Trojan.MulDrop7.56103

Техническая информация

Изменения в файловой системе:

Создает следующие файлы:

%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.2052.txt
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.1028.txt
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.ini
%WINDIR%\Installer\MSIC.tmp
C:\Config.Msi\270e8.rbs
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.1036.txt
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.1040.txt
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.3082.txt
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.1031.txt
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.1033.txt
%WINDIR%\Installer\270e7.ipi
C:\d9d6d1f9a8e14521f326\eula.1031.txt
C:\d9d6d1f9a8e14521f326\eula.1028.txt
C:\d9d6d1f9a8e14521f326\eula.3082.txt
C:\d9d6d1f9a8e14521f326\eula.1040.txt
C:\d9d6d1f9a8e14521f326\eula.1036.txt
C:\d9d6d1f9a8e14521f326\$shtdwn$.req
%WINDIR%\Installer\270e5.msi
C:\d9d6d1f9a8e14521f326\globdata.ini
C:\d9d6d1f9a8e14521f326\eula.2052.txt
C:\d9d6d1f9a8e14521f326\install.ini
%WINDIR%\assembly\tmp\L71SJU66\Microsoft.ReportViewer.ProcessingObjectModel.dll
%WINDIR%\assembly\tmp\HLMFE0TH\Microsoft.ReportViewer.WebForms.dll
%WINDIR%\assembly\tmp\NY7Y7VKA\Microsoft.ReportViewer.Common.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.1041.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.1042.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\VB_ROS.MSI
%WINDIR%\Installer\270e9.msi
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\unicows.dll
%WINDIR%\assembly\tmp\67227SHL\Microsoft.ReportViewer.WinForms.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\ReportViewer.bmp
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.1040.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.exe
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.2052.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\globdata.ini
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.1041.txt
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\eula.1042.txt
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.3082.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.1036.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.1033.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.1028.dll
%WINDIR%\Microsoft.NET\Framework\v2.0.50727\Microsoft Report Viewer Redistributable 2008\install.res.1031.dll
%ProgramFiles%\Microsoft SQL Server\100\SDK\Assemblies\Microsoft.SqlServer.Types.dll
<SYSTEM32>\SqlServerSpatial.dll
%WINDIR%\assembly\tmp\YEG6DM6V\Microsoft.SqlServer.Types.dll
%WINDIR%\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\8.0.50727.4027.cat
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4027_x-ww_e69378d0.cat
%WINDIR%\WinSxS\Manifests\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4027_x-ww_e69378d0.manifest
%WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4027_x-ww_e69378d0\msvcm80.dll
%WINDIR%\WinSxS\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\8.0.50727.4027.policy
%ProgramFiles%\Microsoft SQL Server\100\KeyFile\1033\sqlsysclrtypes_keyfile.dll
%ProgramFiles%\Microsoft SQL Server\90\Shared\Resources\1033\License_SysClrTypes.rtf
C:\Config.Msi\270e3.rbs
%WINDIR%\Installer\MSI4.tmp
%WINDIR%\Installer\MSI5.tmp
%WINDIR%\Installer\MSI3.tmp
%TEMP%\nsd2.tmp\System.dll
%WINDIR%\Installer\270e0.msi
%WINDIR%\Installer\MSI8.tmp
%WINDIR%\Installer\MSI9.tmp
%WINDIR%\Installer\MSI7.tmp
%WINDIR%\Installer\270e2.ipi
%WINDIR%\Installer\MSI6.tmp
C:\d9d6d1f9a8e14521f326\install.res.1031.dll
C:\d9d6d1f9a8e14521f326\install.res.1028.dll
C:\d9d6d1f9a8e14521f326\install.res.3082.dll
C:\d9d6d1f9a8e14521f326\install.res.1040.dll
C:\d9d6d1f9a8e14521f326\install.res.1036.dll
C:\d9d6d1f9a8e14521f326\eula.1042.txt
C:\d9d6d1f9a8e14521f326\eula.1041.txt
C:\d9d6d1f9a8e14521f326\eula.1033.txt
C:\d9d6d1f9a8e14521f326\install.res.2052.dll
C:\d9d6d1f9a8e14521f326\ReportViewer.bmp
C:\d9d6d1f9a8e14521f326\install.res.1041.dll
%WINDIR%\Installer\{A47FD1BF-A815-4A76-BE65-53A15BD5D25D}\ARPIco
C:\d9d6d1f9a8e14521f326\vb_ros.cab
%WINDIR%\Installer\270e4.msi
%WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4027_x-ww_e69378d0\msvcp80.dll
%WINDIR%\WinSxS\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.4027_x-ww_e69378d0\msvcr80.dll
C:\d9d6d1f9a8e14521f326\install.res.1033.dll
C:\d9d6d1f9a8e14521f326\install.res.1042.dll
C:\d9d6d1f9a8e14521f326\unicows.dll
C:\d9d6d1f9a8e14521f326\vb_ros.msi
C:\d9d6d1f9a8e14521f326\install.exe