Trojan.MulDrop10.10988

Техническая информация

Для обеспечения автозапуска и распространения

Создает или изменяет следующие файлы

%HOMEPATH%\start menu\programs\startup\rainlendar.lnk

Изменения в файловой системе

Создает следующие файлы

%TEMP%\7zipsfx.000\rainlendar.exe
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\slovak.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\spanish.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\swedish.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\tradchinese.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\tГјrkГ§e.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\ukrainian.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\readme.txt
%ProgramFiles%\rainlendar\skins\rewind\bg.png
%ProgramFiles%\rainlendar\skins\rewind\bg_blue.png
%ProgramFiles%\rainlendar\skins\rewind\bg_clock.png
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\romanian.ini
%ProgramFiles%\rainlendar\skins\rewind\bg_green.png
%ProgramFiles%\rainlendar\skins\rewind\bg_smooth.png
%ProgramFiles%\rainlendar\skins\rewind\bg_yellow.png
%ProgramFiles%\rainlendar\skins\rewind\day.png
%ProgramFiles%\rainlendar\skins\rewind\day_blue.png
%ProgramFiles%\rainlendar\skins\rewind\day_green.png
%ProgramFiles%\rainlendar\skins\rewind\day_h.png
%ProgramFiles%\rainlendar\skins\rewind\day_smooth.png
%ProgramFiles%\rainlendar\skins\rewind\day_yellow.png
%ProgramFiles%\rainlendar\skins\rewind\digits.png
%ProgramFiles%\rainlendar\skins\rewind\event.png
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\serbian.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\simplified chinese (gb2312).ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\russian.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\portuguГЄs.ini
%ProgramFiles%\rainlendar\skins\rewind\eventlist_mode2.png
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\catalan.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\croatian.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\czech.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\dansk.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\dutch.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\estonian.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\euskera.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\french.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\german.ini
%ProgramFiles%\rainlendar\skins\rewind\eventlist.png
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\albanian-shqip.ini
%ProgramFiles%\rainlendar\skins\rewind\bg_mode2.png
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\greek.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\japanese.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\korean.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\latvian.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\lithuania.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\norsk.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\polish.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\portuguese - brazilian.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\portuguese_brazil.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\portuguese_brazil2.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\hebrew.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\hungarian.ini
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\italiano.ini
%ProgramFiles%\rainlendar\skins\tranquil\bg-small.png
%ProgramFiles%\rainlendar\skins\rewind\event_blue.png
%ProgramFiles%\rainlendar\skins\spectre\calendar.png
%ProgramFiles%\rainlendar\skins\spectre\close.png
%ProgramFiles%\rainlendar\skins\spectre\icon.png
%ProgramFiles%\rainlendar\skins\spectre\message.png
%ProgramFiles%\rainlendar\skins\spectre\solid.ini
%ProgramFiles%\rainlendar\skins\spectre\todo.png
%ProgramFiles%\rainlendar\skins\synoviumrl\bar1.png
%ProgramFiles%\rainlendar\skins\synoviumrl\bar2.png
%ProgramFiles%\rainlendar\skins\synoviumrl\bar3.png
%ProgramFiles%\rainlendar\skins\synoviumrl\box1.png
%ProgramFiles%\rainlendar\skins\synoviumrl\box2.png
%ProgramFiles%\rainlendar\skins\rewind\with digital clock.ini
%ProgramFiles%\rainlendar\skins\klottz\year.png
%ProgramFiles%\rainlendar\skins\rewind\weekdays_yellow.png
%ProgramFiles%\rainlendar\skins\synoviumrl\btnnew.png
%ProgramFiles%\rainlendar\skins\synoviumrl\btntoday.png
%ProgramFiles%\rainlendar\skins\synoviumrl\btntodo.png
%ProgramFiles%\rainlendar\skins\synoviumrl\btnup.png
%ProgramFiles%\rainlendar\skins\synoviumrl\empty.png
%ProgramFiles%\rainlendar\skins\synoviumrl\mrb-bignumbers.png
%ProgramFiles%\rainlendar\skins\synoviumrl\mrb-months.png
%ProgramFiles%\rainlendar\skins\synoviumrl\mrb-numbers.png
%ProgramFiles%\rainlendar\skins\synoviumrl\mrb-synrl.png
%ProgramFiles%\rainlendar\skins\synoviumrl\mrb-weekdays.png
%ProgramFiles%\rainlendar\skins\synoviumrl\btnevents.png
%ProgramFiles%\rainlendar\skins\synoviumrl\btndown.png
%ProgramFiles%\rainlendar\skins\rainlendar_languages\languages\bulgarian.ini
%ProgramFiles%\rainlendar\skins\rewind\weekdays_green.png
%ProgramFiles%\rainlendar\skins\rewind\today_blue.png
%ProgramFiles%\rainlendar\skins\rewind\event_smooth.png
%ProgramFiles%\rainlendar\skins\rewind\event_yellow.png
%ProgramFiles%\rainlendar\skins\rewind\horizontal.ini
%ProgramFiles%\rainlendar\skins\rewind\message.png
%ProgramFiles%\rainlendar\skins\rewind\mode2.ini
%ProgramFiles%\rainlendar\skins\rewind\months_h.png
%ProgramFiles%\rainlendar\skins\rewind\regular (blue).ini
%ProgramFiles%\rainlendar\skins\rewind\regular (green).ini
%ProgramFiles%\rainlendar\skins\rewind\regular (smooth).ini
%ProgramFiles%\rainlendar\skins\rewind\regular (yellow).ini
%ProgramFiles%\rainlendar\skins\rewind\weekdays_smooth.png
%ProgramFiles%\rainlendar\skins\rewind\event_green.png
%ProgramFiles%\rainlendar\skins\rewind\event_h.png
%ProgramFiles%\rainlendar\skins\rewind\today_green.png
%ProgramFiles%\rainlendar\skins\rewind\today_h.png
%ProgramFiles%\rainlendar\skins\rewind\today_smooth.png
%ProgramFiles%\rainlendar\skins\rewind\today_yellow.png
%ProgramFiles%\rainlendar\skins\rewind\todo.png
%ProgramFiles%\rainlendar\skins\rewind\todo2.png
%ProgramFiles%\rainlendar\skins\rewind\top.png
%ProgramFiles%\rainlendar\skins\rewind\weekdays.png
%ProgramFiles%\rainlendar\skins\rewind\weekdays_blue.png
%ProgramFiles%\rainlendar\skins\rewind\weekdays_clock.png
%ProgramFiles%\rainlendar\skins\rewind\today.png
%ProgramFiles%\rainlendar\skins\rewind\regular.ini
%ProgramFiles%\rainlendar\skins\klottz\weekdays_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\weekdays.png
%ProgramFiles%\rainlendar\skins\klottz\todo_spectre.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-white.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-yellow.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-small-white.png
%ProgramFiles%\rainlendar\skins\shadow3.1\today.png
%ProgramFiles%\rainlendar\skins\shadow3.1\todo-bg-english.png
%ProgramFiles%\rainlendar\skins\shadow3.1\todo-bg-finnish.png
%ProgramFiles%\rainlendar\skins\shadow3.1\todo-bg-german.png
%ProgramFiles%\rainlendar\skins\shadow3.1\todo-item.png
%ProgramFiles%\rainlendar\skins\shadow3.1\weekdays-english.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-magenta.png
%ProgramFiles%\rainlendar\skins\shadow3.1\events-bg-finnish.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-red.png
%ProgramFiles%\rainlendar\skins\shadow3.1\weekdays-finnish.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\books.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\cat.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\check.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\cross.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\denied.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\dinner.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\dog.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\heart.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\incoming.png
%ProgramFiles%\rainlendar\skins\shadow3.1\weekdays-german.png
%ProgramFiles%\rainlendar\skins\shadow3.1\button-left.png
%ProgramFiles%\rainlendar\skins\shadow3.1\button-right.png
%ProgramFiles%\rainlendar\skins\synoviumrl\synoviumrl.ini
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\lightning.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-glow.png
%TEMP%\nsz2.tmp
%ProgramFiles%\rainlendar\rainlendar.chm
%ProgramFiles%\rainlendar\rainlendar.dll
%ProgramFiles%\rainlendar\rainlendar.exe
%ProgramFiles%\rainlendar\languages\english.example
%ProgramFiles%\rainlendar\languages\finnish.ini
%ProgramFiles%\rainlendar\plugins\iniformatplugin.dll
%ProgramFiles%\rainlendar\plugins\outlookplugin.dll
%ProgramFiles%\rainlendar\plugins\serverplugin.dll
%ProgramFiles%\rainlendar\skins\shadow3.1\english.ini
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-green.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-grey.png
%ProgramFiles%\rainlendar\skins\shadow3.1\events-bg-english.png
%ProgramFiles%\rainlendar\skins\shadow3.1\finnish.ini
%ProgramFiles%\rainlendar\skins\shadow3.1\german.ini
%ProgramFiles%\rainlendar\skins\shadow3.1\messagebox-bg.png
%ProgramFiles%\rainlendar\skins\shadow3.1\months-english.png
%ProgramFiles%\rainlendar\skins\shadow3.1\months-finnish.png
%ProgramFiles%\rainlendar\skins\shadow3.1\months-german.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-black.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-blue.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-brown.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-cyan.png
%TEMP%\7zipsfx.000\skins.exe
%ProgramFiles%\rainlendar\skins\shadow3.1\events-bg-german.png
%ProgramFiles%\rainlendar\skins\synoviumrl\btnhide.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\moneybag.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\phone.png
%HOMEPATH%\desktop\rainlendar.lnk
%ProgramFiles%\rainlendar\skins\klottz\bg.png
%ProgramFiles%\rainlendar\skins\klottz\bg_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\day.png
%ProgramFiles%\rainlendar\skins\klottz\day_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\event.png
%ProgramFiles%\rainlendar\skins\klottz\eventlist.png
%ProgramFiles%\rainlendar\skins\klottz\eventlist_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\event_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\head.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\music.png
%HOMEPATH%\start menu\programs\rainlendar\remove rainlendar.lnk
%HOMEPATH%\start menu\programs\rainlendar\documentation.lnk
%ProgramFiles%\rainlendar\skins\klottz\line_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\message.png
%ProgramFiles%\rainlendar\skins\klottz\month.png
%ProgramFiles%\rainlendar\skins\klottz\regular.ini
%ProgramFiles%\rainlendar\skins\klottz\spectre.ini
%ProgramFiles%\rainlendar\skins\klottz\today.png
%ProgramFiles%\rainlendar\skins\klottz\today_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\todo.png
%ProgramFiles%\rainlendar\skins\klottz\todo2.png
%ProgramFiles%\rainlendar\skins\klottz\todo2_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\head_spectre.png
%ProgramFiles%\rainlendar\skins\klottz\line.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\outgoing.png
%ProgramFiles%\rainlendar\skins\klottz\icon.png
%ProgramFiles%\rainlendar\skins\shadow3.1\numbers-large-pink.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\plane.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\poison.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\question.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\star.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\star2.png
%ProgramFiles%\rainlendar\skins\shadow3.1\icons\tools.png
%ProgramFiles%\rainlendar\skins\tranquil\horizontal.ini
%ProgramFiles%\rainlendar\skins\tranquil\normal.ini
%ProgramFiles%\rainlendar\skins\tranquil\small.ini
%ProgramFiles%\rainlendar\skins\tranquil\bg-horz.png
%ProgramFiles%\rainlendar\skins\tranquil\today.png
%HOMEPATH%\start menu\programs\rainlendar\rainlendar.lnk
%ProgramFiles%\rainlendar\uninst.exe
%ProgramFiles%\rainlendar\skins\tranquil\event-blue.png
%ProgramFiles%\rainlendar\skins\tranquil\event-cyan.png
%ProgramFiles%\rainlendar\skins\tranquil\event-green.png
%ProgramFiles%\rainlendar\skins\tranquil\event-red.png
%ProgramFiles%\rainlendar\skins\tranquil\event-white.png
%ProgramFiles%\rainlendar\skins\tranquil\event-yellow.png
%ProgramFiles%\rainlendar\skins\tranquil\item.png
%ProgramFiles%\rainlendar\skins\tranquil\message.png
%ProgramFiles%\rainlendar\skins\tranquil\numbers-red.png
%ProgramFiles%\rainlendar\skins\tranquil\numbers.png
%ProgramFiles%\rainlendar\skins\tranquil\bg-normal.png
%ProgramFiles%\rainlendar\skins\tranquil\event-black.png
%ProgramFiles%\rainlendar\skins\synoviumrl\thumbs.db

Присваивает атрибут 'скрытый' для следующих файлов

%ProgramFiles%\rainlendar\skins\synoviumrl\thumbs.db

Удаляет следующие файлы

%TEMP%\7zipsfx.000\rainlendar.exe
%TEMP%\7zipsfx.000\skins.exe

Другое

Ищет следующие окна

ClassName: 'Rainlendar' WindowName: ''
ClassName: 'EDIT' WindowName: ''

Создает и запускает на исполнение

'%TEMP%\7zipsfx.000\rainlendar.exe' /S RU /NORESTART
'%TEMP%\7zipsfx.000\skins.exe'

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней