Trojan.DownLoader12.29174

Technical Information

To ensure autorun and distribution:

Creates or modifies the following files:

%WINDIR%\Tasks\SA.DAT

Malicious functions:

Executes the following:

'<SYSTEM32>\svchost.exe' -k netsvcs

Modifies file system :

Creates the following files:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Network activity:

Connects to:

'88.##4.75.101':139
'88.##4.166.109':139
'88.##4.58.215':139
'88.##4.104.197':139
'88.##4.139.41':139
'88.##4.69.160':139
'88.##4.175.110':139
'88.##4.174.249':139
'88.##4.102.102':139
'88.##4.181.190':139
'88.##4.26.111':139
'88.##4.234.120':139
'88.##4.90.37':139
'88.##4.156.115':139
'88.##4.79.32':139
'88.##4.70.25':139
'88.##4.44.125':139
'88.##4.63.44':139
'88.##4.142.32':139
'88.##4.145.32':139
'88.##4.91.18':139
'88.##4.221.137':139
'88.##4.131.186':139
'88.##4.86.243':139
'88.#84.0.69':139
'88.##4.9.220':139
'88.##4.90.37':445
'88.##4.104.197':445
'88.##4.139.41':445
'88.##4.145.32':445
'88.##4.91.18':445
'88.##4.221.137':445
'88.##4.58.215':445
'88.##4.181.190':445
'88.##4.26.111':445
'88.##4.69.160':445
'88.##4.75.101':445
'88.##4.166.109':445
'88.#84.0.69':445
'88.##4.219.22':445
'88.##4.44.125':445
'88.##4.63.44':445
'88.##4.36.79':139
'88.##4.44.65':139
'88.##4.32.44':139
'88.##4.70.25':445
'88.##4.131.186':445
'88.##4.86.243':445
'88.##4.142.32':445
'88.##4.156.115':445
'88.##4.79.32':445
'88.##4.219.22':139
'88.##4.171.209':139
'88.##4.187.126':139
'88.##4.76.31':139
'88.##4.47.48':139
'88.##4.249.160':139
'88.##4.113.250':139
'88.##4.72.222':139
'88.##4.33.207':139
'88.##4.154.179':139
'88.##4.219.110':139
'88.##4.12.152':139
'88.##4.249.134':139
'88.##4.44.166':139
'88.##4.110.224':445
'88.##4.201.220':445
'88.##4.25.187':445
'88.##4.27.223':445
'88.##4.76.24':445
'88.##4.154.199':445
'88.##4.223.62':139
'88.##4.211.222':139
'88.##4.55.212':139
'88.##4.184.119':445
'88.##4.16.80':445
'88.##4.75.52':445
'88.##4.107.253':139
'88.##4.249.134':445
'88.##4.72.222':445
'88.##4.33.207':445
'88.##4.76.31':445
'88.##4.219.110':445
'88.##4.12.152':445
'88.##4.0.149':445
'88.##4.145.131':445
'88.##4.62.138':445
'88.##4.154.179':445
'88.##4.107.253':445
'88.##4.252.87':445
'88.##4.187.126':445
'88.##4.62.138':139
'88.##4.223.62':445
'88.##4.211.222':445
'88.##4.252.87':139
'88.##4.0.149':139
'88.##4.145.131':139
'88.##4.249.160':445
'88.##4.113.250':445
'88.##4.171.209':445
'88.##4.55.212':445
'88.##4.44.166':445
'88.##4.47.48':445
'88.##4.156.190':139
'88.##4.221.202':139
'88.##4.51.226':139
'88.##4.132.41':139
'88.##4.48.165':139
'88.##4.134.248':139
'88.##4.72.72':139
'88.##4.118.248':139
'88.##4.55.45':139
'88.##4.48.43':139
'88.##4.139.23':139
'88.##4.242.62':139
'88.##4.195.133':139
'88.##4.78.35':139
'88.##4.6.199':139
'88.##4.52.222':139
'88.##4.76.152':139
'88.##4.210.193':139
'88.##4.35.112':139
'88.##4.30.44':139
'88.##4.252.169':139
'88.##4.101.116':139
'88.##4.163.210':139
'88.##4.140.127':139
'88.##4.43.140':139
'88.##4.162.106':139
'88.##4.195.133':445
'88.##4.132.41':445
'88.##4.48.165':445
'88.##4.30.44':445
'88.##4.252.169':445
'88.##4.101.116':445
'88.##4.51.226':445
'88.##4.48.43':445
'88.##4.139.23':445
'88.##4.134.248':445
'88.##4.156.190':445
'88.##4.221.202':445
'88.##4.43.140':445
'88.##4.93.148':445
'88.##4.76.152':445
'88.##4.210.193':445
'88.##4.83.130':139
'88.##4.25.85':139
'88.##4.67.247':445
'88.##4.52.222':445
'88.##4.163.210':445
'88.##4.140.127':445
'88.##4.35.112':445
'88.##4.78.35':445
'88.##4.6.199':445
'88.##4.93.148':139
'88.##4.107.39':139
'88.##4.95.106':139
'88.##4.108.95':139
'88.##4.60.94':139
'88.##4.12.199':139
'88.##4.139.27':139
'88.##4.58.202':139
'88.##4.102.157':139
'88.##4.164.101':139
'88.##4.96.108':139
'88.##4.64.97':139
'88.#84.6.65':139
'88.##4.93.203':139
'88.##4.102.102':445
'88.##4.9.220':445
'88.##4.36.79':445
'88.##4.234.120':445
'88.##4.175.110':445
'88.##4.174.249':445
'88.##4.150.99':139
'88.##4.244.149':139
'88.##4.202.244':139
'88.##4.44.65':445
'88.##4.32.44':445
'88.##4.99.32':139
'88.##4.90.83':139
'88.#84.6.65':445
'88.##4.58.202':445
'88.##4.102.157':445
'88.##4.108.95':445
'88.##4.96.108':445
'88.##4.64.97':445
'88.##4.153.127':445
'88.##4.79.237':445
'88.##4.67.247':139
'88.##4.164.101':445
'88.##4.90.83':445
'88.##4.195.78':445
'88.##4.95.106':445
'88.##4.99.32':445
'88.##4.150.99':445
'88.##4.244.149':445
'88.##4.195.78':139
'88.##4.153.127':139
'88.##4.79.237':139
'88.##4.12.199':445
'88.##4.139.27':445
'88.##4.107.39':445
'88.##4.202.244':445
'88.##4.93.203':445
'88.##4.60.94':445
'88.##4.144.51':445
'88.##4.186.36':445
'88.##4.74.186':445
'88.##4.207.139':445
'88.##4.254.166':445
'88.##4.15.244':445
'88.##4.230.227':445
'88.##4.57.132':445
'88.##4.20.13':445
'88.##4.168.162':445
'88.##4.164.142':445
'88.##4.182.164':445
'88.##4.58.218':445
'88.##4.17.231':445
'88.##4.224.29':445
'88.##4.61.130':445
'88.##4.69.127':445
'88.##4.165.62':445
'88.##4.244.137':445
'88.##4.192.123':445
'88.##4.211.80':445
'88.##4.58.204':445
'88.##4.12.84':445
'88.#84.91.1':445
'88.##4.249.240':445
'88.##4.17.209':445
'88.##4.42.22':445
'88.##4.239.77':445
'88.##4.89.239':445
'88.##4.214.4':445
'88.#84.31.4':445
'88.##4.217.13':445
'88.##4.77.66':445
'88.##4.44.77':445
'88.##4.255.106':445
'88.##4.58.204':9988
'88.##4.148.210':445
'88.##4.159.148':445
'88.##4.70.234':445
'88.##4.3.212':445
'88.##4.168.248':445
'88.##4.71.168':445
'88.##4.106.238':445
'88.##4.143.29':445
'88.##4.113.63':445
'88.##4.248.13':445
'88.##4.100.48':445
'88.##4.134.155':445
'88.##4.212.128':445
'88.##4.241.101':445
'88.##4.175.246':445
'88.##4.154.140':445
'88.##4.67.81':445
'88.##4.230.227':139
'88.##4.186.36':139
'88.##4.74.186':139
'88.##4.17.231':139
'88.##4.254.166':139
'88.##4.15.244':139
'88.##4.58.218':139
'88.##4.57.132':139
'88.##4.20.13':139
'88.##4.207.139':139
'88.##4.164.142':139
'88.##4.182.164':139
'88.##4.12.84':139
'88.##4.165.62':139
'88.##4.244.137':139
'88.##4.192.123':139
'88.##4.67.81':139
'88.##4.69.127':139
'88.##4.224.29':139
'88.##4.17.209':139
'88.##4.211.80':139
'88.##4.58.204':139
'88.##4.61.130':139
'88.#84.91.1':139
'88.##4.249.240':139
'88.##4.168.162':139
'88.##4.77.66':139
'88.##4.239.77':139
'88.##4.89.239':139
'88.##4.3.212':139
'88.#84.31.4':139
'88.##4.217.13':139
'88.##4.70.234':139
'88.##4.44.77':139
'88.##4.255.106':139
'88.##4.214.4':139
'88.##4.148.210':139
'88.##4.159.148':139
'88.##4.212.128':139
'88.##4.248.13':139
'88.##4.168.248':139
'88.##4.71.168':139
'88.##4.42.22':139
'88.##4.143.29':139
'88.##4.113.63':139
'88.##4.154.140':139
'88.##4.100.48':139
'88.##4.134.155':139
'88.##4.106.238':139
'88.##4.241.101':139
'88.##4.175.246':139
'88.##4.32.217':139
'88.##4.40.207':139
'88.##4.164.70':139
'88.##4.190.83':139
'88.##4.59.184':139
'88.#84.2.76':139
'88.##4.27.223':139
'88.##4.76.24':139
'88.##4.154.199':139
'88.##4.127.62':139
'88.##4.191.32':139
'88.##4.144.51':139
'88.##4.33.182':139
'88.##4.246.124':139
'88.##4.204.246':139
'88.##4.56.37':139
'88.##4.21.37':445
'88.##4.57.167':139
'88.##4.175.248':139
'88.##4.111.45':139
'88.##4.11.111':139
'88.##4.39.144':139
'88.##4.190.8':139
'88.##4.253.134':139
'88.##4.45.131':139
'88.##4.110.224':139
'88.##4.33.182':445
'88.##4.190.83':445
'88.##4.59.184':445
'88.##4.111.45':445
'88.##4.11.111':445
'88.##4.39.144':445
'88.##4.164.70':445
'88.##4.127.62':445
'88.##4.191.32':445
'88.#84.2.76':445
'88.##4.32.217':445
'88.##4.40.207':445
'88.##4.45.131':445
'88.##4.16.80':139
'88.##4.75.52':139
'88.##4.57.167':445
'88.##4.201.220':139
'88.##4.25.187':139
'88.##4.184.119':139
'88.##4.56.37':445
'88.##4.190.8':445
'88.##4.253.134':445
'88.##4.175.248':445
'88.##4.246.124':445
'88.##4.204.246':445
'88.##4.45.51':445
'88.##4.123.101':139
'88.##4.20.249':139
'88.##4.198.225':139
'88.##4.106.238':9988
'88.#84.31.4':9988
'88.##4.46.93':139
'88.##4.205.109':139
'88.##4.25.41':139
'88.##4.10.56':139
'88.##4.151.3':139
'88.##4.70.224':139
'88.##4.16.133':139
'88.##4.241.101':9988
'88.##4.67.81':9988
'88.##4.17.231':9988
'88.##4.254.166':9988
'88.##4.249.240':9988
'88.##4.244.137':9988
'88.##4.61.130':9988
'88.##4.74.186':9988
'88.##4.20.13':9988
'88.##4.248.13':9988
'88.##4.186.36':9988
'88.##4.182.164':9988
'88.##4.230.227':9988
'88.##4.248.9':139
'88.##4.25.41':445
'88.##4.10.56':445
'88.##4.248.9':445
'88.##4.70.224':445
'88.##4.16.133':445
'88.##4.205.109':445
'88.##4.33.88':445
'88.##4.16.33':445
'88.##4.202.16':445
'88.##4.126.94':445
'88.##4.71.107':445
'88.##4.87.220':445
'88.##4.151.3':445
'88.##4.33.88':139
'88.##4.16.33':139
'88.##4.202.16':139
'88.##4.126.94':139
'88.##4.71.107':139
'88.##4.87.220':139
'88.##4.123.101':445
'88.##4.20.249':445
'88.##4.198.225':445
'88.##4.45.51':139
'88.##4.21.37':139
'88.##4.46.93':445

Технологии

Термины

Обучение и просвещение

Мифы

Technical Information

Рекомендации по лечению

Демо бесплатно на 14 дней