Trojan.MulDrop6.63781

Техническая информация

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\msiexec.exe' -Embedding 2E89C23491270E49C7B71C4259C45296
'%WINDIR%\Installer\MSI7.tmp' "%ProgramFiles%\Internet Download Manager\IDMan.exe"
'%ProgramFiles%\Internet Download Manager\IDMan.exe'
'%TEMP%\7ZipSfx.000\IDM 6.16 build3.exe' /quiet
'<SYSTEM32>\msiexec.exe'
'<SYSTEM32>\msiexec.exe' /V

Изменения в файловой системе:

Создает следующие файлы:

%ProgramFiles%\Internet Download Manager\Languages\inst_ptbr.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_kr.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_iw.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_th.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_src.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_ru.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_fa.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_dk.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_de.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_it.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_id.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_fr.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_ua.lng
%ProgramFiles%\Internet Download Manager\Languages\tips_nl.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_it.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_fr.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_ru.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_ptbr.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_pl.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_ar.txt
%ProgramFiles%\Internet Download Manager\Languages\template_inst.lng
%ProgramFiles%\Internet Download Manager\Languages\template.lng
%ProgramFiles%\Internet Download Manager\Languages\tips_fa.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_es.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_de.txt
%ProgramFiles%\Internet Download Manager\Languages\inst_cz.lng
%ProgramFiles%\Internet Download Manager\license.txt
%ProgramFiles%\Internet Download Manager\IDMan.exe
%ProgramFiles%\Internet Download Manager\idman.chm
%ProgramFiles%\Internet Download Manager\Languages\idm_ar.lng
%ProgramFiles%\Internet Download Manager\Uninstall.exe
%ProgramFiles%\Internet Download Manager\tutor.chm
%TEMP%\~DF74A2.tmp
%WINDIR%\Installer\27799.ipi
%WINDIR%\Installer\MSI3.tmp
%ProgramFiles%\Internet Download Manager\grabber.chm
C:\Config.Msi\2779a.rbs
%WINDIR%\Installer\MSI4.tmp
%ProgramFiles%\Internet Download Manager\Languages\idm_de.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_th.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_ru.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_ptbr.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_chn.lng
%ProgramFiles%\Internet Download Manager\Languages\inst_ar.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_tr.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_fr.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_fa.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_es.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_pl.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_nl.lng
%ProgramFiles%\Internet Download Manager\Languages\idm_it.lng
%ProgramFiles%\Internet Download Manager\IEGetVL.htm
%ProgramFiles%\Internet Download Manager\IEGetAll.htm
%ProgramFiles%\Internet Download Manager\IEExt.htm
%ProgramFiles%\Internet Download Manager\scheduler.chm
%ProgramFiles%\Internet Download Manager\IEMonitor.exe
%ProgramFiles%\Internet Download Manager\IEGetVL2.htm
%ProgramFiles%\Internet Download Manager\idmvs.dll
%ProgramFiles%\Internet Download Manager\idmtdi64.sys
%ProgramFiles%\Internet Download Manager\idmtdi32.sys
%ProgramFiles%\Internet Download Manager\idmwfp64.sys
%ProgramFiles%\Internet Download Manager\idmwfp32.sys
%ProgramFiles%\Internet Download Manager\idmwfp.cat
%ProgramFiles%\Internet Download Manager\tips.txt
%TEMP%\~DF3055.tmp
%ProgramFiles%\Internet Download Manager\idmwfp.inf
%ProgramFiles%\Internet Download Manager\idmtdi.inf
%APPDATA%\IDM\urlexclist.dat
%APPDATA%\IDM\defextmap.dat
%WINDIR%\Installer\MSI7.tmp
%ALLUSERSPROFILE%\Start Menu\Programs\Internet Download Manager\license.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Internet Download Manager\IDM Help.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Internet Download Manager\Grabber Help.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Internet Download Manager\TUTORIALS.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Internet Download Manager\Uninstall IDM.lnk
%ALLUSERSPROFILE%\Start Menu\Programs\Internet Download Manager\Internet Download Manager.lnk
%ProgramFiles%\Internet Download Manager\idmtdi.cat
%ProgramFiles%\Internet Download Manager\downlWithIDM.dll
%ProgramFiles%\Internet Download Manager\defexclist.txt
%ProgramFiles%\Internet Download Manager\Toolbar\3d_style_3.tbi
%ProgramFiles%\Internet Download Manager\idmBroker.exe
%ProgramFiles%\Internet Download Manager\idmbrbtn.dll
%ProgramFiles%\Internet Download Manager\idmantypeinfo.tlb
%ProgramFiles%\Internet Download Manager\Toolbar\3d_largeHot_3.bmp
%ProgramFiles%\Internet Download Manager\Languages\tips_tr.txt
%ProgramFiles%\Internet Download Manager\Languages\tips_th.txt
%ProgramFiles%\Internet Download Manager\Toolbar\3d_small_3.bmp
%ProgramFiles%\Internet Download Manager\Toolbar\3d_smallHot_3.bmp
%ProgramFiles%\Internet Download Manager\Toolbar\3d_large_3.bmp
%ProgramFiles%\Internet Download Manager\idmcchandler2.dll
%ProgramFiles%\Internet Download Manager\idmmzcc.xpi
%ProgramFiles%\Internet Download Manager\idmmkb.dll
%ProgramFiles%\Internet Download Manager\IDMIECC.dll
%ProgramFiles%\Internet Download Manager\IDMShellExt.dll
%ProgramFiles%\Internet Download Manager\IDMSetup2.log
%ProgramFiles%\Internet Download Manager\IDMNetMon.dll
%ProgramFiles%\Internet Download Manager\idmftype.dll
%ProgramFiles%\Internet Download Manager\IDMFType.dat
%ProgramFiles%\Internet Download Manager\idmfsa.dll
%ProgramFiles%\Internet Download Manager\IDMGrHlp.exe
%ProgramFiles%\Internet Download Manager\IDMGetAll.dll
%ProgramFiles%\Internet Download Manager\IDMGCExt.crx
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IEMonitor.exe
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMIntegrator64.exe
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMGrHlp.exe
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\downlWithIDM64.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\downlWithIDM.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Uninstall.exe
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_th.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_ru.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_ptbr.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmBroker.exe
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMan.exe
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_tr.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmbrbtn.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMIECC.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMGetAll64.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMGetAll.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMNetMon.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmmkb.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMIECC64.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmcchandler2_64.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmcchandler2.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmbrbtn64.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMFType64.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmftype.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmfsa.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_pl.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Toolbar\3d_smallHot_3.bmp
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Toolbar\3d_large_3.bmp
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Toolbar\3d_largeHot_3.bmp
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IEExt.htm
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmmzcc.xpi
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Toolbar\3d_small_3.bmp
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\grabber.chm
%APPDATA%\Tonec Inc\Internet Download Manager\install\decoder.dll
%TEMP%\7ZipSfx.000\IDM 6.16 build3.exe
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\tutor.chm
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\scheduler.chm
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idman.chm
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IEGetAll.htm
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_fa.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_es.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_de.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_nl.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_it.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_fr.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\defexclist.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IEGetVL2.htm
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IEGetVL.htm
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\tips_ar.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\tips.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\license.txt
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_iw.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_it.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_id.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_ru.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_ptbr.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_kr.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_de.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_cz.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_chn.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_fr.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_fa.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_dk.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_src.lng
%WINDIR%\Installer\27797.msi
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\AI 9.0.1.back.x64.msi
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\AI 9.0.1.back.msi
%WINDIR%\Installer\MSI2.tmp
%TEMP%\MSI28fa3.LOG
%WINDIR%\Installer\MSI1.tmp
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\template.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_ua.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_th.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Toolbar\3d_style_3.tbi
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMSetup2.log
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\template_inst.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\inst_ar.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmantypeinfo.tlb
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmwfp64.sys
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmwfp32.sys
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMGCExt.crx
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmwfp.cat
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmtdi.cat
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMShellExt64.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMShellExt.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMNetMon64.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmtdi64.sys
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmtdi32.sys
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\idmvs.dll
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\IDMFType.dat
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_ptbr.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_pl.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_nl.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_tr.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_th.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_ru.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_es.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_de.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_ar.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_it.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_fr.lng
%APPDATA%\Tonec Inc\Internet Download Manager\install\A657533\Languages\idm_fa.lng

Удаляет следующие файлы:

%WINDIR%\Installer\MSI4.tmp
C:\Config.Msi\2779a.rbs
%WINDIR%\Installer\MSI3.tmp
%WINDIR%\Installer\MSI1.tmp
%WINDIR%\Installer\MSI2.tmp

Другое:

Ищет следующие окна:

ClassName: 'Shell_TrayWnd' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней