tmp to %ProgramFiles%\minitool partition wizard 12\diskspd\diskspd64.exe
from %ProgramFiles%\minitool partition wizard 12\is-6u3vm.tmp to %ProgramFiles%\minitool partition wizard 12\qt_de.qm
from %ProgramFiles%\minitool partition wizard 12\is-compt.tmp to %ProgramFiles%\minitool partition wizard 12\qt_fr.qm
from %ProgramFiles%\minitool partition wizard 12\is-oiojt.tmp to %ProgramFiles%\minitool partition wizard 12\qt_it.qm
from %ProgramFiles%\minitool partition wizard 12\is-okg87.tmp to %ProgramFiles%\minitool partition wizard 12\qt_ja.qm
from %ProgramFiles%\minitool partition wizard 12\is-mkn8v.tmp to %ProgramFiles%\minitool partition wizard 12\qt_ko.qm
from %ProgramFiles%\minitool partition wizard 12\is-1emkv.tmp to %ProgramFiles%\minitool partition wizard 12\qt_pt.qm
from %ProgramFiles%\minitool partition wizard 12\diskspd\is-7t8q7.tmp to %ProgramFiles%\minitool partition wizard 12\diskspd\diskspd32.exe
from %ProgramFiles%\minitool partition wizard 12\is-eo5hm.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pdr_pt.qm
from %ProgramFiles%\minitool partition wizard 12\is-7lc3b.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pt.qm
from %ProgramFiles%\minitool partition wizard 12\is-vokp6.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pdr_ko.qm
from %ProgramFiles%\minitool partition wizard 12\is-skkdi.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pdr_ja.qm
from %ProgramFiles%\minitool partition wizard 12\is-eb93f.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pdr_it.qm
from %ProgramFiles%\minitool partition wizard 12\x64\is-5jucd.tmp to %ProgramFiles%\minitool partition wizard 12\x64\wimserv.exe
from %ProgramFiles%\minitool partition wizard 12\x86\is-j15ne.tmp to %ProgramFiles%\minitool partition wizard 12\x86\wimmount.inf
from %ProgramFiles%\minitool partition wizard 12\x86\is-i2lss.tmp to %ProgramFiles%\minitool partition wizard 12\x86\wimmount.sys
from %ProgramFiles%\minitool partition wizard 12\x86\is-mt7va.tmp to %ProgramFiles%\minitool partition wizard 12\x86\wimserv.exe
from %ProgramFiles%\minitool partition wizard 12\is-rggfn.tmp to %ProgramFiles%\minitool partition wizard 12\error.html
from %ProgramFiles%\minitool partition wizard 12\is-759n2.tmp to %ProgramFiles%\minitool partition wizard 12\pw_de.qm
from %ProgramFiles%\minitool partition wizard 12\en-us\x64\is-o0vds.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\x64\iscsicpl.dll.mui
from %ProgramFiles%\minitool partition wizard 12\is-qe546.tmp to %ProgramFiles%\minitool partition wizard 12\pw_fr.qm
from %ProgramFiles%\minitool partition wizard 12\is-0gp62.tmp to %ProgramFiles%\minitool partition wizard 12\pw_es.qm
from %ProgramFiles%\minitool partition wizard 12\is-tcufd.tmp to %ProgramFiles%\minitool partition wizard 12\pw_ja.qm
from %ProgramFiles%\minitool partition wizard 12\is-e7mqo.tmp to %ProgramFiles%\minitool partition wizard 12\pw_ko.qm
from %ProgramFiles%\minitool partition wizard 12\is-of6im.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pdr_de.qm
from %ProgramFiles%\minitool partition wizard 12\is-34b6i.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pdr_en.qm
from %ProgramFiles%\minitool partition wizard 12\is-40nn7.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pdr_es.qm
from %ProgramFiles%\minitool partition wizard 12\is-p19cn.tmp to %ProgramFiles%\minitool partition wizard 12\pw_pdr_fr.qm
from %ProgramFiles%\minitool partition wizard 12\x64\is-dbev8.tmp to %ProgramFiles%\minitool partition wizard 12\x64\wimmount.sys
from %ProgramFiles%\minitool partition wizard 12\is-9g1r6.tmp to %ProgramFiles%\minitool partition wizard 12\pw_it.qm
from %ProgramFiles%\minitool partition wizard 12\is-5027b.tmp to %ProgramFiles%\minitool partition wizard 12\qt_es.qm
from %ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\is-2svf4.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\iscsilog.dll.mui
from %ProgramFiles%\minitool partition wizard 12\is-08b17.tmp to %ProgramFiles%\minitool partition wizard 12\wimgapi.dll
from %ProgramFiles%\minitool partition wizard 12\is-u9304.tmp to %ProgramFiles%\minitool partition wizard 12\qt5charts.dll
from %ProgramFiles%\minitool partition wizard 12\is-t0m8o.tmp to %ProgramFiles%\minitool partition wizard 12\qt5core.dll
from %ProgramFiles%\minitool partition wizard 12\is-1jvt4.tmp to %ProgramFiles%\minitool partition wizard 12\qt5gui.dll
from %ProgramFiles%\minitool partition wizard 12\is-lo6h9.tmp to %ProgramFiles%\minitool partition wizard 12\qt5network.dll
from %ProgramFiles%\minitool partition wizard 12\is-klvta.tmp to %ProgramFiles%\minitool partition wizard 12\qt5widgets.dll
from %ProgramFiles%\minitool partition wizard 12\is-65vtm.tmp to %ProgramFiles%\minitool partition wizard 12\rawobject.dll
from %ProgramFiles%\minitool partition wizard 12\is-p9dks.tmp to %ProgramFiles%\minitool partition wizard 12\ssleay32.dll
from %ProgramFiles%\minitool partition wizard 12\iconengines\is-pouj2.tmp to %ProgramFiles%\minitool partition wizard 12\iconengines\qsvgicon.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-rgota.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qdds.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-dm0gp.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qgif.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-vv2jb.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qicns.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-2016d.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qico.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-bl74t.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qjpeg.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-podpo.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qsvg.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-ub3f8.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qtga.dll
from %ProgramFiles%\minitool partition wizard 12\is-t65j8.tmp to %ProgramFiles%\minitool partition wizard 12\powerdatarecoveryui.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-1atsv.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qtiff.dll
from %ProgramFiles%\minitool partition wizard 12\is-t5q9a.tmp to %ProgramFiles%\minitool partition wizard 12\powerdatarecoverycore.dll
from %ProgramFiles%\minitool partition wizard 12\is-5ufl0.tmp to %ProgramFiles%\minitool partition wizard 12\partitionwizard.exe.mfh
from %ProgramFiles%\minitool partition wizard 12\is-423sr.tmp to %ProgramFiles%\minitool partition wizard 12\7-zip.dll
from %ProgramFiles%\minitool partition wizard 12\is-s4s6k.tmp to %ProgramFiles%\minitool partition wizard 12\7z.dll
from %ProgramFiles%\minitool partition wizard 12\is-s2cpo.tmp to %ProgramFiles%\minitool partition wizard 12\7z.exe
from %ProgramFiles%\minitool partition wizard 12\is-uer4k.tmp to %ProgramFiles%\minitool partition wizard 12\dbghelp.dll
from %ProgramFiles%\minitool partition wizard 12\is-isjjb.tmp to %ProgramFiles%\minitool partition wizard 12\efs.dll
from %ProgramFiles%\minitool partition wizard 12\is-gf9m3.tmp to %ProgramFiles%\minitool partition wizard 12\experience.exe
from %ProgramFiles%\minitool partition wizard 12\is-2jb27.tmp to %ProgramFiles%\minitool partition wizard 12\fvformatsupport.dll
from %ProgramFiles%\minitool partition wizard 12\is-9eom0.tmp to %ProgramFiles%\minitool partition wizard 12\idriver.dll
from %ProgramFiles%\minitool partition wizard 12\is-qr6d7.tmp to %ProgramFiles%\minitool partition wizard 12\ikernel.dll
from %ProgramFiles%\minitool partition wizard 12\is-v636i.tmp to %ProgramFiles%\minitool partition wizard 12\libcurl.dll
from %ProgramFiles%\minitool partition wizard 12\is-99jvf.tmp to %ProgramFiles%\minitool partition wizard 12\libeay32.dll
from %ProgramFiles%\minitool partition wizard 12\is-0ujv7.tmp to %ProgramFiles%\minitool partition wizard 12\msvcp120.dll
from %ProgramFiles%\minitool partition wizard 12\is-k3oe8.tmp to %ProgramFiles%\minitool partition wizard 12\msvcr120.dll
from %ProgramFiles%\minitool partition wizard 12\is-t2dan.tmp to %ProgramFiles%\minitool partition wizard 12\partitionwizard.dll
from %ProgramFiles%\minitool partition wizard 12\is-rdmf7.tmp to %ProgramFiles%\minitool partition wizard 12\partitionwizard.exe
from %ProgramFiles%\minitool partition wizard 12\is-73eu6.tmp to %ProgramFiles%\minitool partition wizard 12\pas.cnf
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-10gcr.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qwbmp.dll
from %ProgramFiles%\minitool partition wizard 12\imageformats\is-0fskc.tmp to %ProgramFiles%\minitool partition wizard 12\imageformats\qwebp.dll
from %ProgramFiles%\minitool partition wizard 12\platforms\is-fegjc.tmp to %ProgramFiles%\minitool partition wizard 12\platforms\qwindows.dll
from %ProgramFiles%\minitool partition wizard 12\is-1n159.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader_fr.qm
from %ProgramFiles%\minitool partition wizard 12\is-s80gj.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader_it.qm
from %ProgramFiles%\minitool partition wizard 12\is-5ekac.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader_ja.qm
from %ProgramFiles%\minitool partition wizard 12\is-mhihg.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader_ko.qm
from %ProgramFiles%\minitool partition wizard 12\is-0npkg.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader_pt.qm
from %ProgramFiles%\minitool partition wizard 12\is-ujkvm.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader_zh.qm
from %ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\is-rga3b.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\iscsicpl.dll.mui
from %ProgramFiles%\minitool partition wizard 12\is-2it4t.tmp to %ProgramFiles%\minitool partition wizard 12\oscdimg.exe
from %ProgramFiles%\minitool partition wizard 12\is-grhq2.tmp to %ProgramFiles%\minitool partition wizard 12\winpe.bmp
from %ProgramFiles%\minitool partition wizard 12\is-hn2ee.tmp to %ProgramFiles%\minitool partition wizard 12\winpe.jpg
from %ProgramFiles%\minitool partition wizard 12\is-6a7dl.tmp to %ProgramFiles%\minitool partition wizard 12\winpeshl.ini
from %ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\is-tr17u.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\iscsicpl.dll.mui
from %ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\is-9af2m.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\iscsicpl.exe.mui
from %ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\is-7vrsj.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\win8_x64\iscsilog.dll.mui
from %ProgramFiles%\minitool partition wizard 12\is-u0nj9.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader_de.qm
from %ProgramFiles%\minitool partition wizard 12\is-04l32.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader_es.qm
from %ProgramFiles%\minitool partition wizard 12\is-0bv5c.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader.exe.manifest
from %ProgramFiles%\minitool partition wizard 12\is-6e5jk.tmp to %ProgramFiles%\minitool partition wizard 12\mtpeloader.exe
from %ProgramFiles%\minitool partition wizard 12\is-i1a44.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder_zh.qm
from %ProgramFiles%\minitool partition wizard 12\x64\is-u7d1r.tmp to %ProgramFiles%\minitool partition wizard 12\x64\pwdspio.sys
from %ProgramFiles%\minitool partition wizard 12\x64\is-08v0d.tmp to %ProgramFiles%\minitool partition wizard 12\x64\pwnative.exe
from %ProgramFiles%\minitool partition wizard 12\is-ovrue.tmp to %ProgramFiles%\minitool partition wizard 12\bootsect.exe
from %ProgramFiles%\minitool partition wizard 12\is-pb4eu.tmp to %ProgramFiles%\minitool partition wizard 12\builder_config.ini
from %ProgramFiles%\minitool partition wizard 12\is-91e4m.tmp to %ProgramFiles%\minitool partition wizard 12\dism.exe
from %ProgramFiles%\minitool partition wizard 12\is-ji21i.tmp to %ProgramFiles%\minitool partition wizard 12\log4cpp.dll
from %ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\is-7avve.tmp to %ProgramFiles%\minitool partition wizard 12\en-us\win8_x86\iscsicpl.exe.mui
from %ProgramFiles%\minitool partition wizard 12\is-p5o1r.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder.exe.manifest
from %ProgramFiles%\minitool partition wizard 12\is-c2v37.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder.exe
from %ProgramFiles%\minitool partition wizard 12\is-vcbvj.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder_es.qm
from %ProgramFiles%\minitool partition wizard 12\is-bth8f.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder_fr.qm
from %ProgramFiles%\minitool partition wizard 12\is-fcl6v.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder_it.qm
from %ProgramFiles%\minitool partition wizard 12\is-oh0qq.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder_ja.qm
from %ProgramFiles%\minitool partition wizard 12\is-45q69.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder_ko.qm
from %ProgramFiles%\minitool partition wizard 12\is-vot8s.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder_pt.qm
from %ProgramFiles%\minitool partition wizard 12\x64\is-m1ecj.tmp to %ProgramFiles%\minitool partition wizard 12\x64\pwdrvio.sys
from %ProgramFiles%\minitool partition wizard 12\is-op3a3.tmp to %ProgramFiles%\minitool partition wizard 12\mtmediabuilder_de.qm
from %ProgramFiles%\minitool partition wizard 12\diskspd\is-vuskl.tmp to %ProgramFiles%\minitool partition wizard 12\diskspd\license.txt

Network activity

Connects to

'tr#####g.minitool.com':80
'go#####agmanager.com':443
'microsoft.com':80

TCP

HTTP GET requests

http://tr#####g.minitool.com/pw/installation.html?fr################

Other

'go#####agmanager.com':443

UDP

DNS ASK tr#####g.minitool.com
DNS ASK go#####agmanager.com
DNS ASK microsoft.com

Miscellaneous

Searches for the following windows

ClassName: 'DDEMLMom' WindowName: ''
ClassName: 'IEFrame' WindowName: ''
ClassName: 'MS_AutodialMonitor' WindowName: ''
ClassName: 'MS_WebCheckMonitor' WindowName: ''

Creates and executes the following

'%CommonProgramFiles(x86)%\~gfhsjua.tmp' /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%TEMP%\is-6qe7p.tmp\~gfhsjua.tmp' /SL5="$150226,26154802,488960,%CommonProgramFiles(x86)%\~gfhsjua.tmp" /VERYSILENT /SUPPRESSMSGBOXES /NORESTART /SP-
'%ProgramFiles%\minitool partition wizard 12\experience.exe' http://tr#####g.minitool.com/pw/installation.php?fr################
'%ProgramFiles%\minitool partition wizard 12\partitionwizard.exe'

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней