Trojan.DownLoader3.31698

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%ALLUSERSPROFILE%\Start Menu\Programs\Startup\Tecoko.exe

Вредоносные функции:

Создает и запускает на исполнение:

%ALLUSERSPROFILE%\Start Menu\Programs\Startup\Tecoko.exe

Изменения в файловой системе:

Создает следующие файлы:

%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].1644011769
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].38816193212
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].2507704529
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].9701107373
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].6392691673
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].1853210607
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].2564901847
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].679551689
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].9203080509
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].0912140389
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].176428888
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].9429669972
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].8510796968
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].2343906246
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].2411319923
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].8221185366
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].0374299078
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].5746240362
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].3291314887
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].7829939262
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].92990068486
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].9075036917
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].8008263838
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].1575925769
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].2731840562
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].4991879836
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].933666677
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].11019722838
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].83197116107
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].930903032
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].3047164178
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].5769049381
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].31563804718
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].351979374
%TEMP%\~ip.tmp
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].2618172509
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].2728578588
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].7102719846
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].2177670596
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].5085832742
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].39321728
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].250562862
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].6058374115
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].0864050959
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].4134561464
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].2391691457
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\ULU3YH2D\checkip.dyndns[1].7893370143
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].2949565768
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].896862343
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\0D6B6PI5\whatismyip[1].916469607
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\69I9OPW5\checkip.dyndns[1].4514190005
%HOMEPATH%\Local Settings\Temporary Internet Files\Content.IE5\SL6TKFAX\whatismyip[1].7947584472