Trojan.DownLoader12.28897

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#55.98.79':139
'22#.#55.137.113':445
'22#.#55.17.57':139
'22#.#55.62.122':139
'22#.#55.197.92':445
'22#.#55.57.38':445
'22#.#55.171.74':445
'22#.#55.119.72':445
'22#.#55.216.223':445
'22#.#55.198.242':139
'22#.#55.32.97':139
'22#.#55.248.31':139
'22#.#55.34.37':139
'22#.#55.8.116':139
'22#.#55.41.100':139
'22#.#55.15.253':139
'22#.#55.48.84':139
'22#.#55.164.235':139
'22#.#55.190.151':139
'22#.#55.125.84':445
'22#.#55.0.119':445
'22#.#55.199.220':445
'22#.#55.14.66':445
'22#.#55.68.141':445
'22#.#55.211.210':445
'22#.#55.76.100':445
'22#.#55.48.57':445
'22#.#55.134.30':445
'22#.#55.112.191':445
'22#.#55.105.165':445
'22#.#55.103.53':445
'22#.#55.6.247':445
'22#.#55.99.224':445
'22#.#55.72.129':445
'22#.#55.49.11':445
'22#.#55.206.96':445
'22#.#55.141.243':445
'22#.#55.44.202':445
'22#.#55.106.251':139
'22#.#55.141.243':139
'22#.#55.44.202':139
'22#.#55.103.53':139
'22#.#55.72.129':139
'22#.#55.49.11':139
'22#.#55.199.220':139
'22#.#55.14.66':139
'22#.#55.206.96':139
'22#.#55.112.191':139
'22#.#55.105.165':139
'22#.#55.197.92':139
'22#.#55.119.72':139
'22#.#55.173.157':445
'22#.#55.137.113':139
'22#.#55.216.223':139
'22#.#55.6.247':139
'22#.#55.99.224':139
'22#.#55.57.38':139
'22#.#55.171.74':139
'22#.#55.55.38':139
'22#.#55.138.55':139
'22#.#55.147.214':139
'22#.#55.38.41':139
'22#.#55.24.139':139
'22#.#55.115.53':139
'22#.#55.250.222':139
'22#.#55.149.24':139
'22#.#55.4.83':139
'22#.#55.109.177':139
'22#.#55.68.141':139
'22#.#55.48.57':139
'22#.#55.125.84':139
'22#.#55.0.119':139
'22#.#55.134.30':139
'22#.#55.191.68':139
'22#.#55.178.19':139
'22#.#55.211.210':139
'22#.#55.76.100':139
'22#.155.2.3':139
'22#.#55.13.184':139
'22#.#55.66.218':139
'22#.#55.40.63':139
'22#.#55.145.136':139
'22#.#55.179.253':139
'22#.#55.67.28':139
'22#.#55.29.82':139
'22#.#55.253.95':139
'22#.#55.227.115':139
'22#.#55.115.57':139
'22#.#55.133.100':139
'22#.#55.41.32':139
'22#.#55.147.15':139
'22#.#55.237.150':139
'22#.#55.59.174':139
'22#.#55.10.180':139
'22#.#55.148.114':139
'22#.#55.174.216':139
'22#.#55.212.198':139
'22#.#55.26.127':139
'22#.#55.111.117':139
'22#.#55.180.170':139
'22#.#55.98.160':139
'22#.#55.36.138':139
'22#.#55.185.189':139
'22#.#55.221.76':139
'22#.#55.88.23':139
'22#.#55.43.249':139
'22#.#55.13.63':139
'22#.#55.60.85':139
'22#.#55.238.190':139
'22#.#55.38.4':139
'22#.#55.38.148':139
'22#.#55.159.170':139
'22#.#55.56.151':139
'22#.#55.79.60':139
'22#.#55.77.46':139
'22#.#55.198.47':139
'22#.#55.106.251':445
'22#.#55.34.37':445
'22#.#55.115.53':445
'22#.#55.250.222':445
'22#.#55.8.116':445
'22#.#55.41.100':445
'22#.#55.164.235':445
'22#.#55.32.97':445
'22#.#55.248.31':445
'22#.#55.4.83':445
'22#.#55.109.177':445
'22#.#55.147.214':445
'22#.#55.191.68':445
'22#.#55.178.19':445
'22#.#55.38.41':445
'22#.#55.24.139':445
'22#.#55.149.24':445
'22#.#55.55.38':445
'22#.#55.138.55':445
'22#.#55.35.221':139
'22#.#55.21.87':139
'22#.#55.230.63':139
'22#.#55.71.122':139
'22#.#55.85.172':139
'22#.#55.43.172':139
'22#.#55.192.245':139
'22#.#55.230.18':139
'22#.#55.130.227':139
'22#.#55.116.205':139
'22#.#55.48.84':445
'22#.#55.198.242':445
'22#.#55.190.151':445
'22#.#55.15.253':445
'22#.#55.17.57':445
'22#.#55.202.29':139
'22#.#55.83.91':139
'22#.#55.62.122':445
'22#.#55.98.79':445
'22#.#55.158.66':445
'22#.#55.38.208':445
'22#.#55.181.161':445
'22#.#55.234.248':139
'22#.#55.233.20':139
'22#.#55.16.214':445
'22#.#55.27.193':445
'22#.#55.212.219':445
'22#.#55.235.219':445
'22#.#55.64.225':445
'22#.#55.11.183':139
'22#.#55.11.242':139
'22#.#55.100.44':139
'22#.#55.21.182':139
'22#.#55.74.204':139
'22#.#55.78.138':139
'22#.#55.106.206':139
'22#.#55.123.232':139
'22#.#55.227.4':139
'22#.#55.5.227':139
'22#.#55.94.174':445
'22#.#55.55.16':445
'22#.#55.46.180':445
'22#.#55.174.46':445
'22#.#55.239.195':445
'22#.#55.135.149':445
'22#.#55.118.135':445
'22#.#55.10.200':445
'22#.#55.93.161':445
'22#.#55.180.74':445
'22#.#55.64.14':445
'22#.#55.169.31':445
'22#.#55.105.213':445
'22#.#55.8.20':445
'22#.#55.196.114':445
'22#.#55.105.169':445
'22#.#55.74.202':445
'22#.#55.120.69':445
'22#.#55.98.120':445
'22#.#55.220.124':139
'22#.#55.120.69':139
'22#.#55.98.120':139
'22#.#55.169.31':139
'22#.#55.196.114':139
'22#.#55.105.169':139
'22#.#55.46.180':139
'22#.#55.174.46':139
'22#.#55.74.202':139
'22#.#55.180.74':139
'22#.#55.64.14':139
'22#.#55.181.161':139
'22#.#55.235.219':139
'22#.#55.16.214':139
'22#.#55.64.225':139
'22#.#55.38.208':139
'22#.#55.105.213':139
'22#.#55.8.20':139
'22#.#55.27.193':139
'22#.#55.212.219':139
'22#.#55.46.94':139
'22#.#55.178.65':139
'22#.#55.123.11':139
'22#.#55.94.123':139
'22#.#55.47.84':139
'22#.#55.189.134':139
'22#.#55.53.118':139
'22#.#55.141.156':139
'22#.#55.8.173':139
'22#.#55.10.175':139
'22#.#55.239.195':139
'22#.#55.10.200':139
'22#.#55.94.174':139
'22#.#55.55.16':139
'22#.#55.93.161':139
'22#.#55.9.118':139
'22#.#55.252.107':139
'22#.#55.135.149':139
'22#.#55.118.135':139
'22#.#55.191.74':139
'22#.#55.154.219':139
'22#.#55.6.31':139
'22#.#55.74.210':139
'22#.#55.134.198':139
'22#.#55.20.123':139
'22#.#55.72.46':139
'22#.#55.3.158':139
'22#.#55.119.4':139
'22#.#55.71.227':139
'22#.#55.169.233':139
'22#.#55.179.169':139
'22#.#55.8.173':9988
'22#.#55.78.138':9988
'22#.#55.79.112':139
'22#.#55.210.83':139
'22#.#55.165.10':139
'22#.#55.236.178':139
'22#.#55.143.112':139
'22#.#55.191.74':445
'22#.#55.154.219':445
'22#.#55.6.31':445
'22#.#55.74.210':445
'22#.#55.134.198':445
'22#.#55.20.123':445
'22#.#55.72.46':445
'22#.#55.3.158':445
'22#.#55.119.4':445
'22#.#55.71.227':445
'22#.#55.169.233':445
'22#.#55.179.169':445
'22#.#55.158.66':139
'22#.#55.173.157':139
'22#.#55.79.112':445
'22#.#55.210.83':445
'22#.#55.165.10':445
'22#.#55.236.178':445
'22#.#55.143.112':445
'22#.#55.141.156':9988
'22#.#55.220.124':445
'22#.#55.21.182':445
'22#.#55.189.134':445
'22#.#55.53.118':445
'22#.#55.74.204':445
'22#.#55.78.138':445
'22#.#55.227.4':445
'22#.#55.11.242':445
'22#.#55.100.44':445
'22#.#55.8.173':445
'22#.#55.10.175':445
'22#.#55.123.11':445
'22#.#55.9.118':445
'22#.#55.252.107':445
'22#.#55.94.123':445
'22#.#55.47.84':445
'22#.#55.141.156':445
'22#.#55.46.94':445
'22#.#55.178.65':445
'22#.#55.120.69':9988
'22#.#55.105.169':9988
'22#.#55.169.31':9988
'22#.#55.196.114':9988
'22#.#55.74.202':9988
'22#.#55.174.46':9988
'22#.#55.93.161':9988
'22#.#55.180.74':9988
'22#.#55.46.180':9988
'22#.#55.64.14':9988
'22#.#55.123.232':445
'22#.#55.234.248':445
'22#.#55.5.227':445
'22#.#55.106.206':445
'22#.#55.11.183':445
'22#.#55.105.213':9988
'22#.#55.8.20':9988
'22#.#55.233.20':445
'22#.#55.27.193':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней