Trojan.DownLoader12.28904

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##5.117.230':445
'62.##5.47.250':445
'62.##5.32.190':445
'62.##5.104.149':445
'62.##5.82.213':445
'62.##5.77.159':445
'62.##5.126.220':445
'62.##5.228.36':445
'62.##5.113.14':445
'62.##5.133.42':445
'62.##5.81.67':445
'62.##5.145.72':445
'62.##5.252.20':445
'62.##5.235.87':445
'62.##5.48.67':445
'62.##5.24.214':445
'62.##5.198.115':445
'62.##5.78.131':445
'62.##5.11.73':445
'62.##5.235.176':445
'62.##5.139.74':445
'62.##5.143.244':445
'62.##5.114.82':445
'62.##5.105.108':445
'62.##5.200.98':445
'62.##5.24.182':445
'62.##5.38.183':445
'62.##5.42.108':445
'62.##5.205.243':445
'62.##5.82.191':445
'62.##5.167.147':445
'62.##5.160.166':445
'62.##5.15.193':445
'62.##5.148.98':445
'62.##5.44.161':445
'62.##5.178.123':445
'62.##5.24.68':445
'62.##5.64.96':445
'62.##5.234.109':445
'62.##5.65.44':445
'62.##5.160.166':139
'62.##5.44.161':139
'62.##5.148.98':139
'62.##5.167.147':139
'62.##5.64.96':139
'62.##5.24.68':139
'62.##5.82.191':139
'62.##5.234.109':139
'62.##5.178.123':139
'62.##5.15.193':139
'62.##5.47.250':139
'62.##5.82.213':139
'62.##5.104.149':139
'62.##5.117.230':139
'62.##5.228.36':139
'62.##5.126.220':139
'62.##5.235.176':139
'62.##5.113.14':139
'62.##5.77.159':139
'62.##5.114.82':139
'62.##5.45.163':139
'62.##5.252.247':139
'62.##5.74.233':139
'62.##5.248.34':139
'62.##5.97.32':139
'62.##5.24.230':139
'62.##5.98.222':445
'62.#85.6.97':139
'62.#85.25.6':139
'62.##5.17.218':139
'62.##5.143.244':139
'62.##5.200.98':139
'62.##5.105.108':139
'62.##5.139.74':139
'62.##5.42.108':139
'62.##5.38.183':139
'62.##5.203.98':139
'62.##5.205.243':139
'62.##5.24.182':139
'62.##5.203.98':445
'62.##5.22.235':139
'62.##5.17.28':139
'62.##5.135.14':139
'62.##5.38.66':139
'62.##5.27.95':139
'62.##5.165.172':139
'62.##5.71.29':139
'62.##5.130.98':139
'62.##5.172.199':139
'62.##5.186.43':139
'62.##5.149.122':139
'62.##5.30.107':139
'62.##5.17.131':139
'62.##5.133.206':139
'62.##5.174.248':139
'62.##5.226.96':139
'62.##5.169.106':139
'62.##5.95.220':139
'62.##5.77.179':139
'62.##5.123.134':139
'62.##5.87.101':445
'62.##5.34.187':445
'62.##5.243.101':445
'62.##5.133.227':445
'62.##5.207.238':445
'62.##5.87.219':445
'62.##5.175.124':445
'62.##5.192.12':445
'62.##5.219.24':445
'62.##5.10.210':445
'62.##5.73.178':445
'62.#85.3.89':445
'62.##5.32.204':445
'62.##5.190.235':445
'62.##5.129.3':445
'62.##5.149.96':445
'62.##5.195.79':445
'62.##5.76.23':445
'62.##5.71.225':445
'62.##5.13.152':139
'62.#85.3.89':139
'62.##5.129.3':139
'62.##5.190.235':139
'62.##5.73.178':139
'62.##5.76.23':139
'62.##5.195.79':139
'62.##5.10.210':139
'62.##5.71.225':139
'62.##5.149.96':139
'62.##5.32.204':139
'62.##5.248.34':445
'62.##5.45.163':445
'62.##5.17.218':445
'62.##5.74.233':445
'62.##5.252.247':445
'62.#85.25.6':445
'62.##5.24.230':445
'62.##5.97.32':445
'62.#85.6.97':445
'62.##5.243.101':139
'62.##5.207.181':139
'62.##5.43.105':139
'62.##5.39.219':139
'62.##5.17.39':139
'62.##5.119.192':139
'62.##5.154.136':139
'62.##5.64.114':139
'62.##5.43.242':139
'62.##5.233.61':139
'62.##5.51.74':139
'62.##5.34.187':139
'62.##5.207.238':139
'62.##5.133.227':139
'62.##5.87.101':139
'62.##5.192.12':139
'62.##5.175.124':139
'62.##5.190.86':139
'62.##5.219.24':139
'62.##5.87.219':139
'62.##5.32.190':139
'62.##5.185.225':445
'62.##5.87.175':445
'62.##5.160.65':139
'62.##5.119.193':445
'62.##5.81.156':445
'62.##5.190.139':445
'62.##5.193.236':445
'62.##5.211.120':445
'62.##5.14.168':445
'62.##5.5.243':139
'62.##5.29.96':139
'62.#85.54.3':139
'62.##5.241.25':139
'62.##5.151.45':139
'62.##5.235.218':139
'62.##5.51.240':139
'62.##5.87.211':139
'62.##5.146.233':139
'62.##5.74.149':139
'62.##5.17.105':445
'62.##5.65.254':445
'62.##5.115.54':445
'62.##5.216.109':445
'62.##5.36.217':445
'62.##5.225.138':445
'62.##5.26.218':445
'62.##5.218.177':445
'62.##5.228.94':445
'62.##5.210.158':445
'62.##5.111.158':445
'62.##5.56.97':445
'62.##5.27.41':445
'62.##5.104.7':445
'62.##5.24.207':445
'62.##5.174.73':445
'62.##5.58.67':445
'62.##5.81.246':445
'62.##5.216.166':445
'62.##5.46.215':445
'62.##5.132.127':139
'62.##5.27.41':139
'62.##5.174.73':139
'62.##5.24.207':139
'62.##5.56.97':139
'62.##5.216.166':139
'62.##5.81.246':139
'62.##5.111.158':139
'62.##5.46.215':139
'62.##5.58.67':139
'62.##5.104.7':139
'62.##5.87.175':139
'62.##5.81.156':139
'62.##5.185.225':139
'62.##5.119.193':139
'62.##5.211.120':139
'62.##5.193.236':139
'62.##5.17.105':139
'62.##5.14.168':139
'62.##5.190.139':139
'62.##5.216.109':139
'62.##5.118.213':139
'62.##5.161.118':139
'62.##5.39.109':139
'62.##5.213.85':139
'62.##5.1.172':139
'62.##5.12.21':139
'62.##5.205.12':139
'62.##5.62.117':139
'62.#85.15.5':139
'62.##5.219.220':139
'62.##5.115.54':139
'62.##5.225.138':139
'62.##5.36.217':139
'62.##5.65.254':139
'62.##5.228.94':139
'62.##5.218.177':139
'62.##5.220.247':139
'62.##5.210.158':139
'62.##5.26.218':139
'62.##5.220.247':445
'62.##5.142.253':139
'62.##5.252.147':139
'62.##5.121.80':139
'62.##5.12.193':139
'62.##5.225.172':445
'62.##5.134.253':445
'62.##5.72.30':445
'62.##5.191.254':445
'62.##5.6.249':445
'62.##5.40.15':139
'62.##5.191.254':139
'62.##5.6.249':139
'62.##5.29.96':9988
'62.##5.225.172':139
'62.##5.134.253':139
'62.##5.161.159':139
'62.##5.26.47':139
'62.##5.72.30':139
'62.##5.164.210':139
'62.##5.164.210':445
'62.##5.145.72':139
'62.##5.48.67':139
'62.##5.235.87':139
'62.##5.81.67':139
'62.##5.78.131':139
'62.##5.198.115':139
'62.##5.133.42':139
'62.##5.11.73':139
'62.##5.24.214':139
'62.##5.252.20':139
'62.##5.40.15':445
'62.##5.121.80':445
'62.##5.161.159':445
'62.##5.26.47':445
'62.##5.12.193':445
'62.##5.98.222':139
'62.##5.65.44':139
'62.##5.142.253':445
'62.##5.252.147':445
'62.##5.218.177':9988
'62.##5.151.45':445
'62.##5.29.96':445
'62.##5.132.127':445
'62.##5.241.25':445
'62.#85.54.3':445
'62.##5.74.149':445
'62.##5.51.240':445
'62.##5.235.218':445
'62.##5.146.233':445
'62.##5.205.12':445
'62.##5.213.85':445
'62.##5.118.213':445
'62.##5.219.220':445
'62.##5.39.109':445
'62.##5.161.118':445
'62.#85.15.5':445
'62.##5.12.21':445
'62.##5.1.172':445
'62.##5.62.117':445
'62.##5.87.211':445
'62.##5.36.217':9988
'62.##5.65.254':9988
'62.##5.46.215':9988
'62.##5.111.158':9988
'62.##5.115.54':9988
'62.##5.26.218':9988
'62.#85.54.3':9988
'62.##5.228.94':9988
'62.##5.39.109':9988
'62.##5.174.73':9988
'62.##5.119.193':9988
'62.##5.211.120':9988
'62.##5.5.243':445
'62.##5.160.65':445
'62.##5.14.168':9988
'62.##5.24.207':9988
'62.##5.56.97':9988
'62.##5.190.139':9988
'62.##5.193.236':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней