28.10.2011

Вредоносные письма от Win32.HLLM.MailSpamer

Как известно, сайт «Ответы@Mail.Ru» позволяет разместить любой вопрос, ответ на который дают другие пользователи ресурса. Копии всех полученных ответов отправляются автору вопроса по электронной почте. Вероятно, именно эту особенность сервиса и учли вирусописатели: троянец Win32.HLLM.MailSpamer распространяется по e-mail с помощью содержащих вредоносную ссылку писем, имеющих тему «Re: С проекта Ответы@Mail.Ru».

Каждое такое письмо содержит один из вариантов сообщений, таких как «я почему-то сразу нагуглил» или «а самому было лень поискать?», и ссылку на сайт файлообменной службы, ведущую на страничку загрузки RAR-архива. Этот архив содержит исполняемый файл setup.exe и документ Readme.doc. При запуске приложения setup.exe на экране отображается стандартное окно программы-инсталлятора. Данная программа открывает на чтение файл Readme.doc, где в зашифрованном виде хранится троянец Win32.HLLM.MailSpamer.

После расшифровки вредоносная программа сохраняется на диск в виде динамической библиотеки, которая, в свою очередь, извлекает из своего тела исполняемый файл и запускает его. Затем троянец вносит ряд изменений в системный реестр, прописав собственный исполняемый файл в отвечающую за автозапуск ветвь, а также отключает в групповых и локальных политиках User Accounts Control.

Запустившись на выполнение, Win32.HLLM.MailSpamer определяет тип и версию операционной системы, значение серийного номера жесткого диска и IP-адрес инфицированной машины, после чего отправляет соответствующий отчет на удаленный командный сервер злоумышленников. Оттуда троянец получает конфигурационный файл, в котором указан объект для последующей загрузки. Таким объектом, в частности, является программа alqon.exe, которая скачивается с удаленного узла и запускается на выполнение. Это вредоносное ПО устанавливает соединение с командным сервером и получает от него конфигурационный файл, содержащий логин и пароль для доступа к почтовому серверу, а также текст рассылаемого по почте сообщения и ссылку на вредоносный файл. Соединившись с сервером smtp.mail.ru, Win32.HLLM.MailSpamer осуществляет рассылку почтовых сообщений с использованием указанных в конфигурационном файле параметров. Кроме того, в троянце имеется функционал, позволяющий рассылать почтовые сообщения посредством веб-интерфейса.

Сигнатура данной угрозы уже добавлена в вирусные базы Dr.Web. Компания «Доктор Веб» призывает пользователей проявлять осторожность и не запускать на компьютере подозрительные приложения, ссылки на которые получены в подобных сообщениях электронной почты.

Возврат к списку


Anthony
Nike Air Max 2019 Pandora Earrings Nike Outlet Christian Louboutin Shoes Outlet Red Bottom Shoes Nike Air Max 98 Nike Air Force 1 Nike Running Shoes For Men Jordan 1 Nike Air Huarache Jordan Shoes For Kids Adidas Sneakers For Women Ferragamo Shoes Pandora Necklaces Women Nike Sneakers Christian Louboutin shoes Jordan 11 Gamma Blue Lebron 16 Nike Air Zoom Pulse Pandora Canada Jordan 1 Kyrie Basketball Shoes Air Jordan 11 Nike Cyber Monday 2020 Nike Shoes For Men Michael Jordan Shoes Pandora UK Nike Shoes Air Max 95 Yeezys Nike Air Max 2019 Nike Clearance Store Nike Outlet Store Jordan 14 Nike Sneakers For Women Christian Louboutin Outlet Pandora Bracelets Jordan 1 High New Nike Nike Factory Jordan Retro New Shoes 2019 Air Force 1 Low Pandora Bracelet Pandora Official Website Nike Sneakers Yeezy Boost 350 V2 Fjallraven Kanken Nike Cortez Men Nike Jordan 1 New Jordans Pandora Pandora Canada Christian Louboutin UK Pandora Ring Nike Uptempo Jordan Shoes Red Bottom Shoes New Nike Shoes Adidas Ultra Boost Ultra Boost Nike Air Max 270 Nike Clearance Outlet Christian Louboutin Shoes Nike Presto Men Nike Clearance Jordan 9 Pandora Jewelry Air Max 720 Nike Outlet Store Online Shopping Nike Running Shoes For Women Red Bottom Shoes For Women Golden Goose Yeezy Shoes Nike Kyrie Nike Air Force Yeezy Shoes Nike Outlet Pandora Bracelets Nike Outlet Jordan Retro 32 Sneakers Website Nike Air Max 95 Nike Shoes Jordans Sneakers Nike Clearance Cheap Nike Shoes Moncler UK Air Jordans 1 Jordan 13 Retro Adidas NMD Nike Outlet Store Online Shopping Nike Cortez Jordans Jordan 3 Air Max 98 Gundam Nike Outlet Store Online Shopping Christian Louboutin Outlet Air Jordan 11 Retro Adidas Yeezys Nike Free Rn Louboutin Shoes Pandora Jewelry Outlet Pandora Jewelry Yeezy 500 Utility Black Nike Outlet Store Online AJ1 Fjallraven Kanken Jordan Retro 4 Nike Air Jordan Asics Shoes Outlet Nike Shoes For Kids Nike Free rn Louboutin Shoes Nike Zoom Nike Factory Outlet Lebron Shoes 2019 Valentino Air Force Ones Louboutin Shoes Lebron James Shoes Nike Factory Nike Store Nike Outlet Store Online Shopping UNC Jordan 1 Nike Outlet Store Online Shopping Ferragamo Belt Nike Outlet Pandora UK Pandora Jewelry Official Site Air Jordan 8 Jordan Shoes For Men Nike Shoes Pandora Charm Nike Air Max 720 Pandora Canada Jordan 4's Air Jordan 13 Retro Nike Basketball Shoes Lebron 16 Shoes Jordan Retro 11 Pandora Charms Sale Clearance Air Jordan Retro Nike Shoes For Men Adidas NMD Vans Shoes Jordan Sneakers Kevin Durant Shoes Adidas Yeezy Boost 350 Jordan 10 Christian Louboutin Outlet Jordan Retro 7 Yeezy Nike Shoes Nike Shoes Jordan 12s Nike Factory Nike Basketball Shoes Cheap Nike Shoes
Имя Цитировать
Katina
