TROJ_BUZUS.CAC
Alias
Worm:Win32/Prolaco.gen!C (Microsoft); W32/Palack.worm (McAfee); W32.Ackantta@mm (Symantec); Trojan.Win32.Buzus.csea (Kaspersky); Worm.Win32.Prolaco.gen (v) (Sunbelt)
Plataforma:
Windows 2000, Windows XP, Windows Server 2003
Riesgo general:
Potencial de destrucción:
Potencial de distribución:
Infección divulgada:
Bajo
Medio
High
Crítico
Tipo de malware
Trojan
Destructivo?
No
Cifrado
In the Wild:
Sí
Resumen y descripción
Detalles técnicos
Tamaño del archivo 313,344 bytes
Tipo de archivo EXE
Residente en memoria Sí
Fecha de recepción de las muestras iniciales 11 de octubre de 2012
Instalación
Crea las siguientes copias de sí mismo en el sistema afectado:
- %System%\wdfmngr.exe
- %Program Files%\icq\shared folder\K-Lite codec pack 4.0 gold.exe
- %Program Files%\icq\shared folder\Youtube Music Downloader 1.0.exe
- %Program Files%\icq\shared folder\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
- %Program Files%\icq\shared folder\K-Lite codec pack 3.10 full.exe
- %Program Files%\icq\shared folder\Adobe Acrobat Reader keygen.exe
- %Program Files%\icq\shared folder\Adobe Photoshop CS4 crack.exe
- %Program Files%\icq\shared folder\VmWare keygen.exe
- %Program Files%\icq\shared folder\WinRAR v3.x keygen RaZoR.exe
- %Program Files%\icq\shared folder\CheckPoint ZoneAlarm And AntiSpy.exe
- %Program Files%\icq\shared folder\Sony Vegas Pro 8 0b Build 219.exe
- %Program Files%\icq\shared folder\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
- %Program Files%\icq\shared folder\Ad-aware 2009.exe
- %Program Files%\icq\shared folder\BitDefender AntiVirus 2009 Keygen.exe
- %Program Files%\icq\shared folder\Norton Anti-Virus 2009 Enterprise Crack.exe
- %Program Files%\icq\shared folder\Ultimate ring tones package1 (Beethoven,Bach, Baris Manco,Lambada,Chopin, Greensleves).exe
- %Program Files%\icq\shared folder\Ultimate ring tones package2 (Lil Wayne - Way Of Life,Khia - My Neck My Back Like My Pussy And My Crack,Mario - Let Me Love You,R. Kelly - The Worlds Greatest).exe
- %Program Files%\icq\shared folder\Ultimate ring tones package3 (Crazy In Love, U Got It Bad, 50 Cent - P.I.M.P, Jennifer Lopez Feat. Ll Cool J - All I Have, 50 Cent - 21 Question).exe
- %Program Files%\icq\shared folder\Microsoft Office 2007 Home and Student keygen.exe
- %Program Files%\icq\shared folder\Total Commander7 license+keygen.exe
- %Program Files%\icq\shared folder\LimeWire Pro v4.18.3.exe
- %Program Files%\icq\shared folder\Download Accelerator Plus v8.7.5.exe
- %Program Files%\icq\shared folder\Opera 9.62 International.exe
- %Program Files%\icq\shared folder\Internet Download Manager V5.exe
- %Program Files%\icq\shared folder\Myspace theme collection.exe
- %Program Files%\icq\shared folder\Nero 9 9.2.6.0 keygen.exe
- %Program Files%\icq\shared folder\Motorola, nokia, ericsson mobil phone tools.exe
- %Program Files%\icq\shared folder\Smart Draw 2008 keygen.exe
- %Program Files%\icq\shared folder\Microsoft Visual Studio 2008 KeyGen.exe
- %Program Files%\icq\shared folder\Absolute Video Converter 6.2.exe
- %Program Files%\icq\shared folder\Daemon Tools Pro 4.11.exe
- %Program Files%\icq\shared folder\Download Boost 2.0.exe
- %Program Files%\icq\shared folder\Avast 4.8 Professional.exe
- %Program Files%\icq\shared folder\Grand Theft Auto IV (Offline Activation).exe
- %Program Files%\icq\shared folder\Alcohol 120 v1.9.7.exe
- %Program Files%\icq\shared folder\CleanMyPC Registry Cleaner v6.02.exe
- %Program Files%\icq\shared folder\Super Utilities Pro 2009 11.0.exe
- %Program Files%\icq\shared folder\Power ISO v4.2 + keygen axxo.exe
- %Program Files%\icq\shared folder\G-Force Platinum v3.7.5.exe
- %Program Files%\icq\shared folder\Divx Pro 6.8.0.19 + keymaker.exe
- %Program Files%\icq\shared folder\Perfect keylogger family edition with crack.exe
- %Program Files%\icq\shared folder\Magic Video Converter 8 0 2 18.exe
- %Program Files%\icq\shared folder\Google Earth Pro 4.2. with Maps and crack.exe
- %Program Files%\icq\shared folder\AVS video converter6.exe
- %Program Files%\icq\shared folder\Sophos antivirus updater bypass.exe
- %Program Files%\icq\shared folder\DVD Tools Nero 9 2 6 0.exe
- %Program Files%\icq\shared folder\Winamp.Pro.v6.53.PowerPack.Portable+installer.exe
- %Program Files%\icq\shared folder\PDF password remover (works with all acrobat reader).exe
- %Program Files%\icq\shared folder\Microsoft.Windows 7 Beta1 Build 7000 x86.exe
- %Program Files%\icq\shared folder\Windows2008 keygen and activator.exe
- %Program Files%\icq\shared folder\Tuneup Ultilities 2008.exe
- %Program Files%\icq\shared folder\Kaspersky Internet Security 2009 keygen.exe
- %Program Files%\icq\shared folder\Windows XP PRO Corp SP3 valid-key generator.exe
- %Program Files%\grokster\my grokster\K-Lite codec pack 4.0 gold.exe
- %Program Files%\grokster\my grokster\Youtube Music Downloader 1.0.exe
- %Program Files%\grokster\my grokster\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
- %Program Files%\grokster\my grokster\K-Lite codec pack 3.10 full.exe
- %Program Files%\grokster\my grokster\Adobe Acrobat Reader keygen.exe
- %Program Files%\grokster\my grokster\Adobe Photoshop CS4 crack.exe
- %Program Files%\grokster\my grokster\VmWare keygen.exe
- %Program Files%\grokster\my grokster\WinRAR v3.x keygen RaZoR.exe
- %Program Files%\grokster\my grokster\CheckPoint ZoneAlarm And AntiSpy.exe
- %Program Files%\grokster\my grokster\Sony Vegas Pro 8 0b Build 219.exe
- %Program Files%\grokster\my grokster\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
- %Program Files%\grokster\my grokster\Ad-aware 2009.exe
- %Program Files%\grokster\my grokster\BitDefender AntiVirus 2009 Keygen.exe
- %Program Files%\grokster\my grokster\Norton Anti-Virus 2009 Enterprise Crack.exe
- %Program Files%\grokster\my grokster\Ultimate ring tones package1 (Beethoven,Bach, Baris Manco,Lambada,Chopin, Greensleves).exe
- %Program Files%\grokster\my grokster\Ultimate ring tones package2 (Lil Wayne - Way Of Life,Khia - My Neck My Back Like My Pussy And My Crack,Mario - Let Me Love You,R. Kelly - The Worlds Greatest).exe
- %Program Files%\grokster\my grokster\Ultimate ring tones package3 (Crazy In Love, U Got It Bad, 50 Cent - P.I.M.P, Jennifer Lopez Feat. Ll Cool J - All I Have, 50 Cent - 21 Question).exe
- %Program Files%\grokster\my grokster\Microsoft Office 2007 Home and Student keygen.exe
- %Program Files%\grokster\my grokster\Total Commander7 license+keygen.exe
- %Program Files%\grokster\my grokster\LimeWire Pro v4.18.3.exe
- %Program Files%\grokster\my grokster\Download Accelerator Plus v8.7.5.exe
- %Program Files%\grokster\my grokster\Opera 9.62 International.exe
- %Program Files%\grokster\my grokster\Internet Download Manager V5.exe
- %Program Files%\grokster\my grokster\Myspace theme collection.exe
- %Program Files%\grokster\my grokster\Nero 9 9.2.6.0 keygen.exe
- %Program Files%\grokster\my grokster\Motorola, nokia, ericsson mobil phone tools.exe
- %Program Files%\grokster\my grokster\Smart Draw 2008 keygen.exe
- %Program Files%\grokster\my grokster\Microsoft Visual Studio 2008 KeyGen.exe
- %Program Files%\grokster\my grokster\Absolute Video Converter 6.2.exe
- %Program Files%\grokster\my grokster\Daemon Tools Pro 4.11.exe
- %Program Files%\grokster\my grokster\Download Boost 2.0.exe
- %Program Files%\grokster\my grokster\Avast 4.8 Professional.exe
- %Program Files%\grokster\my grokster\Grand Theft Auto IV (Offline Activation).exe
- %Program Files%\grokster\my grokster\Alcohol 120 v1.9.7.exe
- %Program Files%\grokster\my grokster\CleanMyPC Registry Cleaner v6.02.exe
- %Program Files%\grokster\my grokster\Super Utilities Pro 2009 11.0.exe
- %Program Files%\grokster\my grokster\Power ISO v4.2 + keygen axxo.exe
- %Program Files%\grokster\my grokster\G-Force Platinum v3.7.5.exe
- %Program Files%\grokster\my grokster\Divx Pro 6.8.0.19 + keymaker.exe
- %Program Files%\grokster\my grokster\Perfect keylogger family edition with crack.exe
- %Program Files%\grokster\my grokster\Magic Video Converter 8 0 2 18.exe
- %Program Files%\grokster\my grokster\Google Earth Pro 4.2. with Maps and crack.exe
- %Program Files%\grokster\my grokster\AVS video converter6.exe
- %Program Files%\grokster\my grokster\Sophos antivirus updater bypass.exe
- %Program Files%\grokster\my grokster\DVD Tools Nero 9 2 6 0.exe
- %Program Files%\grokster\my grokster\Winamp.Pro.v6.53.PowerPack.Portable+installer.exe
- %Program Files%\grokster\my grokster\PDF password remover (works with all acrobat reader).exe
- %Program Files%\grokster\my grokster\Microsoft.Windows 7 Beta1 Build 7000 x86.exe
- %Program Files%\grokster\my grokster\Windows2008 keygen and activator.exe
- %Program Files%\grokster\my grokster\Tuneup Ultilities 2008.exe
- %Program Files%\grokster\my grokster\Kaspersky Internet Security 2009 keygen.exe
- %Program Files%\grokster\my grokster\Windows XP PRO Corp SP3 valid-key generator.exe
- %Program Files%\emule\incoming\K-Lite codec pack 4.0 gold.exe
- %Program Files%\emule\incoming\Youtube Music Downloader 1.0.exe
- %Program Files%\emule\incoming\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
- %Program Files%\emule\incoming\K-Lite codec pack 3.10 full.exe
- %Program Files%\emule\incoming\Adobe Acrobat Reader keygen.exe
- %Program Files%\emule\incoming\Adobe Photoshop CS4 crack.exe
- %Program Files%\emule\incoming\VmWare keygen.exe
- %Program Files%\emule\incoming\WinRAR v3.x keygen RaZoR.exe
- %Program Files%\emule\incoming\CheckPoint ZoneAlarm And AntiSpy.exe
- %Program Files%\emule\incoming\Sony Vegas Pro 8 0b Build 219.exe
- %Program Files%\emule\incoming\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
- %Program Files%\emule\incoming\Ad-aware 2009.exe
- %Program Files%\emule\incoming\BitDefender AntiVirus 2009 Keygen.exe
- %Program Files%\emule\incoming\Norton Anti-Virus 2009 Enterprise Crack.exe
- %Program Files%\emule\incoming\Ultimate ring tones package1 (Beethoven,Bach, Baris Manco,Lambada,Chopin, Greensleves).exe
- %Program Files%\emule\incoming\Ultimate ring tones package2 (Lil Wayne - Way Of Life,Khia - My Neck My Back Like My Pussy And My Crack,Mario - Let Me Love You,R. Kelly - The Worlds Greatest).exe
- %Program Files%\emule\incoming\Ultimate ring tones package3 (Crazy In Love, U Got It Bad, 50 Cent - P.I.M.P, Jennifer Lopez Feat. Ll Cool J - All I Have, 50 Cent - 21 Question).exe
- %Program Files%\emule\incoming\Microsoft Office 2007 Home and Student keygen.exe
- %Program Files%\emule\incoming\Total Commander7 license+keygen.exe
- %Program Files%\emule\incoming\LimeWire Pro v4.18.3.exe
- %Program Files%\emule\incoming\Download Accelerator Plus v8.7.5.exe
- %Program Files%\emule\incoming\Opera 9.62 International.exe
- %Program Files%\emule\incoming\Internet Download Manager V5.exe
- %Program Files%\emule\incoming\Myspace theme collection.exe
- %Program Files%\emule\incoming\Nero 9 9.2.6.0 keygen.exe
- %Program Files%\emule\incoming\Motorola, nokia, ericsson mobil phone tools.exe
- %Program Files%\emule\incoming\Smart Draw 2008 keygen.exe
- %Program Files%\emule\incoming\Microsoft Visual Studio 2008 KeyGen.exe
- %Program Files%\emule\incoming\Absolute Video Converter 6.2.exe
- %Program Files%\emule\incoming\Daemon Tools Pro 4.11.exe
- %Program Files%\emule\incoming\Download Boost 2.0.exe
- %Program Files%\emule\incoming\Avast 4.8 Professional.exe
- %Program Files%\emule\incoming\Grand Theft Auto IV (Offline Activation).exe
- %Program Files%\emule\incoming\Alcohol 120 v1.9.7.exe
- %Program Files%\emule\incoming\CleanMyPC Registry Cleaner v6.02.exe
- %Program Files%\emule\incoming\Super Utilities Pro 2009 11.0.exe
- %Program Files%\emule\incoming\Power ISO v4.2 + keygen axxo.exe
- %Program Files%\emule\incoming\G-Force Platinum v3.7.5.exe
- %Program Files%\emule\incoming\Divx Pro 6.8.0.19 + keymaker.exe
- %Program Files%\emule\incoming\Perfect keylogger family edition with crack.exe
- %Program Files%\emule\incoming\Magic Video Converter 8 0 2 18.exe
- %Program Files%\emule\incoming\Google Earth Pro 4.2. with Maps and crack.exe
- %Program Files%\emule\incoming\AVS video converter6.exe
- %Program Files%\emule\incoming\Sophos antivirus updater bypass.exe
- %Program Files%\emule\incoming\DVD Tools Nero 9 2 6 0.exe
- %Program Files%\emule\incoming\Winamp.Pro.v6.53.PowerPack.Portable+installer.exe
- %Program Files%\emule\incoming\PDF password remover (works with all acrobat reader).exe
- %Program Files%\emule\incoming\Microsoft.Windows 7 Beta1 Build 7000 x86.exe
- %Program Files%\emule\incoming\Windows2008 keygen and activator.exe
- %Program Files%\emule\incoming\Tuneup Ultilities 2008.exe
- %Program Files%\emule\incoming\Kaspersky Internet Security 2009 keygen.exe
- %Program Files%\emule\incoming\Windows XP PRO Corp SP3 valid-key generator.exe
- %Program Files%\morpheus\my shared folder\K-Lite codec pack 4.0 gold.exe
- %Program Files%\morpheus\my shared folder\Youtube Music Downloader 1.0.exe
- %Program Files%\morpheus\my shared folder\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
- %Program Files%\morpheus\my shared folder\K-Lite codec pack 3.10 full.exe
- %Program Files%\morpheus\my shared folder\Adobe Acrobat Reader keygen.exe
- %Program Files%\morpheus\my shared folder\Adobe Photoshop CS4 crack.exe
- %Program Files%\morpheus\my shared folder\VmWare keygen.exe
- %Program Files%\morpheus\my shared folder\WinRAR v3.x keygen RaZoR.exe
- %Program Files%\morpheus\my shared folder\CheckPoint ZoneAlarm And AntiSpy.exe
- %Program Files%\morpheus\my shared folder\Sony Vegas Pro 8 0b Build 219.exe
- %Program Files%\morpheus\my shared folder\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
- %Program Files%\morpheus\my shared folder\Ad-aware 2009.exe
- %Program Files%\morpheus\my shared folder\BitDefender AntiVirus 2009 Keygen.exe
- %Program Files%\morpheus\my shared folder\Norton Anti-Virus 2009 Enterprise Crack.exe
- %Program Files%\morpheus\my shared folder\Ultimate ring tones package1 (Beethoven,Bach, Baris Manco,Lambada,Chopin, Greensleves).exe
- %Program Files%\morpheus\my shared folder\Ultimate ring tones package2 (Lil Wayne - Way Of Life,Khia - My Neck My Back Like My Pussy And My Crack,Mario - Let Me Love You,R. Kelly - The Worlds Greatest).exe
- %Program Files%\morpheus\my shared folder\Ultimate ring tones package3 (Crazy In Love, U Got It Bad, 50 Cent - P.I.M.P, Jennifer Lopez Feat. Ll Cool J - All I Have, 50 Cent - 21 Question).exe
- %Program Files%\morpheus\my shared folder\Microsoft Office 2007 Home and Student keygen.exe
- %Program Files%\morpheus\my shared folder\Total Commander7 license+keygen.exe
- %Program Files%\morpheus\my shared folder\LimeWire Pro v4.18.3.exe
- %Program Files%\morpheus\my shared folder\Download Accelerator Plus v8.7.5.exe
- %Program Files%\morpheus\my shared folder\Opera 9.62 International.exe
- %Program Files%\morpheus\my shared folder\Internet Download Manager V5.exe
- %Program Files%\morpheus\my shared folder\Myspace theme collection.exe
- %Program Files%\morpheus\my shared folder\Nero 9 9.2.6.0 keygen.exe
- %Program Files%\morpheus\my shared folder\Motorola, nokia, ericsson mobil phone tools.exe
- %Program Files%\morpheus\my shared folder\Smart Draw 2008 keygen.exe
- %Program Files%\morpheus\my shared folder\Microsoft Visual Studio 2008 KeyGen.exe
- %Program Files%\morpheus\my shared folder\Absolute Video Converter 6.2.exe
- %Program Files%\morpheus\my shared folder\Daemon Tools Pro 4.11.exe
- %Program Files%\morpheus\my shared folder\Download Boost 2.0.exe
- %Program Files%\morpheus\my shared folder\Avast 4.8 Professional.exe
- %Program Files%\morpheus\my shared folder\Grand Theft Auto IV (Offline Activation).exe
- %Program Files%\morpheus\my shared folder\Alcohol 120 v1.9.7.exe
- %Program Files%\morpheus\my shared folder\CleanMyPC Registry Cleaner v6.02.exe
- %Program Files%\morpheus\my shared folder\Super Utilities Pro 2009 11.0.exe
- %Program Files%\morpheus\my shared folder\Power ISO v4.2 + keygen axxo.exe
- %Program Files%\morpheus\my shared folder\G-Force Platinum v3.7.5.exe
- %Program Files%\morpheus\my shared folder\Divx Pro 6.8.0.19 + keymaker.exe
- %Program Files%\morpheus\my shared folder\Perfect keylogger family edition with crack.exe
- %Program Files%\morpheus\my shared folder\Magic Video Converter 8 0 2 18.exe
- %Program Files%\morpheus\my shared folder\Google Earth Pro 4.2. with Maps and crack.exe
- %Program Files%\morpheus\my shared folder\AVS video converter6.exe
- %Program Files%\morpheus\my shared folder\Sophos antivirus updater bypass.exe
- %Program Files%\morpheus\my shared folder\DVD Tools Nero 9 2 6 0.exe
- %Program Files%\morpheus\my shared folder\Winamp.Pro.v6.53.PowerPack.Portable+installer.exe
- %Program Files%\morpheus\my shared folder\PDF password remover (works with all acrobat reader).exe
- %Program Files%\morpheus\my shared folder\Microsoft.Windows 7 Beta1 Build 7000 x86.exe
- %Program Files%\morpheus\my shared folder\Windows2008 keygen and activator.exe
- %Program Files%\morpheus\my shared folder\Tuneup Ultilities 2008.exe
- %Program Files%\morpheus\my shared folder\Kaspersky Internet Security 2009 keygen.exe
- %Program Files%\morpheus\my shared folder\Windows XP PRO Corp SP3 valid-key generator.exe
- %Program Files%\limewire\shared\K-Lite codec pack 4.0 gold.exe
- %Program Files%\limewire\shared\Youtube Music Downloader 1.0.exe
- %Program Files%\limewire\shared\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
- %Program Files%\limewire\shared\K-Lite codec pack 3.10 full.exe
- %Program Files%\limewire\shared\Adobe Acrobat Reader keygen.exe
- %Program Files%\limewire\shared\Adobe Photoshop CS4 crack.exe
- %Program Files%\limewire\shared\VmWare keygen.exe
- %Program Files%\limewire\shared\WinRAR v3.x keygen RaZoR.exe
- %Program Files%\limewire\shared\CheckPoint ZoneAlarm And AntiSpy.exe
- %Program Files%\limewire\shared\Sony Vegas Pro 8 0b Build 219.exe
- %Program Files%\limewire\shared\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
- %Program Files%\limewire\shared\Ad-aware 2009.exe
- %Program Files%\limewire\shared\BitDefender AntiVirus 2009 Keygen.exe
- %Program Files%\limewire\shared\Norton Anti-Virus 2009 Enterprise Crack.exe
- %Program Files%\limewire\shared\Ultimate ring tones package1 (Beethoven,Bach, Baris Manco,Lambada,Chopin, Greensleves).exe
- %Program Files%\limewire\shared\Ultimate ring tones package2 (Lil Wayne - Way Of Life,Khia - My Neck My Back Like My Pussy And My Crack,Mario - Let Me Love You,R. Kelly - The Worlds Greatest).exe
- %Program Files%\limewire\shared\Ultimate ring tones package3 (Crazy In Love, U Got It Bad, 50 Cent - P.I.M.P, Jennifer Lopez Feat. Ll Cool J - All I Have, 50 Cent - 21 Question).exe
- %Program Files%\limewire\shared\Microsoft Office 2007 Home and Student keygen.exe
- %Program Files%\limewire\shared\Total Commander7 license+keygen.exe
- %Program Files%\limewire\shared\LimeWire Pro v4.18.3.exe
- %Program Files%\limewire\shared\Download Accelerator Plus v8.7.5.exe
- %Program Files%\limewire\shared\Opera 9.62 International.exe
- %Program Files%\limewire\shared\Internet Download Manager V5.exe
- %Program Files%\limewire\shared\Myspace theme collection.exe
- %Program Files%\limewire\shared\Nero 9 9.2.6.0 keygen.exe
- %Program Files%\limewire\shared\Motorola, nokia, ericsson mobil phone tools.exe
- %Program Files%\limewire\shared\Smart Draw 2008 keygen.exe
- %Program Files%\limewire\shared\Microsoft Visual Studio 2008 KeyGen.exe
- %Program Files%\limewire\shared\Absolute Video Converter 6.2.exe
- %Program Files%\limewire\shared\Daemon Tools Pro 4.11.exe
- %Program Files%\limewire\shared\Download Boost 2.0.exe
- %Program Files%\limewire\shared\Avast 4.8 Professional.exe
- %Program Files%\limewire\shared\Grand Theft Auto IV (Offline Activation).exe
- %Program Files%\limewire\shared\Alcohol 120 v1.9.7.exe
- %Program Files%\limewire\shared\CleanMyPC Registry Cleaner v6.02.exe
- %Program Files%\limewire\shared\Super Utilities Pro 2009 11.0.exe
- %Program Files%\limewire\shared\Power ISO v4.2 + keygen axxo.exe
- %Program Files%\limewire\shared\G-Force Platinum v3.7.5.exe
- %Program Files%\limewire\shared\Divx Pro 6.8.0.19 + keymaker.exe
- %Program Files%\limewire\shared\Perfect keylogger family edition with crack.exe
- %Program Files%\limewire\shared\Magic Video Converter 8 0 2 18.exe
- %Program Files%\limewire\shared\Google Earth Pro 4.2. with Maps and crack.exe
- %Program Files%\limewire\shared\AVS video converter6.exe
- %Program Files%\limewire\shared\Sophos antivirus updater bypass.exe
- %Program Files%\limewire\shared\DVD Tools Nero 9 2 6 0.exe
- %Program Files%\limewire\shared\Winamp.Pro.v6.53.PowerPack.Portable+installer.exe
- %Program Files%\limewire\shared\PDF password remover (works with all acrobat reader).exe
- %Program Files%\limewire\shared\Microsoft.Windows 7 Beta1 Build 7000 x86.exe
- %Program Files%\limewire\shared\Windows2008 keygen and activator.exe
- %Program Files%\limewire\shared\Tuneup Ultilities 2008.exe
- %Program Files%\limewire\shared\Kaspersky Internet Security 2009 keygen.exe
- %Program Files%\limewire\shared\Windows XP PRO Corp SP3 valid-key generator.exe
- %Program Files%\tesla\files\K-Lite codec pack 4.0 gold.exe
- %Program Files%\tesla\files\Youtube Music Downloader 1.0.exe
- %Program Files%\tesla\files\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
- %Program Files%\tesla\files\K-Lite codec pack 3.10 full.exe
- %Program Files%\tesla\files\Adobe Acrobat Reader keygen.exe
- %Program Files%\tesla\files\Adobe Photoshop CS4 crack.exe
- %Program Files%\tesla\files\VmWare keygen.exe
- %Program Files%\tesla\files\WinRAR v3.x keygen RaZoR.exe
- %Program Files%\tesla\files\CheckPoint ZoneAlarm And AntiSpy.exe
- %Program Files%\tesla\files\Sony Vegas Pro 8 0b Build 219.exe
- %Program Files%\tesla\files\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
- %Program Files%\tesla\files\Ad-aware 2009.exe
- %Program Files%\tesla\files\BitDefender AntiVirus 2009 Keygen.exe
- %Program Files%\tesla\files\Norton Anti-Virus 2009 Enterprise Crack.exe
- %Program Files%\tesla\files\Ultimate ring tones package1 (Beethoven,Bach, Baris Manco,Lambada,Chopin, Greensleves).exe
- %Program Files%\tesla\files\Ultimate ring tones package2 (Lil Wayne - Way Of Life,Khia - My Neck My Back Like My Pussy And My Crack,Mario - Let Me Love You,R. Kelly - The Worlds Greatest).exe
- %Program Files%\tesla\files\Ultimate ring tones package3 (Crazy In Love, U Got It Bad, 50 Cent - P.I.M.P, Jennifer Lopez Feat. Ll Cool J - All I Have, 50 Cent - 21 Question).exe
- %Program Files%\tesla\files\Microsoft Office 2007 Home and Student keygen.exe
- %Program Files%\tesla\files\Total Commander7 license+keygen.exe
- %Program Files%\tesla\files\LimeWire Pro v4.18.3.exe
- %Program Files%\tesla\files\Download Accelerator Plus v8.7.5.exe
- %Program Files%\tesla\files\Opera 9.62 International.exe
- %Program Files%\tesla\files\Internet Download Manager V5.exe
- %Program Files%\tesla\files\Myspace theme collection.exe
- %Program Files%\tesla\files\Nero 9 9.2.6.0 keygen.exe
- %Program Files%\tesla\files\Motorola, nokia, ericsson mobil phone tools.exe
- %Program Files%\tesla\files\Smart Draw 2008 keygen.exe
- %Program Files%\tesla\files\Microsoft Visual Studio 2008 KeyGen.exe
- %Program Files%\tesla\files\Absolute Video Converter 6.2.exe
- %Program Files%\tesla\files\Daemon Tools Pro 4.11.exe
- %Program Files%\tesla\files\Download Boost 2.0.exe
- %Program Files%\tesla\files\Avast 4.8 Professional.exe
- %Program Files%\tesla\files\Grand Theft Auto IV (Offline Activation).exe
- %Program Files%\tesla\files\Alcohol 120 v1.9.7.exe
- %Program Files%\tesla\files\CleanMyPC Registry Cleaner v6.02.exe
- %Program Files%\tesla\files\Super Utilities Pro 2009 11.0.exe
- %Program Files%\tesla\files\Power ISO v4.2 + keygen axxo.exe
- %Program Files%\tesla\files\G-Force Platinum v3.7.5.exe
- %Program Files%\tesla\files\Divx Pro 6.8.0.19 + keymaker.exe
- %Program Files%\tesla\files\Perfect keylogger family edition with crack.exe
- %Program Files%\tesla\files\Magic Video Converter 8 0 2 18.exe
- %Program Files%\tesla\files\Google Earth Pro 4.2. with Maps and crack.exe
- %Program Files%\tesla\files\AVS video converter6.exe
- %Program Files%\tesla\files\Sophos antivirus updater bypass.exe
- %Program Files%\tesla\files\DVD Tools Nero 9 2 6 0.exe
- %Program Files%\tesla\files\Winamp.Pro.v6.53.PowerPack.Portable+installer.exe
- %Program Files%\tesla\files\PDF password remover (works with all acrobat reader).exe
- %Program Files%\tesla\files\Microsoft.Windows 7 Beta1 Build 7000 x86.exe
- %Program Files%\tesla\files\Windows2008 keygen and activator.exe
- %Program Files%\tesla\files\Tuneup Ultilities 2008.exe
- %Program Files%\tesla\files\Kaspersky Internet Security 2009 keygen.exe
- %Program Files%\tesla\files\Windows XP PRO Corp SP3 valid-key generator.exe
- %Program Files%\winmx\shared\K-Lite codec pack 4.0 gold.exe
- %Program Files%\winmx\shared\Youtube Music Downloader 1.0.exe
- %Program Files%\winmx\shared\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
- %Program Files%\winmx\shared\K-Lite codec pack 3.10 full.exe
- %Program Files%\winmx\shared\Adobe Acrobat Reader keygen.exe
- %Program Files%\winmx\shared\Adobe Photoshop CS4 crack.exe
- %Program Files%\winmx\shared\VmWare keygen.exe
- %Program Files%\winmx\shared\WinRAR v3.x keygen RaZoR.exe
- %Program Files%\winmx\shared\CheckPoint ZoneAlarm And AntiSpy.exe
- %Program Files%\winmx\shared\Sony Vegas Pro 8 0b Build 219.exe
- %Program Files%\winmx\shared\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
- %Program Files%\winmx\shared\Ad-aware 2009.exe
- %Program Files%\winmx\shared\BitDefender AntiVirus 2009 Keygen.exe
- %Program Files%\winmx\shared\Norton Anti-Virus 2009 Enterprise Crack.exe
- %Program Files%\winmx\shared\Ultimate ring tones package1 (Beethoven,Bach, Baris Manco,Lambada,Chopin, Greensleves).exe
- %Program Files%\winmx\shared\Ultimate ring tones package2 (Lil Wayne - Way Of Life,Khia - My Neck My Back Like My Pussy And My Crack,Mario - Let Me Love You,R. Kelly - The Worlds Greatest).exe
- %Program Files%\winmx\shared\Ultimate ring tones package3 (Crazy In Love, U Got It Bad, 50 Cent - P.I.M.P, Jennifer Lopez Feat. Ll Cool J - All I Have, 50 Cent - 21 Question).exe
- %Program Files%\winmx\shared\Microsoft Office 2007 Home and Student keygen.exe
- %Program Files%\winmx\shared\Total Commander7 license+keygen.exe
- %Program Files%\winmx\shared\LimeWire Pro v4.18.3.exe
- %Program Files%\winmx\shared\Download Accelerator Plus v8.7.5.exe
- %Program Files%\winmx\shared\Opera 9.62 International.exe
- %Program Files%\winmx\shared\Internet Download Manager V5.exe
- %Program Files%\winmx\shared\Myspace theme collection.exe
- %Program Files%\winmx\shared\Nero 9 9.2.6.0 keygen.exe
- %Program Files%\winmx\shared\Motorola, nokia, ericsson mobil phone tools.exe
- %Program Files%\winmx\shared\Smart Draw 2008 keygen.exe
- %Program Files%\winmx\shared\Microsoft Visual Studio 2008 KeyGen.exe
- %Program Files%\winmx\shared\Absolute Video Converter 6.2.exe
- %Program Files%\winmx\shared\Daemon Tools Pro 4.11.exe
- %Program Files%\winmx\shared\Download Boost 2.0.exe
- %Program Files%\winmx\shared\Avast 4.8 Professional.exe
- %Program Files%\winmx\shared\Grand Theft Auto IV (Offline Activation).exe
- %Program Files%\winmx\shared\Alcohol 120 v1.9.7.exe
- %Program Files%\winmx\shared\CleanMyPC Registry Cleaner v6.02.exe
- %Program Files%\winmx\shared\Super Utilities Pro 2009 11.0.exe
- %Program Files%\winmx\shared\Power ISO v4.2 + keygen axxo.exe
- %Program Files%\winmx\shared\G-Force Platinum v3.7.5.exe
- %Program Files%\winmx\shared\Divx Pro 6.8.0.19 + keymaker.exe
- %Program Files%\winmx\shared\Perfect keylogger family edition with crack.exe
- %Program Files%\winmx\shared\Magic Video Converter 8 0 2 18.exe
- %Program Files%\winmx\shared\Google Earth Pro 4.2. with Maps and crack.exe
- %Program Files%\winmx\shared\AVS video converter6.exe
- %Program Files%\winmx\shared\Sophos antivirus updater bypass.exe
- %Program Files%\winmx\shared\DVD Tools Nero 9 2 6 0.exe
- %Program Files%\winmx\shared\Winamp.Pro.v6.53.PowerPack.Portable+installer.exe
- %Program Files%\winmx\shared\PDF password remover (works with all acrobat reader).exe
- %Program Files%\winmx\shared\Microsoft.Windows 7 Beta1 Build 7000 x86.exe
- %Program Files%\winmx\shared\Windows2008 keygen and activator.exe
- %Program Files%\winmx\shared\Tuneup Ultilities 2008.exe
- %Program Files%\winmx\shared\Kaspersky Internet Security 2009 keygen.exe
- %Program Files%\winmx\shared\Windows XP PRO Corp SP3 valid-key generator.exe
- %System Root%\Downloads\K-Lite codec pack 4.0 gold.exe
- %System Root%\Downloads\Youtube Music Downloader 1.0.exe
- %System Root%\Downloads\Windows 2008 Enterprise Server VMWare Virtual Machine.exe
- %System Root%\Downloads\K-Lite codec pack 3.10 full.exe
- %System Root%\Downloads\Adobe Acrobat Reader keygen.exe
- %System Root%\Downloads\Adobe Photoshop CS4 crack.exe
- %System Root%\Downloads\VmWare keygen.exe
- %System Root%\Downloads\WinRAR v3.x keygen RaZoR.exe
- %System Root%\Downloads\CheckPoint ZoneAlarm And AntiSpy.exe
- %System Root%\Downloads\Sony Vegas Pro 8 0b Build 219.exe
- %System Root%\Downloads\AnyDVD HD v.6.3.1.8 Beta incl crack.exe
- %System Root%\Downloads\Ad-aware 2009.exe
- %System Root%\Downloads\BitDefender AntiVirus 2009 Keygen.exe
- %System Root%\Downloads\Norton Anti-Virus 2009 Enterprise Crack.exe
- %System Root%\Downloads\Ultimate ring tones package1 (Beethoven,Bach, Baris Manco,Lambada,Chopin, Greensleves).exe
- %System Root%\Downloads\Ultimate ring tones package2 (Lil Wayne - Way Of Life,Khia - My Neck My Back Like My Pussy And My Crack,Mario - Let Me Love You,R. Kelly - The Worlds Greatest).exe
- %System Root%\Downloads\Ultimate ring tones package3 (Crazy In Love, U Got It Bad, 50 Cent - P.I.M.P, Jennifer Lopez Feat. Ll Cool J - All I Have, 50 Cent - 21 Question).exe
- %System Root%\Downloads\Microsoft Office 2007 Home and Student keygen.exe
- %System Root%\Downloads\Total Commander7 license+keygen.exe
- %System Root%\Downloads\LimeWire Pro v4.18.3.exe
- %System Root%\Downloads\Download Accelerator Plus v8.7.5.exe
- %System Root%\Downloads\Opera 9.62 International.exe
- %System Root%\Downloads\Internet Download Manager V5.exe
- %System Root%\Downloads\Myspace theme collection.exe
- %System Root%\Downloads\Nero 9 9.2.6.0 keygen.exe
- %System Root%\Downloads\Motorola, nokia, ericsson mobil phone tools.exe
- %System Root%\Downloads\Smart Draw 2008 keygen.exe
- %System Root%\Downloads\Microsoft Visual Studio 2008 KeyGen.exe
- %System Root%\Downloads\Absolute Video Converter 6.2.exe
- %System Root%\Downloads\Daemon Tools Pro 4.11.exe
- %System Root%\Downloads\Download Boost 2.0.exe
- %System Root%\Downloads\Avast 4.8 Professional.exe
- %System Root%\Downloads\Grand Theft Auto IV (Offline Activation).exe
- %System Root%\Downloads\Alcohol 120 v1.9.7.exe
- %System Root%\Downloads\CleanMyPC Registry Cleaner v6.02.exe
- %System Root%\Downloads\Super Utilities Pro 2009 11.0.exe
- %System Root%\Downloads\Power ISO v4.2 + keygen axxo.exe
- %System Root%\Downloads\G-Force Platinum v3.7.5.exe
- %System Root%\Downloads\Divx Pro 6.8.0.19 + keymaker.exe
- %System Root%\Downloads\Perfect keylogger family edition with crack.exe
- %System Root%\Downloads\Magic Video Converter 8 0 2 18.exe
- %System Root%\Downloads\Google Earth Pro 4.2. with Maps and crack.exe
- %System Root%\Downloads\AVS video converter6.exe
- %System Root%\Downloads\Sophos antivirus updater bypass.exe
- %System Root%\Downloads\DVD Tools Nero 9 2 6 0.exe
- %System Root%\Downloads\Winamp.Pro.v6.53.PowerPack.Portable+installer.exe
- %System Root%\Downloads\PDF password remover (works with all acrobat reader).exe
- %System Root%\Downloads\Microsoft.Windows 7 Beta1 Build 7000 x86.exe
- %System Root%\Downloads\Windows2008 keygen and activator.exe
- %System Root%\Downloads\Tuneup Ultilities 2008.exe
- %System Root%\Downloads\Kaspersky Internet Security 2009 keygen.exe
- %System Root%\Downloads\Windows XP PRO Corp SP3 valid-key generator.exe
(Nota: %System% es la carpeta del sistema de Windows, que en el caso de Windows 98 y ME suele estar en C:\Windows\System, en el caso de Windows NT y 2000 en C:\WINNT\System32 y en el caso de Windows XP y Server 2003 en C:\Windows\System32).
. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).. %System Root% es la carpeta raíz, normalmente C:\. También es la ubicación del sistema operativo).)Técnica de inicio automático
Agrega las siguientes entradas de registro para permitir su ejecución automática cada vez que se inicia el sistema:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Windows Driver Manager = "%System%\wdfmngr.exe"
Otras modificaciones del sistema
Agrega las siguientes entradas de registro como parte de la rutina de instalación:
HKEY_LOCAL_MACHINE\Software\Microsoft\
WAB\Profile
HKEY_CURRENT_USER\Software\Microsoft\
WAB\Profile
Agrega las siguientes entradas de registro:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer
geneva1 = "04"
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer
geneva2 = "21"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
%System%\wdfmngr.exe = "%System%\wdfmngr.exe:*:Enabled:Explorer"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\policies\
system
EnableLUA = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Security Center
UACDisableNotify = "1"
Rutina de infiltración
Infiltra los archivos siguientes:
- %System%\wdfmngr.exe
- %System%\kb-096.exe
(Nota: %System% es la carpeta del sistema de Windows, que en el caso de Windows 98 y ME suele estar en C:\Windows\System, en el caso de Windows NT y 2000 en C:\WINNT\System32 y en el caso de Windows XP y Server 2003 en C:\Windows\System32).
)
Soluciones
Motor de exploración mínimo 9.200
Step 1
Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.
Step 2
Reiniciar en modo seguro
[ aprenda más ]
Step 3
Eliminar esta clave del Registro
[ aprenda más ]
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_LOCAL_MACHINE\Software\Microsoft\WAB
- Profile
- In HKEY_CURRENT_USER\Software\Microsoft\WAB
- Profile
Step 4
Eliminar este valor del Registro
[ aprenda más ]
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- Windows Driver Manager = "%System%\wdfmngr.exe"
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
- geneva1 = "04"
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Explorer
- geneva2 = "21"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
- %System%\wdfmngr.exe = "%System%\wdfmngr.exe:*:Enabled:Explorer"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\system
- EnableLUA = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center
- UACDisableNotify = "1"
Step 5
Buscar y eliminar estos archivos
[ aprenda más ]
Puede que algunos de los archivos del componente estén ocultos. Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción "Más opciones avanzadas" para que el resultado de la búsqueda incluya todos los archivos y carpetas ocultos. - %System%\wdfmngr.exe
- %System%\kb-096.exe
Step 6
Reinicie en modo normal y explore el equipo con su producto de Trend Micro para buscar los archivos identificados como TROJ_BUZUS.CAC En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.
Rellene nuestra encuesta!