Trojan.DownLoader12.28866

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#11.22.146':139
'20#.#11.117.173':139
'20#.#11.13.33':139
'20#.#11.159.181':139
'20#.#11.98.70':139
'20#.#11.153.29':139
'20#.#11.1.46':139
'20#.#11.124.65':139
'20#.#11.155.89':139
'20#.#11.44.155':139
'20#.#11.41.165':139
'20#.#11.244.183':139
'20#.#11.39.11':139
'20#.#11.183.244':139
'20#.#11.250.172':139
'20#.#11.245.58':139
'20#.#11.37.149':139
'20#.#11.51.148':139
'20#.#11.113.0':139
'20#.#11.245.175':139
'20#.#11.35.212':139
'20#.#11.190.1':139
'20#.#11.113.0':445
'20#.#11.37.149':445
'20#.#11.35.212':445
'20#.#11.39.11':445
'20#.#11.245.175':445
'20#.#11.98.70':445
'20#.#11.13.33':445
'20#.#11.159.181':445
'20#.#11.51.148':445
'20#.#11.41.165':445
'20#.#11.244.183':445
'20#.#11.38.244':139
'20#.#11.80.199':139
'20#.#11.38.89':139
'20#.#11.177.55':139
'20#.#11.75.82':139
'20#.#11.245.58':445
'20#.#11.183.244':445
'20#.#11.250.172':445
'20#.#11.108.38':139
'20#.#11.74.214':445
'20#.#11.86.22':139
'20#.#11.143.210':139
'20#.#11.173.201':139
'20#.#11.236.108':139
'20#.#11.201.143':139
'20#.#11.207.58':139
'20#.#11.224.16':445
'20#.#11.22.137':139
'20#.#11.9.201':139
'20#.#11.25.200':139
'20#.#11.229.36':139
'20#.#11.85.183':139
'20#.#11.29.228':139
'20#.#11.168.34':139
'20#.#11.62.162':139
'20#.#11.62.63':139
'20#.#11.6.169':139
'20#.#11.46.41':139
'20#.#11.233.148':139
'20#.#11.104.165':139
'20#.#11.166.104':139
'20#.#11.38.22':445
'20#.#11.86.22':445
'20#.#11.143.210':445
'20#.#11.173.201':445
'20#.#11.236.108':445
'20#.#11.201.143':445
'20#.#11.207.58':445
'20#.#11.74.214':139
'20#.#11.22.137':445
'20#.#11.9.201':445
'20#.#11.25.200':445
'20#.#11.229.36':445
'20#.#11.85.183':445
'20#.#11.29.228':445
'20#.#11.168.34':445
'20#.#11.62.162':445
'20#.#11.62.63':445
'20#.#11.6.169':445
'20#.#11.46.41':445
'20#.#11.233.148':445
'20#.#11.104.165':445
'20#.#11.166.104':445
'20#.#11.22.146':445
'20#.#11.28.202':139
'20#.#11.244.108':139
'20#.#11.137.119':445
'20#.#11.9.181':445
'20#.#11.13.17':445
'20#.#11.85.70':139
'20#.#11.0.170':139
'20#.#11.245.155':139
'20#.#11.32.70':139
'20#.#11.85.217':139
'20#.#11.64.98':445
'20#.#11.242.118':445
'20#.#11.215.40':445
'20#.#11.2.167':445
'20#.#11.63.254':445
'20#.#11.166.25':445
'20#.#11.180.161':445
'20#.#11.232.95':445
'20#.#11.21.156':445
'20#.#11.117.7':445
'20#.#11.228.114':445
'20#.#11.142.178':139
'20#.#11.0.137':139
'20#.#11.78.190':139
'20#.#11.18.178':139
'20#.#11.10.232':139
'20#.#11.178.169':139
'20#.#11.142.110':139
'20#.#11.55.40':139
'20#.#11.29.1':139
'20#.#11.240.201':139
'20#.#11.250.90':139
'20#.#11.208.156':139
'20#.#11.117.132':139
'20#.#11.22.89':139
'20#.#11.97.82':139
'20#.#11.225.193':139
'20#.#11.70.235':139
'20#.#11.192.203':139
'20#.#11.156.193':139
'20#.#11.203.78':139
'20#.#11.156.233':139
'20#.#11.151.249':139
'20#.#11.77.44':139
'20#.#11.47.127':139
'20#.#11.8.49':139
'20#.#11.80.199':445
'20#.#11.108.38':445
'20#.#11.128.18':139
'20#.#11.26.6':139
'20#.#11.76.22':139
'20#.#11.180.98':139
'20#.#11.91.21':139
'20#.#11.38.244':445
'20#.#11.124.65':445
'20#.#11.153.29':445
'20#.#11.44.155':445
'20#.#11.117.173':445
'20#.#11.155.89':445
'20#.#11.75.82':445
'20#.#11.38.89':445
'20#.#11.177.55':445
'20#.#11.1.46':445
'20#.#11.190.1':445
'20#.#11.63.254':139
'20#.#11.77.44':445
'20#.#11.47.127':445
'20#.#11.8.49':445
'20#.#11.13.17':139
'20#.#11.137.119':139
'20#.#11.128.18':445
'20#.#11.26.6':445
'20#.#11.76.22':445
'20#.#11.180.98':445
'20#.#11.91.21':445
'20#.#11.9.181':139
'20#.#11.215.40':139
'20#.#11.117.7':139
'20#.#11.242.118':139
'20#.#11.166.25':139
'20#.#11.2.167':139
'20#.#11.232.95':139
'20#.#11.64.98':139
'20#.#11.180.161':139
'20#.#11.228.114':139
'20#.#11.21.156':139
'20#.#11.31.124':445
'20#.#11.41.147':445
'20#.#11.123.198':445
'20#.#11.132.39':445
'20#.#11.198.131':445
'20#.#11.81.85':445
'20#.#11.42.81':445
'20#.#11.42.71':445
'20#.#11.173.171':445
'20#.#11.251.79':445
'20#.#11.40.44':445
'20#.#11.248.50':139
'20#.#11.7.249':139
'20#.#11.94.104':139
'20#.#11.237.46':139
'20#.#11.160.237':139
'20#.#11.44.79':445
'20#.#11.79.95':445
'20#.#11.165.232':139
'20#.#11.209.7':139
'20#.#11.231.208':139
'20#.#11.79.145':445
'20#.#11.245.204':445
'20#.#11.18.117':445
'20#.#11.5.126':445
'20#.#11.39.65':445
'20#.#11.125.174':445
'20#.#11.120.108':445
'20#.#11.196.89':445
'20#.#11.13.216':445
'20#.#11.36.235':445
'20#.#11.52.86':445
'20#.#11.65.53':445
'20#.#11.81.249':445
'20#.#11.178.38':445
'20#.#11.49.30':445
'20#.#11.221.60':445
'20#.#11.248.132':445
'20#.#11.30.21':445
'20#.#11.160.246':445
'20#.#11.186.39':445
'20#.#11.247.151':445
'20#.#11.71.134':445
'20#.#11.221.60':139
'20#.#11.248.132':139
'20#.#11.79.145':139
'20#.#11.81.85':139
'20#.#11.42.81':139
'20#.#11.247.151':139
'20#.#11.71.134':139
'20#.#11.178.38':139
'20#.#11.49.30':139
'20#.#11.81.249':139
'20#.#11.42.71':139
'20#.#11.132.39':139
'20#.#11.198.131':139
'20#.#11.40.44':139
'20#.#11.44.79':139
'20#.#11.79.95':139
'20#.#11.173.171':139
'20#.#11.251.79':139
'20#.#11.41.147':139
'20#.#11.123.198':139
'20#.#11.31.124':139
'20#.#11.186.39':139
'20#.#11.165.64':139
'20#.#11.145.92':139
'20#.#11.228.195':139
'20#.#11.120.108':139
'20#.#11.196.89':139
'20#.#11.239.153':139
'20#.#11.16.110':139
'20#.#11.135.193':139
'20#.#11.80.137':139
'20#.#11.204.55':139
'20#.#11.13.216':139
'20#.#11.39.65':139
'20#.#11.125.174':139
'20#.#11.65.53':139
'20#.#11.30.21':139
'20#.#11.160.246':139
'20#.#11.36.235':139
'20#.#11.52.86':139
'20#.#11.18.117':139
'20#.#11.5.126':139
'20#.#11.245.204':139
'20#.#11.228.195':445
'20#.#11.16.108':445
'20#.#11.75.119':445
'20#.#11.67.69':445
'20#.#11.104.12':139
'20#.#11.75.135':445
'20#.#11.77.161':445
'20#.#11.74.91':445
'20#.#11.17.158':445
'20#.#11.13.100':445
'20#.#11.107.169':445
'20#.#11.41.92':139
'20#.#11.92.183':139
'20#.#11.156.4':139
'20#.#11.45.252':139
'20#.#11.2.142':139
'20#.#11.9.204':139
'20#.#11.200.30':139
'20#.#11.92.182':139
'20#.#11.148.174':139
'20#.#11.70.228':139
'20#.#11.174.163':139
'20#.#11.49.202':445
'20#.#11.148.174':445
'20#.#11.200.30':445
'20#.#11.174.163':445
'20#.#11.156.4':445
'20#.#11.70.228':445
'20#.#11.224.16':139
'20#.#11.38.22':139
'20#.#11.104.12':445
'20#.#11.92.182':445
'20#.#11.41.92':445
'20#.#11.92.183':445
'20#.#11.233.25':445
'20#.#11.245.233':445
'20#.#11.65.118':445
'20#.#11.119.110':445
'20#.#11.102.163':445
'20#.#11.9.204':445
'20#.#11.45.252':445
'20#.#11.2.142':445
'20#.#11.139.245':445
'20#.#11.96.228':445
'20#.#11.165.232':445
'20#.#11.132.39':9988
'20#.#11.231.208':445
'20#.#11.7.249':445
'20#.#11.209.7':445
'20#.#11.41.147':9988
'20#.#11.173.171':9988
'20#.#11.123.198':9988
'20#.#11.79.95':9988
'20#.#11.44.79':9988
'20#.#11.248.50':445
'20#.#11.204.55':445
'20#.#11.135.193':445
'20#.#11.80.137':445
'20#.#11.165.64':445
'20#.#11.145.92':445
'20#.#11.160.237':445
'20#.#11.94.104':445
'20#.#11.237.46':445
'20#.#11.239.153':445
'20#.#11.16.110':445
'20#.#11.42.81':9988
'20#.#11.119.110':139
'20#.#11.102.163':139
'20#.#11.49.202':139
'20#.#11.77.161':139
'20#.#11.74.91':139
'20#.#11.139.245':139
'20#.#11.96.228':139
'20#.#11.245.233':139
'20#.#11.65.118':139
'20#.#11.233.25':139
'20#.#11.17.158':139
'20#.#11.36.235':9988
'20#.#11.75.135':139
'20#.#11.178.38':9988
'20#.#11.79.145':9988
'20#.#11.81.249':9988
'20#.#11.13.100':139
'20#.#11.107.169':139
'20#.#11.75.119':139
'20#.#11.67.69':139
'20#.#11.16.108':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней