Trojan.DownLoader45.24394

Technical Information

Modifies file system

Creates the following files

%TEMP%\nsh909c.tmp\inetc.dll
%TEMP%\nssa757.tmp\easydriverpro.exe
%TEMP%\nssa757.tmp\inetc.dll
%TEMP%\nsna0d2.tmp\easydriverpro.exe
%TEMP%\nsna0d2.tmp\inetc.dll
%TEMP%\nss9a3d.tmp\easydriverpro.exe
%TEMP%\nss9a3d.tmp\inetc.dll
%TEMP%\nsx93a8.tmp\easydriverpro.exe
%TEMP%\nsx93a8.tmp\inetc.dll
%TEMP%\nsc8cc5.tmp\easydriverpro.exe
%TEMP%\nsc8cc5.tmp\inetc.dll
%TEMP%\nsx8508.tmp\easydriverpro.exe
%TEMP%\nsx8508.tmp\inetc.dll
%TEMP%\nsm7d2b.tmp\easydriverpro.exe
%TEMP%\nsm7d2b.tmp\inetc.dll
%TEMP%\nsx75cc.tmp\easydriverpro.exe
%TEMP%\nsx75cc.tmp\inetc.dll
%TEMP%\nsx6fb4.tmp\easydriverpro.exe
%TEMP%\nsx6fb4.tmp\inetc.dll
%TEMP%\nss67f7.tmp\easydriverpro.exe
%TEMP%\nss67f7.tmp\inetc.dll
%TEMP%\nsx602a.tmp\easydriverpro.exe
%TEMP%\nsx602a.tmp\inetc.dll
%TEMP%\nsh5a02.tmp\easydriverpro.exe
%TEMP%\nsm531f.tmp\easydriverpro.exe
%TEMP%\nsh5a02.tmp\inetc.dll
%TEMP%\nscae97.tmp\inetc.dll
%TEMP%\nscae97.tmp\easydriverpro.exe
%TEMP%\nsx2de.tmp\easydriverpro.exe
%TEMP%\nsx2de.tmp\inetc.dll
%TEMP%\nssfb6f.tmp\easydriverpro.exe
%TEMP%\nssfb6f.tmp\inetc.dll
%TEMP%\nsnf4ea.tmp\easydriverpro.exe
%TEMP%\nsnf4ea.tmp\inetc.dll
%TEMP%\nsnede8.tmp\easydriverpro.exe
%TEMP%\nsnede8.tmp\inetc.dll
%TEMP%\nshe762.tmp\easydriverpro.exe
%TEMP%\nshe762.tmp\inetc.dll
%TEMP%\nsxe022.tmp\easydriverpro.exe
%TEMP%\nscd8f1.tmp\easydriverpro.exe
%TEMP%\nsx1b00.tmp\easydriverpro.exe
%TEMP%\nscd8f1.tmp\inetc.dll
%TEMP%\nscd1ef.tmp\easydriverpro.exe
%TEMP%\nscd1ef.tmp\inetc.dll
%TEMP%\nsncb2c.tmp\easydriverpro.exe
%TEMP%\nsncb2c.tmp\inetc.dll
%TEMP%\nsnc340.tmp\easydriverpro.exe
%TEMP%\nsnc340.tmp\inetc.dll
%TEMP%\nsnbc3e.tmp\easydriverpro.exe
%TEMP%\nsnbc3e.tmp\inetc.dll
%TEMP%\nsnb53c.tmp\easydriverpro.exe
%TEMP%\nsnb53c.tmp\inetc.dll
%TEMP%\nsm531f.tmp\inetc.dll
%TEMP%\nsm4b81.tmp\easydriverpro.exe
%TEMP%\nsm4b81.tmp\inetc.dll
%TEMP%\nsme215.tmp\inetc.dll
%TEMP%\nsrdae4.tmp\easydriverpro.exe
%TEMP%\nsrdae4.tmp\inetc.dll
%TEMP%\nshd440.tmp\easydriverpro.exe
%TEMP%\nshd440.tmp\inetc.dll
%TEMP%\nsrcd7c.tmp\easydriverpro.exe
%TEMP%\nsrcd7c.tmp\inetc.dll
%TEMP%\nshc63c.tmp\easydriverpro.exe
%TEMP%\nshc63c.tmp\inetc.dll
%TEMP%\nshbf3a.tmp\easydriverpro.exe
%TEMP%\nshbf3a.tmp\inetc.dll
%TEMP%\nsxb7ac.tmp\easydriverpro.exe
%TEMP%\nsxb7ac.tmp\inetc.dll
%TEMP%\nscb117.tmp\easydriverpro.exe
%TEMP%\nscb117.tmp\inetc.dll
%TEMP%\nsxaa92.tmp\easydriverpro.exe
%TEMP%\nsxaa92.tmp\inetc.dll
%TEMP%\nsra0b2.tmp\easydriverpro.exe
%TEMP%\nsra0b2.tmp\inetc.dll
%TEMP%\nsm9943.tmp\easydriverpro.exe
%TEMP%\nsm9943.tmp\inetc.dll
%TEMP%\nsh909c.tmp\easydriverpro.exe
%TEMP%\nsce9c3.tmp\inetc.dll
%TEMP%\nsce9c3.tmp\easydriverpro.exe
%TEMP%\nsme215.tmp\easydriverpro.exe
%TEMP%\nsmf067.tmp\inetc.dll
%TEMP%\nss4451.tmp\easydriverpro.exe
%TEMP%\nsmf067.tmp\easydriverpro.exe
%TEMP%\nss4451.tmp\inetc.dll
%TEMP%\nsh3dac.tmp\easydriverpro.exe
%TEMP%\nsh3dac.tmp\inetc.dll
%TEMP%\nsc368b.tmp\easydriverpro.exe
%TEMP%\nsc368b.tmp\inetc.dll
%TEMP%\nsx2fb8.tmp\easydriverpro.exe
%TEMP%\nsx2fb8.tmp\inetc.dll
%TEMP%\nsm28c5.tmp\easydriverpro.exe
%TEMP%\nsm28c5.tmp\inetc.dll
%TEMP%\nsm21c3.tmp\easydriverpro.exe
%TEMP%\nsxe022.tmp\inetc.dll
%TEMP%\nsx9e0.tmp\inetc.dll
%TEMP%\nsx1b00.tmp\inetc.dll
%TEMP%\nsr13de.tmp\easydriverpro.exe
%TEMP%\nsr13de.tmp\inetc.dll
%TEMP%\nshcec.tmp\easydriverpro.exe
%TEMP%\nshcec.tmp\inetc.dll
%TEMP%\nsx5fa.tmp\easydriverpro.exe
%TEMP%\nsx5fa.tmp\inetc.dll
%TEMP%\nsmff07.tmp\easydriverpro.exe
%TEMP%\nsmff07.tmp\inetc.dll
%TEMP%\nscf6dd.tmp\easydriverpro.exe
%TEMP%\nscf6dd.tmp\inetc.dll
%TEMP%\nsm21c3.tmp\inetc.dll
%TEMP%\nsx9e0.tmp\easydriverpro.exe

Deletes the following files

%TEMP%\nsh909c.tmp\easydriverpro.exe
%TEMP%\nssa757.tmp\inetc.dll
%TEMP%\nssa757.tmp\easydriverpro.exe
%TEMP%\nsna0d2.tmp\inetc.dll
%TEMP%\nsna0d2.tmp\easydriverpro.exe
%TEMP%\nss9a3d.tmp\inetc.dll
%TEMP%\nss9a3d.tmp\easydriverpro.exe
%TEMP%\nsx93a8.tmp\inetc.dll
%TEMP%\nsx93a8.tmp\easydriverpro.exe
%TEMP%\nsc8cc5.tmp\inetc.dll
%TEMP%\nsc8cc5.tmp\easydriverpro.exe
%TEMP%\nsx8508.tmp\inetc.dll
%TEMP%\nsm7d2b.tmp\inetc.dll
%TEMP%\nscae97.tmp\inetc.dll
%TEMP%\nsm7d2b.tmp\easydriverpro.exe
%TEMP%\nsx75cc.tmp\inetc.dll
%TEMP%\nsx75cc.tmp\easydriverpro.exe
%TEMP%\nsx6fb4.tmp\inetc.dll
%TEMP%\nsx6fb4.tmp\easydriverpro.exe
%TEMP%\nss67f7.tmp\inetc.dll
%TEMP%\nss67f7.tmp\easydriverpro.exe
%TEMP%\nsx602a.tmp\inetc.dll
%TEMP%\nsx602a.tmp\easydriverpro.exe
%TEMP%\nsh5a02.tmp\inetc.dll
%TEMP%\nsx8508.tmp\easydriverpro.exe
%TEMP%\nsm21c3.tmp\easydriverpro.exe
%TEMP%\nsnb53c.tmp\easydriverpro.exe
%TEMP%\nsx9e0.tmp\inetc.dll
%TEMP%\nsx9e0.tmp\easydriverpro.exe
%TEMP%\nsx2de.tmp\inetc.dll
%TEMP%\nsx2de.tmp\easydriverpro.exe
%TEMP%\nssfb6f.tmp\inetc.dll
%TEMP%\nssfb6f.tmp\easydriverpro.exe
%TEMP%\nsnf4ea.tmp\inetc.dll
%TEMP%\nsnf4ea.tmp\easydriverpro.exe
%TEMP%\nsnede8.tmp\inetc.dll
%TEMP%\nsnede8.tmp\easydriverpro.exe
%TEMP%\nshe762.tmp\inetc.dll
%TEMP%\nsh5a02.tmp\easydriverpro.exe
%TEMP%\nscae97.tmp\easydriverpro.exe
%TEMP%\nsxe022.tmp\easydriverpro.exe
%TEMP%\nscd8f1.tmp\inetc.dll
%TEMP%\nscd8f1.tmp\easydriverpro.exe
%TEMP%\nscd1ef.tmp\inetc.dll
%TEMP%\nscd1ef.tmp\easydriverpro.exe
%TEMP%\nsncb2c.tmp\inetc.dll
%TEMP%\nsncb2c.tmp\easydriverpro.exe
%TEMP%\nsnc340.tmp\inetc.dll
%TEMP%\nsnc340.tmp\easydriverpro.exe
%TEMP%\nsnbc3e.tmp\inetc.dll
%TEMP%\nsnbc3e.tmp\easydriverpro.exe
%TEMP%\nsxe022.tmp\inetc.dll
%TEMP%\nsnb53c.tmp\inetc.dll
%TEMP%\nsm531f.tmp\inetc.dll
%TEMP%\nsm531f.tmp\easydriverpro.exe
%TEMP%\nsm4b81.tmp\inetc.dll
%TEMP%\nshbf3a.tmp\easydriverpro.exe
%TEMP%\nsme215.tmp\inetc.dll
%TEMP%\nsme215.tmp\easydriverpro.exe
%TEMP%\nsrdae4.tmp\inetc.dll
%TEMP%\nsrdae4.tmp\easydriverpro.exe
%TEMP%\nshd440.tmp\inetc.dll
%TEMP%\nshd440.tmp\easydriverpro.exe
%TEMP%\nsrcd7c.tmp\inetc.dll
%TEMP%\nsrcd7c.tmp\easydriverpro.exe
%TEMP%\nshc63c.tmp\inetc.dll
%TEMP%\nshc63c.tmp\easydriverpro.exe
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\re1n75kr\easydriverpro[1].app
%TEMP%\nsce9c3.tmp\inetc.dll
%TEMP%\nsxb7ac.tmp\inetc.dll
%TEMP%\nsxb7ac.tmp\easydriverpro.exe
%TEMP%\nscb117.tmp\inetc.dll
%TEMP%\nscb117.tmp\easydriverpro.exe
%TEMP%\nsxaa92.tmp\inetc.dll
%TEMP%\nsxaa92.tmp\easydriverpro.exe
%TEMP%\nsra0b2.tmp\inetc.dll
%TEMP%\nsra0b2.tmp\easydriverpro.exe
%TEMP%\nsm9943.tmp\inetc.dll
%TEMP%\nsm9943.tmp\easydriverpro.exe
%TEMP%\nsh909c.tmp\inetc.dll
%TEMP%\nshbf3a.tmp\inetc.dll
%TEMP%\nshe762.tmp\easydriverpro.exe
%TEMP%\nsmf067.tmp\easydriverpro.exe
%TEMP%\nscf6dd.tmp\inetc.dll
%TEMP%\nsmf067.tmp\inetc.dll
%TEMP%\nsm4b81.tmp\easydriverpro.exe
%TEMP%\nss4451.tmp\inetc.dll
%TEMP%\nss4451.tmp\easydriverpro.exe
%TEMP%\nsh3dac.tmp\inetc.dll
%TEMP%\nsh3dac.tmp\easydriverpro.exe
%TEMP%\nsc368b.tmp\inetc.dll
%TEMP%\nsc368b.tmp\easydriverpro.exe
%TEMP%\nsx2fb8.tmp\inetc.dll
%TEMP%\nsx2fb8.tmp\easydriverpro.exe
%TEMP%\nsm28c5.tmp\inetc.dll
%TEMP%\nscf6dd.tmp\easydriverpro.exe
%TEMP%\nsm28c5.tmp\easydriverpro.exe
%TEMP%\nsce9c3.tmp\easydriverpro.exe
%TEMP%\nsx1b00.tmp\inetc.dll
%TEMP%\nsx1b00.tmp\easydriverpro.exe
%TEMP%\nsr13de.tmp\inetc.dll
%TEMP%\nsr13de.tmp\easydriverpro.exe
%TEMP%\nshcec.tmp\inetc.dll
%TEMP%\nshcec.tmp\easydriverpro.exe
%TEMP%\nsx5fa.tmp\inetc.dll
%TEMP%\nsx5fa.tmp\easydriverpro.exe
%TEMP%\nsmff07.tmp\inetc.dll
%TEMP%\nsmff07.tmp\easydriverpro.exe
%TEMP%\nsm21c3.tmp\inetc.dll
%LOCALAPPDATA%\microsoft\windows\<INETFILES>\content.ie5\bzjx5bke\easydriverpro[1].app

Network activity

Connects to

'do######.easydriverpro.com':80

TCP

HTTP GET requests

http://do######.easydriverpro.com/publishers/63/873/EasyDriverPro.app

UDP

DNS ASK do######.easydriverpro.com

Miscellaneous

Searches for the following windows

ClassName: '#32770' WindowName: ''

Creates and executes the following

'%TEMP%\nsh909c.tmp\easydriverpro.exe'
'%TEMP%\nss67f7.tmp\easydriverpro.exe'
'%TEMP%\nsx6fb4.tmp\easydriverpro.exe'
'%TEMP%\nsx75cc.tmp\easydriverpro.exe'
'%TEMP%\nsm7d2b.tmp\easydriverpro.exe'
'%TEMP%\nsx8508.tmp\easydriverpro.exe'
'%TEMP%\nsc8cc5.tmp\easydriverpro.exe'
'%TEMP%\nsx93a8.tmp\easydriverpro.exe'
'%TEMP%\nss9a3d.tmp\easydriverpro.exe'
'%TEMP%\nsna0d2.tmp\easydriverpro.exe'
'%TEMP%\nssa757.tmp\easydriverpro.exe'
'%TEMP%\nsmf067.tmp\easydriverpro.exe'
'%TEMP%\nscae97.tmp\easydriverpro.exe'
'%TEMP%\nsnbc3e.tmp\easydriverpro.exe'
'%TEMP%\nsnc340.tmp\easydriverpro.exe'
'%TEMP%\nsncb2c.tmp\easydriverpro.exe'
'%TEMP%\nscd1ef.tmp\easydriverpro.exe'
'%TEMP%\nscd8f1.tmp\easydriverpro.exe'
'%TEMP%\nsxe022.tmp\easydriverpro.exe'
'%TEMP%\nshe762.tmp\easydriverpro.exe'
'%TEMP%\nsnede8.tmp\easydriverpro.exe'
'%TEMP%\nsnf4ea.tmp\easydriverpro.exe'
'%TEMP%\nssfb6f.tmp\easydriverpro.exe'
'%TEMP%\nsh5a02.tmp\easydriverpro.exe'
'%TEMP%\nsx602a.tmp\easydriverpro.exe'
'%TEMP%\nsm531f.tmp\easydriverpro.exe'
'%TEMP%\nsm4b81.tmp\easydriverpro.exe'
'%TEMP%\nss4451.tmp\easydriverpro.exe'
'%TEMP%\nsra0b2.tmp\easydriverpro.exe'
'%TEMP%\nsxaa92.tmp\easydriverpro.exe'
'%TEMP%\nscb117.tmp\easydriverpro.exe'
'%TEMP%\nsxb7ac.tmp\easydriverpro.exe'
'%TEMP%\nshbf3a.tmp\easydriverpro.exe'
'%TEMP%\nshc63c.tmp\easydriverpro.exe'
'%TEMP%\nsrcd7c.tmp\easydriverpro.exe'
'%TEMP%\nshd440.tmp\easydriverpro.exe'
'%TEMP%\nsrdae4.tmp\easydriverpro.exe'
'%TEMP%\nsme215.tmp\easydriverpro.exe'
'%TEMP%\nsx2de.tmp\easydriverpro.exe'
'%TEMP%\nsnb53c.tmp\easydriverpro.exe'
'%TEMP%\nsce9c3.tmp\easydriverpro.exe'
'%TEMP%\nsmff07.tmp\easydriverpro.exe'
'%TEMP%\nsx5fa.tmp\easydriverpro.exe'
'%TEMP%\nshcec.tmp\easydriverpro.exe'
'%TEMP%\nsr13de.tmp\easydriverpro.exe'
'%TEMP%\nsx1b00.tmp\easydriverpro.exe'
'%TEMP%\nsm21c3.tmp\easydriverpro.exe'
'%TEMP%\nsm28c5.tmp\easydriverpro.exe'
'%TEMP%\nsx2fb8.tmp\easydriverpro.exe'
'%TEMP%\nsc368b.tmp\easydriverpro.exe'
'%TEMP%\nsh3dac.tmp\easydriverpro.exe'
'%TEMP%\nsm9943.tmp\easydriverpro.exe'
'%TEMP%\nscf6dd.tmp\easydriverpro.exe'
'%TEMP%\nsx9e0.tmp\easydriverpro.exe'

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial