Trojan.DownLoader34.60045

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-gg6i6.tmp\<File name>.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-skvqi.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-c0r1i.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-ingo7.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-ouudq.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-p0gpc.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-0je9u.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-mtsst.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-qoulo.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-n6hlv.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-fv888.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-s14lv.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-rvdho.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-asi6i.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-9gadp.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-objjl.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-mmi5e.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-7oi53.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-a7mam.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\language\is-o67rm.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd player.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd converter.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd downloader.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd suite.lnk
%APPDATA%\fvdtoolbar\is-a11oe.tmp
%APPDATA%\fvdtoolbar\is-b85hr.tmp
%TEMP%\is-81v05.tmp\is-e67e6.tmp
%TEMP%\is-81v05.tmp\is-lnhu2.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\database\is-meoq4.tmp
%TEMP%\is-81v05.tmp\is-cnbpv.tmp
%TEMP%\is-81v05.tmp\is-0vjh7.tmp
%TEMP%\is-81v05.tmp\is-i4mhn.tmp
%TEMP%\is-81v05.tmp\is-s9qv2.tmp
%TEMP%\is-81v05.tmp\is-lq6h6.tmp
%ProgramFiles(x86)%\fvd suite\fvd recorder\is-und78.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\language\is-lccht.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-j7vvo.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-kuaa8.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-jnu70.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-esuf3.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-jpn2h.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-f0mil.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-9n9hu.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-q5gr8.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-358ec.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-mvnlk.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-oh1ju.tmp
%ProgramFiles(x86)%\fvd suite\addons\is-b5qdr.tmp
%ProgramFiles(x86)%\fvd suite\is-tif53.tmp
%ProgramFiles(x86)%\fvd suite\is-pksh6.tmp
%ProgramFiles(x86)%\fvd suite\is-ok74e.tmp
%TEMP%\is-81v05.tmp\_isetup\_iscrypt.dll
%TEMP%\is-81v05.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-m4ah1.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-rf9db.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-sh407.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-rd345.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-atjgq.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\is-hm84g.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-ke7ne.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-2e0i0.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-i482o.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-oncav.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-gvu22.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-np774.tmp
%TEMP%\is-81v05.tmp\is-j7obm.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd recorder.lnk
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-8a70s.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-b7a9s.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-lk1oo.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-pdd8i.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\language\is-i2o96.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\language\is-u0iui.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\is-8uvdf.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-p24nj.tmp
%ProgramFiles(x86)%\fvd suite\unins000.dat

Moves the following files

from %ProgramFiles(x86)%\fvd suite\is-ok74e.tmp to %ProgramFiles(x86)%\fvd suite\unins000.exe
from %ProgramFiles(x86)%\fvd suite\fvd player\is-j7vvo.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\fvd player.exe
from %ProgramFiles(x86)%\fvd suite\fvd player\is-mmi5e.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\innopsapi.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\is-7oi53.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\winico.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-objjl.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\flvsplitter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-9gadp.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\matroskasplitter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-asi6i.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mp4splitter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-rvdho.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpadecfilter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-s14lv.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpcvideodec.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-fv888.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpeg2decfilter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-n6hlv.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpegsplitter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-qoulo.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avcodec-lav-53.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-mtsst.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avfilter-lav-2.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-0je9u.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avformat-lav-53.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-p0gpc.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avutil-lav-51.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-ingo7.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavsplitter.ax
from %APPDATA%\fvdtoolbar\is-b85hr.tmp to %APPDATA%\fvdtoolbar\11.ico
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-c0r1i.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavvideo.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-skvqi.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\libbluray.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-a7mam.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\swscale-lav-2.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\language\is-o67rm.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\language\english.lng
from %ProgramFiles(x86)%\fvd suite\fvd player\language\is-lccht.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\language\russian.lng
from %ProgramFiles(x86)%\fvd suite\fvd recorder\is-und78.tmp to %ProgramFiles(x86)%\fvd suite\fvd recorder\fvd recorder.exe
from %TEMP%\is-81v05.tmp\is-lq6h6.tmp to %TEMP%\is-81v05.tmp\yandex.exe
from %TEMP%\is-81v05.tmp\is-s9qv2.tmp to %TEMP%\is-81v05.tmp\fvdtoolbar.exe
from %TEMP%\is-81v05.tmp\is-i4mhn.tmp to %TEMP%\is-81v05.tmp\s1.bmp
from %TEMP%\is-81v05.tmp\is-0vjh7.tmp to %TEMP%\is-81v05.tmp\s2.bmp
from %TEMP%\is-81v05.tmp\is-cnbpv.tmp to %TEMP%\is-81v05.tmp\s3.bmp
from %TEMP%\is-81v05.tmp\is-lnhu2.tmp to %TEMP%\is-81v05.tmp\s0.bmp
from %TEMP%\is-81v05.tmp\is-j7obm.tmp to %TEMP%\is-81v05.tmp\t0.bmp
from %TEMP%\is-81v05.tmp\is-e67e6.tmp to %TEMP%\is-81v05.tmp\y0.bmp
from %ProgramFiles(x86)%\fvd suite\fvd player\is-kuaa8.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\default.m3u
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-ouudq.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavaudio.ax
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-jnu70.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\spain.lng
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-rd345.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\wmv.xml
from %ProgramFiles(x86)%\fvd suite\is-pksh6.tmp to %ProgramFiles(x86)%\fvd suite\fvdsuite.exe
from %ProgramFiles(x86)%\fvd suite\is-tif53.tmp to %ProgramFiles(x86)%\fvd suite\innopsapi.dll
from %ProgramFiles(x86)%\fvd suite\addons\is-b5qdr.tmp to %ProgramFiles(x86)%\fvd suite\addons\fvdext.crx
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-oh1ju.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\3gp.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-mvnlk.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\avi.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-358ec.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\dvd.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-q5gr8.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\flv.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-9n9hu.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mkv.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-f0mil.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mov.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-jpn2h.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mp3.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-esuf3.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mp4.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-sh407.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mpeg.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-m4ah1.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\wav.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-rf9db.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\webm.xml
from %ProgramFiles(x86)%\fvd suite\fvd converter\is-hm84g.tmp to %ProgramFiles(x86)%\fvd suite\fvd converter\fvd converter.exe
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-ke7ne.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\portugese.lng
from %ProgramFiles(x86)%\fvd suite\fvd converter\is-8uvdf.tmp to %ProgramFiles(x86)%\fvd suite\fvd converter\mediainfo.dll
from %ProgramFiles(x86)%\fvd suite\fvd converter\language\is-u0iui.tmp to %ProgramFiles(x86)%\fvd suite\fvd converter\language\english.lng
from %ProgramFiles(x86)%\fvd suite\fvd converter\language\is-i2o96.tmp to %ProgramFiles(x86)%\fvd suite\fvd converter\language\russian.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\is-pdd8i.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\fvd downloader.exe
from %ProgramFiles(x86)%\fvd suite\fvd downloader\is-lk1oo.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\libeay32.dll
from %ProgramFiles(x86)%\fvd suite\fvd downloader\is-b7a9s.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\ssleay32.dll
from %ProgramFiles(x86)%\fvd suite\fvd downloader\is-8a70s.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\zlib1.dll
from %ProgramFiles(x86)%\fvd suite\fvd downloader\database\is-meoq4.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\database\database.csv
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-p24nj.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\armenian.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-np774.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\english.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-gvu22.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\french.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-oncav.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\germany.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-i482o.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\italian.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-2e0i0.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\japan.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-atjgq.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\russian.lng
from %APPDATA%\fvdtoolbar\is-a11oe.tmp to %APPDATA%\fvdtoolbar\9.ico

Network activity

Connects to

'op###olad.com':80

TCP

HTTP POST requests

http://op###olad.com/v2/events

UDP

DNS ASK op###olad.com

Miscellaneous

Creates and executes the following

'%TEMP%\is-gg6i6.tmp\<File name>.tmp' /SL5="$120230,13769930,88576,<Full path to file>"
'%ProgramFiles(x86)%\fvd suite\fvdsuite.exe' <File name>.exe

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial