Trojan.DownLoader11.33485

Техническая информация

Вредоносные функции:

Создает и запускает на исполнение:

'<SYSTEM32>\1.exe' /S

Изменения в файловой системе:

Создает следующие файлы:

%PROGRAM_FILES%\QTranslate\Locales\Korean\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Korean\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Polish\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Italian\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Japanese\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Japanese\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Polish\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Russian\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Serbian\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Serbian\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Portuguese (Brazilian)\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Portuguese (Brazilian)\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Russian\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Italian\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Finnish\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Finnish\lang.json
%PROGRAM_FILES%\QTranslate\Locales\French\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Dutch\lang.json
%PROGRAM_FILES%\QTranslate\Locales\English\help.txt
%PROGRAM_FILES%\QTranslate\Locales\English\lang.json
%PROGRAM_FILES%\QTranslate\Locales\French\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Greek\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Hungarian\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Hungarian\lang.json
%PROGRAM_FILES%\QTranslate\Locales\German\help.txt
%PROGRAM_FILES%\QTranslate\Locales\German\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Greek\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Slovak\help.txt
%PROGRAM_FILES%\QTranslate\Themes\Holo Light.json
%PROGRAM_FILES%\QTranslate\Themes\Metro.json
%PROGRAM_FILES%\QTranslate\Themes\Outlook Gray.json
%PROGRAM_FILES%\QTranslate\Themes\Brackets.json
%PROGRAM_FILES%\QTranslate\Themes\Flat Dark.json
%PROGRAM_FILES%\QTranslate\Themes\Holo Dark.json
%PROGRAM_FILES%\QTranslate\Themes\Photoshop Dark.json
%HOMEPATH%\Desktop\QTranslate.lnk
%APPDATA%\Roaming\Microsoft\Windows\Start Menu\Programs\QTranslate\QTranslate.lnk
%PROGRAM_FILES%\QTranslate\Uninstall.exe
%PROGRAM_FILES%\QTranslate\QTranslate.exe
%PROGRAM_FILES%\QTranslate\bass.dll
%PROGRAM_FILES%\QTranslate\License.rtf
%PROGRAM_FILES%\QTranslate\Themes\Blue.json
%PROGRAM_FILES%\QTranslate\Locales\Spanish\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Spanish\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Swedish\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Slovak\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Slovenian\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Slovenian\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Swedish\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Ukrainian\lang.json
%PROGRAM_FILES%\QTranslate\Plugins\History\Html.js
%PROGRAM_FILES%\QTranslate\Plugins\History\Txt.js
%PROGRAM_FILES%\QTranslate\Locales\Turkish\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Turkish\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Ukrainian\help.txt
%PROGRAM_FILES%\QTranslate\Services\Definr\Service.js
%PROGRAM_FILES%\QTranslate\Services\Google Search\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Google Search\Service.js
%PROGRAM_FILES%\QTranslate\Services\Baidu\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Baidu\Service.js
%PROGRAM_FILES%\QTranslate\Services\Definr\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Google Translate\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Microsoft Translator\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Microsoft Translator\Service.js
%PROGRAM_FILES%\QTranslate\Services\Multitran\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Google Translate\Service.js
%PROGRAM_FILES%\QTranslate\Services\ImTranslator\Service.ico
%PROGRAM_FILES%\QTranslate\Services\ImTranslator\Service.js
%PROGRAM_FILES%\QTranslate\Services\Babylon Dictionary\Service.js
<SYSTEM32>\1.exe
%TEMP%\nsp3302.tmp
%TEMP%\nsf3313.tmp\UserInfo.dll
%TEMP%\aut2F69.tmp
%TEMP%\jrpakub
%TEMP%\aut3015.tmp
%TEMP%\nsf3313.tmp\System.dll
%PROGRAM_FILES%\QTranslate\Services\Babylon\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Babylon\Service.js
%PROGRAM_FILES%\QTranslate\Services\Babylon Dictionary\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Common.js
%PROGRAM_FILES%\QTranslate\Services\ABBYY Lingvo\Service.ico
%PROGRAM_FILES%\QTranslate\Services\ABBYY Lingvo\Service.js
%PROGRAM_FILES%\QTranslate\Services\Multitran\Service.js
%PROGRAM_FILES%\QTranslate\Locales\Arabic\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Bulgarian\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Bulgarian\lang.json
%PROGRAM_FILES%\QTranslate\Services\youdao\Service.ico
%PROGRAM_FILES%\QTranslate\Services\youdao\Service.js
%PROGRAM_FILES%\QTranslate\Locales\Arabic\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Chinese (Simplified)\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Czech\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Czech\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Dutch\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Chinese (Simplified)\lang.json
%PROGRAM_FILES%\QTranslate\Locales\Chinese (Traditional)\help.txt
%PROGRAM_FILES%\QTranslate\Locales\Chinese (Traditional)\lang.json
%PROGRAM_FILES%\QTranslate\Services\Yandex\Service.js
%PROGRAM_FILES%\QTranslate\Services\Reverso\Service.js
%PROGRAM_FILES%\QTranslate\Services\SDL\Service.ico
%PROGRAM_FILES%\QTranslate\Services\SDL\Service.js
%PROGRAM_FILES%\QTranslate\Services\Promt\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Promt\Service.js
%PROGRAM_FILES%\QTranslate\Services\Reverso\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Urban Dictionary\Service.ico
%PROGRAM_FILES%\QTranslate\Services\WordReference\Service.ico
%PROGRAM_FILES%\QTranslate\Services\WordReference\Service.js
%PROGRAM_FILES%\QTranslate\Services\Yandex\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Urban Dictionary\Service.js
%PROGRAM_FILES%\QTranslate\Services\Wikipedia\Service.ico
%PROGRAM_FILES%\QTranslate\Services\Wikipedia\Service.js