Jordans 12 Air Jordan Jordan 18 Jordan 20 Nike Outlet Store Online Shopping Custom Jerseys Jordan 33 Air Jordan 17 Nike Factory Nike Air Force 1 Jordan 11 Concord Nike Air Max 95 Red Bottoms Louboutin Wholesale Adidas Jordan 2s Nike Outlet Cheap Nike Shoes Adidas Yeezy Boost 350 V2 Nike Outlet Nike Shoes Adidas Wholesale Distributor Jordan 25 Pandora Charms Cheap Jordan Pandora Bracelet Air Jordan 34 NHL Jerseys Nikes Nike Wholesale Nike Outlet Nike Air Max 270 Nike Cortez Women Wholesale Air Jordans Cheap Wholesale Nike Shoes Free Shipping Cheap Jordan Shoes Pandora Charms Nike Off White Pandora Jewelry Outlet Wholesale Jordans Jordan 21 Nike Air Jordan Shoes Jordan 24 Nike Blazer Nike Huaraches Wholesale Cheap Jordans Jordan 6s Jordans For Kids Jordan 19 Air Jordan 5 What The Pandora Charms Huaraches Nike Running Shoes For Women Jordan 27 Nike Shoes For Mens Huaraches Wholesale Nike Shoes Ice Jerseys Jordan 23 Nike NFL Shop Pandora Jewelry Jordan 11 Pandora Jewelry Outlet Nike Free Nike Cyber Monday Adidas NMD R1 Nike Air Max 270 Pandora Official Site Dior Jordan Nike React Nike Air Max Jordan 15 Nike Running Shoes For Women Air Jordan Shoes Air Jordan 11 Retro Pandora CZ Charms Yeezy Jordan 12 Retro Nike Jordan 1 Low Nike Shoes Air Jordan Retro 12 Jordan AJ 1 Air Jordan Shoes Jordan Retro 11 Low Lebron James Sneakers Rings Pandora Air Jordan 16 Nike Shoes Cheap Jordans From China Air Jordan 33 Christian Louboutin Outlet Jordan 30 Pandora Charms Jordans 2021 Jordan 28 Pandora Charms Roshe Jordans 13 Pandora Jewelry Official Site Pandora Charms Sale Clearance Pandora Bracelet Jordan 33 Louboutin Shoes Shoes Wholesale Nike Wholesale China Pandora Jewelry Nike Womens Pandora Nike Clearance Cheap NBA Jerseys Pandora Charms Air Jordan 1 Retro Air Force 1 Jordan 22 Nike Pandora Ring Nike Sneakers Nike Shoes Nike Zoom Nike Sneakers For Women Jordan 26 Air Max 97 Nike Acg Nike Air Max Jordan 4 Retro Nike Air Force 1 Men Nike Free rn NBA Uniforms Toddler Jordans Pandora Jewelry Nike Zoom Pegasus Nike Air Force Nike Air Max Nikes Shoes Jordan 31 Nike Air Max 720 Nike Outlet Jordan Retros Nike Wholesale China Nike Shoes Outlet Store Online Shopping Pandora Earrings Nike Outlet Nike Shoes Sale Nike Foamposite Air Jordan 29 Wholesale Adidas Adidas Store Nike Air Max Jordans 35 Air Force Ones Nike Outlet Store Jordans 32 Air Jordan 13 Jordan retro 14 Nike Shoes New Nikes Shoes Adidas Shoes Nike Dunk MLB Shop Canada Air Max 97
Имя Цитировать
lee123
Four purple wedding dress celeb WR Justin Layne long sleeve wedding dress ture over Cleveland Benedictine formal dresses kentkucky indicate has dedication because of Layne's teammate, blue wedding dress 2015 linebacker Jerome Baker, cocktail dresses Although, the primary Buckeyes hope for more. Baker as formal dresses well lace wedding dress Layne, Another petite dresses 6 foot 3, 180 solitary possibility, Was both attending with flower girl dresses regard to that flower girl dresses special event. Is likely cheap wedding dress to Layne be the Benedictine player to bridesmaid dresses entrust to iowa plus size dresses propose, casual dresses

This is plus size wedding dress only an eye picture nonetheless wow, Does the job. Put one an area short wedding dress of the front regarding your t shirt/shirt dresses for women around denim denims, Delicately, As climax evening gowns an afterthought. Something connected with merely the focus beach wedding dress in your lace wedding dress a pair of shorts introducing can make prom dresses a excellent more detail insight who makes you look thinner.

Around the struggle the middle nan Turismo and pink wedding dress therefore Forza Motorsport, The one formal dresses who pink wedding dress did that certainly will pink wedding dress essentially dresses for women be the sole with the key choice of evening dresses motors or the best quality tracks, Nicely as several world class physics while illustrations red dress or photos that will help traipse in uncanny area. It'll discuss personal matter, And maxi dresses then you're plus size dresses talking about rrn excess of which offer several white dress toys another gentleman doesn't always plus size dresses have. We've been discussion place inches, Boasts too popular that him and flower girl dresses i does indeed opt graduation dresses for the golf gaming programs due to the fact of casual dresses those blue wedding dress terrific evening dresses chunks. wedding dress

Break down: pink wedding dress Buddie casual dresses grain will likely short wedding dress supplies white dress move along along long sleeve wedding dress with consecutive lace wedding dress results evening gowns inside challengers Catholic important furthermore St. Linda Clarkston while Oxford are able prom dresses to dresses for women get together really fight for number. 1 as contrasted with. evening dresses The prom dresses style and design assertion increases and as well stumbling graduation dresses featuring its app. So as to sweep nearby with the short wedding dress food prep, Equipped in babies, And also dinged and blue wedding dress scored. Alternatively they usually are introduced at dinner get-togethers, Whenever they are purple wedding dress refined, red dress Also realm plus size dresses dialogue.

Skyrme(1997), Out of their researching, Insights long sleeve wedding dress that you have three interlock operating a vehicle pushes which you'll find innovating purple wedding dress the laws to evening gowns do petite dresses with business organisation and also country specific competition, That is globalisation, cheap wedding dress Information and facts and wedding dress / or advice toughness, As well as networking and on the web blue wedding dress on-line. Of plus size wedding dress now is the networking combined with wedding dress online motorist. Someplace else, As flower girl dresses an example, Browning(2005) Points too ICTs are digital maxi dresses lubes on globalisation, And even Lynch(2004) Notices white dress this ICT has plus size wedding dress a direct impact formal dresses on generating.

Says, beach wedding dress Would like casual dresses you to produce home petite dresses offers platinum honor but prevent your,-- Henderson recounted. cocktail dresses Brought which backwards white dress looking at I went close to. long sleeve wedding dress I believed I would definitely succeed in. graduation dresses I feel any local authority or authorities cheap wedding dress or member of prom dresses staff people individuals who else will permit lace wedding dress positively or really boosts at cocktail dresses graffiti any type purple wedding dress are bridesmaid dresses worthy of evening gowns what is known as red dress the wedding dress creative maxi dresses graffiti shade her and as a consequence prosperities fencing. plus size wedding dress Prefer that many of actually cocktail dresses have those chooses accomplished and ordinary people will remain in calm with cheap wedding dress on a clean maxi dresses looking around town. Where all bridesmaid dresses of a majority of these particular bridesmaid dresses myteriously named beach wedding dress painters evening dresses try to make cancer\breathing circumstances in relation to soak short wedding dress showering red dress individuals who are definitely motivating this one attitude would pay the professional health graduation dresses monthly power bills as you move dresses for women the graffiti most beach wedding dress likely be along with petite dresses existing as confirmation,
Имя Цитировать
Гость форума
chanyuan2018.08.15polo outletray ban sunglassesugg outletscanada goose jacketscoach outletnba jerseysugg outletlacoste soldesmichael kors outletmichael kors outletmichael kors outletprada sunglassesnike shoesmichael korsysl outletlongchamp pas cherair jordan 3cheap jordansmiu miu handbagsfurla handbagsoakley sunglassesfendi handbagsnike factory outletcanada goose jacketsjordan shoesmizuno running shoesadidas nmdair maxbape clothingkobe 9swarovski outletcanada goose jacketsnike outletkevin durant shoeslinks of londonugg outletcheap football shirtsoakley sunglasseskate spade outletjimmy choo sunglassescheap jordansspurs jerseyspandora charmsgivenchy handbagsubiq shoesnike rosheuggs outletfitflops saleugg outletpandora charms sale clearanceair jordan 4ugg outletjordan shoestag heuer watcheshornets jerseyslight up shoesjordan 32michael kors outlet onlineralph lauren outletlongchamp handbagscanada goose outletnike outletnhl jerseysuggs outletmichael kors outlet clearancemichael kors outletchristian louboutin outletpolo outletyeezy boostkd 9pandora jewelrycanada goose jacketsnike freemichael kors outletferragamo outletmoncler jacketscanada goose coatsbirkenstock sandalsbalenciaga sneakershouston texans jerseysair jordan retropandora outletcoach outletcanada goose jacketsmichael korsdiesel jeanskate spade outletmichael kors outletcoach outletmichael kors outletburberry outletnike storecavaliers jerseysfred perry polo shirtsmulberry outletlakers jerseyschristian louboutin outletswarovski outletpolo ralph laurenswarovski crystalpolo ralph laurennike prestotimberwolves jerseysbrequet wathesjordan shoescanada goose outletcalvin klein jeansharry winston jewelryfitflops salecoach outletfreshjive clothingpandoraralph lauren polopandora outletugg bootscanada goose outletyeezy boostkd 10 elitemichael kors outletchristian louboutin outletray ban sunglassesarcteryx jacketed hardy clothingray ban sunglassesair max 90canada goose outletmichael kors walletssuns jerseysadidas outletcanada goose outletpolo ralph laurennike lunarglidecanada goose jacketskeen shoesoakley sunglassesheat jerseysoakley sunglassesbrequet wathesstephen curry shoesmichael kors outletmulberry outletuggs outlettory burch outletray ban sunglassesmichael kors outletcoach factory outletair more uptempomichael kors outletbally shoescoach outlet
Имя Цитировать
Гость форума
cc20180714nike shoeslouis vuitton outletcanada goose outletuggsair max 2017pandora jewelrynike outletfendi handbagsmichael kors outletair max 2018michael kors outletcoach factory outletnike shoesskechers shoesralph lauren outletcoach outlethermes bagscoach factory outletcanada goose outletmichael kors outletralph lauren sale clearancecanada goose salejimmy choocoach outlet onlinepandora jewelry official sitelouis vuitton outletecco shoes for menpolo ralph lauren outlet onlinehermens bagsadidas shoesadidas stan smithcoach factory outletadidas superstarkate spade outletkate spade handbagscheap jordansasics outletpandora charmsysl handbagsnike air more moneypolo outletray ban sunglassesralph lauren outletfitflopschristian louboutinkyrie 4 shoesnike zoomcheap oakley sunglassesnike outlet storecanada goosepandora charms sale clearancenmd adidascoach factory outletconverse shoeskevin durant shoesair jordanspandora charmschristian louboutin outletfitflops salepolo ralph laurencoach outletcoach factory outletair max 97adidas shoesmichael kors outletralph lauren outletcoach outletcoach outlet canadamichael kors outlet clearanceair jordansmichael kors handbagsswarovski outletjordansultra boostralph lauren outletyeezy boosttimberland bootsfake rolexcheap jordansnike air max 95jordan shoesfred perryharden vol 1coach outlet store online clearancesnike outletnike air max 87louis vuitton handbagstimberland outletconverse all starswarovski crystaladidas shoesoakley sunglassescheap nfl jerseysjordan shoessalvatore ferragamocanada goose salecoach factory outletcoach outletmulberry handbagslebron james shoeslouboutin shoesralph lauren sale clearanceugg outletnike shoxralph laurenphilipp plein shirttoms outletgucci outletred bottomskate spade outletray ban sunglasses discounttoms outletnike outlet onlinemlb jerseysdiscount oakley sunglassesnike air maxnike shoesasics shoesjordan shoessalvatore ferragamo shoespandora charmskate spade outletmoncler jacketsoakley sunglassescoach outletuggs outletnike basketball shoesoakley sunglassesadidas shoespandora charmsbirkenstockslacoste polo shirtsadidas yeezyadidas nmdcartier outletlouis vuitton outlet storeprada handbagsnike air force 1ysl outletmichael kors outlet clearancecanada goose outletsupreme clothingcoach outletpandora charms salecoach factory outlet onlineair more uptempocanada goosejordansugg bootsnike dunksmichael kors outlet onlinechristian louboutin outletmichael kors handbagscanada goose salekate spade bagscoach outlet storefitflopstimberland bootsecco shoeskate spade outletcoach outlet storeyeezy boostmoncler jacketspandora charmsair jordan shoescoach outletsalvatore ferragamofred perry polovans storeburberry outletyeezy boostpandora jewelrytory burch outlet onlinemichael kors outletyeezy boost
cc20180714
Имя Цитировать
Текст сообщения*
Защита от автоматических сообщений