Trojan.Hosts.46748

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\x\idm0.tmp
%ProgramFiles%\internet download manager\idmtdi64.sys
%ProgramFiles%\internet download manager\languages\tips_pl.txt
%ProgramFiles%\internet download manager\languages\idm_pl.lng
%ProgramFiles%\internet download manager\languages\tips_th.txt
%ProgramFiles%\internet download manager\languages\idm_th.lng
%ProgramFiles%\internet download manager\languages\tips_ru.txt
%ProgramFiles%\internet download manager\languages\idm_ru.lng
%ProgramFiles%\internet download manager\idmwfp.cat
%ProgramFiles%\internet download manager\idmwfp64.sys
%ProgramFiles%\internet download manager\idmiecc64.dll
%ProgramFiles%\internet download manager\idmbrbtn64.dll
%ProgramFiles%\internet download manager\idmshellext64.dll
%ProgramFiles%\internet download manager\idmtdi32.sys
%ProgramFiles%\internet download manager\idmwfp32.sys
%ProgramFiles%\internet download manager\idmtdi.inf
%ProgramFiles%\internet download manager\grabber.chm
%ProgramFiles%\internet download manager\idmgetall64.dll
%ProgramFiles%\internet download manager\idmgcext.crx
%ProgramFiles%\internet download manager\languages\inst_fr.lng
%ProgramFiles%\internet download manager\languages\inst_src.lng
%ProgramFiles%\internet download manager\languages\inst_fa.lng
%ProgramFiles%\internet download manager\languages\inst_de.lng
%ProgramFiles%\internet download manager\languages\inst_kr.lng
%ProgramFiles%\internet download manager\languages\inst_it.lng
%ProgramFiles%\internet download manager\languages\inst_ptbr.lng
%ProgramFiles%\internet download manager\languages\inst_ar.lng
%ProgramFiles%\internet download manager\idmwfp.inf
%ProgramFiles%\internet download manager\idmshellext.dll
%ProgramFiles%\internet download manager\downlwithidm64.dll
%ProgramFiles%\internet download manager\languages\template_inst.lng
%ProgramFiles%\internet download manager\idmnetmon64.dll
%ProgramFiles%\internet download manager\idmnetmon.dll
%ProgramFiles%\internet download manager\idmftype64.dll
%ProgramFiles%\internet download manager\idmftype.dat
%ProgramFiles%\internet download manager\idmintegrator64.exe
%ProgramFiles%\internet download manager\languages\inst_ru.lng
%ProgramFiles%\internet download manager\languages\tips_fa.txt
%ProgramFiles%\internet download manager\languages\tips_tr.txt
%ProgramFiles%\internet download manager\languages\idm_tr.lng
%ProgramFiles%\internet download manager\languages\inst_chn.lng
%ProgramFiles%\internet download manager\languages\idm_es.lng
%ProgramFiles%\internet download manager\languages\tips_de.txt
%ProgramFiles%\internet download manager\languages\tips_ar.txt
%ProgramFiles%\internet download manager\languages\template.lng
%ProgramFiles%\internet download manager\languages\idm_nl.lng
%ProgramFiles%\internet download manager\languages\idm_ptbr.lng
%ProgramFiles%\internet download manager\languages\tips_it.txt
%ProgramFiles%\internet download manager\languages\idm_it.lng
%ProgramFiles%\internet download manager\languages\idm_fr.lng
%ProgramFiles%\internet download manager\languages\idm_de.lng
%ProgramFiles%\internet download manager\languages\idm_ar.lng
%ProgramFiles%\internet download manager\tutor.chm
%ProgramFiles%\internet download manager\tips.txt
%ProgramFiles%\internet download manager\idmtdi.cat
%ProgramFiles%\internet download manager\languages\idm_fa.lng
%ProgramFiles%\internet download manager\languages\tips_fr.txt
%ProgramFiles%\internet download manager\ieext.htm
%ProgramFiles%\internet download manager\languages\tips_nl.txt
%ProgramFiles%\internet download manager\toolbar\3d_large_3.bmp
%ProgramFiles%\internet download manager\idmftype.dll
%ProgramFiles%\internet download manager\languages\tips_ptbr.txt
%ProgramFiles%\internet download manager\idmbrbtn.dll
%ProgramFiles%\internet download manager\defexclist.txt
%ProgramFiles%\internet download manager\iegetvl2.htm
%ProgramFiles%\internet download manager\iegetvl.htm
%ProgramFiles%\internet download manager\scheduler.chm
%ProgramFiles%\internet download manager\toolbar\3d_style_3.tbi
%ProgramFiles%\internet download manager\iemonitor.exe
%ProgramFiles%\internet download manager\idmmzcc.xpi
%ProgramFiles%\internet download manager\languages\tips_es.txt
%ProgramFiles%\internet download manager\idmgrhlp.exe
%ProgramFiles%\internet download manager\downlwithidm.dll
%ProgramFiles%\internet download manager\toolbar\3d_smallhot_3.bmp
%ProgramFiles%\internet download manager\toolbar\3d_small_3.bmp
%ProgramFiles%\internet download manager\toolbar\3d_largehot_3.bmp
%ProgramFiles%\internet download manager\idmfsa.dll
%ProgramFiles%\internet download manager\iegetall.htm
%ProgramFiles%\internet download manager\languages\inst_th.lng
%ProgramFiles%\internet download manager\languages\inst_sk.lng
%ProgramFiles%\internet download manager\idmgcext59.crx
%ProgramFiles%\internet download manager\idmopext.nex
%ProgramFiles%\internet download manager\languages\inst_hi.lng
%ProgramFiles%\internet download manager\languages\inst_lao.lng
%ProgramFiles%\internet download manager\languages\idm_iw.lng
%ProgramFiles%\internet download manager\languages\tips_jp.txt
%ProgramFiles%\internet download manager\languages\idm_jp.lng
%ProgramFiles%\internet download manager\languages\idm_hu.lng
%ProgramFiles%\internet download manager\languages\tips_chn.txt
%ProgramFiles%\internet download manager\languages\tips_sk.txt
%ProgramFiles%\internet download manager\languages\idm_sk.lng
%ProgramFiles%\internet download manager\languages\tips_vn.txt
%ProgramFiles%\internet download manager\languages\idm_vn.lng
%ProgramFiles%\internet download manager\languages\tips_id.txt
%ProgramFiles%\internet download manager\languages\idm_id.lng
%ProgramFiles%\internet download manager\languages\tips_hu.txt
%ProgramFiles%\internet download manager\idmmsghost.exe
%ProgramFiles%\internet download manager\languages\tips_cht.txt
%APPDATA%\idm\defextmap.dat
%ProgramFiles%\internet download manager\idmsetup2.log
%HOMEPATH%\desktop\internet download manager.lnk
%ALLUSERSPROFILE%\start menu\programs\internet download manager\grabber help.lnk
%HOMEPATH%\start menu\programs\internet download manager\grabber help.lnk
%ALLUSERSPROFILE%\start menu\programs\internet download manager\tutorials.lnk
%HOMEPATH%\start menu\programs\internet download manager\tutorials.lnk
%ProgramFiles%\internet download manager\idmmsghostmoz.json
%ProgramFiles%\internet download manager\idmfc.dat
%ALLUSERSPROFILE%\start menu\programs\internet download manager\idm help.lnk
%HOMEPATH%\start menu\programs\internet download manager\idm help.lnk
%ALLUSERSPROFILE%\start menu\programs\internet download manager\license.lnk
%HOMEPATH%\start menu\programs\internet download manager\license.lnk
%ALLUSERSPROFILE%\start menu\programs\internet download manager\uninstall idm.lnk
%HOMEPATH%\start menu\programs\internet download manager\uninstall idm.lnk
%ProgramFiles%\internet download manager\languages\tips_cz.txt
%HOMEPATH%\start menu\programs\internet download manager\internet download manager.lnk
%ProgramFiles%\internet download manager\languages\idm_cz.lng
%ProgramFiles%\internet download manager\idmmsghost.json
%ProgramFiles%\internet download manager\languages\tips_kr.txt
%TEMP%\x\idm61.tmp
%ProgramFiles%\internet download manager\languages\inst_pl.lng
%ProgramFiles%\internet download manager\languages\inst_es.lng
%ProgramFiles%\internet download manager\languages\inst_hu.lng
%ProgramFiles%\internet download manager\languages\inst_cht.lng
%ProgramFiles%\internet download manager\idmindex.dll
%ProgramFiles%\internet download manager\toolbar\3d_largehot_3_hdpi15.bmp
%ProgramFiles%\internet download manager\toolbar\3d_large_3_hdpi15.bmp
%ProgramFiles%\internet download manager\languages\inst_pt.lng
%ProgramFiles%\internet download manager\languages\inst_bg.lng
%ProgramFiles%\internet download manager\languages\inst_ua.lng
%ProgramFiles%\internet download manager\mediumilstart.exe
%ProgramFiles%\internet download manager\languages\inst_iw.lng
%ProgramFiles%\internet download manager\idmbroker.exe
%ProgramFiles%\internet download manager\languages\inst_cz.lng
%ProgramFiles%\internet download manager\languages\inst_id.lng
%ProgramFiles%\internet download manager\languages\inst_dk.lng
%ProgramFiles%\internet download manager\languages\inst_tr.lng
%ProgramFiles%\internet download manager\idmvs.dll
%ProgramFiles%\internet download manager\idmvconv.dll
%ProgramFiles%\internet download manager\languages\inst_vn.lng
%ProgramFiles%\internet download manager\idmmzcc3.xpi
%ProgramFiles%\internet download manager\languages\inst_am.lng
%ProgramFiles%\internet download manager\languages\tips_gr.txt
%ProgramFiles%\internet download manager\languages\idm_gr.lng
%ProgramFiles%\internet download manager\languages\inst_ge.lng
%ProgramFiles%\internet download manager\languages\idm_cht.lng
%ProgramFiles%\internet download manager\languages\idm_chn2.lng
%ProgramFiles%\internet download manager\languages\idm_kr.lng
%ProgramFiles%\internet download manager\languages\inst_gr.lng
%ProgramFiles%\internet download manager\languages\inst_al.lng
%ProgramFiles%\internet download manager\idmmzcc2.xpi
%ProgramFiles%\internet download manager\idmcchandler7_64.dll
%ProgramFiles%\internet download manager\idmcchandler7.dll
%ProgramFiles%\internet download manager\idmmzcc7_64.dll
%ProgramFiles%\internet download manager\idmmzcc7.dll
%ProgramFiles%\internet download manager\languages\inst_my.lng
%ProgramFiles%\internet download manager\languages\inst_uz.lng
%ProgramFiles%\internet download manager\idmmkb.dll
%ProgramFiles%\internet download manager\idmgetall.dll
%ProgramFiles%\internet download manager\idmantypeinfo.tlb
%TEMP%\x\idm147.tmp
%TEMP%\x\idm146.tmp
%TEMP%\x\idm145.tmp
%TEMP%\x\idm144.tmp
%TEMP%\x\idm143.tmp
%TEMP%\x\idm142.tmp
%TEMP%\x\idm141.tmp
%TEMP%\x\idm14.tmp
%TEMP%\x\idm17.tmp
%TEMP%\x\idm139.tmp
%TEMP%\x\idm138.tmp
%TEMP%\x\idm137.tmp
%TEMP%\x\idm136.tmp
%TEMP%\x\idm135.tmp
%TEMP%\x\idm15.tmp
%TEMP%\x\idm140.tmp
%TEMP%\x\idm34.tmp
%TEMP%\x\idm18.tmp
%TEMP%\x\idm31.tmp
%TEMP%\x\idm30.tmp
%TEMP%\x\idm3.tmp
%TEMP%\x\idm29.tmp
%TEMP%\x\idm28.tmp
%TEMP%\x\idm27.tmp
%TEMP%\x\idm134.tmp
%TEMP%\x\idm26.tmp
%TEMP%\x\idm16.tmp
%TEMP%\x\idm23.tmp
%TEMP%\x\idm22.tmp
%TEMP%\x\idm21.tmp
%TEMP%\x\idm20.tmp
%TEMP%\x\idm2.tmp
%TEMP%\x\idm19.tmp
%TEMP%\x\idm25.tmp
%TEMP%\x\idm133.tmp
%TEMP%\x\idm32.tmp
%TEMP%\x\idm132.tmp
%TEMP%\x\idm131.tmp
%TEMP%\x\idm112.tmp
%TEMP%\x\idm33.tmp
%TEMP%\x\idm110.tmp
%TEMP%\x\idm11.tmp
%TEMP%\x\idm109.tmp
%TEMP%\x\idm108.tmp
%TEMP%\x\idm107.tmp
%TEMP%\x\idm113.tmp
%TEMP%\x\idm114.tmp
%TEMP%\x\idm106.tmp
%TEMP%\x\idm103.tmp
%TEMP%\x\idm102.tmp
%TEMP%\x\idm101.tmp
%TEMP%\x\idm100.tmp
%TEMP%\x\idm10.tmp
%TEMP%\x\idm1.tmp
%TEMP%\x\idm105.tmp
%TEMP%\x\idm104.tmp
%TEMP%\x\idm24.tmp
%TEMP%\x\idm116.tmp
%TEMP%\x\idm123.tmp
%TEMP%\x\idm124.tmp
%TEMP%\x\idm13.tmp
%TEMP%\x\idm129.tmp
%TEMP%\x\idm128.tmp
%TEMP%\x\idm127.tmp
%TEMP%\x\idm126.tmp
%TEMP%\x\idm125.tmp
%TEMP%\x\idm130.tmp
%TEMP%\x\idm115.tmp
%TEMP%\x\idm111.tmp
%TEMP%\x\idm121.tmp
%TEMP%\x\idm120.tmp
%TEMP%\x\idm12.tmp
%TEMP%\x\idm119.tmp
%TEMP%\x\idm118.tmp
%TEMP%\x\idm117.tmp
%TEMP%\x\idm122.tmp
%TEMP%\x\idm148.tmp
%TEMP%\x\idm35.tmp
%TEMP%\x\idm87.tmp
%TEMP%\x\idm80.tmp
%TEMP%\x\idm86.tmp
%TEMP%\x\idm85.tmp
%TEMP%\x\idm84.tmp
%TEMP%\x\idm83.tmp
%TEMP%\x\idm82.tmp
%TEMP%\x\idm81.tmp
%TEMP%\x\idm36.tmp
%TEMP%\x\idm88.tmp
%TEMP%\x\idm72.tmp
%TEMP%\x\idm78.tmp
%TEMP%\x\idm77.tmp
%TEMP%\x\idm76.tmp
%TEMP%\x\idm75.tmp
%TEMP%\x\idm74.tmp
%TEMP%\x\idm73.tmp
%TEMP%\x\idm79.tmp
%TEMP%\x\idm8.tmp
%TEMP%\x\idm89.tmp
%TEMP%\x\idm98.tmp
%TEMP%\x\idm99.tmp
%ProgramFiles%\internet download manager\idman.chm
%ProgramFiles%\internet download manager\idmiecc.dll
%ProgramFiles%\internet download manager\license.txt
%ProgramFiles%\internet download manager\uninstall.exe
%TEMP%\x\idmsetup2.log
%TEMP%\x\kur.exe
%ProgramFiles%\internet download manager\idman.exe
%TEMP%\x\idm9.tmp
%TEMP%\x\idm90.tmp
%TEMP%\x\idm96.tmp
%TEMP%\x\idm95.tmp
%TEMP%\x\idm94.tmp
%TEMP%\x\idm93.tmp
%TEMP%\x\idm92.tmp
%TEMP%\x\idm91.tmp
%TEMP%\x\idm97.tmp
%ALLUSERSPROFILE%\start menu\programs\internet download manager\internet download manager.lnk
%APPDATA%\idm\urlexclist.dat
%TEMP%\x\idm7.tmp
%TEMP%\x\idm43.tmp
%TEMP%\x\idm5.tmp
%TEMP%\x\idm49.tmp
%TEMP%\x\idm48.tmp
%TEMP%\x\idm47.tmp
%TEMP%\x\idm46.tmp
%TEMP%\x\idm45.tmp
%TEMP%\x\idm70.tmp
%TEMP%\x\idm51.tmp
%TEMP%\x\idm42.tmp
%TEMP%\x\idm41.tmp
%TEMP%\x\idm40.tmp
%TEMP%\x\idm4.tmp
%TEMP%\x\idm39.tmp
%TEMP%\x\idm38.tmp
%TEMP%\x\idm37.tmp
%TEMP%\x\idm44.tmp
%TEMP%\x\idm71.tmp
%TEMP%\x\idm52.tmp
%TEMP%\x\idm55.tmp
%TEMP%\x\idm53.tmp
%TEMP%\x\idm69.tmp
%TEMP%\x\idm68.tmp
%TEMP%\x\idm67.tmp
%TEMP%\x\idm66.tmp
%TEMP%\x\idm65.tmp
%TEMP%\x\idm64.tmp
%TEMP%\x\idm54.tmp
%TEMP%\x\idm63.tmp
%TEMP%\x\idm50.tmp
%TEMP%\x\idm60.tmp
%TEMP%\x\idm6.tmp
%TEMP%\x\idm59.tmp
%TEMP%\x\idm58.tmp
%TEMP%\x\idm57.tmp
%TEMP%\x\idm56.tmp
%TEMP%\x\idm62.tmp
%APPDATA%\idm\idmfc.dat

Удаляет следующие файлы

%TEMP%\x\idm0.tmp
%TEMP%\x\idm51.tmp
%TEMP%\x\idm52.tmp
%TEMP%\x\idm53.tmp
%TEMP%\x\idm54.tmp
%TEMP%\x\idm55.tmp
%TEMP%\x\idm56.tmp
%TEMP%\x\idm57.tmp
%TEMP%\x\idm58.tmp
%TEMP%\x\idm59.tmp
%TEMP%\x\idm6.tmp
%TEMP%\x\idm60.tmp
%TEMP%\x\idm61.tmp
%TEMP%\x\idm62.tmp
%TEMP%\x\idm63.tmp
%TEMP%\x\idm64.tmp
%TEMP%\x\idm50.tmp
%TEMP%\x\idm65.tmp
%TEMP%\x\idm5.tmp
%TEMP%\x\idm48.tmp
%TEMP%\x\idm34.tmp
%TEMP%\x\idm35.tmp
%TEMP%\x\idm36.tmp
%TEMP%\x\idm37.tmp
%TEMP%\x\idm38.tmp
%TEMP%\x\idm39.tmp
%TEMP%\x\idm4.tmp
%TEMP%\x\idm40.tmp
%TEMP%\x\idm41.tmp
%TEMP%\x\idm42.tmp
%TEMP%\x\idm43.tmp
%TEMP%\x\idm44.tmp
%TEMP%\x\idm45.tmp
%TEMP%\x\idm46.tmp
%TEMP%\x\idm47.tmp
%TEMP%\x\idm49.tmp
%TEMP%\x\idm83.tmp
%TEMP%\x\idmsetup2.log
%TEMP%\x\idm68.tmp
%TEMP%\x\idm86.tmp
%TEMP%\x\idm87.tmp
%TEMP%\x\idm88.tmp
%TEMP%\x\idm89.tmp
%TEMP%\x\idm9.tmp
%TEMP%\x\idm90.tmp
%TEMP%\x\idm91.tmp
%TEMP%\x\idm92.tmp
%TEMP%\x\idm93.tmp
%TEMP%\x\idm94.tmp
%TEMP%\x\idm95.tmp
%TEMP%\x\idm96.tmp
%TEMP%\x\idm97.tmp
%TEMP%\x\idm98.tmp
%TEMP%\x\idm99.tmp
%TEMP%\x\idm85.tmp
%TEMP%\x\idm33.tmp
%TEMP%\x\idm84.tmp
%TEMP%\x\idm82.tmp
%TEMP%\x\idm69.tmp
%TEMP%\x\idm7.tmp
%TEMP%\x\idm70.tmp
%TEMP%\x\idm71.tmp
%TEMP%\x\idm72.tmp
%TEMP%\x\idm73.tmp
%TEMP%\x\idm74.tmp
%TEMP%\x\idm75.tmp
%TEMP%\x\idm76.tmp
%TEMP%\x\idm77.tmp
%TEMP%\x\idm78.tmp
%TEMP%\x\idm79.tmp
%TEMP%\x\idm8.tmp
%TEMP%\x\idm80.tmp
%TEMP%\x\idm81.tmp
%TEMP%\x\idm66.tmp
%TEMP%\x\idm67.tmp
%TEMP%\x\idm32.tmp
%TEMP%\x\idm131.tmp
%TEMP%\x\idm116.tmp
%TEMP%\x\idm117.tmp
%TEMP%\x\idm118.tmp
%TEMP%\x\idm119.tmp
%TEMP%\x\idm12.tmp
%TEMP%\x\idm120.tmp
%TEMP%\x\idm121.tmp
%TEMP%\x\idm122.tmp
%TEMP%\x\idm123.tmp
%TEMP%\x\idm124.tmp
%TEMP%\x\idm125.tmp
%TEMP%\x\idm126.tmp
%TEMP%\x\idm127.tmp
%TEMP%\x\idm128.tmp
%TEMP%\x\idm129.tmp
%TEMP%\x\idm115.tmp
%TEMP%\x\idm13.tmp
%TEMP%\x\idm114.tmp
%TEMP%\x\idm112.tmp
%TEMP%\x\idm1.tmp
%TEMP%\x\idm10.tmp
%TEMP%\x\idm100.tmp
%TEMP%\x\idm101.tmp
%TEMP%\x\idm102.tmp
%TEMP%\x\idm103.tmp
%TEMP%\x\idm104.tmp
%TEMP%\x\idm105.tmp
%TEMP%\x\idm106.tmp
%TEMP%\x\idm107.tmp
%TEMP%\x\idm108.tmp
%TEMP%\x\idm109.tmp
%TEMP%\x\idm11.tmp
%TEMP%\x\idm110.tmp
%TEMP%\x\idm111.tmp
%TEMP%\x\idm113.tmp
%TEMP%\x\idm148.tmp
%TEMP%\x\idm30.tmp
%TEMP%\x\idm132.tmp
%TEMP%\x\idm17.tmp
%TEMP%\x\idm18.tmp
%TEMP%\x\idm19.tmp
%TEMP%\x\idm2.tmp
%TEMP%\x\idm20.tmp
%TEMP%\x\idm21.tmp
%TEMP%\x\idm22.tmp
%TEMP%\x\idm23.tmp
%TEMP%\x\idm24.tmp
%TEMP%\x\idm25.tmp
%TEMP%\x\idm26.tmp
%TEMP%\x\idm27.tmp
%TEMP%\x\idm28.tmp
%TEMP%\x\idm29.tmp
%TEMP%\x\idm3.tmp
%TEMP%\x\idm16.tmp
%TEMP%\x\idm31.tmp
%TEMP%\x\idm15.tmp
%TEMP%\x\idm147.tmp
%TEMP%\x\idm133.tmp
%TEMP%\x\idm134.tmp
%TEMP%\x\idm135.tmp
%TEMP%\x\idm136.tmp
%TEMP%\x\idm137.tmp
%TEMP%\x\idm138.tmp
%TEMP%\x\idm139.tmp
%TEMP%\x\idm14.tmp
%TEMP%\x\idm140.tmp
%TEMP%\x\idm141.tmp
%TEMP%\x\idm142.tmp
%TEMP%\x\idm143.tmp
%TEMP%\x\idm144.tmp
%TEMP%\x\idm145.tmp
%TEMP%\x\idm146.tmp
%TEMP%\x\idm130.tmp
%TEMP%\x\kur.exe

Изменяет файл HOSTS.

Другое

Ищет следующие окна

ClassName: '' WindowName: 'IDM agent for click monitoring in IE-based browsers'

Создает и запускает на исполнение

'%TEMP%\x\kur.exe'
'%TEMP%\x\idm1.tmp' -d "%TEMP%\x\" -skdlgs
'%ProgramFiles%\internet download manager\idman.exe' /rtr /onsilentsetup
'%TEMP%\x\idm1.tmp' -d "%TEMP%\x\" -skdlgs' (со скрытым окном)

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней