Trojan.DownLoader12.28869

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#88.225.45':139
'20#.#88.225.240':139
'20#.#88.149.168':139
'20#.#88.220.149':139
'20#.#88.217.54':445
'20#.#88.169.252':445
'20#.#88.21.19':445
'20#.#88.68.217':445
'20#.#88.70.81':445
'20#.#88.168.93':139
'20#.#88.69.101':139
'20#.#88.40.247':139
'20#.#88.171.138':139
'20#.#88.101.86':139
'20#.#88.154.68':139
'20#.#88.99.52':139
'20#.#88.93.99':139
'20#.#88.70.48':139
'20#.#88.140.17':139
'20#.#88.249.129':445
'20#.#88.60.141':445
'20#.#88.14.60':445
'20#.#88.125.238':445
'20#.#88.140.126':445
'20#.#88.43.54':445
'20#.#88.216.16':445
'20#.#88.136.40':445
'20#.#88.3.127':445
'20#.#88.34.3':445
'20#.#88.54.80':445
'20#.#88.104.223':445
'20#.#88.178.105':445
'20#.#88.223.75':445
'20#.#88.46.159':445
'20#.#88.24.179':445
'20#.#88.172.203':445
'20#.#88.111.121':445
'20#.#88.143.147':445
'20#.#88.63.82':445
'20#.#88.24.179':139
'20#.#88.143.147':139
'20#.#88.104.223':139
'20#.#88.178.105':139
'20#.#88.63.82':139
'20#.#88.54.80':139
'20#.#88.125.238':139
'20#.#88.172.203':139
'20#.#88.111.121':139
'20#.#88.46.159':139
'20#.#88.217.54':139
'20#.#88.68.217':139
'20#.#88.59.20':445
'20#.#88.44.22':445
'20#.#88.70.81':139
'20#.#88.249.129':139
'20#.#88.223.75':139
'20#.#88.169.252':139
'20#.#88.21.19':139
'20#.#88.140.126':139
'20#.#88.138.58':139
'20#.#88.11.42':139
'20#.#88.26.84':139
'20#.#88.234.122':139
'20#.#88.168.121':139
'20#.#88.17.203':139
'20#.#88.193.76':139
'20#.#88.190.93':139
'20#.#88.166.241':139
'20#.#88.231.136':139
'20#.#88.43.54':139
'20#.#88.3.127':139
'20#.#88.60.141':139
'20#.#88.14.60':139
'20#.#88.34.3':139
'20#.#88.158.245':139
'20#.#88.33.155':139
'20#.#88.216.16':139
'20#.#88.136.40':139
'20#.#88.190.169':139
'20#.#88.12.107':139
'20#.#88.253.143':139
'20#.#88.172.154':139
'20#.#88.164.94':139
'20#.#88.146.221':139
'20#.#88.175.162':139
'20#.#88.192.11':139
'20#.#88.108.41':139
'20#.#88.248.172':139
'20#.#88.67.224':139
'20#.#88.70.192':139
'20#.#88.112.76':139
'20#.#88.16.1':139
'20#.#88.12.61':139
'20#.#88.194.239':139
'20#.#88.21.18':139
'20#.#88.68.152':139
'20#.#88.114.172':139
'20#.#88.190.166':139
'20#.#88.114.17':139
'20#.#88.245.36':139
'20#.#88.70.13':139
'20#.#88.66.190':139
'20#.#88.104.219':139
'20#.#88.13.195':139
'20#.#88.198.3':445
'20#.#88.26.236':139
'20#.#88.85.96':139
'20#.#88.13.172':139
'20#.#88.79.156':139
'20#.#88.17.100':139
'20#.#88.106.128':139
'20#.#88.192.97':139
'20#.#88.233.160':139
'20#.#88.43.71':139
'20#.#88.14.208':139
'20#.#88.189.102':139
'20#.#88.158.75':139
'20#.#88.171.138':445
'20#.#88.101.86':445
'20#.#88.17.203':445
'20#.#88.193.76':445
'20#.#88.69.101':445
'20#.#88.70.48':445
'20#.#88.140.17':445
'20#.#88.40.247':445
'20#.#88.154.68':445
'20#.#88.166.241':445
'20#.#88.231.136':445
'20#.#88.26.84':445
'20#.#88.158.245':445
'20#.#88.33.155':445
'20#.#88.234.122':445
'20#.#88.168.121':445
'20#.#88.190.93':445
'20#.#88.138.58':445
'20#.#88.11.42':445
'20#.#88.99.52':445
'20#.#88.178.237':139
'20#.#88.76.120':139
'20#.#88.132.187':139
'20#.#88.237.128':139
'20#.#88.165.123':139
'20#.#88.205.215':139
'20#.#88.147.228':139
'20#.#88.7.173':139
'20#.#88.215.244':139
'20#.#88.126.179':139
'20#.#88.149.168':445
'20#.#88.220.149':445
'20#.#88.93.99':445
'20#.#88.168.93':445
'20#.#88.225.45':445
'20#.#88.50.110':139
'20#.#88.74.131':139
'20#.#88.225.240':445
'20#.#88.198.3':139
'20#.#88.19.172':445
'20#.#88.202.15':445
'20#.#88.133.6':445
'20#.#88.240.33':139
'20#.#88.54.187':139
'20#.#88.221.237':445
'20#.#88.197.69':445
'20#.#88.134.25':445
'20#.#88.177.50':445
'20#.#88.224.170':445
'20#.#88.10.184':139
'20#.#88.39.202':139
'20#.#88.12.142':139
'20#.#88.40.24':139
'20#.#88.201.209':139
'20#.#88.192.143':139
'20#.#88.39.132':139
'20#.#88.45.9':139
'20#.#88.94.160':139
'20#.#88.33.157':139
'20#.#88.142.189':445
'20#.#88.244.112':445
'20#.#88.78.215':445
'20#.#88.252.181':445
'20#.#88.66.178':445
'20#.#88.154.22':445
'20#.#88.210.168':445
'20#.#88.84.210':445
'20#.#88.223.102':445
'20#.#88.164.73':445
'20#.#88.46.206':445
'20#.#88.14.141':445
'20#.#88.60.15':445
'20#.#88.7.141':445
'20#.#88.140.52':445
'20#.#88.91.60':445
'20#.#88.149.17':445
'20#.#88.94.175':445
'20#.#88.34.120':445
'20#.#88.84.60':445
'20#.#88.91.60':139
'20#.#88.34.120':139
'20#.#88.14.141':139
'20#.#88.60.15':139
'20#.#88.84.60':139
'20#.#88.46.206':139
'20#.#88.252.181':139
'20#.#88.149.17':139
'20#.#88.94.175':139
'20#.#88.140.52':139
'20#.#88.221.237':139
'20#.#88.177.50':139
'20#.#88.133.6':139
'20#.#88.202.15':139
'20#.#88.224.170':139
'20#.#88.142.189':139
'20#.#88.7.141':139
'20#.#88.197.69':139
'20#.#88.134.25':139
'20#.#88.66.178':139
'20#.#88.137.71':139
'20#.#88.93.18':139
'20#.#88.51.188':139
'20#.#88.71.5':139
'20#.#88.239.210':139
'20#.#88.143.240':139
'20#.#88.163.180':139
'20#.#88.1.153':139
'20#.#88.164.20':139
'20#.#88.105.2':139
'20#.#88.154.22':139
'20#.#88.223.102':139
'20#.#88.244.112':139
'20#.#88.78.215':139
'20#.#88.164.73':139
'20#.#88.46.85':139
'20#.#88.247.80':139
'20#.#88.210.168':139
'20#.#88.84.210':139
'20#.#88.60.156':139
'20#.#88.228.65':139
'20#.#88.169.171':139
'20#.#88.91.220':139
'20#.#88.212.211':139
'20#.#88.230.111':139
'20#.#88.19.172':139
'20#.#88.243.84':139
'20#.#88.139.133':139
'20#.#88.171.236':139
'20#.#88.218.110':139
'20#.#88.82.218':139
'20#.#88.196.160':139
'20#.#88.187.139':139
'20#.#88.78.253':139
'20#.#88.30.3':139
'20#.#88.237.29':139
'20#.#88.60.39':139
'20#.#88.42.252':139
'20#.#88.59.20':139
'20#.#88.91.220':445
'20#.#88.60.156':445
'20#.#88.171.236':445
'20#.#88.169.171':445
'20#.#88.228.65':445
'20#.#88.139.133':445
'20#.#88.230.111':445
'20#.#88.212.211':445
'20#.#88.243.84':445
'20#.#88.237.29':445
'20#.#88.187.139':445
'20#.#88.218.110':445
'20#.#88.44.22':139
'20#.#88.196.160':445
'20#.#88.82.218':445
'20#.#88.42.252':445
'20#.#88.30.3':445
'20#.#88.78.253':445
'20#.#88.60.39':445
'20#.#88.40.24':445
'20#.#88.201.209':445
'20#.#88.143.240':445
'20#.#88.163.180':445
'20#.#88.39.202':445
'20#.#88.94.160':445
'20#.#88.33.157':445
'20#.#88.12.142':445
'20#.#88.192.143':445
'20#.#88.164.20':445
'20#.#88.105.2':445
'20#.#88.51.188':445
'20#.#88.46.85':445
'20#.#88.247.80':445
'20#.#88.71.5':445
'20#.#88.239.210':445
'20#.#88.1.153':445
'20#.#88.137.71':445
'20#.#88.93.18':445
'20#.#88.39.132':445
'20#.#88.84.210':9988
'20#.#88.105.2':9988
'20#.#88.78.215':9988
'20#.#88.164.73':9988
'20#.#88.93.18':9988
'20#.#88.143.240':9988
'20#.#88.12.142':9988
'20#.#88.1.153':9988
'20#.#88.164.20':9988
'20#.#88.223.102':9988
'20#.#88.240.33':445
'20#.#88.54.187':445
'20#.#88.45.9':445
'20#.#88.10.184':445
'20#.#88.133.6':9988
'20#.#88.149.17':9988
'20#.#88.66.178':9988
'20#.#88.34.120':9988
'20#.#88.84.60':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней