查杀引擎 | 查杀结果 | 查杀时间 | 查杀版本 |
---|---|---|---|
McAfee | 20200214 | 6.0.6.653 | |
Alibaba | 20190527 | 0.3.0.5 | |
Baidu | 20190318 | 1.0.0.2 | |
Avast | 20200214 | 18.4.3895.0 | |
Kingsoft | 20200214 | 2013.8.14.323 | |
Tencent | 20200214 | 1.0.0.1 | |
CrowdStrike | 20190702 | 1.0 |
registry | HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography\MachineGuid |
resource name | None |
suspicious_features | GET method with no useragent header, HTTP version 1.0 used | suspicious_request | GET http://audiochannel.net/components/eisetup.exe |
request | GET http://audiochannel.net/components/eisetup.exe |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk |
file | C:\Program Files (x86)\NCH Software\ExpressAccounts\paypal.dll |
file | C:\Program Files (x86)\NCH Software\ExpressAccounts\eway.dll |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Accounts.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk |
file | C:\Users\Administrator.Oskar-PC\AppData\Local\Temp\eisetup.exe |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Rip CD Ripper.lnk |
file | C:\ProgramData\NCH Software\ExpressAccounts\Web\cookie.js |
file | C:\Program Files (x86)\NCH Software\ExpressAccounts\expressaccounts.exe |
file | C:\ProgramData\NCH Software\ExpressAccounts\Web\pagecookie.js |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Dictate Recorder.lnk |
file | C:\Users\Administrator.Oskar-PC\AppData\Local\Temp\n1s.exe |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk |
file | C:\Program Files (x86)\NCH Software\ExpressAccounts\uninst.exe |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Graphics File Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk |
file | C:\Users\Administrator.Oskar-PC\Favorites\NCH Software Download Site.lnk |
file | C:\ProgramData\NCH Software\ExpressAccounts\Web\datepicker.js |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business Related Programs\Inventory Software.lnk |
file | C:\ProgramData\NCH Software\ExpressAccounts\Web\combobox.js |
file | C:\Program Files (x86)\NCH Software\ExpressAccounts\authorize.dll |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business Related Programs\Time Tracking Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Classic FTP Software.lnk |
file | C:\Program Files (x86)\NCH Software\ExpressAccounts\zlib1.dll |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business Related Programs\Accounting Software.lnk |
file | C:\Program Files (x86)\NCH Software\ExpressAccounts\Help\help.js |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Doxillion Document Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Burn CD, DVD or Blu-Ray.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Talk Softphone.lnk |
file | C:\Users\Public\Desktop\Express Accounts.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business Related Programs\Invoicing Software.lnk |
file | C:\ProgramData\NCH Software\ExpressAccounts\Web\datetime.js |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Golden Records LP Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Video Capture Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Accounts.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\MixPad MultiTrack Mixer.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\WavePad Sound Editor.lnk |
file | C:\Users\Administrator.Oskar-PC\Desktop\Express Accounts.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Rip CD Ripper.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Dictate Recorder.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Switch Sound File Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Graphics File Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\VideoPad Video Editor.lnk |
file | C:\Users\Administrator.Oskar-PC\Favorites\NCH Software Download Site.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business Related Programs\Inventory Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business Related Programs\Time Tracking Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Invoicing Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Classic FTP Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business Related Programs\Accounting Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Prism Video File Format Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\RecordPad Sound Recorder.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Doxillion Document Converter.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Burn CD, DVD or Blu-Ray.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Accounting Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Express Talk Softphone.lnk |
file | C:\Users\Public\Desktop\Express Accounts.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\SoundTap Streaming Recorder.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Business Related Programs\Invoicing Software.lnk |
file | C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NCH Software Suite\Golden Records LP Converter.lnk |
file | C:\Users\Administrator.Oskar-PC\AppData\Local\Temp\n1s.exe |
file | C:\Users\Administrator.Oskar-PC\AppData\Local\Temp\n1s.exe |
ESET-NOD32 | a variant of Win32/Toolbar.Conduit.J potentially unwanted |
Rising | PUA.Conduit!8.122 (CLOUD) |
VBA32 | SigAdware.NCHSoftware |