Trojan.MulDrop7.46219

Техническая информация

Вредоносные функции:

Для затруднения выявления своего присутствия в системе

удаляет теневые копии разделов.

Изменения в файловой системе:

Создает следующие файлы:

<STUBS_DIR>\AVSYNMGR\how_to_restore_files.html
<STUBS_DIR>\bankcl\how_to_restore_files.html
<STUBS_DIR>\AVPM\how_to_restore_files.html
<STUBS_DIR>\AVP32\how_to_restore_files.html
<STUBS_DIR>\AVPCC\how_to_restore_files.html
<STUBS_DIR>\BBClient\how_to_restore_files.html
<STUBS_DIR>\bdss\how_to_restore_files.html
<STUBS_DIR>\bdsubmit\how_to_restore_files.html
<STUBS_DIR>\bdagent\how_to_restore_files.html
<STUBS_DIR>\bclient\how_to_restore_files.html
<STUBS_DIR>\bc_loader\how_to_restore_files.html
<STUBS_DIR>\AVP\how_to_restore_files.html
<STUBS_DIR>\ageofconan\how_to_restore_files.html
<STUBS_DIR>\aion\how_to_restore_files.html
<STUBS_DIR>\360tray\how_to_restore_files.html
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\how_to_restore_files.html
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\desktop.ini.rrr
<STUBS_DIR>\ash\how_to_restore_files.html
<STUBS_DIR>\AVGCC32\how_to_restore_files.html
<STUBS_DIR>\AVGCTRL\how_to_restore_files.html
<STUBS_DIR>\avgcc\how_to_restore_files.html
<STUBS_DIR>\ashAvast\how_to_restore_files.html
<STUBS_DIR>\ashAvSrv\how_to_restore_files.html
<STUBS_DIR>\bk\how_to_restore_files.html
<STUBS_DIR>\Drweb32w\how_to_restore_files.html
<STUBS_DIR>\drweb386\how_to_restore_files.html
<STUBS_DIR>\drweb\how_to_restore_files.html
<STUBS_DIR>\dekaron\how_to_restore_files.html
<STUBS_DIR>\dnf\how_to_restore_files.html
<STUBS_DIR>\Drwebupw\how_to_restore_files.html
<STUBS_DIR>\ekrn\how_to_restore_files.html
<STUBS_DIR>\elbank\how_to_restore_files.html
<STUBS_DIR>\egni\how_to_restore_files.html
<STUBS_DIR>\Drwebwcl\how_to_restore_files.html
<STUBS_DIR>\ecmd\how_to_restore_files.html
<STUBS_DIR>\contactNG\how_to_restore_files.html
<STUBS_DIR>\cbsmain\how_to_restore_files.html
<STUBS_DIR>\ccapp\how_to_restore_files.html
<STUBS_DIR>\cbmain\how_to_restore_files.html
<STUBS_DIR>\cabalmain\how_to_restore_files.html
<STUBS_DIR>\cbank\how_to_restore_files.html
<STUBS_DIR>\chrome\how_to_restore_files.html
<STUBS_DIR>\clmain\how_to_restore_files.html
<STUBS_DIR>\clntw32\how_to_restore_files.html
<STUBS_DIR>\client7\how_to_restore_files.html
<STUBS_DIR>\ClamWin\how_to_restore_files.html
<STUBS_DIR>\clbank\how_to_restore_files.html
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\INFO2.rrr
%ProgramFiles%\Outlook Express\wabimp.dll.new
%ProgramFiles%\Outlook Express\wabfind.dll.new
<SYSTEM32>\dllcache\oeimport.dll.new
%ProgramFiles%\Outlook Express\wabmig.exe.new
<SYSTEM32>\dllcache\oemig50.exe.new
%ProgramFiles%\Outlook Express\wab.exe.new
%ProgramFiles%\NetMeeting\callcont.dll.rrr
%ProgramFiles%\NetMeeting\how_to_restore_files.html
%ProgramFiles%\Outlook Express\oemiglib.dll.new
<SYSTEM32>\dllcache\msoeres.dll.new
%ProgramFiles%\Outlook Express\setup50.exe.new
%ProgramFiles%\NetMeeting\cb32.exe.rrr
%ProgramFiles%\NetMeeting\callcont.dll.new
<SYSTEM32>\dllcache\wabmig.exe.new
%ProgramFiles%\NetMeeting\cb32.exe.new
<SYSTEM32>\dllcache\cb32.exe.new
<SYSTEM32>\dllcache\callcont.dll.new
<SYSTEM32>\dllcache\wabimp.dll.new
<SYSTEM32>\dllcache\oemiglib.dll.new
%ProgramFiles%\NetMeeting\conf.exe.rrr
<SYSTEM32>\dllcache\setup50.exe.new
<SYSTEM32>\dllcache\wabfind.dll.new
<SYSTEM32>\dllcache\wab.exe.new
%ProgramFiles%\NetMeeting\Blip.wav.rrr
%ProgramFiles%\Outlook Express\msoe.dll.new
%ProgramFiles%\Outlook Express\msoeres.dll.rrr
<SYSTEM32>\dllcache\msoe.dll.new
%ProgramFiles%\Outlook Express\oemig50.exe.rrr
%ProgramFiles%\Outlook Express\oeimport.dll.rrr
%ProgramFiles%\Outlook Express\msoe.txt.rrr
%ProgramFiles%\Outlook Express\how_to_restore_files.html
%ProgramFiles%\Outlook Express\msimn.exe.rrr
%ProgramFiles%\Outlook Express\msoe.dll.rrr
<SYSTEM32>\dllcache\msimn.exe.new
%ProgramFiles%\Outlook Express\msimn.exe.new
%ProgramFiles%\Outlook Express\oemiglib.dll.rrr
%ProgramFiles%\Outlook Express\oemig50.exe.new
%ProgramFiles%\Outlook Express\oeimport.dll.new
%ProgramFiles%\Online Services\Refer me to more Internet Service Providers.lnk.rrr
%ProgramFiles%\Online Services\Use MSN Explorer to sign up for Internet Access (US only).lnk.rrr
%ProgramFiles%\Online Services\how_to_restore_files.html
%ProgramFiles%\Outlook Express\wabmig.exe.rrr
%ProgramFiles%\Outlook Express\wab.exe.rrr
%ProgramFiles%\Outlook Express\setup50.exe.rrr
%ProgramFiles%\Outlook Express\msoeres.dll.new
%ProgramFiles%\Outlook Express\wabimp.dll.rrr
%ProgramFiles%\Outlook Express\wabfind.dll.rrr
<STUBS_DIR>\wclnt\how_to_restore_files.html
<STUBS_DIR>\webmoney\how_to_restore_files.html
<STUBS_DIR>\UniStream\how_to_restore_files.html
<STUBS_DIR>\trillian\how_to_restore_files.html
<STUBS_DIR>\TwelveSky2\how_to_restore_files.html
<STUBS_DIR>\winbaram\how_to_restore_files.html
<STUBS_DIR>\YahooMessenger\how_to_restore_files.html
<STUBS_DIR>\ybclient\how_to_restore_files.html
<STUBS_DIR>\wsm\how_to_restore_files.html
<STUBS_DIR>\woool\how_to_restore_files.html
<STUBS_DIR>\wow\how_to_restore_files.html
<STUBS_DIR>\translink\how_to_restore_files.html
<STUBS_DIR>\sgbclient\how_to_restore_files.html
<STUBS_DIR>\skype\how_to_restore_files.html
<STUBS_DIR>\safari\how_to_restore_files.html
<STUBS_DIR>\RagFree\how_to_restore_files.html
<STUBS_DIR>\rclient\how_to_restore_files.html
<STUBS_DIR>\smc\how_to_restore_files.html
<STUBS_DIR>\startclient7\how_to_restore_files.html
<STUBS_DIR>\tiny\how_to_restore_files.html
<STUBS_DIR>\sro_client\how_to_restore_files.html
<STUBS_DIR>\so3d\how_to_restore_files.html
<STUBS_DIR>\spidernt\how_to_restore_files.html
<STUBS_DIR>\zapro\how_to_restore_files.html
<STUBS_DIR>\list_full.txt.rrr
C:\startup_local.bat.rrr
<STUBS_DIR>\how_to_restore_files.html
<STUBS_DIR>\proc_av.txt.rrr
<STUBS_DIR>\list_short.txt.rrr
C:\how_to_restore_files.html.rrr
C:\AUTOEXEC.BAT.rrr
%TEMP%\qfjgmfgmkj.tmp
C:\how_to_restore_files.html
C:\CONFIG.SYS.rrr
C:\boot.ini.rrr
<STUBS_DIR>\proc_banks.txt.rrr
<STUBS_DIR>\__cd75efb816b2cc__\how_to_restore_files.html
<STUBS_DIR>\test.exe.rrr
<STUBS_DIR>\ZZ__cd75efb816b2cc__\how_to_restore_files.html
<STUBS_DIR>\zlclient\how_to_restore_files.html
<STUBS_DIR>\ZONEALARM\how_to_restore_files.html
<STUBS_DIR>\runall.bat.rrr
<STUBS_DIR>\proc_fake.txt.rrr
<STUBS_DIR>\proc_browsers.txt.rrr
<STUBS_DIR>\proc_games.txt.rrr
<STUBS_DIR>\proc_tools.txt.rrr
<STUBS_DIR>\proc_im.txt.rrr
<STUBS_DIR>\Ragexe\how_to_restore_files.html
<STUBS_DIR>\iexplore\how_to_restore_files.html
<STUBS_DIR>\inbank-start-ff\how_to_restore_files.html
<STUBS_DIR>\ICQ\how_to_restore_files.html
<STUBS_DIR>\gw\how_to_restore_files.html
<STUBS_DIR>\httplook\how_to_restore_files.html
<STUBS_DIR>\InphaseNXD\how_to_restore_files.html
<STUBS_DIR>\java\how_to_restore_files.html
<STUBS_DIR>\javaw\how_to_restore_files.html
<STUBS_DIR>\ISClient\how_to_restore_files.html
<STUBS_DIR>\intpro\how_to_restore_files.html
<STUBS_DIR>\iscc\how_to_restore_files.html
<STUBS_DIR>\GVOnline\how_to_restore_files.html
<STUBS_DIR>\fsav\how_to_restore_files.html
<STUBS_DIR>\fsav32\how_to_restore_files.html
<STUBS_DIR>\firefox\how_to_restore_files.html
<STUBS_DIR>\elementclient\how_to_restore_files.html
<STUBS_DIR>\el_cli\how_to_restore_files.html
<STUBS_DIR>\fsavaui\how_to_restore_files.html
<STUBS_DIR>\googletalk\how_to_restore_files.html
<STUBS_DIR>\GUARD\how_to_restore_files.html
<STUBS_DIR>\ge\how_to_restore_files.html
<STUBS_DIR>\fsavgui\how_to_restore_files.html
<STUBS_DIR>\gc\how_to_restore_files.html
<STUBS_DIR>\kb_cli\how_to_restore_files.html
<STUBS_DIR>\nod32\how_to_restore_files.html
<STUBS_DIR>\ntvdm\how_to_restore_files.html
<STUBS_DIR>\nod\how_to_restore_files.html
<STUBS_DIR>\NAVAPW32\how_to_restore_files.html
<STUBS_DIR>\netxray\how_to_restore_files.html
<STUBS_DIR>\oncbcli\how_to_restore_files.html
<STUBS_DIR>\putty\how_to_restore_files.html
<STUBS_DIR>\qip\how_to_restore_files.html
<STUBS_DIR>\pidgin\how_to_restore_files.html
<STUBS_DIR>\opera\how_to_restore_files.html
<STUBS_DIR>\outpost\how_to_restore_files.html
<STUBS_DIR>\msnmsgr\how_to_restore_files.html
<STUBS_DIR>\lotroclient\how_to_restore_files.html
<STUBS_DIR>\magent\how_to_restore_files.html
<STUBS_DIR>\loadmain\how_to_restore_files.html
<STUBS_DIR>\l2\how_to_restore_files.html
<STUBS_DIR>\lin\how_to_restore_files.html
<STUBS_DIR>\maplestory\how_to_restore_files.html
<STUBS_DIR>\mpftray\how_to_restore_files.html
<STUBS_DIR>\msn6\how_to_restore_files.html
<STUBS_DIR>\miranda32\how_to_restore_files.html
<STUBS_DIR>\MCAGENT\how_to_restore_files.html
<STUBS_DIR>\Mir3Game\how_to_restore_files.html

Удаляет следующие файлы:

C:\how_to_restore_files.html

Подменяет следующие файлы:

C:\how_to_restore_files.html

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней