Trojan.DownLoader12.29113

Добавлен в вирусную базу Dr.Web: 2015-02-21

Описание добавлено: 2015-02-21

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#53.122.224':445
'21#.#53.20.184':445
'21#.#53.208.240':445
'21#.#53.144.76':445
'21#.#53.140.104':445
'21#.#53.110.140':445
'21#.#53.73.77':445
'21#.#53.70.49':445
'21#.#53.18.59':445
'21#.#53.107.254':445
'21#.#53.60.82':445
'21#.#53.161.18':445
'21#.#53.148.142':445
'21#.#53.240.147':445
'21#.#53.14.4':445
'21#.#53.143.36':445
'21#.#53.19.173':445
'21#.#53.218.239':445
'21#.#53.134.178':445
'21#.#53.106.126':445
'21#.#53.224.231':445
'21#.#53.126.123':445
'21#.#53.103.122':445
'21#.#53.0.227':445
'21#.#53.24.44':445
'21#.#53.0.81':445
'21#.#53.162.224':445
'21#.#53.139.36':445
'21#.#53.80.214':445
'21#.#53.4.175':445
'21#.#53.197.247':445
'21#.#53.12.141':445
'21#.#53.234.161':445
'21#.#53.183.124':445
'21#.#53.218.239':139
'21#.#53.134.178':139
'21#.#53.106.126':139
'21#.#53.224.231':139
'21#.#53.126.123':139
'21#.#53.103.122':139
'21#.#53.0.227':139
'21#.#53.24.44':139
'21#.#53.0.81':139
'21#.#53.162.224':139
'21#.#53.139.36':139
'21#.#53.80.214':139
'21#.#53.4.175':139
'21#.#53.197.247':139
'21#.#53.12.141':139
'21#.#53.234.161':139
'21#.#53.53.123':139
'21#.#53.152.181':139
'21#.#53.229.241':139
'21#.#53.71.157':139
'21#.#53.164.32':139
'21#.#53.26.152':139
'21#.#53.124.164':445
'21#.#53.151.107':139
'21#.#53.181.94':139
'21#.#53.6.49':139
'21#.#53.181.118':139
'21#.#53.126.105':139
'21#.#53.220.177':139
'21#.#53.105.175':139
'21#.#53.37.114':139
'21#.#53.66.38':139
'21#.#53.242.66':139
'21#.#53.40.156':139
'21#.#53.230.43':139
'21#.#53.129.210':139
'21#.#53.121.189':139
'21#.#53.165.228':139
'21#.#53.168.165':139
'21#.#53.88.244':139
'21#.#53.22.73':139
'21#.#53.72.13':139
'21#.#53.19.59':139
'21#.#53.166.148':139
'21#.#53.148.166':139
'21#.#53.62.79':139
'21#.#53.95.149':139
'21#.#53.43.247':139
'21#.#53.101.53':139
'21#.#53.70.65':139
'21#.#53.40.164':139
'21#.#53.147.39':139
'21#.#53.171.11':139
'21#.#53.74.144':139
'21#.#53.65.111':139
'21#.#53.57.81':139
'21#.#53.129.147':139
'21#.#53.240.129':139
'21#.#53.144.67':139
'21#.#53.80.254':139
'21#.#53.107.90':139
'21#.#53.68.29':139
'21#.#53.115.227':139
'21#.#53.140.219':139
'21#.#53.176.61':139
'21#.#53.7.211':139
'21#.#53.161.27':139
'21#.#53.164.32':445
'21#.#53.152.181':445
'21#.#53.37.114':445
'21#.#53.71.157':445
'21#.#53.181.94':445
'21#.#53.26.152':445
'21#.#53.229.241':445
'21#.#53.151.107':445
'21#.#53.220.177':445
'21#.#53.6.49':445
'21#.#53.53.123':445
'21#.#53.126.105':445
'21#.#53.242.66':445
'21#.#53.105.175':445
'21#.#53.181.118':445
'21#.#53.66.38':445
'21#.#53.16.3':139
'21#.#53.90.7':139
'21#.#53.144.179':139
'21#.#53.224.210':139
'21#.#53.6.134':139
'21#.#53.101.220':139
'21#.#53.33.242':139
'21#.#53.21.226':139
'21#.#53.112.22':139
'21#.#53.194.202':139
'21#.#53.117.213':139
'21#.#53.27.87':139
'21#.#53.145.14':139
'21#.#53.72.48':139
'21#.#53.82.70':139
'21#.#53.40.138':139
'21#.#53.138.216':139
'21#.#53.77.209':139
'21#.#53.186.119':139
'21#.#53.60.214':139
'21#.#53.77.81':139
'21#.#53.168.1':139
'21#.#53.207.218':139
'21#.#53.113.186':139
'21#.#53.52.198':139
'21#.#53.192.10':139
'21#.#53.6.82':139
'21#.#53.37.86':139
'21#.#53.236.36':139
'21#.#53.227.134':139
'21#.#53.144.227':139
'21#.#53.35.34':139
'21#.#53.134.35':139
'21#.#53.176.126':139
'21#.#53.233.26':445
'21#.#53.20.1':445
'21#.#53.167.106':445
'21#.#53.26.137':445
'21#.#53.133.115':445
'21#.#53.237.133':445
'21#.#53.10.20':445
'21#.#53.100.99':445
'21#.#53.150.65':445
'21#.#53.198.204':445
'21#.#53.250.213':445
'21#.#53.28.10':445
'21#.#53.252.49':445
'21#.#53.133.166':445
'21#.#53.213.129':445
'21#.#53.50.28':445
'21#.#53.86.91':139
'21#.#53.233.26':139
'21#.#53.20.1':139
'21#.#53.167.106':139
'21#.#53.26.137':139
'21#.#53.133.115':139
'21#.#53.237.133':139
'21#.#53.10.20':139
'21#.#53.100.99':139
'21#.#53.198.204':139
'21#.#53.213.129':139
'21#.#53.150.65':139
'21#.#53.250.213':139
'21#.#53.252.49':139
'21#.#53.133.166':139
'21#.#53.28.10':139
'21#.#53.50.28':139
'21#.#53.213.236':139
'21#.#53.85.69':139
'21#.#53.52.213':139
'21#.#53.187.76':139
'21#.#53.18.160':139
'21#.#53.179.190':139
'21#.#53.164.248':139
'21#.#53.194.105':139
'21#.#53.108.21':139
'21#.#53.167.208':139
'21#.#53.17.102':139
'21#.#53.66.4':139
'21#.#53.167.59':139
'21#.#53.39.124':139
'21#.#53.43.168':139
'21#.#53.167.55':139
'21#.#53.9.57':139
'21#.#53.60.214':9988
'21#.#53.77.81':9988
'21#.#53.35.34':9988
'21#.#53.227.134':9988
'21#.#53.124.164':139
'21#.#53.183.124':139
'21#.#53.113.186':9988
'21#.#53.52.198':9988
'21#.#53.233.26':9988
'21#.#53.17.102':9988
'21#.#53.176.126':445
'21#.#53.250.213':9988
'21#.#53.192.10':9988
'21#.#53.6.82':9988
'21#.#53.164.248':9988
'21#.#53.236.36':9988
'21#.#53.60.82':139
'21#.#53.20.184':139
'21#.#53.73.77':139
'21#.#53.144.76':139
'21#.#53.122.224':139
'21#.#53.110.140':139
'21#.#53.19.173':139
'21#.#53.70.49':139
'21#.#53.140.104':139
'21#.#53.107.254':139
'21#.#53.14.4':139
'21#.#53.161.18':139
'21#.#53.18.59':139
'21#.#53.240.147':139
'21#.#53.208.240':139
'21#.#53.143.36':139
'21#.#53.148.142':139
'21#.#53.207.218':445
'21#.#53.18.160':445
'21#.#53.85.69':445
'21#.#53.43.168':445
'21#.#53.187.76':445
'21#.#53.108.21':445
'21#.#53.179.190':445
'21#.#53.52.213':445
'21#.#53.194.105':445
'21#.#53.167.59':445
'21#.#53.167.208':445
'21#.#53.213.236':445
'21#.#53.66.4':445
'21#.#53.9.57':445
'21#.#53.39.124':445
'21#.#53.17.102':445
'21#.#53.167.55':445
'21#.#53.164.248':445
'21#.#53.77.81':445
'21#.#53.77.209':445
'21#.#53.144.227':445
'21#.#53.60.214':445
'21#.#53.52.198':445
'21#.#53.168.1':445
'21#.#53.186.119':445
'21#.#53.113.186':445
'21#.#53.236.36':445
'21#.#53.192.10':445
'21#.#53.86.91':445
'21#.#53.37.86':445
'21#.#53.134.35':445
'21#.#53.227.134':445
'21#.#53.6.82':445
'21#.#53.35.34':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней