Trojan.DownLoader23.30

Техническая информация

Вредоносные функции:

Запускает на исполнение:

'%APPDATA%\Shuame\HTC Unlocker\Tools\fastboot.exe' devices
'%APPDATA%\Shuame\HTC Unlocker\Tools\adb.exe' devices
'%APPDATA%\Shuame\HTC Unlocker\Drivers\DPInst.exe' /LM /SW
'%APPDATA%\Shuame\HTC Unlocker\Tools\adb.exe' start-server
'%APPDATA%\Shuame\HTC Unlocker\Tools\adb.exe' fork-server server

Изменения в файловой системе:

Создает следующие файлы:

<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem4.CAT
<SYSTEM32>\DRVSTORE\htcrndis_FE0C95504009716809A3D75B147B15EBE516981F\htcrndis.cat
<SYSTEM32>\DRVSTORE\htcrndis_FE0C95504009716809A3D75B147B15EBE516981F\htcrndis.inf
<SYSTEM32>\DRVSTORE\htcusbnet_5A2D6C4CE617BCADCD925F74EC7058775179B5C5\htcusbnet.inf
%WINDIR%\inf\oem4.PNF
%WINDIR%\inf\oem4.inf
<SYSTEM32>\DRVSTORE\androidusb_F8E53F6F8F4568D53EDC82173C048C4CABFEC42F\ANDROIDUSB.sys
<SYSTEM32>\DRVSTORE\androidusb_F8E53F6F8F4568D53EDC82173C048C4CABFEC42F\WdfCoInstaller01007.dll
<SYSTEM32>\DRVSTORE\androidusb_F8E53F6F8F4568D53EDC82173C048C4CABFEC42F\ANDROIDUSB.cat
%WINDIR%\inf\oem3.PNF
%WINDIR%\inf\oem3.inf
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem3.CAT
%WINDIR%\inf\oem6.inf
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem6.CAT
<SYSTEM32>\DRVSTORE\wpdmtphw_5A0546C69D61B96810737CE74E7B557674C92B44\WPDMTPHW.cat
%APPDATA%\Shuame\HTC Unlocker\Drivers\DPInstLog
%ProgramFiles%\DIFX\507DAFEF8EE1D9B8\DPInst.exe
%WINDIR%\inf\oem6.PNF
<SYSTEM32>\CatRoot\{F750E6C3-38EE-11D1-85E5-00C04FC295EE}\oem5.CAT
<SYSTEM32>\DRVSTORE\htcusbnet_5A2D6C4CE617BCADCD925F74EC7058775179B5C5\htcusbnet.sys
<SYSTEM32>\DRVSTORE\htcusbnet_5A2D6C4CE617BCADCD925F74EC7058775179B5C5\htcusbnet.cat
<SYSTEM32>\DRVSTORE\wpdmtphw_5A0546C69D61B96810737CE74E7B557674C92B44\wpdmtphw.inf
%WINDIR%\inf\oem5.PNF
%WINDIR%\inf\oem5.inf
%APPDATA%\Shuame\HTC Unlocker\sp
%APPDATA%\Shuame\HTC Unlocker\Skin
%APPDATA%\Shuame\HTC Unlocker\HTCUnlocker.ico
%APPDATA%\Shuame\HTC Unlocker\Drivers\DPInst.exe
%APPDATA%\Shuame\HTC Unlocker\Drivers\WdfCoInstaller01007.dll
%TEMP%\adb.log
%APPDATA%\Shuame\HTC Unlocker\Tools\AdbWinUsbApi.dll
%APPDATA%\Shuame\HTC Unlocker\Tools\AdbWinApi.dll
%APPDATA%\Shuame\HTC Unlocker\Tools\adb.exe
%APPDATA%\Shuame\HTC Unlocker\HTCUnlocker.dll
%APPDATA%\Shuame\HTC Unlocker\Tools\7za.exe
%APPDATA%\Shuame\HTC Unlocker\Tools\fastboot.exe
%APPDATA%\Shuame\HTC Unlocker\Drivers\wpdmtphw.cat
%APPDATA%\Shuame\HTC Unlocker\Drivers\htcusbnet.sys
%APPDATA%\Shuame\HTC Unlocker\Drivers\htcusbnet.inf
<SYSTEM32>\DRVSTORE\androidusb_F8E53F6F8F4568D53EDC82173C048C4CABFEC42F\androidusb.inf
%WINDIR%\DPINST.LOG
%APPDATA%\Shuame\HTC Unlocker\Drivers\WPDMTPHW.INF
%APPDATA%\Shuame\HTC Unlocker\Drivers\androidusb.sys
%APPDATA%\Shuame\HTC Unlocker\Drivers\androidusb.INF
%APPDATA%\Shuame\HTC Unlocker\Drivers\androidusb.cat
%APPDATA%\Shuame\HTC Unlocker\Drivers\htcusbnet.cat
%APPDATA%\Shuame\HTC Unlocker\Drivers\htcrndis.inf
%APPDATA%\Shuame\HTC Unlocker\Drivers\htcrndis.cat