Trojan.DownLoader12.29160

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

%WINDIR%\Tasks\SA.DAT

Malicious functions:

Executes the following:

'<SYSTEM32>\svchost.exe' -k netsvcs

Modifies file system :

Creates the following files:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Network activity:

Connects to:

'60.##6.29.216':139
'60.##6.36.86':139
'60.##6.179.149':139
'60.##6.238.42':139
'60.#26.1.5':139
'60.##6.80.170':139
'60.##6.237.138':139
'60.##6.197.36':139
'60.##6.96.101':139
'60.##6.228.59':139
'60.##6.180.168':139
'60.#26.1.84':445
'60.##6.111.60':445
'60.##6.244.143':445
'60.##6.204.152':445
'60.##6.154.40':445
'60.##6.240.69':139
'60.##6.23.81':139
'60.##6.38.125':139
'60.##6.4.121':445
'60.##6.163.189':139
'60.##6.96.101':445
'60.##6.228.59':445
'60.##6.36.86':445
'60.##6.179.149':445
'60.##6.29.216':445
'60.##6.147.184':445
'60.##6.245.211':445
'60.##6.237.138':445
'60.##6.197.36':445
'60.##6.80.170':445
'60.#26.1.5':445
'60.##6.160.169':139
'60.##6.163.189':445
'60.##6.168.245':139
'60.##6.147.184':139
'60.##6.245.211':139
'60.##6.180.168':445
'60.##6.238.42':445
'60.##6.23.81':445
'60.##6.38.125':445
'60.##6.240.69':445
'60.#26.3.14':445
'60.#26.1.84':139
'60.##6.111.60':139
'60.##6.244.143':139
'60.##6.204.152':139
'60.##6.154.40':139
'60.##6.200.46':445
'60.##6.66.17':445
'60.#26.58.0':445
'60.##6.4.121':139
'60.##6.255.145':445
'60.#26.3.14':139
'60.##6.60.158':139
'60.##6.57.61':139
'60.##6.158.29':139
'60.##6.109.79':139
'60.##6.152.210':139
'60.##6.126.189':139
'60.##6.92.235':139
'60.##6.197.239':139
'60.##6.108.57':139
'60.##6.130.108':139
'60.##6.60.158':445
'60.##6.57.61':445
'60.##6.158.29':445
'60.##6.109.79':445
'60.##6.152.210':445
'60.##6.126.189':445
'60.##6.92.235':445
'60.##6.197.239':445
'60.##6.108.57':445
'60.##6.130.108':445
'60.##6.20.211':445
'60.##6.52.30':445
'60.##6.114.55':445
'60.##6.138.14':445
'60.##6.113.238':445
'60.#26.40.9':445
'60.##6.112.47':445
'60.##6.72.14':445
'60.##6.48.84':445
'60.##6.66.246':445
'60.##6.144.216':445
'60.#26.61.7':445
'60.##6.71.71':445
'60.##6.149.250':445
'60.##6.117.47':445
'60.##6.250.156':445
'60.##6.10.242':445
'60.##6.144.220':445
'60.##6.49.113':445
'60.##6.164.236':445
'60.##6.20.106':445
'60.##6.168.95':445
'60.##6.22.58':445
'60.##6.24.176':445
'60.##6.44.199':445
'60.##6.214.226':445
'60.##6.45.212':445
'60.##6.79.60':445
'60.##6.160.218':445
'60.##6.46.45':445
'60.##6.235.144':445
'60.##6.41.236':445
'60.##6.38.43':139
'60.##6.222.45':139
'60.##6.199.135':139
'60.##6.161.57':139
'60.##6.254.160':139
'60.##6.124.138':139
'60.##6.68.101':139
'60.##6.137.234':139
'60.##6.159.133':139
'60.##6.43.35':139
'60.##6.57.109':139
'60.##6.53.90':139
'60.##6.33.180':139
'60.##6.138.90':139
'60.##6.174.61':445
'60.##6.44.229':445
'60.##6.206.89':139
'60.##6.82.151':139
'60.##6.50.250':139
'60.##6.72.114':139
'60.##6.95.127':139
'60.##6.79.45':445
'60.##6.22.58':139
'60.##6.24.176':139
'60.##6.44.199':139
'60.##6.214.226':139
'60.##6.45.212':139
'60.##6.79.60':139
'60.##6.160.218':139
'60.##6.46.45':139
'60.##6.235.144':139
'60.##6.41.236':139
'60.##6.79.45':139
'60.##6.25.188':139
'60.##6.105.29':139
'60.##6.188.160':139
'60.##6.168.245':445
'60.##6.160.169':445
'60.##6.60.219':139
'60.##6.55.203':139
'60.##6.176.75':139
'60.##6.32.51':139
'60.##6.187.148':139
'60.##6.25.188':445
'60.##6.105.29':445
'60.##6.188.160':445
'60.##6.174.61':139
'60.##6.44.229':139
'60.##6.60.219':445
'60.##6.55.203':445
'60.##6.176.75':445
'60.##6.32.51':445
'60.##6.187.148':445
'60.##6.144.220':139
'60.##6.149.250':139
'60.#26.61.7':139
'60.##6.250.156':139
'60.##6.168.95':139
'60.##6.117.47':139
'60.##6.49.113':139
'60.##6.10.242':139
'60.##6.20.106':139
'60.##6.71.71':139
'60.##6.164.236':139
'60.##6.20.211':139
'60.##6.10.118':445
'60.##6.47.82':445
'60.##6.69.146':445
'60.##6.51.141':445
'60.##6.150.29':445
'60.##6.107.155':445
'60.##6.218.12':445
'60.##6.218.132':445
'60.##6.113.208':445
'60.##6.73.105':445
'60.##6.180.49':445
'60.##6.32.186':139
'60.##6.200.186':139
'60.##6.119.15':139
'60.##6.145.27':139
'60.##6.254.23':139
'60.##6.28.83':445
'60.##6.210.118':445
'60.##6.35.84':139
'60.##6.63.126':139
'60.##6.201.85':139
'60.##6.16.93':445
'60.##6.227.142':445
'60.##6.78.53':445
'60.##6.105.92':445
'60.##6.117.78':445
'60.##6.53.186':445
'60.##6.189.123':445
'60.##6.130.116':445
'60.##6.183.111':445
'60.##6.130.183':445
'60.##6.199.193':445
'60.##6.120.178':445
'60.##6.175.138':445
'60.##6.84.53':445
'60.##6.113.21':445
'60.##6.197.231':445
'60.##6.23.231':445
'60.##6.136.250':445
'60.##6.96.137':445
'60.##6.113.145':445
'60.##6.73.113':445
'60.##6.16.192':139
'60.##6.197.231':139
'60.##6.84.53':139
'60.##6.113.21':139
'60.##6.107.155':139
'60.##6.218.12':139
'60.##6.73.113':139
'60.##6.96.137':139
'60.##6.113.145':139
'60.##6.120.178':139
'60.##6.175.138':139
'60.##6.218.132':139
'60.##6.51.141':139
'60.##6.150.29':139
'60.##6.180.49':139
'60.##6.28.83':139
'60.##6.210.118':139
'60.##6.113.208':139
'60.##6.73.105':139
'60.##6.47.82':139
'60.##6.69.146':139
'60.##6.10.118':139
'60.##6.22.177':139
'60.##6.31.236':139
'60.##6.208.1':139
'60.##6.53.186':139
'60.##6.189.123':139
'60.##6.66.199':139
'60.##6.222.235':139
'60.##6.155.211':139
'60.##6.94.181':139
'60.##6.231.94':139
'60.##6.130.116':139
'60.##6.105.92':139
'60.##6.117.78':139
'60.##6.199.193':139
'60.##6.23.231':139
'60.##6.136.250':139
'60.##6.183.111':139
'60.##6.130.183':139
'60.##6.227.142':139
'60.##6.78.53':139
'60.##6.16.93':139
'60.##6.100.168':445
'60.##6.250.199':445
'60.##6.42.44':445
'60.##6.242.11':445
'60.#26.42.2':445
'60.##6.190.207':445
'60.##6.52.203':445
'60.##6.163.225':445
'60.##6.180.193':445
'60.##6.109.181':445
'60.##6.57.60':445
'60.##6.252.12':139
'60.##6.47.228':139
'60.##6.246.208':139
'60.##6.190.207':139
'60.##6.52.203':139
'60.##6.123.175':139
'60.##6.59.243':445
'60.##6.44.54':139
'60.##6.89.90':139
'60.##6.155.190':139
'60.##6.52.30':139
'60.##6.114.55':139
'60.##6.138.14':139
'60.##6.113.238':139
'60.#26.40.9':139
'60.##6.112.47':139
'60.##6.72.14':139
'60.##6.48.84':139
'60.##6.66.246':139
'60.##6.144.216':139
'60.##6.66.17':139
'60.##6.89.90':445
'60.##6.155.190':445
'60.##6.47.228':445
'60.##6.246.208':445
'60.##6.252.12':445
'60.#26.58.0':139
'60.##6.200.46':139
'60.##6.255.145':139
'60.##6.44.54':445
'60.##6.123.175':445
'60.##6.163.225':139
'60.##6.63.126':445
'60.##6.201.85':445
'60.##6.200.186':445
'60.##6.119.15':445
'60.##6.32.186':445
'60.##6.210.118':9988
'60.##6.150.29':9988
'60.##6.51.141':9988
'60.##6.35.84':445
'60.##6.28.83':9988
'60.##6.254.23':445
'60.##6.94.181':445
'60.##6.231.94':445
'60.##6.31.236':445
'60.##6.208.1':445
'60.##6.22.177':445
'60.##6.16.192':445
'60.##6.145.27':445
'60.##6.222.235':445
'60.##6.155.211':445
'60.##6.66.199':445
'60.##6.242.11':139
'60.#26.42.2':139
'60.##6.57.60':139
'60.##6.78.53':9988
'60.##6.59.243':139
'60.##6.180.193':139
'60.##6.109.181':139
'60.##6.250.199':139
'60.##6.42.44':139
'60.##6.100.168':139
'60.##6.117.78':9988
'60.##6.107.155':9988
'60.##6.84.53':9988
'60.##6.218.132':9988
'60.##6.113.208':9988
'60.##6.73.105':9988
'60.##6.199.193':9988
'60.##6.105.92':9988
'60.##6.136.250':9988
'60.##6.120.178':9988
'60.##6.23.231':9988

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней