Техническая информация
Для обеспечения автозапуска и распространения:
Модифицирует следующие ключи реестра:
- [<HKLM>\SOFTWARE\Classes\MSProgramGroup\Shell\Open\Command] '' = '<SYSTEM32>\grpconv.exe %1'
- [<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce] 'GrpConv' = 'grpconv -o'
Вредоносные функции:
Запускает на исполнение:
- '<SYSTEM32>\runonce.exe' -r
- '<SYSTEM32>\grpconv.exe' -o
- '<SYSTEM32>\rundll32.exe' setupapi,InstallHinfSection DefaultInstall 132 %TEMP%\RarSFX0\YTDVide.INF
- '<SYSTEM32>\rundll32.exe' advpack.dll,LaunchINFSection %TEMP%\RarSFX0\YTDVide.inf,Install
Изменения в файловой системе:
Создает следующие файлы:
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET39.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3A.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET38.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET36.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET37.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3E.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3F.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3D.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3B.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3C.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET35.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2E.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2F.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2D.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2B.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2C.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET33.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET34.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET32.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET30.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET31.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET4E.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET4F.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET4D.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET4B.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET4C.tmp
- %WINDIR%\inf\SET55.tmp
- %ALLUSERSPROFILE%\Desktop\YTD Video Downloader.lnk
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET52.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET50.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET51.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET4A.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET43.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET44.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET42.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET40.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET41.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET48.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET49.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET47.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET45.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET46.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETF.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET10.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETE.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETC.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETD.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET14.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET15.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET13.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET11.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET12.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETB.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET4.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET5.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET3.tmp
- %TEMP%\RarSFX0\YTDVide.inf
- %TEMP%\RarSFX0\YTDVide.cab
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET9.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETA.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET8.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET6.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET7.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET24.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET25.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET23.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET21.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET22.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET29.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2A.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET28.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET26.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET27.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET20.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET19.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1A.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET18.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET16.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET17.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1E.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1F.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1D.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1B.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1C.tmp
Удаляет следующие файлы:
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET39.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET37.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3B.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3F.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3D.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2F.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2D.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET31.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET35.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET33.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET41.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET4F.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET4D.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET51.tmp
- %TEMP%\RarSFX0\YTDVide.inf
- %TEMP%\RarSFX0\YTDVide.cab
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET45.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET43.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET47.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET4B.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET49.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETF.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETD.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET11.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET15.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET13.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET5.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET3.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET7.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETB.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET9.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET17.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET25.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET23.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET27.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2B.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET29.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1B.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET19.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1D.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET21.tmp
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1F.tmp
Перемещает следующие файлы:
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3A.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1052.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET38.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1051.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3C.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1053.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET40.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1059.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET3E.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1055.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET30.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1045.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2E.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1044.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET32.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1048.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET36.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1050.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET34.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1049.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET4E.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\scripts.yds
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET4C.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res9999.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET50.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Uninstall.exe
- %WINDIR%\inf\SET55.tmp в %WINDIR%\inf\YTDVide.inf
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET52.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\ytd.exe
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET44.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1061.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET42.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1060.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET46.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res2052.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET4A.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res2074.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET48.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res2070.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2C.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1043.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET10.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\manual.bat
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETE.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\LICENSE
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET12.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\mediaplayer.swf
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET16.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1026.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET14.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1025.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET6.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\COPYING.LGPLv2
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET4.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\COPYING.Apachev2
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SET8.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\COPYING.LGPLv3
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETC.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\librtmp.dll
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\SETA.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\FFMPEG.EXE
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET24.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1035.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET22.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1034.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET26.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1036.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET2A.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1040.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET28.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1038.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1A.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1030.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET18.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1029.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1C.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1031.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET20.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1033.ini
- %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\SET1E.tmp в %PROGRAM_FILES%\GreenTree Applications\YTD Video Downloader\Lang\res1032.ini
Другое:
Ищет следующие окна:
- ClassName: 'Shell_TrayWnd' WindowName: ''
- ClassName: 'EDIT' WindowName: ''
