Trojan.DownLoader12.29036

Добавлен в вирусную базу Dr.Web: 2015-02-21

Описание добавлено: 2015-02-21

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'12#.#93.98.55':139
'12#.#93.67.194':139
'12#.#93.85.160':139
'12#.#93.160.98':139
'12#.#93.177.237':139
'12#.#93.59.76':139
'12#.#93.201.159':139
'12#.#93.4.199':139
'12#.#93.218.57':139
'12#.#93.249.229':139
'12#.#93.246.106':139
'12#.#93.195.103':139
'12#.#93.164.37':139
'12#.#93.109.9':139
'12#.#93.189.167':139
'12#.#93.242.82':139
'12#.#93.125.64':139
'12#.#93.116.157':139
'12#.#93.225.41':139
'12#.#93.241.58':139
'12#.#93.253.114':139
'12#.#93.119.186':139
'12#.#93.163.88':139
'12#.#93.57.3':139
'12#.#93.93.116':139
'12#.#93.115.200':139
'12#.#93.242.71':139
'12#.#93.17.65':139
'12#.#93.3.162':139
'12#.#93.47.83':139
'12#.#93.97.83':139
'12#.#93.48.121':139
'12#.#93.164.77':139
'12#.#93.39.76':445
'12#.#93.96.217':445
'12#.#93.80.197':445
'12#.#93.7.86':445
'12#.#93.96.217':139
'12#.#93.204.70':9988
'12#.#93.61.36':9988
'12#.#93.68.107':9988
'12#.#93.171.198':9988
'12#.#93.80.197':139
'12#.#93.7.86':139
'12#.#93.39.76':139
'12#.#93.4.205':139
'12#.#93.55.21':139
'12#.#93.153.151':139
'12#.#93.182.206':139
'12#.#93.29.15':139
'12#.#93.38.81':139
'12#.#93.84.182':139
'12#.#93.151.232':139
'12#.#93.97.83':445
'12#.#93.48.121':445
'12#.#93.164.77':445
'12#.#93.110.241':139
'12#.#93.118.120':139
'12#.#93.61.100':139
'12#.#93.9.99':139
'12#.#93.47.83':445
'12#.#93.242.71':445
'12#.#93.57.3':445
'12#.#93.3.162':445
'12#.#93.116.157':445
'12#.#93.163.88':445
'12#.#93.17.65':445
'12#.#93.93.116':445
'12#.#93.160.98':445
'12#.#93.98.55':445
'12#.#93.67.194':445
'12#.#93.201.159':445
'12#.#93.115.200':445
'12#.#93.177.237':445
'12#.#93.59.76':445
'12#.#93.41.196':445
'12#.#93.124.68':445
'12#.#93.18.150':445
'12#.#93.110.131':445
'12#.#93.180.109':445
'12#.#93.113.177':445
'12#.#93.114.212':445
'12#.#93.178.227':445
'12#.#93.225.41':445
'12#.#93.242.82':445
'12#.#93.125.64':445
'12#.#93.119.186':445
'12#.#93.196.177':445
'12#.#93.241.58':445
'12#.#93.253.114':445
'12#.#93.9.99':445
'12#.#93.110.241':445
'12#.#93.180.109':139
'12#.#93.61.100':445
'12#.#93.153.151':445
'12#.#93.151.232':445
'12#.#93.118.120':445
'12#.#93.113.177':139
'12#.#93.18.150':139
'12#.#93.178.227':139
'12#.#93.196.177':139
'12#.#93.124.68':139
'12#.#93.114.212':139
'12#.#93.110.131':139
'12#.#93.41.196':139
'12#.#93.189.167':445
'12#.#93.195.103':445
'12#.#93.218.57':445
'12#.#93.109.9':445
'12#.#93.85.160':445
'12#.#93.4.199':445
'12#.#93.164.37':445
'12#.#93.249.229':445
'12#.#93.182.206':445
'12#.#93.4.205':445
'12#.#93.55.21':445
'12#.#93.84.182':445
'12#.#93.246.106':445
'12#.#93.29.15':445
'12#.#93.38.81':445
'12#.#93.148.14':139
'12#.#93.236.205':139
'12#.#93.154.199':139
'12#.#93.233.147':139
'12#.#93.151.106':139
'12#.#93.106.194':139
'12#.#93.125.14':139
'12#.#93.196.17':139
'12#.#93.47.94':139
'12#.#93.154.101':139
'12#.#93.68.107':139
'12#.#93.250.246':139
'12#.#93.22.194':139
'12#.#93.10.239':139
'12#.#93.132.223':139
'12#.#93.220.49':445
'12#.#93.202.185':445
'12#.#93.40.1':445
'12#.#93.225.0':445
'12#.#93.218.27':445
'12#.#93.164.99':445
'12#.#93.173.249':445
'12#.#93.249.153':445
'12#.#93.7.244':139
'12#.#93.11.42':139
'12#.#93.138.203':139
'12#.#93.254.87':139
'12#.#93.153.112':445
'12#.#93.223.78':139
'12#.#93.93.240':139
'12#.#93.102.120':139
'12#.#93.108.218':139
'12#.#93.218.27':139
'12#.#93.154.84':139
'12#.#93.117.102':139
'12#.#93.26.212':139
'12#.#93.202.70':139
'12#.#93.164.99':139
'12#.#93.202.185':139
'12#.#93.249.153':139
'12#.#93.153.112':139
'12#.#93.40.1':139
'12#.#93.173.249':139
'12#.#93.225.0':139
'12#.#93.220.49':139
'12#.#93.127.138':139
'12#.#93.139.21':139
'12#.#93.57.226':139
'12#.#93.121.127':139
'12#.#93.36.123':139
'12#.#93.61.36':139
'12#.#93.113.114':139
'12#.#93.222.141':139
'12#.#93.10.49':139
'12#.#93.204.70':139
'12#.#93.70.117':139
'12#.#93.37.199':139
'12#.#93.179.128':139
'12#.#93.171.198':139
'12#.#93.55.38':139
'12#.#93.93.240':445
'12#.#93.254.87':445
'12#.#93.7.244':445
'12#.#93.223.78':445
'12#.#93.220.49':9988
'12#.#93.202.185':9988
'12#.#93.153.112':9988
'12#.#93.11.42':445
'12#.#93.233.147':445
'12#.#93.148.14':445
'12#.#93.236.205':445
'12#.#93.125.14':445
'12#.#93.138.203':445
'12#.#93.151.106':445
'12#.#93.106.194':445
'12#.#93.36.123':9988
'12#.#93.70.117':9988
'12#.#93.117.102':9988
'12#.#93.222.141':9988
'12#.#93.55.38':9988
'12#.#93.57.226':9988
'12#.#93.179.128':9988
'12#.#93.26.212':9988
'12#.#93.218.27':9988
'12#.#93.164.99':9988
'12#.#93.249.153':9988
'12#.#93.108.218':9988
'12#.#93.202.70':9988
'12#.#93.154.84':9988
'12#.#93.102.120':9988
'12#.#93.55.38':445
'12#.#93.37.199':445
'12#.#93.10.49':445
'12#.#93.171.198':445
'12#.#93.57.226':445
'12#.#93.222.141':445
'12#.#93.179.128':445
'12#.#93.204.70':445
'12#.#93.154.84':445
'12#.#93.102.120':445
'12#.#93.108.218':445
'12#.#93.202.70':445
'12#.#93.70.117':445
'12#.#93.117.102':445
'12#.#93.26.212':445
'12#.#93.132.223':445
'12#.#93.250.246':445
'12#.#93.47.94':445
'12#.#93.10.239':445
'12#.#93.154.199':445
'12#.#93.196.17':445
'12#.#93.22.194':445
'12#.#93.154.101':445
'12#.#93.121.127':445
'12#.#93.127.138':445
'12#.#93.139.21':445
'12#.#93.113.114':445
'12#.#93.68.107':445
'12#.#93.36.123':445
'12#.#93.61.36':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней