Trojan.DownLoader34.60053

Technical Information

Modifies file system

Creates the following files

%TEMP%\is-9eger.tmp\<File name>.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-9mob2.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-4kb1i.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-tvgda.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-3t24a.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-dt9uv.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-n1tvo.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-mapr5.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-j52it.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-jgnr9.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-1nvm1.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-cqsh1.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-62gcl.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-c47g8.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-bb97k.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\is-kd294.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-umji3.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-iboms.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-6ibfn.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\language\is-276h8.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd player.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd converter.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd downloader.lnk
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd suite.lnk
%APPDATA%\fvdtoolbar\is-ist54.tmp
%APPDATA%\fvdtoolbar\is-r7td3.tmp
%TEMP%\is-3ldti.tmp\is-m98r4.tmp
%TEMP%\is-3ldti.tmp\is-5hf9d.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\database\is-crjbf.tmp
%TEMP%\is-3ldti.tmp\is-uf1jb.tmp
%TEMP%\is-3ldti.tmp\is-luhfc.tmp
%TEMP%\is-3ldti.tmp\is-cn64e.tmp
%TEMP%\is-3ldti.tmp\is-hm0km.tmp
%TEMP%\is-3ldti.tmp\is-8mqnq.tmp
%ProgramFiles(x86)%\fvd suite\fvd recorder\is-ghgj9.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\language\is-enuc7.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-5eubp.tmp
%ProgramFiles(x86)%\fvd suite\fvd player\is-qgn1p.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-4msaq.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-cbjou.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-oqfmd.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-r1sc5.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-hngku.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-htiq5.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-f4ihl.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-abpn0.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-52pmt.tmp
%ProgramFiles(x86)%\fvd suite\addons\is-1g9nu.tmp
%ProgramFiles(x86)%\fvd suite\is-330fd.tmp
%ProgramFiles(x86)%\fvd suite\is-rpb5h.tmp
%ProgramFiles(x86)%\fvd suite\is-7kfg1.tmp
%TEMP%\is-3ldti.tmp\_isetup\_iscrypt.dll
%TEMP%\is-3ldti.tmp\_isetup\_setup64.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-21dbo.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-i0ive.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-e71hs.tmp
%ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-2vbt2.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-avdp2.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\is-9b0pe.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-ra7dp.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-cuqt5.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-cnplm.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-ul11e.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-tjbcr.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-oik1j.tmp
%TEMP%\is-3ldti.tmp\is-qnd30.tmp
%ALLUSERSPROFILE%\microsoft\windows\start menu\programs\fvd suite\fvd recorder.lnk
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-1v9s8.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-5j0p8.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-t1b9a.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\is-0d7rc.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\language\is-kml38.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\language\is-tt9if.tmp
%ProgramFiles(x86)%\fvd suite\fvd converter\is-5eagi.tmp
%ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-kbmop.tmp
%ProgramFiles(x86)%\fvd suite\unins000.dat

Moves the following files

from %ProgramFiles(x86)%\fvd suite\is-7kfg1.tmp to %ProgramFiles(x86)%\fvd suite\unins000.exe
from %ProgramFiles(x86)%\fvd suite\fvd player\is-5eubp.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\fvd player.exe
from %ProgramFiles(x86)%\fvd suite\fvd player\is-umji3.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\innopsapi.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\is-iboms.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\winico.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-kd294.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\flvsplitter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-bb97k.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\matroskasplitter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-c47g8.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mp4splitter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-62gcl.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpadecfilter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-cqsh1.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpcvideodec.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-1nvm1.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpeg2decfilter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\is-jgnr9.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\mpegsplitter.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-j52it.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avcodec-lav-53.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-mapr5.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avfilter-lav-2.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-n1tvo.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avformat-lav-53.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-dt9uv.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\avutil-lav-51.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-tvgda.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavsplitter.ax
from %APPDATA%\fvdtoolbar\is-r7td3.tmp to %APPDATA%\fvdtoolbar\11.ico
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-4kb1i.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavvideo.ax
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-9mob2.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\libbluray.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-6ibfn.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\swscale-lav-2.dll
from %ProgramFiles(x86)%\fvd suite\fvd player\language\is-276h8.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\language\english.lng
from %ProgramFiles(x86)%\fvd suite\fvd player\language\is-enuc7.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\language\russian.lng
from %ProgramFiles(x86)%\fvd suite\fvd recorder\is-ghgj9.tmp to %ProgramFiles(x86)%\fvd suite\fvd recorder\fvd recorder.exe
from %TEMP%\is-3ldti.tmp\is-8mqnq.tmp to %TEMP%\is-3ldti.tmp\yandex.exe
from %TEMP%\is-3ldti.tmp\is-hm0km.tmp to %TEMP%\is-3ldti.tmp\fvdtoolbar.exe
from %TEMP%\is-3ldti.tmp\is-cn64e.tmp to %TEMP%\is-3ldti.tmp\s1.bmp
from %TEMP%\is-3ldti.tmp\is-luhfc.tmp to %TEMP%\is-3ldti.tmp\s2.bmp
from %TEMP%\is-3ldti.tmp\is-uf1jb.tmp to %TEMP%\is-3ldti.tmp\s3.bmp
from %TEMP%\is-3ldti.tmp\is-5hf9d.tmp to %TEMP%\is-3ldti.tmp\s0.bmp
from %TEMP%\is-3ldti.tmp\is-qnd30.tmp to %TEMP%\is-3ldti.tmp\t0.bmp
from %TEMP%\is-3ldti.tmp\is-m98r4.tmp to %TEMP%\is-3ldti.tmp\y0.bmp
from %ProgramFiles(x86)%\fvd suite\fvd player\is-qgn1p.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\default.m3u
from %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\is-3t24a.tmp to %ProgramFiles(x86)%\fvd suite\fvd player\filters\lav\lavaudio.ax
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-4msaq.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\spain.lng
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-2vbt2.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\wmv.xml
from %ProgramFiles(x86)%\fvd suite\is-rpb5h.tmp to %ProgramFiles(x86)%\fvd suite\fvdsuite.exe
from %ProgramFiles(x86)%\fvd suite\is-330fd.tmp to %ProgramFiles(x86)%\fvd suite\innopsapi.dll
from %ProgramFiles(x86)%\fvd suite\addons\is-1g9nu.tmp to %ProgramFiles(x86)%\fvd suite\addons\fvdext.crx
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-52pmt.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\3gp.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-abpn0.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\avi.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-f4ihl.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\dvd.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-htiq5.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\flv.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-hngku.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mkv.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-r1sc5.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mov.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-oqfmd.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mp3.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-cbjou.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mp4.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-e71hs.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\mpeg.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-21dbo.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\wav.xml
from %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\is-i0ive.tmp to %ProgramFiles(x86)%\fvd suite\ffmpeg\profiles\webm.xml
from %ProgramFiles(x86)%\fvd suite\fvd converter\is-9b0pe.tmp to %ProgramFiles(x86)%\fvd suite\fvd converter\fvd converter.exe
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-ra7dp.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\portugese.lng
from %ProgramFiles(x86)%\fvd suite\fvd converter\is-5eagi.tmp to %ProgramFiles(x86)%\fvd suite\fvd converter\mediainfo.dll
from %ProgramFiles(x86)%\fvd suite\fvd converter\language\is-tt9if.tmp to %ProgramFiles(x86)%\fvd suite\fvd converter\language\english.lng
from %ProgramFiles(x86)%\fvd suite\fvd converter\language\is-kml38.tmp to %ProgramFiles(x86)%\fvd suite\fvd converter\language\russian.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\is-0d7rc.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\fvd downloader.exe
from %ProgramFiles(x86)%\fvd suite\fvd downloader\is-t1b9a.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\libeay32.dll
from %ProgramFiles(x86)%\fvd suite\fvd downloader\is-5j0p8.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\ssleay32.dll
from %ProgramFiles(x86)%\fvd suite\fvd downloader\is-1v9s8.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\zlib1.dll
from %ProgramFiles(x86)%\fvd suite\fvd downloader\database\is-crjbf.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\database\database.csv
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-kbmop.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\armenian.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-oik1j.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\english.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-tjbcr.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\french.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-ul11e.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\germany.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-cnplm.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\italian.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-cuqt5.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\japan.lng
from %ProgramFiles(x86)%\fvd suite\fvd downloader\language\is-avdp2.tmp to %ProgramFiles(x86)%\fvd suite\fvd downloader\language\russian.lng
from %APPDATA%\fvdtoolbar\is-ist54.tmp to %APPDATA%\fvdtoolbar\9.ico

Network activity

Connects to

'op###olad.com':80

TCP

HTTP POST requests

http://op###olad.com/v2/events

UDP

DNS ASK op###olad.com

Miscellaneous

Creates and executes the following

'%TEMP%\is-9eger.tmp\<File name>.tmp' /SL5="$A0216,13776383,88576,<Full path to file>"
'%ProgramFiles(x86)%\fvd suite\fvdsuite.exe' <File name>.exe

Technologies

Terminology

Training and education

Myths

Technical Information

Curing recommendations

Free trial