Tylko teraz Kaspersky Total Security w cenie Kaspersky Internet Security!  Sprawdź ofertę »

X

Worm.P2P.Krepper.c - infekuje sieci P2P

Jest to robak rozprzestrzeniający się za pośrednictwem sieci P2P. Ma postać pliku PE EXE o rozmiarze około 17 KB (kompresja UPX, rozmiar po rozpakowaniu - około 45 KB). Po uruchomieniu szkodnik szuka zainstalowanego programu VMWare. W przypadku jego braku część funkcji szkodnika jest wyłączona.

Instalacja

Po uruchomieniu robak kopiuje się do folderu systemowego Windows z nazwą sndcfg16.exe i tworzy w rejestrze systemowym klucz auto-run:

[Software\Microsoft\Windows\CurrentVersion\Run]
Services = %nazwa robaka%

Rozprzestrzenianie

Robak rozprzestrzenia się za pośrednictwem sieci P2P. Po uruchomieniu skanuje system w poszukiwaniu następujących klientów P2P:

  • Altnet
  • Morpheus
  • iMesh
  • eDonkey2000
  • LimeWire
  • Kazaa

Następnie szkodnik umieszcza swoje kopie (z losowymi nazwami, wybieranymi spośród poniższych możliwości) w folderach współdzielonych w sieciach P2P:

  • Ad-aware Pro Crack.exe
  • Adobe Acrobat Reader crack.exe
  • Adobe Golive v6.0 Keygen.exe
  • Adobe Illustrator v10.0 Time Limit Crack.exe
  • Adobe ImageReady v1.0 crack.exe
  • Adobe PageMaker v7.0 Keygen.exe
  • Adobe Photoshop 7 keygen.exe
  • Adobe Photoshop all.exe
  • Adobe Serial Generator v2.0.exe
  • Age of Empires II The Age of Kings NO CD crack.exe
  • Age Of Mythology - The Titans no cd crack.exe
  • Age Of Mythology no cd crack.exe
  • Alias Acclaim crack.exe
  • All Macromedia Products Keygen.exe
  • Anti-Trojan 4.0.exe
  • Avant Browser.exe
  • Backyard Baseball 2003 no cd crack.exe
  • Backyard Wrestling 2 - There Goes the Neighborhood Eidos Interactive crack.exe
  • Battlefield 1942 no cd crack.exe
  • Battlefield Vietnam EA Games crack.exe
  • Battlefield Vietnam Multiplayer Online Crack.exe
  • Besieger Strategy DreamCatcher Interactive crack.exe
  • Blinx 2 - Masters of Time & Space Microsoft crack.exe
  • Blitzkrieg - Burning Horizon Strategy CDV Software GmbH crack.exe
  • Call of Duty Activision crack.exe
  • Call Of Duty no cd crack.exe
  • City of Heroes Role-Playing NCsoft crack.exe
  • Civilization III crack.exe
  • Classic NES Series - The Legend of Zelda GBA Role-Playing Nintendo crack.exe
  • CloneDVD v1.x crack.exe
  • Command & Conquer - Generals no cd crack.exe
  • Command & Conquer - Generals Zero Hour no cd crack.exe
  • Command & Conquer - Generals Zero Hour Strategy EA Games crack.exe
  • Counter-Strike Condition Zero Keygen.exe
  • Credit card generator.exe
  • Crusader Kings Strategy Paradox Entertainment crack.exe
  • Cubase Audio XT 3.X crack.exe
  • Dark Age Of Camelot - Trials Of Atlantis no cd crack.exe
  • Dark Matter - The Baryon Proj crack.exe
  • Deus Ex Invisible War NO CD Crack.exe
  • Diablo 2 NO CD crack.exe
  • Diablo 2 no cd crack.exe
  • DivX Player and Codec.exe
  • Doom 3 Activision crack.exe
  • Doom 3 NO CD Crack.exe
  • Download Accelerator Plus (spyware free).exe
  • Dragon Ball Z - Budokai 3 Atari crack.exe
  • Dragon Ball Z - Supersonic Warriors GBA Atari crack.exe
  • Dragon Warrior VIII Role-Playing Square Enix crack.exe
  • DRIV3R Atari crack.exe
  • Dungeon Lords Role-Playing DreamCatcher Interactive crack.exe
  • Dungeon Siege no cd crack.exe
  • Enter the Matrix Atari crack.exe
  • ESPN NFL 2K5 Sega crack.exe
  • F.E.A.R. VU Games crack.exe
  • Fable Role-Playing Microsoft crack.exe
  • Far Cry Ubisoft crack.exe
  • Final Fantasy VII - Advent Children PSP Role-Playing Square Enix crack.exe
  • Final Fantasy XI - Square Enix USA no cd crack.exe
  • Final Fantasy XII Role-Playing Square Enix crack.exe
  • Fire Emblem - Seima no Kouseki GBA Role-Playing Nintendo crack.exe
  • FlashFXP 2 RC2 Crack.exe
  • FlashFXP v1.4.1 Crack.exe
  • FlashFXP v1.4.3 Crack.exe
  • FlashFXP v2.0 Crack.exe
  • FlashFXP v2.1 crack.exe
  • FlashFXP v2.2 crack.exe
  • FlashGet.exe
  • Forgotten Realms - Demon Stone Atari crack.exe
  • Forgotten Realms - Demon Stone crack.exe ; 00405370 o
  • Freedom Force no cd crack.exe
  • Front Mission 4 Strategy Square Enix crack.exe
  • Full Spectrum Warrior Strategy THQ crack.exe
  • Geist GC Nintendo crack.exe
  • Goblin Commander - Unleash the Horde Strategy Jaleco Entertainment crack.exe
  • Gran Turismo 4 SCEA crack.exe
  • Grand Theft Auto - San Andreas Rockstar Games crack.exe
  • Grand Theft Auto 3 no cd crack.exe
  • Grand Theft Auto III no cd crack.exe
  • Grand Theft Auto San Andreas NO CD crack.exe
  • Grand Theft Auto Vice City NO CD crack.exe
  • GTA crack.exe
  • Half-Life 2 Keygen.exe
  • Half-Life 2 NO CD Crack.exe
  • Half-Life 2 VU Games crack.exe
  • Halo - Combat Evolved - Microsoft no cd crack.exe
  • Halo 2 crack.exe
  • Harry Potter & The Sorcerers Stone no cd crack.exe
  • Harry Potter and the Prisoner of Azkaban Adventure EA Games crack.exe
  • Harry Potter and the Sorcerers Stone no cd crack.exe
  • Heroes of Might & Magic IV no cd crack.exe
  • Hidden & Dangerous 2 NO CD Crack.exe
  • Icewind Dale 2 no cd crack.exe
  • ICQ 4.exe
  • ICQ Pro 2003b.exe
  • iMesh patch.exe
  • Jedi Academy NO CD Crack.exe
  • Joint Operations - Typhoon Rising NovaLogic crack.exe
  • Juiced Acclaim crack.exe
  • Kingdom Hearts II Role-Playing Square Enix crack.exe
  • Knights Apprentice Memoricks Adventures Games crack.exe
  • LimeWire server scanner.exe
  • Macromedia ColdFusion MX crack.exe
  • Macromedia Contribute v2.0 crack.exe
  • Macromedia Director 8 Crack.exe
  • Macromedia Dreamweaver 4.0 Patch.exe
  • Macromedia Dreamweaver MX v6.0 crack.exe
  • Macromedia Dreamweaver UltraDev 4.0 Patch.exe
  • Macromedia Fireworks 4.0 Patch.exe
  • Macromedia Flash All Versions keygen.exe
  • Macromedia Flash MX v6.0 crack.exe
  • Macromedia Flash SWF-Unprotect v2.0.exe
  • Macromedia FreeHand v10 Loader.exe
  • Madden NFL 2003 no cd crack.exe
  • Madden NFL 2005 EA crack.exe
  • Mafia no cd crack.exe
  • Malice Mud Duck Productions crack.exe
  • Mario Pinball Land GBA Puzzle Nintendo crack.exe
  • Mario Tennis GC Nintendo crack.exe
  • Matrix Screensaver.exe
  • Max Payne 2 Fall Of Max Payne no cd crack.exe
  • Max Payne 2 NO CD Crack.exe
  • Max Payne 2 The Fall of Max Payne NO CD crack.exe
  • MaxPayne 2 The Fall Of Max Payne Crack.exe
  • McFarlanes Evil Prophecy Konami crack.exe
  • Medal Of Honor - Allied Assault no cd crack.exe
  • Medal Of Honor - Allied Assault BreakThrough no cd crack.exe
  • Medal Of Honor - Allied Assault no cd crack.exe
  • Medal of Honor- Allied Assault no cd crack.exe
  • Medal of Honor Pacific Assault EA Games crack.exe
  • Medieval - Total War no cd crack.exe
  • Mega Man Anniversary Collection GC Capcom crack.exe
  • Metal Gear Acid PSP Strategy Konami crack.exe
  • Metal Gear Solid 3 - Snake Eater Konami crack.exe
  • Microsoft Flight Simulator 2004 - A Century Of Flight no cd crack.exe
  • Microsoft Office 2000 Regmaker.exe
  • Microsoft Office XP Activation Crack.exe
  • Microsoft Office XP Activation Killer.exe
  • Microsoft Office XP Professional Crack.exe
  • Microsoft Office XP Professional Serial.exe
  • Microsoft Office XP Universal Activator v1.0.exe
  • Midnight Club 3 - DUB Edition Rockstar Games crack.exe
  • mirc 6.1x reg entries.exe
  • mIRC 6.X crack.exe
  • Morpheus patch.exe
  • MS Office XP Activation Crack.exe
  • MS Zoo Tycoon no cd crack.exe
  • MSN advert remover.exe
  • MSN Toolbar advert remover.exe
  • MVP Baseball 2004 EA crack.exe
  • NBA Live 2003 crack.exe
  • NBA Live 2004 crack.exe
  • NCAA Football 2005 EA crack.exe
  • Need For Speed 5 - no cd.exe
  • Need for Speed Hot Pursuit 2 CD KeyGenerator.exe
  • Need for speed underground - nocd.exe
  • Need for Speed Underground 2 crack.exe
  • Need for Speed Underground 2 Electronic Arts crack.exe
  • Need for Speed Underground 2 NO CD crack.exe
  • Need for Speed Underground NO CD crack.exe
  • Need for Speed4 - NOCD.exe
  • NeedforspeedUnderground-nocd.exe
  • Nero Burning ROM v6.x crack.exe
  • Ninja Gaiden Tecmo crack.exe
  • Norton AntiVirus 2004 crack.exe
  • Onimusha 3 - Demon Siege Adventure Capcom crack.exe
  • Psi-Ops - The Mindgate Conspiracy Midway crack.exe
  • Purge Jihad Freeform Interactive LLC crack.exe
  • RealPlayer crack (keygen).exe
  • Red Dead Revolver Rockstar Games crack.exe
  • Resident Evil 4 GC Adventure Capcom crack.exe
  • Rise of Nations - Thrones & Patriots Strategy Microsoft crack.exe
  • RoboForm crack.exe
  • Roller Coaster Tycoon no cd crack.exe
  • RYL crack.exe
  • Second Life Role-Playing Linden Lab crack.exe
  • Shadow Ops - Red Mercury Atari crack.exe
  • ShellShock - Nam 67 Eidos Interactive crack.exe
  • Silent Storm - Sentinels Strategy _No Company crack.exe
  • Sim City 4 - Rush Hour no cd crack.exe
  • Sim City 4 Deluxe no cd crack.exe
  • Sim Theme Park World no cd crack.exe
  • Singles - Flirt Up Your Life Strategy Eidos Interactive crack.exe
  • Snood crack.exe
  • Snowblind Eidos Interactive crack.exe
  • Soldier of Fortune II- Double Helix no cd crack.exe
  • SolSuite 2004 - Solitaire Card Games Suite crack.exe
  • Sonic the Hedgehog 3 crack.exe
  • Spider-Man 2 Activision crack.exe
  • Spider-Man 2 GC Activision crack.exe
  • Sponge Bob Square Pants - Operation Krabby Patty no cd crack.exe
  • Spybot Search and Destroy.exe
  • Star Wars - Jedi Knight - Jedi Academy no cd crack.exe
  • Star Wars - Knights of the Old Republic Role-Playing LucasArts crack.exe
  • Star Wars Galactic Battlegrounds- Clone Campaigns no cd crack.exe
  • Star Wars Jedi Knight II - Jedi Outcast no cd crack.exe
  • Star Wars Jedi Knight II- Jedi Outcast no cd crack.exe
  • Star Wars Knights of the Old Republic II - The Sith Lords Role-Playing LucasArts crack.exe
  • Starcraft - Battlechest no cd crack.exe
  • The Chronicles of Riddick - Escape From Butcher Bay VU Games crack.exe
  • The Elder Scrolls III - Morrowind Game of the Year Edition Role-Playing Bethesda Softworks crack.exe'
  • The Legend of Zelda - Four Swords Adventures GC Nintendo crack.exe
  • The Legend of Zelda - The Minish Cap GBA Nintendo crack.exe
  • The Legend of Zelda (working title) GC Nintendo crack.exe
  • The Lord of the Rings The Battle for Middle-earth Strategy EA Games crack.exe
  • The Lord of the Rings The Return of The King crack.exe
  • The Sims - Hot Date Expansion Pack no cd crack.exe
  • The Sims - Makin Magic Expansion Pack no cd crack.exe
  • The Sims - Superstar Expansion Pack no cd crack.exe
  • The Sims - Unleashed Expansion Pack no cd crack.exe
  • The Sims - Vacation Expansion Pack no cd crack.exe
  • The Sims - Hot Date Expansion Pack no cd crack.exe
  • The Sims no cd crack.exe
  • The Sims - Vacation Expansion Pack no cd crack.exe
  • The Sims 2 crack.exe
  • The Sims Deluxe no cd crack.exe
  • The Sims Deluxe no cd crack.exe
  • The Sims Double Deluxe no cd crack.exe
  • The Sims no cd crack.exe
  • The Sims- Vacation no cd crack.exe
  • The Suffering Encore Software Inc. crack.exe
  • The Suffering Midway crack.exe
  • Thief - Deadly Shadows Eidos Interactive crack.exe
  • Tiger Woods PGA Tour 2004 crack.exe
  • Tom Clancys Ghost Recon - Desert Siege no cd crack.exe
  • Tom Clancy's Splinter Cell Pandora Tomorrow crack.exe
  • Tom Clancys Splinter Cell Pandora Tomorrow Ubisoft crack.exe
  • Tom Clancys Splinter Cell Ubisoft crack.exe
  • Tony Hawks Underground crack.exe
  • Trillian crasher.exe
  • Unreal Tournament 2003 no cd crack.exe
  • Unreal Tournament 2004 Atari crack.exe
  • Unreal Tournament 2004 crack (keygen).exe
  • Unreal Tournament 2004 NO CD crack.exe
  • Vampire - The Masquerade - Bloodlines Role-Playing Activision crack.exe
  • VirtualLab Data Recovery crack.exe
  • Warcraft III - Reign Of Chaos no cd crack.exe
  • Warez P2P.exe
  • Webroot Spy Sweeper.exe
  • windows server 2003 crack.exe
  • Windows XP Activation Crack.exe
  • Windows XP home edition Activation.exe
  • Windows XP Professional crack.exe
  • WinRAR crack (keygen).exe
  • WinZip All Versions keygen.exe
  • Winzip keygen.exe
  • WinZip Self-Extractor v2.2 keygen.exe
  • WinZip Self-Extractor v2.2 Patch.exe
  • WinZip v8.0 Keygen.exe
  • WinZip v8.x - v9.x patch.exe
  • WinZIP v9.0 Keygen.exe
  • WinZip v9.0 Registration.exe
  • World of Warcraft Role-Playing Blizzard Entertainment crack.exe
  • Worms Armageddon NO CD crack.exe
  • WWE Day of Reckoning GC THQ crack.exe
  • WWE SmackDown! vs. Raw THQ crack.exe
  • XBOX X-Fer Ripper and Transfer.exe
  • Yoshinoya Success crack.exe
  • ZoneAlarm crack (keygen).exe
  • Zoo Tycoon - Complete Collection no cd crack.exe
  • Zoo Tycoon- Dinosaur Digs no cd crack.exe
  • Zoo Tycoon no cd crack.exe

Procedura infekująca sieci P2P aktywowana jest co 10 minut.

Po zainfekowaniu dostępnych sieci P2P robak szuka następujących folderów:

  • share*
  • download*
  • music*
  • mp3*

i tworzy w nich plik BAT posiadający losową nazwę. Uruchomienie tego pliku aktywuje program, który w momencie zamykania przez użytkownika jakiegokolwiek procesu usuwa plik robaka z dysku.

Co jedną sekundę robak sprawdza obecność własnego klucza w rejestrze systemowym i w razie potrzeby odtwarza go.

Szkodnik wyposażony jest w procedurę pobierającą pliki z internetu i instalującą je.

Oznaki infekcji

Robak może wyświetlać na ekranie zainfekowanego komputera następujące komunikaty:

Key Generator    
-------------
Unable to load geneneration tables.
Check tables.gen is in current directory.

Crack Engine
------------
Unable to patch file.',0Ah,'Must be in same folder

Ponadto szkodnik łączy się z kanałami IRC w celu informowania hakera o zainfekowanych komputerach.



 2004-07-15  

© 1997 - 2016 Kaspersky Lab

Wszelkie prawa zastrzeżone.
Lider na rynku rozwišązań antywirusowych