Trojan.DownLoader5.4348

Добавлен в вирусную базу Dr.Web: 2011-10-17

Описание добавлено: 2011-10-17

Техническая информация

Для обеспечения автозапуска и распространения:

Модифицирует следующие ключи реестра:

[<HKLM>\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] '20532' = '<Полный путь к вирусу>'

Вредоносные функции:

Для обхода брандмауэра удаляет или модифицирует следующие ключи реестра:

[<HKLM>\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile] 'EnableFirewall' = '00000000'

Сетевая активность:

Подключается к:

'19#.#2.146.216':3128
'19#.#46.106.12':3128
'20#.#7.164.89':3128
'89.##.52.204':3128
'82.##3.91.58':3128
'86.##8.19.159':3128
'88.##5.199.182':3128
'79.##.41.183':3128
'88.##8.34.137':3128
'18#.#6.29.14':3128
'78.##1.107.87':3128
'82.##1.56.93':3128
'82.##.120.20':3128
'78.##.150.74':3128
'20#.#3.109.214':3128
'82.##2.103.247':3128
'20#.#42.101.115':3128
'18#.#47.67.137':3128
'82.##.244.129':3128
'12#.#07.232.90':3128
'11#.#95.166.226':3128
'58.##.81.179':3128
'95.#9.33.83':3128
'19#.#86.20.162':3128
'62.##9.57.142':3128
'85.##2.116.197':3128
'87.##9.190.53':3128
'82.##8.227.104':3128
'19#.#5.132.33':3128
'96.##.191.209':3128
'12#.#65.129.251':3128
'21#.#61.8.213':3128
'19#.#05.252.59':3128
'78.##6.185.20':3128
'19#.#2.123.111':3128
'95.##9.232.77':3128
'59.##.135.66':3128
'88.##3.208.215':3128
'89.##6.143.239':3128
'88.##6.79.53':3128
'88.##1.216.218':3128
'87.##9.191.158':3128
'19#.#00.34.171':3128
'59.##.133.30':3128
'19#.#9.94.107':3128
'95.##7.15.54':3128
'12#.#0.184.124':3128
'84.#11.20.9':3128
'11#.#1.61.84':3128
'19#.#06.216.6':3128
'20#.#48.56.225':3128
'20#.#0.43.214':3128
'11#.#95.174.248':3128
'84.##.14.187':3128
'10.#.1.254':3128
'95.##9.232.146':3128
'21#.#28.216.119':3128
'20#.#41.42.161':3128
'70.##6.115.12':3128
'89.##6.184.147':3128
'85.##.42.181':3128
'12#.#01.80.43':3128
'81.##.115.138':3128
'19#.#18.162.52':3128
'80.##.175.219':3128
'93.##9.102.65':3128
'20#.#71.244.50':3128
'62.##5.228.208':3128
'86.##7.9.192':3128
'41.##1.111.216':3128
'95.##.193.97':3128
'18#.#92.110.83':3128
'78.#51.19.8':3128
'88.##5.199.42':3128
'20#.#71.245.107':3128
'19#.#44.151.41':3128
'20#.#72.130.111':3128
'79.##3.225.190':3128
'95.##9.132.133':3128
'88.##8.116.249':3128
'12#.#60.168.96':3128
'20#.#1.105.100':3128
'88.##9.142.24':3128
'14#.#27.59.44':3128
'59.##.134.109':3128
'77.##7.214.36':3128
'95.##.99.115':3128
'88.##5.226.50':3128
'20#.#2.138.194':3128
'78.##8.20.42':3128
'84.##8.83.41':3128
'82.##2.247.115':3128
'72.##.24.166':3128
'82.##1.194.56':3128
'20#.#32.14.253':3128
'12#.#22.193.110':3128
'93.##5.2.168':3128
'21#.#00.196.189':3128
'19#.#49.35.79':3128
'84.##8.234.48':3128
'85.##.111.233':3128
'11#.#95.165.152':3128
'88.##3.152.221':3128
'83.##3.200.34':3128
'87.##.126.158':3128
'15#.#2.8.238':3128
'64.#0.5.249':3128
'95.#8.38.44':3128
'19#.#47.141.125':3128
'85.##3.155.156':3128
'82.#7.86.27':3128
'24.##9.93.212':3128
'95.##.122.246':3128
'88.##5.90.153':3128
'84.##5.190.17':3128
'11#.#55.1.91':3128
'80.##.168.222':3128
'78.##8.178.105':3128
'85.##.133.55':3128
'19#.#4.31.25':3128
'82.##1.113.196':3128
'59.##.128.15':3128
'79.##0.198.148':3128
'19#.#7.164.133':3128
'88.##6.111.37':3128
'18#.24.8.85':3128
'88.#62.65.2':3128
'19#.#0.84.63':3128
'69.##6.112.172':3128
'93.#45.5.71':3128
'58.##.29.245':3128
'85.#.88.56':3128
'91.##5.125.136':3128
'18#.#9.83.253':3128
'79.##5.188.205':3128
'80.##2.97.115':3128
'84.##.173.250':3128
'12#.#77.61.165':3128
'82.##9.127.108':3128
'81.#4.146.6':3128
'11#.#38.80.87':3128
'19#.#5.32.217':3128
'84.##7.7.143':3128
'84.##.67.199':3128
'19#.#6.232.76':3128
'78.##6.78.93':3128
'18#.#32.57.44':3128
'89.##7.75.85':3128
'19#.#54.107.150':3128
'78.##.185.170':3128
'22#.#65.118.39':3128
'11#.#95.165.180':3128
'19#.#.119.86':3128
'83.##2.160.159':3128
'79.##.46.104':3128
'77.##.174.115':3128
'12#.#0.74.66':3128
'11#.#36.85.177':3128
'82.##3.254.238':3128
'89.##.88.140':3128
'18#.19.2.17':3128
'19#.#09.195.54':3128
'88.##9.201.12':3128
'19#.5.83.43':3128
'82.##0.250.83':3128
'11#.#95.162.153':3128
'89.##3.88.199':3128
'94.##9.17.126':3128
'59.##.136.184':3128
'88.##8.79.209':3128
'11#.#95.176.21':3128
'20#.#8.157.112':3128
'78.##8.120.173':3128
'12#.49.19.3':3128
'80.##.124.38':3128
'19#.#2.237.46':3128
'88.##8.59.120':3128
'19#.#5.193.44':3128
'88.##1.93.97':3128
'11#.#95.174.189':3128
'85.##.185.143':3128
'87.##9.191.46':3128
'18#.#17.88.107':3128
'24.##4.197.28':3128
'82.##9.70.131':3128
'92.##4.170.162':3128
'24.##7.81.103':3128
'18#.#92.105.79':3128
'18#.#6.113.17':3128
'81.##1.175.141':3128
'19#.#05.211.162':3128
'82.##0.197.158':3128
'82.##1.168.12':3128
'93.##1.119.44':3128
'19#.3.30.97':3128
'17#.#1.113.67':3128
'93.##7.183.209':3128
'41.##1.87.196':3128
'87.##8.132.137':3128
'11#.#95.164.21':3128
'79.##3.40.217':3128
'91.##.234.38':3128
'84.##0.65.212':3128
'93.##9.28.175':3128
'88.#80.2.49':3128
'19#.#31.106.41':3128
'12#.#9.16.248':3128
'19#.#8.86.218':3128
'98.##9.202.190':3128
'78.##5.29.77':3128
'79.##5.248.96':3128
'79.##0.114.33':3128
'18#.#86.157.204':3128
'88.##0.192.52':3128
'82.##4.229.42':3128
'88.##5.136.199':3128
'78.##6.109.85':3128
'20#.#11.92.21':3128
'20#.#73.128.115':3128
'20#.#.37.106':3128
'18#.#94.102.110':3128
'93.##8.134.128':3128
'22#.#66.238.107':3128
'24.##.248.150':3128
'86.##0.94.248':3128
'79.##.48.136':3128
'18#.#93.162.106':3128
'20#.#5.183.217':3128
'60.##3.67.168':3128
'11#.#34.165.170':3128
'77.##7.13.105':3128
'11#.#06.151.3':3128
'19#.#3.251.188':3128
'11#.#55.3.189':3128
'19#.#5.175.215':3128
'80.##7.125.172':3128
'95.##.127.170':3128
'20#.#0.236.15':3128
'68.##.214.81':3128
'88.#.150.232':3128
'77.##.178.39':3128
'88.##5.149.230':3128
'89.##3.142.181':3128
'88.##6.47.98':3128
'79.##6.163.5':3128
'18#.#4.89.10':3128
'84.##.165.129':3128
'88.##7.219.240':3128
'82.##3.121.106':3128
'20#.#71.247.81':3128
'84.##.198.126':3128
'20#.8.157.1':3128
'79.##.39.246':3128
'83.#.120.65':3128
'88.##0.143.38':3128
'12#.#63.24.165':3128
'19#.#8.144.210':3128
'78.##4.32.176':3128
'10#.#6.113.106':3128
'93.##2.23.40':3128
'88.##2.44.197':3128
'89.##3.183.237':3128
'86.##0.27.167':3128
'21#.#2.239.14':3128
'59.##.135.137':3128
'79.##.46.247':3128
'78.##2.92.120':3128
'18#.#03.70.231':3128
'24.##.251.154':3128
'85.##.36.230':3128
'82.##0.193.233':3128
'20#.#3.106.191':3128
'88.##5.160.31':3128
'18#.64.89.3':3128
'68.##8.228.92':3128
'11#.#6.123.93':3128
'18#.#4.34.81':3128
'20#.#11.97.89':3128
'76.#4.3.108':3128
'79.##6.210.24':3128
'59.##.135.194':3128
'85.#4.5.107':3128
'83.##3.105.191':3128
'18#.#3.183.136':3128
'12#.#9.18.100':3128
'82.##.181.192':3128
'88.##8.94.116':3128
'88.##0.50.183':3128
'20#.#36.37.101':3128
'20#.#41.23.6':3128
'18#.#7.61.143':3128
'11#.#97.172.147':3128
'72.##9.134.43':3128
'20#.#8.234.15':3128
'88.##1.179.168':3128
'20#.#71.245.55':3128
'82.##7.80.207':3128
'18#.#.62.162':3128
'20#.#22.2.117':3128
'18#.#8.135.16':3128

Другое:

Ищет следующие окна:

ClassName: 'Indicator' WindowName: ''

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней