Rambler distributes the search for Yandex through trojans on torrents

By the way, on the wave of old school music lovers in the comments, the topic has surfaced that the search for Yandex with the help of Rambler is now distributed to torrentino.com.

The method used is the same as that of the mail (loader), below I will describe the technology in more detail.

A user enters a torrentino, wants to download, for example, Oblivion:


After long perekidov on the links, we are finally led to the right:

')
Get the file oblivion- [torrentino] .exe, the link looks like this:

http: // dwnloader.net/ dXJsPWh0dHAlM0ElMkYlMkZhc3NldDAudG9ycmVudGluby5jb20lMkZ0b3JyZW50cyUyRjAwMSUyRjYwOCUyRjYyMCUyRjY5YTE5MTcyN2VjMDRjMjNhZjQxOTQ0NTNiNjA1ZjcxYTUzNGY1YjUlMkZvYmxpdmlvbi0lNUJ0b3JyZW50aW5vJTVELnRvcnJlbnQlM0YxMzY1MDc4MTkwJnRpdGxlPW9ibGl2aW9uLSU1QnRvcnJlbnRpbm8lNUQudG9ycmVudCZwaWQ9Mjg =



Well, where without it.

And, if you remember, Rambler abandoned its own search engine development. That is, the main rablerovskaya put, and search and advertising - from Yandex.


The file is signed LLC Pentagon, as usual:



Dr.Web identifies the file as a trojan :