Trojan.DownLoader12.29210

Добавлен в вирусную базу Dr.Web: 2015-02-21

Описание добавлено: 2015-02-21

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe

Сетевая активность:

Подключается к:

'21#.#28.229.235':445
'21#.#28.212.25':445
'21#.#28.213.54':445
'21#.#28.7.253':445
'21#.#28.52.78':445
'21#.#28.206.112':445
'21#.#28.207.196':445
'21#.#28.142.47':445
'21#.#28.66.16':445
'21#.#28.65.19':445
'21#.#28.27.7':445
'21#.#28.85.15':445
'21#.#28.8.169':445
'21#.#28.78.139':445
'21#.#28.122.186':445
'21#.#28.13.4':445
'21#.#28.2.82':445
'21#.#28.125.215':445
'21#.#28.183.50':445
'21#.#28.151.50':445
'21#.#28.4.221':445
'21#.#28.124.203':445
'21#.#28.224.136':445
'21#.#28.155.167':445
'21#.#28.135.85':445
'21#.#28.150.95':445
'21#.#28.44.35':445
'21#.#28.76.90':445
'21#.#28.91.199':445
'21#.#28.154.131':445
'21#.#28.247.149':445
'21#.#28.82.247':445
'21#.#28.151.50':139
'21#.#28.2.82':139
'21#.#28.154.131':139
'21#.#28.183.50':139
'21#.#28.155.167':139
'21#.#28.4.221':139
'21#.#28.125.215':139
'21#.#28.224.136':139
'21#.#28.76.90':139
'21#.#28.135.85':139
'21#.#28.206.112':139
'21#.#28.44.35':139
'21#.#28.82.247':139
'21#.#28.91.199':139
'21#.#28.150.95':139
'21#.#28.247.149':139
'21#.#28.205.170':139
'21#.#28.23.37':445
'21#.#28.230.189':139
'21#.#28.34.13':139
'21#.#28.18.157':445
'21#.#28.228.105':445
'21#.#28.139.164':445
'21#.#28.44.248':445
'21#.#28.139.11':139
'21#.#28.117.160':139
'21#.#28.124.203':139
'21#.#28.41.36':139
'21#.#28.112.96':139
'21#.#28.21.223':139
'21#.#28.109.148':139
'21#.#28.5.105':139
'21#.#28.41.36':445
'21#.#28.70.135':139
'21#.#28.112.171':139
'21#.#28.240.158':139
'21#.#28.45.103':139
'21#.#28.173.161':139
'21#.#28.131.74':139
'21#.#28.216.224':139
'21#.#28.46.128':139
'21#.#28.59.28':139
'21#.#28.10.123':139
'21#.#28.249.245':139
'21#.#28.52.253':139
'21#.#28.145.155':139
'21#.#28.7.220':139
'21#.#28.126.22':139
'21#.#28.33.35':139
'21#.#28.28.174':139
'21#.#28.28.182':139
'21#.#28.40.222':139
'21#.#28.96.219':139
'21#.#28.165.204':139
'21#.#28.166.176':139
'21#.#28.245.195':139
'21#.#28.126.60':139
'21#.#28.161.157':139
'21#.#28.42.174':139
'21#.#28.75.49':139
'21#.#28.158.47':139
'21#.#28.239.177':139
'21#.#28.171.217':139
'21#.#28.23.102':139
'21#.#28.177.199':139
'21#.#28.159.168':139
'21#.#28.22.15':139
'21#.#28.205.170':445
'21#.#28.146.48':139
'21#.#28.159.168':445
'21#.#28.22.15':445
'21#.#28.165.130':139
'21#.#28.146.48':445
'21#.#28.109.148':445
'21#.#28.5.105':445
'21#.#28.139.11':445
'21#.#28.117.160':445
'21#.#28.230.189':445
'21#.#28.34.13':445
'21#.#28.112.96':445
'21#.#28.21.223':445
'21#.#28.164.232':139
'21#.#28.39.165':139
'21#.#28.238.25':139
'21#.#28.204.219':139
'21#.#28.11.252':139
'21#.#28.86.112':139
'21#.#28.165.39':139
'21#.#28.125.135':139
'21#.#28.101.205':139
'21#.#28.96.151':139
'21#.#28.165.130':445
'21#.#28.95.120':139
'21#.#28.12.241':139
'21#.#28.71.117':139
'21#.#28.136.97':139
'21#.#28.146.71':139
'21#.#28.48.187':139
'21#.#28.91.84':139
'21#.#28.52.63':139
'21#.#28.156.143':139
'21#.#28.36.109':139
'21#.#28.239.176':139
'21#.#28.248.122':139
'21#.#28.249.13':139
'21#.#28.189.114':139
'21#.#28.186.189':139
'21#.#28.230.125':139
'21#.#28.37.219':139
'21#.#28.246.86':139
'21#.#28.96.159':139
'21#.#28.252.185':139
'21#.#28.86.252':139
'21#.#28.29.114':445
'21#.#28.236.199':445
'21#.#28.148.44':445
'21#.#28.217.127':445
'21#.#28.236.130':445
'21#.#28.40.37':445
'21#.#28.234.79':445
'21#.#28.49.47':445
'21#.#28.54.23':139
'21#.#28.65.20':445
'21#.#28.33.207':139
'21#.#28.178.117':139
'21#.#28.134.188':445
'21#.#28.54.148':445
'21#.#28.28.221':445
'21#.#28.128.113':445
'21#.#28.49.47':139
'21#.#28.236.130':139
'21#.#28.236.199':139
'21#.#28.234.79':139
'21#.#28.110.89':139
'21#.#28.203.13':139
'21#.#28.40.37':139
'21#.#28.49.107':139
'21#.#28.54.148':139
'21#.#28.128.113':139
'21#.#28.148.44':139
'21#.#28.28.221':139
'21#.#28.134.188':139
'21#.#28.29.114':139
'21#.#28.217.127':139
'21#.#28.65.20':139
'21#.#28.91.215':139
'21#.#28.227.201':139
'21#.#28.86.56':139
'21#.#28.91.156':139
'21#.#28.50.193':139
'21#.#28.27.147':139
'21#.#28.200.173':139
'21#.#28.217.118':139
'21#.#28.45.56':139
'21#.#28.158.172':139
'21#.#28.220.203':139
'21#.#28.12.30':139
'21#.#28.18.82':139
'21#.#28.10.119':139
'21#.#28.252.34':139
'21#.#28.169.169':139
'21#.#28.49.107':445
'21#.#28.230.125':9988
'21#.#28.246.86':9988
'21#.#28.220.203':9988
'21#.#28.158.172':9988
'21#.#28.44.248':139
'21#.#28.18.157':139
'21#.#28.23.37':139
'21#.#28.139.164':139
'21#.#28.33.207':445
'21#.#28.178.117':445
'21#.#28.36.109':445
'21#.#28.239.176':445
'21#.#28.128.113':9988
'21#.#28.236.199':9988
'21#.#28.54.23':445
'21#.#28.28.221':9988
'21#.#28.7.253':139
'21#.#28.229.235':139
'21#.#28.78.139':139
'21#.#28.213.54':139
'21#.#28.142.47':139
'21#.#28.52.78':139
'21#.#28.212.25':139
'21#.#28.207.196':139
'21#.#28.85.15':139
'21#.#28.66.16':139
'21#.#28.228.105':139
'21#.#28.27.7':139
'21#.#28.13.4':139
'21#.#28.8.169':139
'21#.#28.65.19':139
'21#.#28.122.186':139
'21#.#28.86.56':445
'21#.#28.91.156':445
'21#.#28.18.82':445
'21#.#28.10.119':445
'21#.#28.200.173':445
'21#.#28.217.118':445
'21#.#28.91.215':445
'21#.#28.227.201':445
'21#.#28.220.203':445
'21#.#28.12.30':445
'21#.#28.110.89':445
'21#.#28.203.13':445
'21#.#28.252.34':445
'21#.#28.169.169':445
'21#.#28.45.56':445
'21#.#28.158.172':445
'21#.#28.52.63':445
'21#.#28.156.143':445
'21#.#28.246.86':445
'21#.#28.96.159':445
'21#.#28.248.122':445
'21#.#28.249.13':445
'21#.#28.48.187':445
'21#.#28.91.84':445
'21#.#28.230.125':445
'21#.#28.37.219':445
'21#.#28.50.193':445
'21#.#28.27.147':445
'21#.#28.252.185':445
'21#.#28.86.252':445
'21#.#28.189.114':445
'21#.#28.186.189':445

Технології

Терміни

Навчання

Міфи

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней