Вирус-червь, распространяющийся через интернет по сетям файлообмена.
Вирус-червь, распространяющийся через интернет по сетям файлообмена.
Червь является приложением Windows, имеет размер около 14КБ, упакован UPX. Размер распакованного файла около 35KB. Инсталляция
После запуска червь копирует себя в системный каталог Windows с именем "svcnet.exe":
* %System%\svcnet.exe
После чего регистрирует себя в ключах автозагрузки системного реестра:
[HKLM\Software\Microsoft\Windows\ CurrentVersion\Run] [HKCU\Software\Microsoft\Windows\ CurrentVersion\Run] "Shellapi32"="svcnet.exe"
Размножение через P2P
Червь создает новую директорию "msview" в системной папке Windows, после чего копирует себя в эту папку под следующими именами:
* 321 Studios GamesXCopy 1.0.8 Crack.exe * 3D Slot Car Racing Game 1.0.exe * 3D Studio Max 6 Crack.exe * ABBY FineReader Pro 7.0 Crack.exe * acdsee 7.0.61 Crack.exe * ACDSee PowerPack 7.0.43 Crack.exe * ACDSee v7.0 Powerpack 7.0 Crack.exe * Ad-aware Pro Crack.exe * Ad-aware Professional.exe * Ad-aware.exe * Adobe Acrobat Reader crack.exe * Adobe Acrobat Reader.exe * Adobe After Effects PRO v6.5 Crack.exe * Adobe Golive v6.0 Keygen.exe * Adobe Illustrator v10.0 Time Limit Crack.exe * Adobe ImageReady v1.0 crack.exe * Adobe PageMaker v7.0 Keygen.exe * Adobe Photoshop 7 keygen.exe * Adobe Photoshop CS 8 Crack .exe * Adobe Photoshop CS Crack .exe * Adobe Photoshop Universal Crack .exe * Adobe Serial Generator v2.0.exe * Adult Tetris 2 Crack .exe * Age of Empires II The Age of Kings NO CD crack.exe * Age Of Mythology - The Titans no cd crack.exe * Age Of Mythology no cd crack.exe * Agnitum Outpost Firewall 2.5.369 Crack.exe * Ahead Nero Burning 6.6.0.3 Ultra Edition Keygen .exe * AlbumWrap Extractor v1.0.exe * AlbumWrap.exe * Alcohol 120% v1.9.2 build 1705 Crack.exe * Alias Acclaim crack.exe * All Macromedia Products Keygen.exe * All-in-One Secretmaker.exe * Anti-Trojan 4.0.exe * AnyDVD 3.9.2.1 Crack.exe * AnyDVD 4.0.4.1 Keygen.exe * AOL Instant Messenger (AIM).exe * AquaZone Desktop Garden 1.0.1.1 full Crack.exe * Ares Galaxy.exe * Ares Lite.exe * Ashampoo WinOptimizer Platinum Suite 2 2.01.exe * Avant Browser.exe * Babylon Pro 5x Crack.exe * Backyard Baseball 2003 no cd crack.exe * Backyard Wrestling 2 - There Goes the Neighborhood crack.exe * Battlefield 1942 no cd crack.exe * Battlefield Vietnam crack.exe * Battlefield Vietnam Multiplayer Online Crack.exe * Besieger DreamCatcher Interactive crack.exe * BitComet.exe * BitSpirit 1.2.0 RC3.exe * Blindwrite Suite 4.5.3 Crack.exe * Blinx 2 - Masters of Time & Space Microsoft crack.exe * Blitzkrieg - Burning Horizon CDV Software GmbH crack.exe * C&C Generals Crack.exe * Call Of Duty no cd crack.exe * CCALG - Credit Card Generator.exe * CD to MP3 Freeware 1.5 .exe * Chicken Invaders 2 2.60 .exe * City of Heroes NCsoft crack.exe * Civilization III crack.exe * Classic NES Series - The Legend of Zelda GBA Nintendo crack.exe * Clone DVD 2 Crack.exe * CloneCD 5.x Crack.exe * CloneCD All Version KeyGen.exe * CloneDVD v1.x crack.exe * CloneDVD v3.x Retail Crack.exe * CloneDVD2 v2.x Crack.exe * Command & Conquer - Generals no cd crack.exe * Command & Conquer - Generals Zero Hour no cd crack.exe * Command and Conquer - Generals Zero Hour crack.exe * Cool Edit 2000 1.1.exe * CopyToDVD 3.0.3 Crack.exe * Corel Draw Graphics Suite 12.0 Crack.exe * Counter-Strike Condition Zero Keygen.exe * Crusader Kings Paradox Entertainment crack.exe * Cubase Audio XT 3.X crack.exe * CWShredder 2.12 .exe * CyberLink PowerDVD v6.0 Deluxe7 Crack .exe * Dark Age Of Camelot - Trials Of Atlantis no cd crack.exe * Dark Matter - The Baryon Proj crack.exe * dBpowerAmp Music Converter.exe * DC++ 0.668.exe * Deus Ex Invisible War NO CD Crack.exe * DFX Audio Enhancement 2.0.1 Crack.exe * Diablo 2 NO CD crack.exe * Dialupass 2.43 Crack.exe * DivX Player (with DivX Codec).exe * DivX Player Crack.exe * dMSN mercury messenger 1.7.0.6.exe * Doom 3 Crack.exe * Doom 3 NO CD Crack.exe * Doom 3 SDK Keygen.exe * Dope Wars Crack.exe * Download Accelerator Plus 7.3.exe * Download Accelerator Plus V7.1 Crack.exe * Download Accelerator Plus v7.2 Premium Crack.exe * Download Accelerator Plus.exe * Dr Divx Crack.exe * Dr.Divx 1.0.6 Build 105 Crack.exe * Dragon Ball Z - Budokai 3 crack.exe * Dragon Ball Z - Supersonic Warriors crack.exe * Dragon Warrior VIII crack.exe * DRIV3R crack.exe * Drug Wars - Underworld 1.3.exe * Dungeon Lords DreamCatcher Interactive crack.exe * Dungeon Siege no cd crack.exe * DVD Decrypter 3.5.1.0.exe * DVD Region-Free 5.5 Crack.exe * DVD Shrink 3.2.0.15.exe * DVDXCopy Platinum 4.0.3.8 Crack.exe * Easy CD-DA Extractor 7.1.3.1 Crack.exe * Easy CD-DA Extractor 7.13.2 Keygen.exe * eIMAGE Recovery 3.0.exe * eMule 0.44b.exe * eMule.exe * Enter the Matrix Atari crack.exe * ESPN NFL 2K5 Sega crack.exe * Exe Icon Changer 3.753.exe * F.E.A.R. crack.exe * Fable Microsoft crack.exe * Far Cry crack.exe * Fifa 2005 Crack.exe * Final Fantasy VII - Advent Children crack.exe * Final Fantasy XI - USA no cd crack.exe * Final Fantasy XII crack.exe * Fire Emblem - Seima no Kouseki crack.exe * FlashFXP 2 RC2 Crack.exe * FlashFXP All Version KeyGen.exe * FlashFXP v1.4.1 Crack.exe * FlashFXP v1.4.3 Crack.exe * FlashFXP v2.0 Crack.exe * FlashFXP v2.1 crack.exe * FlashFXP v2.2 crack.exe * Free Internet TV 3.2 Crack.exe * Freedom Force no cd crack.exe * Front Mission 4 crack.exe * FrontPage XP 2002 Crack.exe * FTP Server Serv-U 5.1 Coporate Edition Crack.exe * Full Spectrum Warrior crack.exe * Goblin Commander - Unleash the Horde crack.exe * Gran Turismo 4 SCEA crack.exe * Grand Theft Auto - San Andreas crack.exe * Grand Theft Auto 3 no cd crack.exe * Grand Theft Auto III no cd crack.exe * Grand Theft Auto San Andreas NO CD crack.exe * Grand Theft Auto Vice City NO CD crack.exe * Grokster.exe * Gunbound Trainer.exe * Half-Life 2 Crack.exe * Half-Life 2 Keygen.exe * Half-Life 2 NO CD Crack.exe * Halo - Combat Evolved - Microsoft no cd crack.exe * Halo 2 crack.exe * Harry Potter and the Prisoner of Azkaban Adventure EA Games crack.exe * Harry Potter and the Sorcerers Stone no cd crack.exe * HeadStrong WebClicker 2.56.exe * Heroes of Might and Magic IV no cd crack.exe * Hidden and Dangerous 2 NO CD Crack.exe * HijackThis.exe * Icewind Dale 2 no cd crack.exe * ICQ 4.exe * ICQ Pro 2003b.exe * ImageSlurp 2.43.exe * iMesh.exe * Internet Download Manager 4.03.exe * Internet Download Manager v4.02 Crack.exe * IsoBuster Professional v1.7.0.0 Crack.exe * Jedi Academy NO CD Crack.exe * JetAudio Basic.exe * Joint Operations - Typhoon Rising NovaLogic crack.exe * Juiced Acclaim crack.exe * Kaspersky Anti-Hacker v1.7 Crack.exe * Kaspersky AntiVirus Crack (License Keygen.exe * Kazaa Download Accelerator Pro.exe * Kazaa Download Manager 3.0.exe * KaZaA Lite Plus 1.0.exe * Kingdom Hearts II crack.exe * K-Lite Codec Pack v2.31 Full Crack.exe * K-Lite Mega Codec Pack 1.13 Keygen.exe * Knights Apprentice Memoricks Adventures Games crack.exe * LimeWire (International).exe * LimeWire Download Manager 4.2.6.exe * LimeWire server scanner.exe * LimeWire.exe * Longhorn Transformation Pack 8.0.exe * Lord of the Rings The Battle for Middle-earth 1.00 Crack.exe * LostGoggles.exe * LOTR NO CD Crack.exe * Macromedia ColdFusion MX crack.exe * Macromedia Contribute v2.0 crack.exe * Macromedia Director 8 Crack.exe * Macromedia Dreamweaver 4.0 Patch.exe * Macromedia Dreamweaver MX 2004 7.0 Crack.exe * Macromedia Dreamweaver MX v6.0 crack.exe * Macromedia Dreamweaver UltraDev 4.0 Patch.exe * Macromedia Fireworks 4.0 Patch.exe * Macromedia Flash 5 Crack.exe * Macromedia Flash All Versions keygen.exe * Macromedia Flash MX v6.0 crack.exe * Macromedia Flash SWF-Unprotect v2.0.exe * Macromedia FreeHand v10 Loader.exe * Madden NFL 2003 no cd crack.exe * Madden NFL 2005 EA crack.exe * Mafia no cd crack.exe * MagicScore maestro 3.5 Keygen.exe * Malice Mud Duck Productions crack.exe * Mario Pinball Land Puzzle Nintendo crack.exe * Mario Tennis crack.exe * Matrix Screensaver.exe * Max Payne 2 Fall Of Max Payne no cd crack.exe * Max Payne 2 NO CD Crack.exe * Max Payne 2 The Fall of Max Payne NO CD crack.exe * MaxPayne 2 The Fall Of Max Payne Crack.exe * McAfee VirusScan 9.0 Crack .exe * McFarlanes Evil Prophecy crack.exe * Medal Of Honor - Allied Assault BreakThrough no cd crack.exe * Medal Of Honor - Allied Assault no cd crack.exe * Medal of Honor Pacific Assault crack.exe * Medieval - Total War no cd crack.exe * Mega Man Anniversary Collection crack.exe * Metal Gear Acid PSP crack.exe * Metal Gear Solid 3 - Snake Eater crack.exe * Microsoft Flight Simulator 2004 - A Century Of Flight no cd crack.exe * Microsoft Office 2000 Regmaker.exe * Microsoft Office XP Activation Crack.exe * Microsoft Office XP Activation Killer.exe * Microsoft Office XP Professional Crack.exe * Microsoft Office XP Professional Serial.exe * Microsoft Office XP Universal Activator v1.0.exe * Microsoft Windows Media Player.exe * Microsoft Windows Xp Profesional Sp 2 Keygen.exe * Microsoft Windows XP Professional ( Corp key ) Keygen.exe * Midnight Club 3 - DUB Edition crack.exe * mIRC 6.X No CD Crack.exe * Monopoly 3 Crack.exe * Morpheus.exe * Mortal Kombat 4 Crack.exe * Mozilla Firefox.exe * MP3 Doctor 5.11.15 Crack.exe * mp3DirectCut 1.38 Keygen.exe * MS Office XP Activation Crack.exe * MS Zoo Tycoon no cd crack.exe * MSN advert remover.exe * MSN Messenger (Windows XP).exe * MSN Toolbar advert remover.exe * MSN Toolbar.exe * MusicMatch Jukebox Plus 9.00 Crack.exe * MVP Baseball 2004 EA crack.exe * MyIE2.exe * NBA Live 2003 crack.exe * NBA Live 2004 crack.exe * NCAA Football 2005 EA crack.exe * Need For Speed 5 - no cd.exe * Need for Speed Hot Pursuit 2 CD KeyGenerator.exe * Need for speed underground - nocd.exe * Need for Speed Underground 2 crack.exe * Need for Speed Underground 2 NO CD crack.exe * Need for Speed Underground Crack.exe * Need for Speed4 - NOCD.exe * NeedforspeedUnderground-nocd.exe * Nero 6 Ultra Edition 6.6.0.1 Crack.exe * Nero 6 Ultra Edition Crack.exe * Nero 6 Ultra Edition KeyGen.exe * Nero 6 Ultra Edition.exe * Nero 6.6.0.1 Crack.exe * Nero 6.6.0.3 Ultra Crack.exe * Nero Burning Rom 6.6.0.3 Crack.exe * Nero Burning Rom Reloaded 6.6.0.1 Crack.exe * Nero Burning ROM v6.x crack.exe * Nero Reloaded 6.6.0.1 Crack.exe * Nero Ultra Edition 6.6.0.1 Crack.exe * NetPumper Crack.exe * NetPumper.exe * Ninja Gaiden Tecmo crack.exe * NOD32 AntiVirus 2.12.1 Crack.exe * Norman Virus Control 5.70 Crack.exe * norton 2005 Crack.exe * Norton AntiSpam 2004 Crack .exe25-01-2005 * Norton AntiVirus 2004 crack.exe * Norton AntiVirus 2004 Professional activation Keygen .exe * Norton AntiVirus 2004 Professional Edition Keygen .exe * norton AntiVirus 2005 Crack.exe * norton internet security 2005 Crack.exe * Norton Personal Firewall 2005 retail Crack.exe * nVidia nTune 2005 Keygen.exe * Office 2003 Pro Crack.exe * Onimusha 3 - Demon Siege Adventure Capcom crack.exe * Paris Hilton Sex-E Screensaver 1.0.exe * Partition Magic 8.0.exe * PhotoShop CS 8.0 & ImageReady CS 8.0 Crack.exe * PhotoShop CS v8.0 Crack.exe * PINNACLE STUDIO PLUS V9.3 Crack.exe * Plus! Media Center Edition Crack.exe * Pocket Tanks 1.0.exe * PornSnatcher 2.31.exe * PowerDVD v5.9 Deluxe Crack.exe * Psi-Ops - The Mindgate Conspiracy Midway crack.exe * Purge Jihad Freeform Interactive LLC crack.exe * Quake 3 - The Arena NO CD Crack.exe * QuickTime.exe * RealPlayer crack (keygen.exe * RealPlayer Crack.exe * RealPlayer.exe * Red Dead Revolver crack.exe * RegClean 4.1a.exe * RegCleaner 4.30.780.exe * Registry Mechanic 3.0 Keygen.exe * Registry Mechanic Crack.exe * Registry Mechanic.exe * Resident Evil 4 GC Adventure crack.exe * Rise of Nations - Thrones & Patriots crack.exe * Risk II 1.0.exe * RM to MP3 Converter 1.21.exe * RoboForm crack.exe * RoboForm.exe * Roller Coaster Tycoon no cd crack.exe * Rollercoaster Tycoon 3 3 Crack.exe * RollerCoaster Tycoon and Attractions No CD Crack.exe * Serials 2000 v7.1 Plus (build 06.16.04) Keygen.exe * SeXstazy 3.0.2.11.exe * Shadow Ops - Red Mercury crack.exe * ShellShock - Nam 67 crack.exe * Shockwave Player.exe * Silent Storm - Sentinels _No Company crack.exe * Sim City 4 - Rush Hour no cd crack.exe * Sim City 4 Deluxe no cd crack.exe * Sim Theme Park World no cd crack.exe * Sims 2 Crack.exe * Sniff-em 1.12.exe * Snood Crack.exe * Snood.exe * Soldat 1.1.4.exe * Soldier of Fortune II- Double Helix No CD Crack.exe * SolSuite 2004 - Solitaire Card Games Suite Crack.exe * SolSuite 2004 - Solitaire Card Games Suite.exe * Sonic the Hedgehog 3 crack.exe * Spider-Man 2 crack.exe * Spider-Man 2 GC crack.exe * Sponge Bob Square Pants - Operation Krabby Patty no cd crack.exe * Spy Sweeper 3.2 147 Crack.exe * Spybot - Search and Destroy.exe * SpyHunter Crack.exe * SpyHunter.exe * Spyware doctor 2.1 Keygen.exe * Spyware Doctor 2.1.0.254 Crack.exe * Spyware Doctor Crack.exe * Spyware Doctor V3 Keygen.exe * Spyware Doctor v3.0.0.288 Crack.exe * Spyware Doctor.exe * SpywareBlaster.exe * Star Wars - Jedi Knight - Jedi Academy no cd crack.exe * Star Wars - Knights of the Old Republic crack.exe * Star Wars Galactic Battlegrounds- Clone Campaigns no cd crack.exe * Star Wars Jedi Knight II - Jedi Outcast no cd crack.exe * Star Wars Jedi Knight II- Jedi Outcast no cd crack.exe * Star Wars Knights of the Old Republic II - The Sith Lords crack.exe * Starcraft - Battlechest no cd crack.exe * Strip Poker 2004 Crack.exe * Super dvd Creator 7.5 7.5 Crack.exe * Super Mario Kamek - Magikoopa's Revenge 1.2.exe * Sygate Personal Firewall PRO v5.5 Build 2577 Crack.exe * Symantec Ghost 8.0 Crack.exe * Symatec System Center V9.0.0.338 Crack.exe * System Mechanic 5.0c.exe * The Chronicles of Riddick - Escape From Butcher Bay crack.exe * The Elder Scrolls III - Morrowind Game of the Year Edition Bethesda Softworks crack.exe * The Legend of Zelda - Four Swords Adventures crack.exe * The Legend of Zelda - The Minish Cap crack.exe * The Legend of Zelda (working title) crack.exe * The lord of the rings the battle for middle earth Crack.exe * The Lord of the Rings The Battle for Middle-Earth Crack.exe * The Lord of the Rings The Battle for Middle-earth crack.exe * The Lord of the Rings The Return of The King crack.exe * The Sims - Hot Date Expansion Pack no cd crack.exe * The Sims - Makin Magic Expansion Pack no cd crack.exe * The Sims - Superstar Expansion Pack no cd crack.exe * The Sims - Unleashed Expansion Pack no cd crack.exe * The Sims - Vacation Expansion Pack no cd crack.exe * The Sims 2 crack.exe * The Sims Clock 1.0.exe * The Sims Deluxe no cd crack.exe * The Sims Double Deluxe no cd crack.exe * The Sims no cd crack.exe * The Sims Vacation no cd crack.exe * The Suffering crack.exe * The Suffering Midway crack.exe * Thief - Deadly Shadows crack.exe * Tiger Woods PGA Tour 2004 crack.exe * Tom Clancys Ghost Recon - Desert Siege no cd crack.exe * Tom Clancys Splinter Cell crack.exe * Tom Clancys Splinter Cell Pandora Tomorrow crack.exe * Tom Clancy's Splinter Cell Pandora Tomorrow crack.exe * Tony Hawks Underground crack.exe * Total Commander v6.03a PowerPack 25 Crack.exe * Trillian crasher.exe * Trillian Pro v3.0.950 Crack.exe * Trillian.exe * Tweak-XP Pro 4.0.2 Crack.exe * Unreal Tournament 2003 no cd crack.exe * Unreal Tournament 2004 crack (keygen.exe * Unreal Tournament 2004 Crack.exe * Unreal Tournament 2004 NO CD crack.exe * Vampire - The Masquerade - Bloodlines crack.exe * VirtualLab Data Recovery crack.exe * VirtualLab Data Recovery.exe * Virtuosa Phoenix Edition Crack.exe * Warcraft III - Reign Of Chaos no cd crack.exe * Warez P2P.exe * WebRoot Spy Sweeper 3.5.0.189 Crack.exe * Webroot Spy Sweeper Crack.exe * Webroot Spy Sweeper.exe * WebSite Watcher v4.02 Crack.exe * Winace 2.x Crack.exe * Winamp 5.03 Full Crack.exe * Winamp Full.exe * windows server 2003 crack.exe * Windows Server 2003 SP1 Build 1039-2l Crack.exe * Windows XP Activation Crack.exe * Windows XP home edition Activation.exe * Windows XP Pro 64-bit Crack.exe * Windows XP Professional crack.exe * Windows XP SP2 KeyGen.exe * WinDVD Platinum 5.0.26.23 Crack.exe * WinMX.exe * WinRAR 3.30 Corporate Ed Crack.exe * WinRAR 3.x Crack.exe * WinRAR All KeyGen.exe * WinRAR crack (keygen.exe * WinRAR v3.20 Final Keygen.exe * WinRAR v3.30 Final Keygen.exe * WinRAR v3.41 Final Keygen.exe * WinRAR.exe * WinZip 9.x Crack.exe * WinZip All KeyGen.exe * WinZip All Versions keygen.exe * Winzip Keygen.exe * WinZip Self-Extractor v2.2 keygen.exe * WinZip Self-Extractor v2.2 Patch.exe * WinZip v8.0 Keygen.exe * WinZIP v9.0 Keygen.exe * WinZip v9.0 Registration.exe * WinZip.exe * World of Warcraft crack.exe * Worms Armageddon NO CD crack.exe * WWE Day of Reckoning GC crack.exe * WWE SmackDown! vs. Raw crack.exe * XBOX X-Fer Ripper and Transfer.exe * XP Slipstreamer v1.0 Crack.exe * Yahoo Messenger.exe * ZeroSpyware Lite.exe * ZipGenius.exe * Zone Alarm Security Suite 5.5.062 Crack.exe * ZoneAlarm crack (keygen.exe * ZoneAlarm.exe * Zoo Tycoon - Complete Collection no cd crack.exe * Zoo Tycoon - Dinosaur Digs no cd crack.exe * Zoo Tycoon no cd crack.exe * Zoo Tycoon.exe
Далее червь проверяет наличие установленного на машине P2P-клиента (KaZaa, Morpheus, iMesh, eMule, wareo, DC++) и изменяет его настройки таким образом, чтобы установленные по умолчанию расшаренные ресурсы включали в себя и созданную червем папку "%System%\msview".
Червь может соединяться с IRC-сервером для обновления своей версии.
Разбираем кейсы, делимся опытом, учимся на чужих ошибках