28.10.2011

Вредоносные письма от Win32.HLLM.MailSpamer

Как известно, сайт «Ответы@Mail.Ru» позволяет разместить любой вопрос, ответ на который дают другие пользователи ресурса. Копии всех полученных ответов отправляются автору вопроса по электронной почте. Вероятно, именно эту особенность сервиса и учли вирусописатели: троянец Win32.HLLM.MailSpamer распространяется по e-mail с помощью содержащих вредоносную ссылку писем, имеющих тему «Re: С проекта Ответы@Mail.Ru».

Каждое такое письмо содержит один из вариантов сообщений, таких как «я почему-то сразу нагуглил» или «а самому было лень поискать?», и ссылку на сайт файлообменной службы, ведущую на страничку загрузки RAR-архива. Этот архив содержит исполняемый файл setup.exe и документ Readme.doc. При запуске приложения setup.exe на экране отображается стандартное окно программы-инсталлятора. Данная программа открывает на чтение файл Readme.doc, где в зашифрованном виде хранится троянец Win32.HLLM.MailSpamer.

После расшифровки вредоносная программа сохраняется на диск в виде динамической библиотеки, которая, в свою очередь, извлекает из своего тела исполняемый файл и запускает его. Затем троянец вносит ряд изменений в системный реестр, прописав собственный исполняемый файл в отвечающую за автозапуск ветвь, а также отключает в групповых и локальных политиках User Accounts Control.

Запустившись на выполнение, Win32.HLLM.MailSpamer определяет тип и версию операционной системы, значение серийного номера жесткого диска и IP-адрес инфицированной машины, после чего отправляет соответствующий отчет на удаленный командный сервер злоумышленников. Оттуда троянец получает конфигурационный файл, в котором указан объект для последующей загрузки. Таким объектом, в частности, является программа alqon.exe, которая скачивается с удаленного узла и запускается на выполнение. Это вредоносное ПО устанавливает соединение с командным сервером и получает от него конфигурационный файл, содержащий логин и пароль для доступа к почтовому серверу, а также текст рассылаемого по почте сообщения и ссылку на вредоносный файл. Соединившись с сервером smtp.mail.ru, Win32.HLLM.MailSpamer осуществляет рассылку почтовых сообщений с использованием указанных в конфигурационном файле параметров. Кроме того, в троянце имеется функционал, позволяющий рассылать почтовые сообщения посредством веб-интерфейса.

Сигнатура данной угрозы уже добавлена в вирусные базы Dr.Web. Компания «Доктор Веб» призывает пользователей проявлять осторожность и не запускать на компьютере подозрительные приложения, ссылки на которые получены в подобных сообщениях электронной почты.

Возврат к списку


lee123
Four purple wedding dress celeb WR Justin Layne long sleeve wedding dress ture over Cleveland Benedictine formal dresses kentkucky indicate has dedication because of Layne's teammate, blue wedding dress 2015 linebacker Jerome Baker, cocktail dresses Although, the primary Buckeyes hope for more. Baker as formal dresses well lace wedding dress Layne, Another petite dresses 6 foot 3, 180 solitary possibility, Was both attending with flower girl dresses regard to that flower girl dresses special event. Is likely cheap wedding dress to Layne be the Benedictine player to bridesmaid dresses entrust to iowa plus size dresses propose, casual dresses

This is plus size wedding dress only an eye picture nonetheless wow, Does the job. Put one an area short wedding dress of the front regarding your t shirt/shirt dresses for women around denim denims, Delicately, As climax evening gowns an afterthought. Something connected with merely the focus beach wedding dress in your lace wedding dress a pair of shorts introducing can make prom dresses a excellent more detail insight who makes you look thinner.

Around the struggle the middle nan Turismo and pink wedding dress therefore Forza Motorsport, The one formal dresses who pink wedding dress did that certainly will pink wedding dress essentially dresses for women be the sole with the key choice of evening dresses motors or the best quality tracks, Nicely as several world class physics while illustrations red dress or photos that will help traipse in uncanny area. It'll discuss personal matter, And maxi dresses then you're plus size dresses talking about rrn excess of which offer several white dress toys another gentleman doesn't always plus size dresses have. We've been discussion place inches, Boasts too popular that him and flower girl dresses i does indeed opt graduation dresses for the golf gaming programs due to the fact of casual dresses those blue wedding dress terrific evening dresses chunks. wedding dress

Break down: pink wedding dress Buddie casual dresses grain will likely short wedding dress supplies white dress move along along long sleeve wedding dress with consecutive lace wedding dress results evening gowns inside challengers Catholic important furthermore St. Linda Clarkston while Oxford are able prom dresses to dresses for women get together really fight for number. 1 as contrasted with. evening dresses The prom dresses style and design assertion increases and as well stumbling graduation dresses featuring its app. So as to sweep nearby with the short wedding dress food prep, Equipped in babies, And also dinged and blue wedding dress scored. Alternatively they usually are introduced at dinner get-togethers, Whenever they are purple wedding dress refined, red dress Also realm plus size dresses dialogue.

Skyrme(1997), Out of their researching, Insights long sleeve wedding dress that you have three interlock operating a vehicle pushes which you'll find innovating purple wedding dress the laws to evening gowns do petite dresses with business organisation and also country specific competition, That is globalisation, cheap wedding dress Information and facts and wedding dress / or advice toughness, As well as networking and on the web blue wedding dress on-line. Of plus size wedding dress now is the networking combined with wedding dress online motorist. Someplace else, As flower girl dresses an example, Browning(2005) Points too ICTs are digital maxi dresses lubes on globalisation, And even Lynch(2004) Notices white dress this ICT has plus size wedding dress a direct impact formal dresses on generating.

Says, beach wedding dress Would like casual dresses you to produce home petite dresses offers platinum honor but prevent your,-- Henderson recounted. cocktail dresses Brought which backwards white dress looking at I went close to. long sleeve wedding dress I believed I would definitely succeed in. graduation dresses I feel any local authority or authorities cheap wedding dress or member of prom dresses staff people individuals who else will permit lace wedding dress positively or really boosts at cocktail dresses graffiti any type purple wedding dress are bridesmaid dresses worthy of evening gowns what is known as red dress the wedding dress creative maxi dresses graffiti shade her and as a consequence prosperities fencing. plus size wedding dress Prefer that many of actually cocktail dresses have those chooses accomplished and ordinary people will remain in calm with cheap wedding dress on a clean maxi dresses looking around town. Where all bridesmaid dresses of a majority of these particular bridesmaid dresses myteriously named beach wedding dress painters evening dresses try to make cancer\breathing circumstances in relation to soak short wedding dress showering red dress individuals who are definitely motivating this one attitude would pay the professional health graduation dresses monthly power bills as you move dresses for women the graffiti most beach wedding dress likely be along with petite dresses existing as confirmation,
Имя Цитировать
Гость форума
chanyuan2018.08.15polo outletray ban sunglassesugg outletscanada goose jacketscoach outletnba jerseysugg outletlacoste soldesmichael kors outletmichael kors outletmichael kors outletprada sunglassesnike shoesmichael korsysl outletlongchamp pas cherair jordan 3cheap jordansmiu miu handbagsfurla handbagsoakley sunglassesfendi handbagsnike factory outletcanada goose jacketsjordan shoesmizuno running shoesadidas nmdair maxbape clothingkobe 9swarovski outletcanada goose jacketsnike outletkevin durant shoeslinks of londonugg outletcheap football shirtsoakley sunglasseskate spade outletjimmy choo sunglassescheap jordansspurs jerseyspandora charmsgivenchy handbagsubiq shoesnike rosheuggs outletfitflops saleugg outletpandora charms sale clearanceair jordan 4ugg outletjordan shoestag heuer watcheshornets jerseyslight up shoesjordan 32michael kors outlet onlineralph lauren outletlongchamp handbagscanada goose outletnike outletnhl jerseysuggs outletmichael kors outlet clearancemichael kors outletchristian louboutin outletpolo outletyeezy boostkd 9pandora jewelrycanada goose jacketsnike freemichael kors outletferragamo outletmoncler jacketscanada goose coatsbirkenstock sandalsbalenciaga sneakershouston texans jerseysair jordan retropandora outletcoach outletcanada goose jacketsmichael korsdiesel jeanskate spade outletmichael kors outletcoach outletmichael kors outletburberry outletnike storecavaliers jerseysfred perry polo shirtsmulberry outletlakers jerseyschristian louboutin outletswarovski outletpolo ralph laurenswarovski crystalpolo ralph laurennike prestotimberwolves jerseysbrequet wathesjordan shoescanada goose outletcalvin klein jeansharry winston jewelryfitflops salecoach outletfreshjive clothingpandoraralph lauren polopandora outletugg bootscanada goose outletyeezy boostkd 10 elitemichael kors outletchristian louboutin outletray ban sunglassesarcteryx jacketed hardy clothingray ban sunglassesair max 90canada goose outletmichael kors walletssuns jerseysadidas outletcanada goose outletpolo ralph laurennike lunarglidecanada goose jacketskeen shoesoakley sunglassesheat jerseysoakley sunglassesbrequet wathesstephen curry shoesmichael kors outletmulberry outletuggs outlettory burch outletray ban sunglassesmichael kors outletcoach factory outletair more uptempomichael kors outletbally shoescoach outlet
Имя Цитировать
Гость форума
cc20180714nike shoeslouis vuitton outletcanada goose outletuggsair max 2017pandora jewelrynike outletfendi handbagsmichael kors outletair max 2018michael kors outletcoach factory outletnike shoesskechers shoesralph lauren outletcoach outlethermes bagscoach factory outletcanada goose outletmichael kors outletralph lauren sale clearancecanada goose salejimmy choocoach outlet onlinepandora jewelry official sitelouis vuitton outletecco shoes for menpolo ralph lauren outlet onlinehermens bagsadidas shoesadidas stan smithcoach factory outletadidas superstarkate spade outletkate spade handbagscheap jordansasics outletpandora charmsysl handbagsnike air more moneypolo outletray ban sunglassesralph lauren outletfitflopschristian louboutinkyrie 4 shoesnike zoomcheap oakley sunglassesnike outlet storecanada goosepandora charms sale clearancenmd adidascoach factory outletconverse shoeskevin durant shoesair jordanspandora charmschristian louboutin outletfitflops salepolo ralph laurencoach outletcoach factory outletair max 97adidas shoesmichael kors outletralph lauren outletcoach outletcoach outlet canadamichael kors outlet clearanceair jordansmichael kors handbagsswarovski outletjordansultra boostralph lauren outletyeezy boosttimberland bootsfake rolexcheap jordansnike air max 95jordan shoesfred perryharden vol 1coach outlet store online clearancesnike outletnike air max 87louis vuitton handbagstimberland outletconverse all starswarovski crystaladidas shoesoakley sunglassescheap nfl jerseysjordan shoessalvatore ferragamocanada goose salecoach factory outletcoach outletmulberry handbagslebron james shoeslouboutin shoesralph lauren sale clearanceugg outletnike shoxralph laurenphilipp plein shirttoms outletgucci outletred bottomskate spade outletray ban sunglasses discounttoms outletnike outlet onlinemlb jerseysdiscount oakley sunglassesnike air maxnike shoesasics shoesjordan shoessalvatore ferragamo shoespandora charmskate spade outletmoncler jacketsoakley sunglassescoach outletuggs outletnike basketball shoesoakley sunglassesadidas shoespandora charmsbirkenstockslacoste polo shirtsadidas yeezyadidas nmdcartier outletlouis vuitton outlet storeprada handbagsnike air force 1ysl outletmichael kors outlet clearancecanada goose outletsupreme clothingcoach outletpandora charms salecoach factory outlet onlineair more uptempocanada goosejordansugg bootsnike dunksmichael kors outlet onlinechristian louboutin outletmichael kors handbagscanada goose salekate spade bagscoach outlet storefitflopstimberland bootsecco shoeskate spade outletcoach outlet storeyeezy boostmoncler jacketspandora charmsair jordan shoescoach outletsalvatore ferragamofred perry polovans storeburberry outletyeezy boostpandora jewelrytory burch outlet onlinemichael kors outletyeezy boost
cc20180714
Имя Цитировать
Текст сообщения*
Защита от автоматических сообщений