Trojan.Hosts.15464

Technical Information

Malicious functions:

To complicate detection of its presence in the operating system,

blocks execution of the following system utilities:

Windows Task Manager (Taskmgr)

Modifies file system :

Creates the following files:

C:\Users\%USERNAME%\AppData\captures\capture 5 28 22 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 21 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 20 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 23 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 26 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 25 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 24 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 15 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 14 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 13 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 16 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 19 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 18 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 17 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 27 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 37 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 36 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 35 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 38 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 41 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 40 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 39 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 30 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 29 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 28 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 31 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 34 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 33 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 32 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 53 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 52 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 51 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 54 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 57 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 56 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 55 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 46 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 45 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 44 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 47 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 50 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 49 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 48 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 58 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 08 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 07 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 06 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 09 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 12 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 11 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 10 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 01 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 00 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 59 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 02 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 05 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 04 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 03 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 42 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 21 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 20 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 19 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 22 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 25 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 24 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 23 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 14 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 13 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 12 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 15 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 18 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 17 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 16 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 26 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 36 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 35 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 34 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 37 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 40 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 39 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 38 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 29 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 28 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 27 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 30 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 33 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 32 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 31 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 52 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 51 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 50 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 53 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 56 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 55 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 54 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 45 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 44 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 43 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 46 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 49 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 48 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 47 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 57 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 07 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 06 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 05 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 08 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 11 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 10 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 09 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 00 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 59 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 28 58 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 01 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 04 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 03 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 29 02 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 43 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 24 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 23 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 22 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 25 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 28 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 27 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 26 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 17 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 16 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 15 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 18 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 21 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 20 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 19 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 29 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 39 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 38 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 37 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 40 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 43 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 42 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 41 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 32 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 31 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 30 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 33 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 36 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 35 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 34 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 55 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 54 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 53 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 56 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 59 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 58 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 57 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 48 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 47 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 46 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 49 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 52 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 51 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 25 50 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 00 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 10 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 09 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 08 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 11 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 14 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 13 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 12 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 03 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 02 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 01 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 04 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 07 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 06 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 05 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 44 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 23 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 22 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 21 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 24 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 27 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 26 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 25 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 16 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 15 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 14 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 17 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 20 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 19 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 18 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 28 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 38 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 37 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 36 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 39 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 42 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 41 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 40 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 31 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 30 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 29 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 32 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 35 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 34 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 33 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 54 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 53 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 52 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 55 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 58 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 57 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 56 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 47 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 46 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 45 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 48 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 51 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 50 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 49 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 26 59 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 09 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 08 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 07 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 10 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 13 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 12 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 11 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 02 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 01 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 00 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 03 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 06 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 05 PM.jpg
C:\Users\%USERNAME%\AppData\captures\capture 5 27 04 PM.jpg

Modifies the HOSTS file.

Network activity:

Connects to:

'sm##.gmail.com':587

UDP:

DNS ASK sm##.gmail.com

Miscellaneous:

Searches for the following windows:

ClassName: 'Shell_TrayWnd' WindowName: '(null)'

テクノロジー

用語

トレーニングコースおよび啓蒙プロジェクト

アンチウイルスに関する誤解と噂

Technical Information

Curing recommendations

Free trial