Trojan.DownLoader34.60458

Техническая информация

Изменения в файловой системе

Создает следующие файлы

%TEMP%\is-o97t5.tmp\<Имя файла>.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-4837s.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-dgls8.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-l3q2c.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-dvmr1.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-e1u0q.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-2pdg7.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-b4cm5.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-q8dvj.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-oqs9h.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-l0m45.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-r8t0b.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-apqi7.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-bveo8.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-83u9a.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-hbvh6.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-gv678.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-u3om6.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-m2pla.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\language\is-avjom.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd player.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd converter.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd downloader.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd suite.lnk
%APPDATA%\fvdtoolbar\is-vv1q2.tmp
%APPDATA%\fvdtoolbar\is-4iigi.tmp
%TEMP%\is-quctu.tmp\is-0v8p4.tmp
%TEMP%\is-quctu.tmp\is-r4a6q.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\database\is-7ieoa.tmp
%TEMP%\is-quctu.tmp\is-6m6da.tmp
%TEMP%\is-quctu.tmp\is-eea09.tmp
%TEMP%\is-quctu.tmp\is-q73j4.tmp
%TEMP%\is-quctu.tmp\is-b09gu.tmp
%TEMP%\is-quctu.tmp\is-ck1j5.tmp
%ProgramFiles(x86)%\fvd suite\fvd recorder\is-v69ce.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\language\is-ccgau.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-age4t.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-cndst.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-q1v2o.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-8vd01.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-s4ltt.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-nlug5.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-bqhsl.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-4ujrp.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-dpncs.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-8cbjo.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-juhuo.tmp
%ProgramFiles(x86)%\fvd suite\addons\is-0he80.tmp
%ProgramFiles(x86)%\fvd suite\is-j8q8n.tmp
%ProgramFiles(x86)%\fvd suite\is-ei59t.tmp
%ProgramFiles(x86)%\fvd suite\is-vde1d.tmp
%TEMP%\is-quctu.tmp\_isetup\_iscrypt.dll
%TEMP%\is-quctu.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-rva7s.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-ssb7j.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-cvhsp.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-2ksfe.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-eb5ko.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\is-f5o4u.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-ushg7.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-r98ro.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-v9p34.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-r5k31.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-au1of.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-2hqa0.tmp
%TEMP%\is-quctu.tmp\is-rchvg.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd recorder.lnk
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-tdfuu.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-6qn7t.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-phogb.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-uoqus.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\language\is-66eor.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\language\is-971pm.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\is-jv5nm.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-5t0mi.tmp
%ProgramFiles(x86)%\fvd suite\unins000.dat

Перемещает следующие файлы

%ProgramFiles(x86)%\fvd suite\is-vde1d.tmp в %ProgramFiles(x86)%\fvd suite\unins000.exe
%ProgramFiles(x86)%\fvd suite\fvd player\is-age4t.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\fvd player.exe
%ProgramFiles(x86)%\fvd suite\fvd player\is-gv678.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\innopsapi.dll
%ProgramFiles(x86)%\fvd suite\fvd player\is-u3om6.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\winico.dll
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-hbvh6.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\flvsplitter.ax
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-83u9a.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\matroskasplitter.ax
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-bveo8.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\mp4splitter.ax
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-apqi7.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpadecfilter.ax
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-r8t0b.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpcvideodec.ax
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-l0m45.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpeg2decfilter.ax
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-oqs9h.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpegsplitter.ax
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-q8dvj.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avcodec-lav-53.dll
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-b4cm5.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avfilter-lav-2.dll
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-2pdg7.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avformat-lav-53.dll
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-e1u0q.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avutil-lav-51.dll
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-l3q2c.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavsplitter.ax
%APPDATA%\fvdtoolbar\is-4iigi.tmp в %APPDATA%\fvdtoolbar\11.ico
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-dgls8.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavvideo.ax
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-4837s.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\libbluray.dll
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-m2pla.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\swscale-lav-2.dll
%ProgramFiles(x86)%\fvd suite\fvd player\language\is-avjom.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\language\english.lng
%ProgramFiles(x86)%\fvd suite\fvd player\language\is-ccgau.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\language\russian.lng
%ProgramFiles(x86)%\fvd suite\fvd recorder\is-v69ce.tmp в %ProgramFiles(x86)%\fvd suite\fvd recorder\fvd recorder.exe
%TEMP%\is-quctu.tmp\is-ck1j5.tmp в %TEMP%\is-quctu.tmp\yandex.exe
%TEMP%\is-quctu.tmp\is-b09gu.tmp в %TEMP%\is-quctu.tmp\fvdtoolbar.exe
%TEMP%\is-quctu.tmp\is-q73j4.tmp в %TEMP%\is-quctu.tmp\s1.bmp
%TEMP%\is-quctu.tmp\is-eea09.tmp в %TEMP%\is-quctu.tmp\s2.bmp
%TEMP%\is-quctu.tmp\is-6m6da.tmp в %TEMP%\is-quctu.tmp\s3.bmp
%TEMP%\is-quctu.tmp\is-r4a6q.tmp в %TEMP%\is-quctu.tmp\s0.bmp
%TEMP%\is-quctu.tmp\is-rchvg.tmp в %TEMP%\is-quctu.tmp\t0.bmp
%TEMP%\is-quctu.tmp\is-0v8p4.tmp в %TEMP%\is-quctu.tmp\y0.bmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-cndst.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\default.m3u
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-dvmr1.tmp в %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavaudio.ax
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-q1v2o.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\spain.lng
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-2ksfe.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\wmv.xml
%ProgramFiles(x86)%\fvd suite\is-ei59t.tmp в %ProgramFiles(x86)%\fvd suite\fvdsuite.exe
%ProgramFiles(x86)%\fvd suite\is-j8q8n.tmp в %ProgramFiles(x86)%\fvd suite\innopsapi.dll
%ProgramFiles(x86)%\fvd suite\addons\is-0he80.tmp в %ProgramFiles(x86)%\fvd suite\addons\fvdext.crx
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-juhuo.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\3gp.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-8cbjo.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\avi.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-dpncs.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\dvd.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-4ujrp.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\flv.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-bqhsl.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mkv.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-nlug5.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mov.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-s4ltt.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mp3.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-8vd01.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mp4.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-cvhsp.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mpeg.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-rva7s.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\wav.xml
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-ssb7j.tmp в %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\webm.xml
%ProgramFiles(x86)%\fvd suite\fvd converter\is-f5o4u.tmp в %ProgramFiles(x86)%\fvd suite\fvd converter\fvd converter.exe
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-ushg7.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\portugese.lng
%ProgramFiles(x86)%\fvd suite\fvd converter\is-jv5nm.tmp в %ProgramFiles(x86)%\fvd suite\fvd converter\mediainfo.dll
%ProgramFiles(x86)%\fvd suite\fvd converter\language\is-971pm.tmp в %ProgramFiles(x86)%\fvd suite\fvd converter\language\english.lng
%ProgramFiles(x86)%\fvd suite\fvd converter\language\is-66eor.tmp в %ProgramFiles(x86)%\fvd suite\fvd converter\language\russian.lng
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-uoqus.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\fvd downloader.exe
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-phogb.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\libeay32.dll
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-6qn7t.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\ssleay32.dll
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-tdfuu.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\zlib1.dll
%ProgramFiles(x86)%\fvd suite\fvd downloader\database\is-7ieoa.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\database\database.csv
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-5t0mi.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\armenian.lng
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-2hqa0.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\english.lng
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-au1of.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\french.lng
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-r5k31.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\germany.lng
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-v9p34.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\italian.lng
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-r98ro.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\japan.lng
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-eb5ko.tmp в %ProgramFiles(x86)%\fvd suite\fvd downloader\language\russian.lng
%APPDATA%\fvdtoolbar\is-vv1q2.tmp в %APPDATA%\fvdtoolbar\9.ico

Сетевая активность

Подключается к

'op###olad.com':80

TCP

Запросы HTTP POST

http://op###olad.com/v2/events

UDP

DNS ASK op###olad.com

Другое

Создает и запускает на исполнение

'%TEMP%\is-o97t5.tmp\<Имя файла>.tmp' /SL5="$110218,13772594,88576,<Полный путь к файлу>"
'%ProgramFiles(x86)%\fvd suite\fvdsuite.exe' <Имя файла>.exe

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней