Trojan.DownLoader12.28867

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'88.##.23.169':139
'88.##.255.128':139
'88.##.254.115':139
'88.##.205.125':139
'88.##.143.186':139
'88.##.185.82':139
'88.##.171.18':139
'88.#7.126.1':139
'88.##.237.38':139
'88.#7.54.31':139
'88.##.252.244':139
'88.##.30.225':139
'88.#7.2.187':139
'88.#7.3.103':139
'88.##.233.94':445
'88.##.58.214':445
'88.#7.32.28':139
'88.##.183.19':139
'88.#7.23.43':139
'88.##.28.220':139
'88.##.83.199':139
'88.##.143.186':445
'88.##.254.115':445
'88.##.205.125':445
'88.##.183.19':445
'88.##.252.244':445
'88.#7.54.31':445
'88.#7.126.1':445
'88.##.237.38':445
'88.##.23.169':445
'88.##.255.128':445
'88.#7.32.28':445
'88.##.224.184':139
'88.#7.3.103':445
'88.##.124.183':139
'88.#7.46.2':139
'88.##.59.141':139
'88.##.83.199':445
'88.#7.23.43':445
'88.##.28.220':445
'88.##.30.225':445
'88.#7.2.187':445
'88.##.206.213':445
'88.##.206.213':139
'88.##.233.94':139
'88.#7.89.49':139
'88.##.14.197':139
'88.##.158.14':139
'88.##.32.223':445
'88.#7.54.50':445
'88.##.130.10':445
'88.##.58.214':139
'88.##.151.33':445
'88.##.228.219':139
'88.##.121.187':139
'88.#7.87.86':139
'88.##.191.196':139
'88.#7.4.51':139
'88.##.196.254':139
'88.#7.7.64':139
'88.##.251.193':139
'88.##.180.59':139
'88.##.175.189':139
'88.##.169.61':139
'88.##.180.59':445
'88.#7.7.64':445
'88.##.169.61':445
'88.#7.87.86':445
'88.##.175.189':445
'88.##.158.14':445
'88.#7.89.49':445
'88.##.14.197':445
'88.##.251.193':445
'88.##.228.219':445
'88.##.121.187':445
'88.##.210.149':445
'88.#7.24.48':445
'88.##.185.238':445
'88.##.124.55':445
'88.##.17.171':445
'88.##.196.254':445
'88.##.191.196':445
'88.#7.4.51':445
'88.##.153.55':445
'88.##.249.93':445
'88.##.158.114':445
'88.##.107.128':445
'88.#7.1.34':445
'88.##.88.234':445
'88.#7.14.22':445
'88.##.129.238':139
'88.##.84.133':139
'88.#7.23.50':445
'88.##.13.194':445
'88.##.73.189':445
'88.##.65.194':445
'88.##.239.26':445
'88.##.58.114':445
'88.##.181.105':445
'88.#7.22.20':445
'88.##.239.252':445
'88.#7.9.128':445
'88.##.117.196':445
'88.#7.15.43':445
'88.##.130.36':445
'88.##.57.223':445
'88.##.133.12':139
'88.#7.31.95':139
'88.##.153.140':139
'88.##.30.194':139
'88.#7.57.19':139
'88.#7.62.84':139
'88.##.27.221':139
'88.##.168.20':139
'88.#7.33.37':139
'88.##.103.199':139
'88.##.102.83':139
'88.##.79.161':139
'88.#7.117.5':139
'88.##.65.179':139
'88.##.65.153':139
'88.##.54.131':139
'88.#7.64.65':139
'88.##.181.231':139
'88.#7.1.24':139
'88.#7.3.184':139
'88.##.150.192':139
'88.##.156.235':445
'88.##.156.235':139
'88.#7.22.20':139
'88.##.164.147':139
'88.##.47.178':139
'88.##.112.39':139
'88.##.58.114':139
'88.##.130.36':139
'88.##.239.26':139
'88.##.239.252':139
'88.##.181.105':139
'88.##.176.118':139
'88.##.59.141':445
'88.##.124.183':445
'88.#7.46.2':445
'88.##.185.82':445
'88.##.171.18':445
'88.##.111.100':139
'88.##.86.112':139
'88.##.190.196':139
'88.##.224.184':445
'88.##.229.126':139
'88.##.190.196':445
'88.##.111.100':445
'88.##.229.126':445
'88.##.73.189':139
'88.#7.23.50':139
'88.##.112.39':445
'88.##.164.147':445
'88.##.47.178':445
'88.##.86.112':445
'88.##.176.118':445
'88.##.13.194':139
'88.##.117.196':139
'88.##.65.194':139
'88.#7.9.128':139
'88.##.57.223':139
'88.#7.15.43':139
'88.##.158.114':139
'88.##.107.128':139
'88.#7.1.34':139
'88.##.88.234':139
'88.#7.14.22':139
'88.##.203.195':445
'88.##.23.166':445
'88.##.124.102':445
'88.##.166.158':445
'88.##.89.160':445
'88.##.206.229':445
'88.##.19.156':445
'88.##.250.78':445
'88.##.108.55':445
'88.#7.1.231':445
'88.##.136.63':445
'88.##.95.191':139
'88.#7.57.47':139
'88.##.157.51':139
'88.##.68.100':139
'88.##.244.204':139
'88.##.131.167':445
'88.##.184.78':445
'88.##.140.126':139
'88.#7.41.55':139
'88.#7.83.95':139
'88.#7.101.7':445
'88.##.129.87':445
'88.##.210.120':445
'88.##.235.73':445
'88.##.158.176':445
'88.##.96.109':445
'88.##.204.245':445
'88.##.157.219':445
'88.#7.31.24':445
'88.##.130.138':445
'88.#7.5.250':445
'88.#7.7.105':445
'88.##.106.25':445
'88.#7.16.72':445
'88.##.54.144':445
'88.#7.18.82':445
'88.##.244.231':445
'88.#7.87.97':445
'88.##.153.120':445
'88.#7.2.173':445
'88.##.208.62':445
'88.##.88.162':139
'88.#7.18.82':139
'88.#7.16.72':139
'88.##.54.144':139
'88.##.206.229':139
'88.##.19.156':139
'88.##.208.62':139
'88.##.153.120':139
'88.#7.2.173':139
'88.#7.7.105':139
'88.##.106.25':139
'88.##.250.78':139
'88.##.136.63':139
'88.##.131.167':139
'88.##.203.195':139
'88.##.124.102':139
'88.##.184.78':139
'88.##.108.55':139
'88.#7.1.231':139
'88.##.23.166':139
'88.##.89.160':139
'88.##.166.158':139
'88.##.26.213':139
'88.##.59.187':139
'88.##.21.226':139
'88.##.96.109':139
'88.##.204.245':139
'88.##.166.112':139
'88.##.44.214':139
'88.#7.6.205':139
'88.##.161.58':139
'88.##.217.115':139
'88.##.157.219':139
'88.##.235.73':139
'88.##.158.176':139
'88.#7.5.250':139
'88.##.244.231':139
'88.#7.87.97':139
'88.#7.31.24':139
'88.##.130.138':139
'88.##.129.87':139
'88.##.210.120':139
'88.#7.101.7':139
'88.##.123.234':445
'88.##.127.124':445
'88.##.234.31':445
'88.##.93.146':445
'88.#7.31.93':445
'88.##.218.166':445
'88.##.201.16':445
'88.##.59.110':445
'88.#7.5.37':445
'88.##.181.110':445
'88.##.146.56':445
'88.##.237.31':139
'88.#7.28.45':139
'88.##.31.186':139
'88.##.85.249':139
'88.#7.83.2':139
'88.#7.74.90':139
'88.##.231.73':139
'88.##.158.74':139
'88.#7.87.83':139
'88.##.197.141':139
'88.##.124.55':139
'88.##.17.171':139
'88.#7.54.50':139
'88.##.130.10':139
'88.##.32.223':139
'88.##.153.55':139
'88.##.249.93':139
'88.#7.24.48':139
'88.##.185.238':139
'88.##.210.149':139
'88.##.151.33':139
'88.##.237.31':445
'88.#7.28.45':445
'88.##.31.186':445
'88.##.85.249':445
'88.#7.83.2':445
'88.#7.74.90':445
'88.##.231.73':445
'88.##.158.74':445
'88.#7.87.83':445
'88.##.197.141':445
'88.##.201.16':139
'88.#7.41.55':445
'88.#7.83.95':445
'88.#7.57.47':445
'88.##.157.51':445
'88.##.95.191':445
'88.#7.1.231':9988
'88.##.250.78':9988
'88.##.108.55':9988
'88.##.140.126':445
'88.##.203.195':9988
'88.##.244.204':445
'88.##.161.58':445
'88.##.217.115':445
'88.##.59.187':445
'88.##.21.226':445
'88.##.26.213':445
'88.##.88.162':445
'88.##.68.100':445
'88.##.44.214':445
'88.#7.6.205':445
'88.##.166.112':445
'88.##.234.31':139
'88.##.123.234':139
'88.#7.31.93':139
'88.##.146.56':139
'88.##.93.146':139
'88.##.59.110':139
'88.##.218.166':139
'88.##.181.110':139
'88.##.127.124':139
'88.#7.5.37':139
'88.##.166.112':9988
'88.#7.18.82':9988
'88.##.244.231':9988
'88.##.54.144':9988
'88.##.206.229':9988
'88.##.19.156':9988
'88.##.158.176':9988
'88.##.210.120':9988
'88.##.235.73':9988
'88.#7.87.97':9988
'88.#7.5.250':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней