Trojan.DownLoader7.12456

Техническая информация

Вредоносные функции:

Создает и запускает на исполнение:

%WINDIR%\Temp\clientbar.exe

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[28]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[27]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[26]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[31]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[30]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[29]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[22]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[21]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[20]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[25]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[24]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[23]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[40]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[39]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[38]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[43]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[42]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[41]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[34]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[33]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[32]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[37]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[36]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[35]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[19]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[3]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[2]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[1]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[6]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[5]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[4]
%WINDIR%\Temp\minihook.dll
%WINDIR%\Temp\clientbar.exe
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\U98D4X8H\pwset[1]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\KHMHGZ4F\my_game_prot[1]
%WINDIR%\Temp\loadalljpg.htm
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[15]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[14]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[13]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[18]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[17]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[16]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[9]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[8]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[7]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[12]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[11]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[10]

Удаляет следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[40]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[41]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[35]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[31]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[36]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[38]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[37]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[39]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[43]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[42]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[30]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[9]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[14]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[8]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[4]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[3]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[25]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[26]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[17]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[13]
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\2VAZY7AN\pwset[18]