Trojan.DownLoader12.28910

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'22#.#2.238.184':445
'22#.#2.235.124':445
'22#.#2.68.77':445
'22#.#2.36.240':445
'22#.#2.180.238':445
'22#.#2.119.93':445
'22#.#2.162.171':445
'22#.#2.29.57':445
'22#.#2.30.109':445
'22#.#2.232.23':445
'22#.#2.62.38':445
'22#.42.6.62':445
'22#.#2.81.131':445
'22#.#2.78.229':139
'22#.#2.217.78':445
'22#.#2.160.240':445
'22#.#2.140.237':139
'22#.#2.131.140':139
'22#.#2.160.131':139
'22#.#2.53.75':445
'22#.#2.227.112':445
'22#.#2.60.227':445
'22#.#2.225.170':445
'22#.#2.28.55':445
'22#.#2.249.251':445
'22#.#2.112.249':445
'22#.#2.59.50':445
'22#.#2.165.58':445
'22#.#2.118.165':445
'22#.#2.199.204':445
'22#.#2.37.226':445
'22#.#2.49.132':445
'22#.#2.159.28':445
'22#.#2.140.237':445
'22#.#2.131.140':445
'22#.#2.160.131':445
'22#.#2.179.222':445
'22#.#2.63.104':445
'22#.#2.199.198':445
'22#.#2.94.201':445
'22#.#2.23.124':445
'22#.#2.201.158':445
'22#.#2.136.67':445
'22#.#2.254.48':445
'22#.#2.61.254':445
'22#.#2.131.24':445
'22#.#2.99.48':445
'22#.#2.184.98':445
'22#.#2.172.49':445
'22#.#2.163.169':445
'22#.#2.222.173':445
'22#.#2.191.143':445
'22#.#2.36.240':139
'22#.#2.180.238':139
'22#.#2.119.93':139
'22#.#2.227.112':139
'22#.#2.60.227':139
'22#.#2.225.170':139
'22#.#2.238.184':139
'22#.#2.62.38':139
'22#.42.6.62':139
'22#.#2.81.131':139
'22#.#2.235.124':139
'22#.#2.68.77':139
'22#.#2.162.171':139
'22#.#2.125.50':139
'22#.#2.78.125':139
'22#.#2.125.50':445
'22#.#2.74.184':445
'22#.#2.112.155':445
'22#.#2.79.85':445
'22#.#2.78.125':445
'22#.#2.28.55':139
'22#.#2.249.251':139
'22#.#2.112.249':139
'22#.#2.217.78':139
'22#.#2.160.240':139
'22#.#2.53.75':139
'22#.#2.199.204':139
'22#.#2.37.226':139
'22#.#2.49.132':139
'22#.#2.99.48':139
'22#.#2.184.98':139
'22#.#2.172.49':139
'22#.#2.59.50':139
'22#.#2.179.222':139
'22#.#2.63.104':139
'22#.#2.199.198':139
'22#.#2.165.58':139
'22#.#2.118.165':139
'22#.#2.159.28':139
'22#.#2.136.67':139
'22#.#2.254.48':139
'22#.#2.61.254':139
'22#.#2.29.57':139
'22#.#2.30.109':139
'22#.#2.232.23':139
'22#.#2.94.201':139
'22#.#2.163.169':139
'22#.#2.222.173':139
'22#.#2.191.143':139
'22#.#2.23.124':139
'22#.#2.201.158':139
'22#.#2.131.24':139
'22#.#2.78.229':445
'22#.#2.12.224':445
'22#.#2.248.12':445
'22#.#2.227.16':445
'22#.#2.232.32':445
'22#.#2.227.221':445
'22#.#2.224.200':445
'22#.#2.36.23':445
'22#.#2.187.200':445
'22#.#2.89.188':445
'22#.#2.53.118':445
'22#.#2.155.131':445
'22#.#2.231.119':445
'22#.#2.145.82':445
'22#.#2.244.199':445
'22#.#2.31.222':445
'22#.#2.221.183':445
'22#.42.2.91':139
'22#.#2.130.173':445
'22#.#2.54.176':445
'22#.#2.23.222':445
'22#.#2.178.57':445
'22#.#2.31.129':445
'22#.#2.163.222':445
'22#.#2.53.141':445
'22#.#2.233.184':445
'22#.#2.24.135':445
'22#.#2.70.16':445
'22#.#2.148.150':445
'22#.#2.255.16':445
'22#.#2.169.26':445
'22#.#2.58.195':445
'22#.#2.16.52':445
'22#.#2.108.254':445
'22#.42.2.91':445
'22#.#2.170.80':139
'22#.#2.195.77':139
'22#.#2.122.156':445
'22#.42.6.86':445
'22#.#2.31.225':445
'22#.#2.236.133':445
'22#.#2.97.94':445
'22#.#2.43.169':445
'22#.#2.221.92':445
'22#.#2.168.244':445
'22#.#2.106.121':445
'22#.#2.34.45':445
'22#.#2.87.164':445
'22#.#2.150.87':445
'22#.#2.47.25':445
'22#.#2.108.226':445
'22#.#2.92.169':445
'22#.#2.164.62':445
'22#.#2.232.32':139
'22#.#2.227.221':139
'22#.#2.224.200':139
'22#.#2.178.57':139
'22#.#2.31.129':139
'22#.#2.163.222':139
'22#.#2.12.224':139
'22#.#2.155.131':139
'22#.#2.231.119':139
'22#.#2.145.82':139
'22#.#2.248.12':139
'22#.#2.227.16':139
'22#.#2.36.23':139
'22#.#2.65.128':445
'22#.#2.130.173':139
'22#.#2.54.176':139
'22#.#2.28.208':139
'22#.#2.65.128':139
'22#.#2.28.208':445
'22#.#2.244.199':139
'22#.#2.53.141':139
'22#.#2.233.184':139
'22#.#2.24.135':139
'22#.#2.31.222':139
'22#.#2.221.183':139
'22#.#2.23.222':139
'22#.#2.169.26':139
'22#.#2.58.195':139
'22#.#2.16.52':139
'22#.#2.87.164':139
'22#.#2.150.87':139
'22#.#2.47.25':139
'22#.#2.70.16':139
'22#.#2.122.156':139
'22#.42.6.86':139
'22#.#2.31.225':139
'22#.#2.148.150':139
'22#.#2.255.16':139
'22#.#2.108.254':139
'22#.#2.221.92':139
'22#.#2.168.244':139
'22#.#2.106.121':139
'22#.#2.187.200':139
'22#.#2.89.188':139
'22#.#2.53.118':139
'22#.#2.236.133':139
'22#.#2.108.226':139
'22#.#2.92.169':139
'22#.#2.164.62':139
'22#.#2.97.94':139
'22#.#2.43.169':139
'22#.#2.34.45':139
'22#.#2.7.175':445
'22#.#2.148.159':445
'22#.#2.206.224':445
'22#.#2.188.224':445
'22#.#2.85.84':445
'22#.#2.174.176':445
'22#.#2.211.110':445
'22#.#2.62.162':445
'22#.#2.163.116':445
'22#.#2.38.56':445
'22#.#2.186.211':445
'22#.#2.63.186':445
'22#.#2.19.221':445
'22#.#2.193.222':445
'22#.#2.231.64':445
'22#.#2.194.95':445
'22#.#2.95.35':445
'22#.#2.213.142':445
'22#.#2.68.18':445
'22#.#2.93.22':445
'22#.#2.95.93':445
'22#.42.44.0':445
'22#.#2.160.133':445
'22#.#2.19.52':445
'22#.#2.144.243':445
'22#.#2.193.17':445
'22#.#2.23.128':445
'22#.#2.31.16':445
'22#.#2.112.9':445
'22#.#2.26.118':445
'22#.#2.187.26':445
'22#.#2.178.72':445
'22#.#2.181.243':445
'22#.#2.113.119':445
'22#.#2.148.159':9988
'22#.#2.7.175':9988
'22#.#2.239.253':445
'22#.#2.43.23':445
'22#.#2.174.248':445
'22#.#2.218.212':445
'22#.#2.178.235':445
'22#.#2.148.142':445
'22#.#2.198.176':445
'22#.#2.158.30':445
'22#.#2.212.60':445
'22#.#2.30.143':445
'22#.#2.49.229':445
'22#.#2.18.189':445
'22#.#2.51.22':445
'22#.#2.58.30':445
'22#.#2.187.39':445
'22#.#2.228.175':445
'22#.#2.174.176':139
'22#.#2.7.175':139
'22#.#2.148.159':139
'22#.#2.160.133':139
'22#.#2.188.224':139
'22#.#2.85.84':139
'22#.#2.206.224':139
'22#.#2.19.221':139
'22#.#2.62.162':139
'22#.#2.163.116':139
'22#.#2.211.110':139
'22#.#2.186.211':139
'22#.#2.63.186':139
'22#.#2.68.18':139
'22#.#2.161.120':139
'22#.#2.95.35':139
'22#.#2.193.222':139
'22#.#2.213.142':139
'22#.#2.231.64':139
'22#.#2.194.95':139
'22#.#2.193.17':139
'22#.#2.95.93':139
'22#.42.44.0':139
'22#.#2.93.22':139
'22#.#2.19.52':139
'22#.#2.144.243':139
'22#.#2.178.72':139
'22#.#2.23.128':139
'22#.#2.31.16':139
'22#.#2.51.22':139
'22#.#2.26.118':139
'22#.#2.187.26':139
'22#.#2.112.9':139
'22#.#2.174.248':139
'22#.#2.113.119':139
'22#.#2.161.120':445
'22#.#2.181.243':139
'22#.#2.239.253':139
'22#.#2.43.23':139
'22#.#2.212.60':139
'22#.#2.218.212':139
'22#.#2.178.235':139
'22#.#2.38.56':139
'22#.#2.158.30':139
'22#.#2.198.176':139
'22#.#2.148.142':139
'22#.#2.228.175':139
'22#.#2.49.229':139
'22#.#2.18.189':139
'22#.#2.30.143':139
'22#.#2.58.30':139
'22#.#2.187.39':139
'22#.#2.174.176':9988
'22#.#2.139.46':445
'22#.#2.63.243':445
'22#.#2.48.174':445
'22#.#2.140.3':445
'22#.#2.109.104':445
'22#.#2.106.66':445
'22#.#2.106.29':445
'22#.#2.132.188':445
'22#.#2.66.120':445
'22#.#2.216.66':445
'22#.#2.166.71':445
'22#.#2.93.15':445
'22#.#2.38.96':445
'22#.#2.74.184':139
'22#.#2.112.155':139
'22#.#2.79.85':139
'22#.#2.137.231':139
'22#.#2.82.138':139
'22#.#2.12.231':139
'22#.#2.78.21':445
'22#.#2.69.243':445
'22#.#2.231.83':445
'22#.#2.4.156':445
'22#.#2.40.78':445
'22#.#2.242.40':445
'22#.#2.239.215':445
'22#.#2.169.91':445
'22#.#2.15.169':445
'22#.#2.34.16':445
'22#.#2.223.134':445
'22#.42.40.7':445
'22#.#2.254.94':445
'22#.#2.126.34':445
'22#.#2.137.231':445
'22#.#2.82.138':445
'22#.#2.12.231':445
'22#.#2.253.162':445
'22#.#2.80.168':445
'22#.#2.231.179':445
'22#.#2.79.222':445
'22#.#2.82.169':445
'22#.#2.251.29':445
'22#.#2.181.215':445
'22#.#2.107.25':445
'22#.#2.159.23':445
'22#.#2.246.181':445
'22#.#2.113.44':445
'22#.42.0.73':445
'22#.#2.167.186':445
'22#.#2.177.246':445
'22#.#2.61.110':445
'22#.#2.157.50':445
'22#.#2.140.3':139
'22#.#2.109.104':139
'22#.#2.106.66':139
'22#.#2.69.243':139
'22#.#2.231.83':139
'22#.#2.4.156':139
'22#.#2.139.46':139
'22#.#2.166.71':139
'22#.#2.93.15':139
'22#.#2.38.96':139
'22#.#2.63.243':139
'22#.#2.48.174':139
'22#.#2.106.29':139
'22#.#2.161.120':9988
'22#.#2.206.224':9988
'22#.#2.211.110':9988
'22#.#2.95.93':9988
'22#.42.44.0':9988
'22#.#2.85.84':9988
'22#.#2.163.116':9988
'22#.#2.40.78':139
'22#.#2.242.40':139
'22#.#2.239.215':139
'22#.#2.218.212':9988
'22#.#2.18.189':9988
'22#.#2.78.21':139
'22#.#2.223.134':139
'22#.42.40.7':139
'22#.#2.254.94':139
'22#.#2.113.44':139
'22#.42.0.73':139
'22#.#2.167.186':139
'22#.#2.169.91':139
'22#.#2.253.162':139
'22#.#2.80.168':139
'22#.#2.231.179':139
'22#.#2.15.169':139
'22#.#2.34.16':139
'22#.#2.126.34':139
'22#.#2.181.215':139
'22#.#2.107.25':139
'22#.#2.159.23':139
'22#.#2.132.188':139
'22#.#2.66.120':139
'22#.#2.216.66':139
'22#.#2.79.222':139
'22#.#2.177.246':139
'22#.#2.61.110':139
'22#.#2.157.50':139
'22#.#2.82.169':139
'22#.#2.251.29':139
'22#.#2.246.181':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней