Trojan.DownLoader12.28907

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#5.197.57':139
'20#.#5.64.117':139
'20#.#5.252.250':139
'20#.#5.17.119':139
'20#.#5.39.183':139
'20#.#5.75.202':139
'20#.#5.211.29':139
'20#.#5.125.158':139
'20#.#5.171.132':139
'20#.#5.159.90':139
'20#.75.47.3':139
'20#.#5.230.142':139
'20#.#5.98.56':139
'20#.#5.168.171':139
'20#.#5.20.168':139
'20#.#5.134.38':139
'20#.#5.32.215':139
'20#.#5.38.75':139
'20#.#5.119.41':139
'20#.#5.74.84':139
'20#.#5.46.176':139
'20#.#5.20.168':445
'20#.#5.98.56':445
'20#.#5.168.171':445
'20#.#5.46.109':445
'20#.#5.171.98':445
'20#.#5.74.84':445
'20#.#5.38.75':445
'20#.#5.119.41':445
'20#.75.47.3':445
'20#.#5.230.142':445
'20#.#5.128.134':445
'20#.#5.226.190':445
'20#.#5.42.155':445
'20#.#5.89.184':139
'20#.#5.114.120':445
'20#.#5.137.236':445
'20#.#5.183.254':445
'20#.#5.236.249':445
'20#.#5.68.85':445
'20#.#5.151.130':445
'20#.#5.171.98':139
'20#.#5.126.25':445
'20#.#5.252.125':445
'20#.#5.160.64':139
'20#.#5.115.161':139
'20#.#5.2.146':139
'20#.#5.52.17':445
'20#.#5.88.80':445
'20#.#5.62.19':445
'20#.#5.34.253':445
'20#.#5.54.162':445
'20#.#5.199.31':139
'20#.#5.224.198':139
'20#.#5.32.88':139
'20#.#5.52.17':139
'20#.#5.88.80':139
'20#.#5.138.216':139
'20#.#5.223.92':139
'20#.#5.129.202':139
'20#.#5.100.184':139
'20#.#5.8.189':139
'20#.#5.32.88':445
'20#.#5.226.190':139
'20#.#5.68.85':139
'20#.#5.128.134':139
'20#.#5.114.120':139
'20#.#5.42.155':139
'20#.#5.183.254':139
'20#.#5.46.109':139
'20#.#5.137.236':139
'20#.#5.151.130':139
'20#.#5.236.249':139
'20#.#5.8.189':445
'20#.#5.129.202':445
'20#.#5.100.184':445
'20#.#5.199.31':445
'20#.#5.224.198':445
'20#.#5.2.146':445
'20#.#5.160.64':445
'20#.#5.115.161':445
'20#.#5.138.216':445
'20#.#5.223.92':445
'20#.#5.2.113':139
'20#.#5.197.176':139
'20#.#5.122.187':139
'20#.#5.52.143':139
'20#.#5.26.215':139
'20#.#5.93.106':139
'20#.#5.130.149':139
'20#.#5.251.21':139
'20#.75.2.43':139
'20#.#5.36.176':139
'20#.#5.41.56':445
'20#.#5.153.129':445
'20#.#5.11.92':445
'20#.#5.100.143':445
'20#.75.2.29':445
'20#.#5.153.51':139
'20#.#5.47.123':139
'20#.#5.52.116':445
'20#.#5.171.153':445
'20#.#5.53.79':445
'20#.#5.54.38':139
'20#.#5.115.210':139
'20#.#5.5.227':139
'20#.#5.37.250':139
'20#.#5.205.43':139
'20#.#5.75.80':139
'20#.#5.1.212':139
'20#.#5.108.12':139
'20#.#5.140.108':139
'20#.#5.81.130':139
'20#.#5.39.239':139
'20#.#5.203.130':139
'20#.#5.150.203':139
'20#.#5.24.89':139
'20#.#5.47.239':139
'20#.#5.255.47':139
'20#.#5.143.38':139
'20#.#5.34.42':139
'20#.#5.103.210':139
'20#.#5.133.251':139
'20#.#5.188.121':139
'20#.#5.192.17':445
'20#.#5.89.184':445
'20#.#5.31.166':139
'20#.#5.46.176':445
'20#.#5.75.202':445
'20#.#5.211.29':445
'20#.#5.130.23':139
'20#.#5.147.122':139
'20#.#5.2.130':139
'20#.#5.204.17':139
'20#.#5.244.231':139
'20#.#5.39.183':445
'20#.#5.252.250':445
'20#.#5.17.119':445
'20#.#5.134.38':445
'20#.#5.32.215':445
'20#.#5.159.90':445
'20#.#5.125.158':445
'20#.#5.171.132':445
'20#.#5.197.57':445
'20#.#5.64.117':445
'20#.#5.139.185':139
'20#.#5.244.231':445
'20#.#5.2.130':445
'20#.#5.204.17':445
'20#.#5.52.116':139
'20#.#5.31.166':445
'20#.#5.124.81':445
'20#.#5.83.226':445
'20#.#5.139.185':445
'20#.#5.130.23':445
'20#.#5.147.122':445
'20#.#5.100.143':139
'20#.75.2.29':139
'20#.#5.192.17':139
'20#.#5.124.81':139
'20#.#5.83.226':139
'20#.#5.171.153':139
'20#.#5.53.79':139
'20#.#5.153.129':139
'20#.#5.11.92':139
'20#.#5.41.56':139
'20#.#5.62.19':139
'20#.#5.61.230':445
'20#.#5.169.145':445
'20#.#5.197.44':445
'20#.#5.44.156':445
'20#.#5.24.77':445
'20#.#5.188.236':445
'20#.#5.117.86':445
'20#.#5.6.253':445
'20#.#5.22.16':445
'20#.#5.92.91':445
'20#.#5.128.87':139
'20#.#5.32.166':139
'20#.#5.12.216':139
'20#.#5.11.195':139
'20#.#5.100.245':139
'20#.#5.88.131':139
'20#.#5.184.199':445
'20#.#5.223.148':139
'20#.#5.11.33':139
'20#.#5.80.182':139
'20#.#5.49.14':445
'20#.#5.180.35':445
'20#.#5.31.163':445
'20#.#5.76.212':445
'20#.#5.52.165':445
'20#.#5.211.227':445
'20#.#5.122.245':445
'20#.#5.120.223':445
'20#.#5.29.18':445
'20#.#5.177.84':445
'20#.#5.241.176':445
'20#.#5.156.127':445
'20#.75.0.67':445
'20#.#5.31.51':445
'20#.#5.122.123':445
'20#.#5.198.230':445
'20#.#5.14.46':445
'20#.#5.25.124':445
'20#.#5.21.126':445
'20#.#5.38.134':445
'20#.#5.65.115':445
'20#.#5.40.139':139
'20#.#5.198.230':139
'20#.#5.31.51':139
'20#.#5.122.123':139
'20#.#5.117.86':139
'20#.#5.49.14':139
'20#.#5.65.115':139
'20#.#5.21.126':139
'20#.#5.38.134':139
'20#.#5.156.127':139
'20#.75.0.67':139
'20#.#5.184.199':139
'20#.#5.61.230':139
'20#.#5.24.77':139
'20#.#5.44.156':139
'20#.#5.197.44':139
'20#.#5.6.253':139
'20#.#5.188.236':139
'20#.#5.92.91':139
'20#.#5.169.145':139
'20#.#5.22.16':139
'20#.#5.14.46':139
'20#.#5.140.35':139
'20#.#5.29.227':139
'20#.#5.154.133':139
'20#.#5.120.223':139
'20#.#5.72.33':139
'20#.#5.185.234':139
'20#.#5.95.242':139
'20#.#5.218.201':139
'20#.#5.186.68':139
'20#.#5.191.67':139
'20#.#5.76.212':139
'20#.#5.180.35':139
'20#.#5.211.227':139
'20#.#5.25.124':139
'20#.#5.52.165':139
'20#.#5.29.18':139
'20#.#5.122.245':139
'20#.#5.241.176':139
'20#.#5.31.163':139
'20#.#5.177.84':139
'20#.#5.54.114':139
'20#.#5.247.68':445
'20#.#5.84.118':139
'20#.#5.245.225':139
'20#.#5.132.206':139
'20#.#5.109.41':445
'20#.#5.26.109':445
'20#.#5.41.221':445
'20#.#5.189.99':445
'20#.#5.73.189':445
'20#.#5.216.200':139
'20#.#5.124.106':139
'20#.#5.103.80':139
'20#.#5.167.127':139
'20#.#5.172.66':139
'20#.#5.179.0':139
'20#.#5.86.199':139
'20#.#5.34.246':139
'20#.#5.104.16':139
'20#.#5.15.104':139
'20#.#5.49.26':445
'20#.#5.132.206':445
'20#.#5.84.118':445
'20#.#5.245.225':445
'20#.#5.179.0':445
'20#.#5.86.199':445
'20#.#5.34.253':139
'20#.#5.54.162':139
'20#.#5.252.125':139
'20#.#5.54.114':445
'20#.#5.126.25':139
'20#.#5.172.66':445
'20#.#5.103.80':445
'20#.#5.167.127':445
'20#.#5.177.86':445
'20#.#5.92.88':445
'20#.#5.15.104':445
'20#.#5.34.246':445
'20#.#5.104.16':445
'20#.#5.216.200':445
'20#.#5.124.106':445
'20#.#5.92.88':139
'20#.#5.128.87':445
'20#.#5.32.166':445
'20#.#5.12.216':445
'20#.#5.11.195':445
'20#.#5.100.245':445
'20#.#5.88.131':445
'20#.#5.61.230':9988
'20#.#5.223.148':445
'20#.#5.11.33':445
'20#.#5.80.182':445
'20#.#5.29.227':445
'20#.#5.186.68':445
'20#.#5.140.35':445
'20#.#5.72.33':445
'20#.#5.154.133':445
'20#.#5.95.242':445
'20#.#5.40.139':445
'20#.#5.185.234':445
'20#.#5.191.67':445
'20#.#5.218.201':445
'20#.#5.44.156':9988
'20#.#5.189.99':139
'20#.#5.73.189':139
'20#.#5.247.68':139
'20#.#5.186.68':9988
'20#.#5.11.195':9988
'20#.#5.49.26':139
'20#.#5.177.86':139
'20#.#5.26.109':139
'20#.#5.41.221':139
'20#.#5.109.41':139
'20#.#5.156.127':9988
'20#.#5.31.51':9988
'20#.#5.198.230':9988
'20#.#5.197.44':9988
'20#.#5.92.91':9988
'20#.#5.120.223':9988
'20#.#5.154.133':9988
'20#.#5.177.84':9988
'20#.#5.38.134':9988
'20#.#5.65.115':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней