Trojan.PWS.Papras.3102

Добавлен в вирусную базу Dr.Web: 2017-12-01

Описание добавлено: 2017-12-01

Technical Information

Modifies file system:

Creates the following files:

<STUBS_DIR>\drweb386\how_to_recover_files.html
<STUBS_DIR>\Drwebupw\how_to_recover_files.html
<STUBS_DIR>\drweb\how_to_recover_files.html
<STUBS_DIR>\Drweb32w\how_to_recover_files.html
<STUBS_DIR>\Drwebwcl\how_to_recover_files.html
<STUBS_DIR>\ekrn\how_to_recover_files.html
<STUBS_DIR>\elbank\how_to_recover_files.html
<STUBS_DIR>\ecmd\how_to_recover_files.html
<STUBS_DIR>\egni\how_to_recover_files.html
<STUBS_DIR>\clbank\how_to_recover_files.html
<STUBS_DIR>\client7\how_to_recover_files.html
<STUBS_DIR>\chrome\how_to_recover_files.html
<STUBS_DIR>\ClamWin\how_to_recover_files.html
<STUBS_DIR>\clmain\how_to_recover_files.html
<STUBS_DIR>\dekaron\how_to_recover_files.html
<STUBS_DIR>\dnf\how_to_recover_files.html
<STUBS_DIR>\clntw32\how_to_recover_files.html
<STUBS_DIR>\contactNG\how_to_recover_files.html
<STUBS_DIR>\elementclient\how_to_recover_files.html
<STUBS_DIR>\gw\how_to_recover_files.html
<STUBS_DIR>\httplook\how_to_recover_files.html
<STUBS_DIR>\GUARD\how_to_recover_files.html
<STUBS_DIR>\GVOnline\how_to_recover_files.html
<STUBS_DIR>\ICQ\how_to_recover_files.html
<STUBS_DIR>\InphaseNXD\how_to_recover_files.html
<STUBS_DIR>\intpro\how_to_recover_files.html
<STUBS_DIR>\iexplore\how_to_recover_files.html
<STUBS_DIR>\inbank-start-ff\how_to_recover_files.html
<STUBS_DIR>\fsav\how_to_recover_files.html
<STUBS_DIR>\fsav32\how_to_recover_files.html
<STUBS_DIR>\el_cli\how_to_recover_files.html
<STUBS_DIR>\firefox\how_to_recover_files.html
<STUBS_DIR>\fsavaui\how_to_recover_files.html
<STUBS_DIR>\ge\how_to_recover_files.html
<STUBS_DIR>\googletalk\how_to_recover_files.html
<STUBS_DIR>\fsavgui\how_to_recover_files.html
<STUBS_DIR>\gc\how_to_recover_files.html
<STUBS_DIR>\ccapp\how_to_recover_files.html
<STUBS_DIR>\360tray\how_to_recover_files.html
<STUBS_DIR>\ageofconan\how_to_recover_files.html
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\how_to_recover_files.html
C:\RECYCLER\S-1-5-21-2052111302-484763869-725345543-1003\desktop.ini.crypt
<STUBS_DIR>\aion\how_to_recover_files.html
<STUBS_DIR>\ashAvSrv\how_to_recover_files.html
<STUBS_DIR>\avgcc\how_to_recover_files.html
<STUBS_DIR>\ash\how_to_recover_files.html
<STUBS_DIR>\ashAvast\how_to_recover_files.html
%ProgramFiles%\Outlook Express\msoeres.dll.crypt
%ProgramFiles%\Outlook Express\msoe.txt.crypt
<SYSTEM32>\dllcache\msoe.dll.new
%ProgramFiles%\Outlook Express\msoe.dll.new
<SYSTEM32>\dllcache\msimn.exe.new
%ProgramFiles%\Outlook Express\how_to_recover_files.html
%ProgramFiles%\Outlook Express\msimn.exe.crypt
%ProgramFiles%\Outlook Express\msimn.exe.new
%ProgramFiles%\Outlook Express\msoe.dll.crypt
<STUBS_DIR>\AVGCC32\how_to_recover_files.html
<STUBS_DIR>\bdss\how_to_recover_files.html
<STUBS_DIR>\bdsubmit\how_to_recover_files.html
<STUBS_DIR>\bc_loader\how_to_recover_files.html
<STUBS_DIR>\bdagent\how_to_recover_files.html
<STUBS_DIR>\bk\how_to_recover_files.html
<STUBS_DIR>\cbmain\how_to_recover_files.html
<STUBS_DIR>\cbsmain\how_to_recover_files.html
<STUBS_DIR>\cabalmain\how_to_recover_files.html
<STUBS_DIR>\cbank\how_to_recover_files.html
<STUBS_DIR>\AVP32\how_to_recover_files.html
<STUBS_DIR>\AVPCC\how_to_recover_files.html
<STUBS_DIR>\AVGCTRL\how_to_recover_files.html
<STUBS_DIR>\AVP\how_to_recover_files.html
<STUBS_DIR>\AVPM\how_to_recover_files.html
<STUBS_DIR>\BBClient\how_to_recover_files.html
<STUBS_DIR>\bclient\how_to_recover_files.html
<STUBS_DIR>\AVSYNMGR\how_to_recover_files.html
<STUBS_DIR>\bankcl\how_to_recover_files.html
<STUBS_DIR>\wsm\how_to_recover_files.html
<STUBS_DIR>\YahooMessenger\how_to_recover_files.html
<STUBS_DIR>\woool\how_to_recover_files.html
<STUBS_DIR>\wow\how_to_recover_files.html
<STUBS_DIR>\ybclient\how_to_recover_files.html
<STUBS_DIR>\ZONEALARM\how_to_recover_files.html
<STUBS_DIR>\ZZ__cd75efb816b2cc__\how_to_recover_files.html
<STUBS_DIR>\zapro\how_to_recover_files.html
<STUBS_DIR>\zlclient\how_to_recover_files.html
<STUBS_DIR>\translink\how_to_recover_files.html
<STUBS_DIR>\trillian\how_to_recover_files.html
<STUBS_DIR>\startclient7\how_to_recover_files.html
<STUBS_DIR>\tiny\how_to_recover_files.html
<STUBS_DIR>\TwelveSky2\how_to_recover_files.html
<STUBS_DIR>\webmoney\how_to_recover_files.html
<STUBS_DIR>\winbaram\how_to_recover_files.html
<STUBS_DIR>\UniStream\how_to_recover_files.html
<STUBS_DIR>\wclnt\how_to_recover_files.html
<STUBS_DIR>\__cd75efb816b2cc__\how_to_recover_files.html
<STUBS_DIR>\list_full.txt.crypt
C:\startup_local.bat.crypt
<STUBS_DIR>\list_short.txt.crypt
<STUBS_DIR>\how_to_recover_files.html
C:\how_to_recover_files.html.crypt
C:\AUTOEXEC.BAT.crypt
%TEMP%\qfjgmfgmkj.tmp
C:\boot.ini.crypt
C:\how_to_recover_files.html
<STUBS_DIR>\proc_tools.txt.crypt
<STUBS_DIR>\proc_im.txt.crypt
<STUBS_DIR>\test.exe.crypt
<STUBS_DIR>\runall.bat.crypt
<STUBS_DIR>\proc_games.txt.crypt
<STUBS_DIR>\proc_banks.txt.crypt
<STUBS_DIR>\proc_av.txt.crypt
<STUBS_DIR>\proc_fake.txt.crypt
<STUBS_DIR>\proc_browsers.txt.crypt
<STUBS_DIR>\sro_client\how_to_recover_files.html
<STUBS_DIR>\MCAGENT\how_to_recover_files.html
<STUBS_DIR>\Mir3Game\how_to_recover_files.html
<STUBS_DIR>\magent\how_to_recover_files.html
<STUBS_DIR>\maplestory\how_to_recover_files.html
<STUBS_DIR>\miranda32\how_to_recover_files.html
<STUBS_DIR>\msnmsgr\how_to_recover_files.html
<STUBS_DIR>\NAVAPW32\how_to_recover_files.html
<STUBS_DIR>\mpftray\how_to_recover_files.html
<STUBS_DIR>\msn6\how_to_recover_files.html
<STUBS_DIR>\java\how_to_recover_files.html
<STUBS_DIR>\javaw\how_to_recover_files.html
<STUBS_DIR>\iscc\how_to_recover_files.html
<STUBS_DIR>\ISClient\how_to_recover_files.html
<STUBS_DIR>\kb_cli\how_to_recover_files.html
<STUBS_DIR>\loadmain\how_to_recover_files.html
<STUBS_DIR>\lotroclient\how_to_recover_files.html
<STUBS_DIR>\l2\how_to_recover_files.html
<STUBS_DIR>\lin\how_to_recover_files.html
<STUBS_DIR>\netxray\how_to_recover_files.html
<STUBS_DIR>\rclient\how_to_recover_files.html
<STUBS_DIR>\safari\how_to_recover_files.html
<STUBS_DIR>\Ragexe\how_to_recover_files.html
<STUBS_DIR>\RagFree\how_to_recover_files.html
<STUBS_DIR>\sgbclient\how_to_recover_files.html
<STUBS_DIR>\so3d\how_to_recover_files.html
<STUBS_DIR>\spidernt\how_to_recover_files.html
<STUBS_DIR>\skype\how_to_recover_files.html
<STUBS_DIR>\smc\how_to_recover_files.html
<STUBS_DIR>\ntvdm\how_to_recover_files.html
<STUBS_DIR>\oncbcli\how_to_recover_files.html
<STUBS_DIR>\nod\how_to_recover_files.html
<STUBS_DIR>\nod32\how_to_recover_files.html
<STUBS_DIR>\opera\how_to_recover_files.html
<STUBS_DIR>\putty\how_to_recover_files.html
<STUBS_DIR>\qip\how_to_recover_files.html
<STUBS_DIR>\outpost\how_to_recover_files.html
<STUBS_DIR>\pidgin\how_to_recover_files.html

Deletes the following files:

C:\how_to_recover_files.html

Substitutes the following files:

C:\how_to_recover_files.html

Технології

Терміни

Навчання

Міфи

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней