Trojan.DownLoader12.28842

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#5.148.143':139
'21#.#5.106.77':139
'21#.#5.17.17':445
'21#.#5.9.199':445
'21#.#5.120.24':139
'21#.#5.106.77':445
'21#.#5.120.24':445
'21#.#5.190.59':139
'21#.#5.148.143':445
'21#.#5.36.250':445
'21#.#5.62.163':445
'21#.#5.238.182':445
'21#.#5.171.250':445
'21#.#5.246.135':445
'21#.#5.49.232':445
'21#.#5.47.32':445
'21#.#5.199.141':445
'21#.#5.211.49':445
'21#.#5.15.178':445
'21#.#5.190.59':445
'21#.#5.129.27':139
'21#.#5.37.41':139
'21#.#5.53.109':139
'21#.#5.36.107':139
'21#.#5.14.170':139
'21#.#5.125.125':139
'21#.#5.167.182':139
'21#.#5.59.35':139
'21#.#5.163.52':139
'21#.#5.180.84':139
'21#.#5.143.238':139
'21#.#5.207.208':139
'21#.#5.30.54':139
'21#.#5.65.196':139
'21#.#5.66.174':139
'21#.#5.149.182':139
'21#.#5.217.65':139
'21#.#5.100.151':139
'21#.#5.140.42':139
'21#.#5.176.188':445
'21#.#5.36.37':445
'21#.#5.244.93':445
'21#.#5.189.16':445
'21#.#5.24.70':445
'21#.#5.157.146':445
'21#.#5.191.156':445
'21#.#5.93.144':445
'21#.#5.145.240':445
'21#.#5.236.71':445
'21#.#5.17.17':139
'21#.#5.9.199':139
'21#.#5.199.141':139
'21#.#5.36.250':139
'21#.#5.205.41':445
'21#.#5.177.195':445
'21#.#5.153.160':445
'21#.#5.14.205':445
'21#.#5.160.173':445
'21#.#5.29.206':445
'21#.#5.113.108':445
'21#.#5.228.173':445
'21#.#5.16.154':445
'21#.#5.185.16':445
'21#.#5.70.162':445
'21#.#5.202.41':445
'21#.#5.170.37':445
'21#.#5.11.127':445
'21#.75.97.1':445
'21#.#5.123.236':445
'21#.#5.131.223':445
'21#.#5.41.152':445
'21#.#5.22.18':445
'21#.#5.44.88':445
'21#.#5.12.127':445
'21#.#5.102.26':445
'21#.#5.14.164':445
'21#.#5.27.208':445
'21#.#5.58.131':445
'21#.#5.222.103':139
'21#.#5.154.230':445
'21#.#5.12.155':445
'21#.#5.239.132':445
'21#.#5.226.112':445
'21#.#5.39.179':445
'21#.#5.121.139':445
'21#.#5.110.191':445
'21#.#5.24.163':445
'21#.#5.242.28':445
'21#.#5.85.132':445
'21#.#5.14.170':445
'21#.#5.59.35':445
'21#.#5.129.27':445
'21#.#5.37.41':445
'21#.#5.163.52':445
'21#.#5.222.103':445
'21#.#5.85.171':445
'21#.#5.125.125':445
'21#.#5.167.182':445
'21#.75.34.0':445
'21#.#5.46.148':445
'21#.#5.122.224':445
'21#.#5.198.235':445
'21#.#5.171.223':445
'21#.#5.49.40':445
'21#.#5.12.184':139
'21#.#5.223.179':139
'21#.#5.197.35':139
'21#.#5.63.38':139
'21#.#5.29.229':445
'21#.#5.57.176':445
'21#.#5.171.162':445
'21#.#5.252.14':445
'21#.#5.176.251':445
'21#.#5.126.90':445
'21#.#5.203.140':445
'21#.#5.214.201':445
'21#.#5.58.149':445
'21#.#5.149.208':445
'21#.#5.252.14':139
'21#.#5.176.251':139
'21#.#5.110.191':139
'21#.75.34.0':139
'21#.#5.57.176':139
'21#.#5.58.149':139
'21#.#5.149.208':139
'21#.#5.171.162':139
'21#.#5.126.90':139
'21#.#5.121.139':139
'21#.#5.239.132':139
'21#.#5.226.112':139
'21#.#5.85.171':139
'21#.#5.85.132':139
'21#.#5.154.230':139
'21#.#5.24.163':139
'21#.#5.242.28':139
'21#.#5.12.155':139
'21#.#5.39.179':139
'21#.#5.203.140':139
'21#.#5.100.151':445
'21#.#5.140.42':445
'21#.#5.207.208':445
'21#.#5.66.174':445
'21#.#5.149.182':445
'21#.#5.53.109':445
'21#.#5.36.107':445
'21#.#5.217.65':445
'21#.#5.180.84':445
'21#.#5.143.238':445
'21#.#5.198.235':139
'21#.#5.171.223':139
'21#.#5.214.201':139
'21#.#5.29.229':139
'21#.#5.46.148':139
'21#.#5.30.54':445
'21#.#5.65.196':445
'21#.#5.122.224':139
'21#.#5.49.40':139
'21#.#5.100.176':445
'21#.#5.14.65':445
'21#.#5.83.182':139
'21#.#5.42.159':139
'21#.#5.59.67':445
'21#.#5.6.114':445
'21#.#5.48.108':445
'21#.#5.143.37':445
'21#.#5.10.116':445
'21#.#5.231.92':139
'21#.#5.152.23':139
'21#.#5.27.64':139
'21#.#5.113.31':139
'21#.#5.14.185':139
'21#.#5.119.66':139
'21#.#5.115.104':139
'21#.#5.89.106':139
'21#.#5.55.102':139
'21#.#5.74.137':139
'21#.#5.217.3':445
'21#.#5.75.200':445
'21#.#5.171.142':445
'21#.#5.13.54':445
'21#.#5.109.186':445
'21#.#5.186.195':445
'21#.#5.94.61':445
'21#.#5.103.241':445
'21#.#5.63.147':445
'21#.#5.13.75':445
'21#.#5.22.125':445
'21#.#5.201.173':445
'21#.#5.165.231':445
'21#.#5.114.216':445
'21#.#5.140.127':445
'21#.#5.68.166':445
'21#.#5.63.103':445
'21#.#5.106.103':445
'21#.#5.233.123':445
'21#.#5.146.164':445
'21#.#5.68.166':139
'21#.#5.233.123':139
'21#.#5.201.173':139
'21#.#5.165.231':139
'21#.#5.146.164':139
'21#.#5.22.125':139
'21#.#5.13.54':139
'21#.#5.63.103':139
'21#.#5.106.103':139
'21#.#5.140.127':139
'21#.#5.59.67':139
'21#.#5.143.37':139
'21#.#5.100.176':139
'21#.#5.14.65':139
'21#.#5.10.116':139
'21#.#5.217.3':139
'21#.#5.114.216':139
'21#.#5.6.114':139
'21#.#5.48.108':139
'21#.#5.109.186':139
'21#.#5.34.179':139
'21#.#5.211.215':139
'21#.75.20.7':139
'21#.#5.113.21':139
'21#.#5.80.211':139
'21#.#5.19.190':139
'21#.#5.45.214':139
'21#.#5.113.221':139
'21#.#5.34.185':139
'21#.#5.115.89':139
'21#.#5.186.195':139
'21#.#5.63.147':139
'21#.#5.75.200':139
'21#.#5.171.142':139
'21#.#5.13.75':139
'21#.#5.149.103':139
'21#.#5.52.149':139
'21#.#5.94.61':139
'21#.#5.103.241':139
'21#.#5.149.103':445
'21#.#5.22.18':139
'21#.#5.44.88':139
'21#.#5.191.156':139
'21#.#5.29.206':139
'21#.#5.131.223':139
'21#.#5.27.208':139
'21#.#5.58.131':139
'21#.#5.41.152':139
'21#.#5.12.127':139
'21#.#5.157.146':139
'21#.#5.244.93':139
'21#.#5.189.16':139
'21#.#5.153.160':139
'21#.#5.236.71':139
'21#.#5.176.188':139
'21#.#5.93.144':139
'21#.#5.145.240':139
'21#.#5.36.37':139
'21#.#5.24.70':139
'21#.#5.102.26':139
'21#.#5.246.135':139
'21#.#5.62.163':139
'21#.#5.170.37':139
'21#.#5.171.250':139
'21#.#5.238.182':139
'21#.#5.15.178':139
'21#.#5.47.32':139
'21#.#5.49.232':139
'21#.#5.211.49':139
'21#.#5.202.41':139
'21#.#5.16.154':139
'21#.#5.185.16':139
'21#.#5.14.164':139
'21#.#5.123.236':139
'21#.#5.113.108':139
'21#.#5.11.127':139
'21#.75.97.1':139
'21#.#5.228.173':139
'21#.#5.70.162':139
'21#.#5.14.185':445
'21#.#5.152.23':445
'21#.#5.45.214':445
'21#.#5.113.31':445
'21#.#5.27.64':445
'21#.#5.74.137':445
'21#.#5.115.104':445
'21#.#5.119.66':445
'21#.#5.55.102':445
'21#.#5.19.190':445
'21#.75.20.7':445
'21#.#5.113.21':445
'21#.#5.52.149':445
'21#.#5.115.89':445
'21#.#5.34.179':445
'21#.#5.113.221':445
'21#.#5.34.185':445
'21#.#5.211.215':445
'21#.#5.80.211':445
'21#.#5.89.106':445
'21#.#5.75.200':9988
'21#.#5.94.61':9988
'21#.#5.63.103':9988
'21#.#5.233.123':9988
'21#.#5.115.104':9988
'21#.#5.160.173':139
'21#.#5.177.195':139
'21#.#5.205.41':139
'21#.#5.14.205':139
'21#.#5.106.103':9988
'21#.#5.42.159':445
'21#.#5.48.108':9988
'21#.#5.231.92':445
'21#.#5.83.182':445
'21#.#5.6.114':9988
'21#.#5.217.3':9988
'21#.#5.114.216':9988
'21#.#5.10.116':9988
'21#.#5.143.37':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней