Trojan.Swizzor.17008

Добавлен в вирусную базу Dr.Web: 2011-11-09

Описание добавлено: 2011-11-09

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] 'PHIME2005' = '<Полный путь к вирусу> /SYNC'

Вредоносные функции:

Внедряет код в

следующие системные процессы:

<SYSTEM32>\svchost.exe

Изменения в файловой системе:

Создает следующие файлы:

<Текущая директория>\spc.dat

Сетевая активность:

Подключается к:

'63.#18.60.5':445
'63.#2.11.5':139
'63.#2.11.5':445
'63.#9.20.5':139
'63.#1.112.5':445
'63.#18.60.5':139
'63.#1.76.13':445
'63.#8.116.5':139
'63.#1.166.5':139
'63.#1.166.5':445
'63.#8.116.5':445
'12#.#4.123.4':139
'63.#1.122.4':445
'63.#13.62.4':445
'12#.#4.123.4':445
'63.#8.116.4':139
'63.#13.62.4':139
'63.##9.224.4':139
'63.#9.20.5':445
'63.##9.224.4':445
'63.#.245.4':445
'63.#.245.4':139
'63.#13.62.5':445
'63.#18.60.6':445
'63.#1.76.14':445
'63.#2.11.6':445
'63.#1.112.6':445
'63.#1.112.6':139
'63.#1.166.6':445
'63.#13.62.6':139
'63.#.245.6':445
'12#.#4.123.6':445
'63.#8.116.6':445
'63.#13.62.6':445
'12#.#4.123.5':139
'63.#1.122.5':445
'63.#.245.5':445
'12#.#4.123.5':445
'63.#13.62.5':139
'63.#.245.5':139
'63.##9.224.5':139
'63.#9.20.6':139
'63.#9.20.6':445
'63.#1.122.5':139
'63.##9.224.5':445
'63.#8.116.4':445
'63.#9.20.3':139
'63.#1.112.3':445
'63.#9.20.3':445
'63.##9.224.2':139
'63.#.245.2':139
'63.#1.112.3':139
'63.#18.60.3':139
'63.#1.166.3':445
'63.#2.11.3':139
'63.#2.11.3':445
'63.#18.60.3':445
'12#.#4.123.2':445
'63.#8.116.2':139
'63.#1.76.10':139
'63.#1.166.2':139
'63.#8.116.2':445
'63.#13.62.2':445
'63.#1.122.2':139
'63.#.245.2':445
'63.##9.224.2':445
'12#.#4.123.2':139
'63.#1.122.2':445
'63.#1.166.3':139
'63.#1.112.4':445
'63.#2.11.4':445
'63.#9.20.4':139
'63.#9.20.4':445
'63.##9.224.3':139
'63.#18.60.4':445
'63.#1.76.12':445
'63.#1.166.4':139
'63.#1.166.4':445
'63.#2.11.4':139
'63.#18.60.4':139
'63.#8.116.3':139
'63.#13.62.3':445
'12#.#4.123.3':445
'63.#1.76.11':445
'63.#8.116.3':445
'63.#1.122.3':445
'63.##9.224.3':445
'63.#.245.3':139
'63.#.245.3':445
'63.#13.62.3':139
'63.#1.122.3':139
'63.#.245.9':445
'12#.#4.123.9':139
'12#.#4.123.9':445
'63.#1.76.17':139
'63.#13.62.9':139
'63.#.245.9':139
'63.##.112.10':445
'63.#9.20.10':139
'63.#9.20.10':445
'63.#1.122.9':445
'63.#1.122.9':139
'63.##9.224.8':139
'63.#2.11.9':139
'63.#2.11.9':445
'63.##9.224.8':445
'63.#1.112.9':139
'63.#18.60.9':445
'63.#1.76.17':445
'63.#8.116.9':139
'63.#1.166.9':139
'63.#1.166.9':445
'63.#8.116.9':445
'63.##.112.10':139
'12#.#4.123.10':445
'63.##.122.10':445
'63.##3.62.10':139
'63.##3.62.10':445
'63.#1.76.18':139
'12#.#4.123.10':139
'63.#2.139.1':80
'63.#4.15.1':80
'58.#26.66.1':80
'63.#.245.10':445
'63.#.135.1':80
'63.##8.60.10':445
'63.#2.11.10':139
'63.##9.224.9':139
'63.##9.224.9':445
'63.#2.11.10':445
'63.##8.60.10':139
'63.#1.76.18':445
'63.##.166.10':139
'63.##.116.10':139
'63.##.116.10':445
'63.##.166.10':445
'63.#1.112.9':445
'63.#1.166.7':445
'63.#8.116.7':445
'63.#18.60.7':139
'63.#18.60.7':445
'63.#2.11.7':139
'63.#1.76.15':445
'12#.#4.123.7':139
'63.#1.122.7':445
'63.#13.62.7':139
'63.#13.62.7':445
'12#.#4.123.7':445
'63.#1.122.6':139
'63.##9.224.6':445
'63.#.245.6':139
'12#.#4.123.6':139
'63.#1.122.6':445
'63.#9.20.7':445
'63.#2.11.7':445
'63.#1.112.7':139
'63.#1.112.7':445
'63.##9.224.6':139
'63.#9.20.7':139
'63.#.245.7':445
'63.#8.116.8':139
'63.#13.62.8':445
'63.#1.76.16':445
'63.#1.166.8':445
'63.#8.116.8':445
'63.#13.62.8':139
'63.#1.122.8':445
'63.#9.20.9':445
'63.#.245.8':139
'12#.#4.123.8':445
'63.#.245.8':445
'63.##9.224.7':445
'63.#9.20.8':139
'63.#9.20.8':445
'63.#1.122.7':139
'63.#.245.7':139
'63.##9.224.7':139
'63.#2.11.8':139
'63.#18.60.8':139
'63.#18.60.8':445
'63.#1.112.8':445
'63.#2.11.8':445
'16#.#6.106.88':445
'20#.#0.191.100':445
'20#.#8.26.107':445
'17#.#7.159.34':445
'24.##9.108.87':445
'14#.#6.178.68':445
'98.##3.193.90':445
'89.##.173.91':445
'25#.#1.166.115':445
'30.#9.30.95':445
'94.##.20.102':445
'19#.#2.86.92':445
'24#.#.245.86':445
'1.##.45.2':445
'24#.#2.11.92':445
'16#.#8.42.95':445
'65.##.100.51':445
'14#.#0.213.109':445
'5.##.190.41':445
'13#.#4.249.108':445
'13.##1.192.91':445
'25#.#19.224.111':445
'23#.#8.116.89':445
'18#.#1.89.43':445
'33.##.167.114':445
'14#.#19.206.27':445
'13#.#7.109.76':445
'20#.#6.96.23':445
'65.##.159.22':445
'13.##.206.46':445
'19#.#0.73.116':445
'78.##.142.84':445
'22#.#20.100.37':445
'21#.#13.219.92':445
'11#.0.113.6':445
'26.##3.249.124':445
'96.#.204.61':445
'70.##.152.18':445
'10#.#9.41.118':445
'53.##.202.32':445
'21#.1.14.15':445
'61.##6.124.99':445
'22#.#22.113.50':445
'10#.#2.115.101':445
'20#.#17.51.87':445
'11#.#8.97.89':445
'24#.#1.37.122':445
'81.#4.83.81':445
'10#.#24.114.36':445
'20#.#5.159.83':445
'47.##.211.53':445
'58.##6.66.36':445
'19#.#19.73.4':445
'25#.#1.76.111':445
'19#.#0.10.116':445
'10#.#6.135.8':445
'11.#3.64.90':445
'15#.#3.70.75':445
'6.##.96.122':445
'82.#7.99.33':445
'12#.#4.123.27':445
'22#.5.135.8':445
'62.##.234.53':445
'12#.#3.212.67':445
'23#.#18.60.28':445
'23#.#12.254.11':445
'6.##.221.58':445
'13.#5.99.34':445
'24#.#2.139.114':445
'73.##8.136.97':445
'78.##.203.37':445
'20#.#9.42.26':445
'17.#2.34.25':445
'43.#8.13.40':445
'97.##.230.34':445
'25#.#13.62.9':445
'18.##.224.97':445
'90.##.159.20':445
'25#.34.15.4':445
'14#.#8.232.57':445
'11#.#3.250.17':445
'25#.#2.40.20':445
'60.##4.48.24':445
'13#.#3.214.113':445
'41.##.222.59':445
'42.##.77.113':445
'16#.#11.100.76':445
'83.#2.41.87':445
'14#.#2.54.90':445
'23#.#9.20.38':445
'22#.#1.122.23':445
'63.#1.76.5':445
'63.#1.76.5':139
'63.#1.76.4':139
'63.#1.76.3':139
'63.#1.76.4':445
'63.#1.76.6':445
'63.#1.76.8':139
'63.#1.112.1':139
'63.#1.76.8':445
'63.#1.76.7':445
'63.#1.76.7':139
'63.#1.112.1':445
'63.#13.62.1':445
'63.#3.10.1':445
'63.#1.166.1':445
'63.#8.116.1':445
'63.#9.20.2':445
'63.#1.76.2':139
'63.#1.76.3':445
'63.#1.76.2':445
'63.#2.40.2':445
'63.#1.76.1':139
'63.#1.76.9':445
'63.##2.254.1':139
'63.#1.112.2':445
'63.#3.10.1':139
'63.#6.247.1':139
'63.#.245.1':139
'63.#1.112.2':139
'63.#2.11.2':139
'63.#1.76.10':445
'63.#1.166.2':445
'63.#18.60.2':445
'63.#2.11.2':445
'63.#18.60.1':139
'12#.#4.123.1':139
'63.#1.76.9':139
'63.#2.11.1':139
'63.#8.116.1':139
'63.#1.166.1':139
'63.#1.37.1':139
'63.#4.15.1':139
'63.#1.122.1':139
'63.#.135.1':139
'63.##9.224.1':139
'63.#4.15.1':445
'63.##.37.122':445
'63.##.76.111':445
'63.##.139.114':445
'63.##2.254.11':445
'63.#2.40.20':445
'63.##8.60.28':445
'63.#2.11.92':445
'63.##9.224.111':445
'63.##.122.23':445
'63.#.245.86':445
'63.#.135.8':445
'95.#2.177.4':445
'25#.#1.112.83':445
'23#.#3.10.109':445
'15#.#05.26.55':445
'73.#20.2.2':445
'24#.#6.247.90':445
'63.#9.20.38':445
'63.##.77.113':445
'12#.#2.152.80':445
'36.#9.9.42':445
'46.##3.76.118':445
'63.#4.15.4':445
'63.#1.76.1':445
'63.#1.122.1':445
'63.#1.37.1':445
'63.#9.20.1':445
'63.#2.40.1':445
'63.#.245.1':445
'63.#6.247.1':445
'63.##9.224.1':445
'63.#.135.1':445
'63.#2.11.1':445
'63.#18.60.1':445
'63.##.10.109':445
'63.##.112.83':445
'63.##.116.89':445
'63.##.247.90':445
'63.##.166.115':445
'63.#13.62.9':445
'63.#2.139.1':445
'63.#5.77.1':445
'63.##2.254.1':445
'12#.#4.123.1':445
'58.#26.66.1':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней