Trojan.DownLoader12.28938

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'81.##.203.233':445
'81.#5.94.8':445
'81.##.223.59':445
'81.##.91.204':445
'81.##.140.34':445
'81.##.113.186':445
'81.##.229.123':445
'81.##.161.47':445
'81.##.18.161':445
'81.##.234.149':445
'81.##.152.80':445
'81.##.48.208':445
'81.##.55.235':445
'81.##.168.163':445
'81.##.41.119':445
'81.#5.2.153':445
'81.#5.8.238':445
'81.##.163.164':445
'81.#5.61.55':445
'81.##.170.61':445
'81.##.112.229':445
'81.#5.99.2':445
'81.##.54.143':445
'81.##.29.179':139
'81.#5.4.109':139
'81.##.233.219':139
'81.##.120.133':445
'81.##.219.233':139
'81.##.104.39':139
'81.##.209.162':139
'81.##.179.209':139
'81.##.102.226':139
'81.##.118.104':139
'81.##.24.121':139
'81.##.157.179':445
'81.##.99.203':445
'81.##.83.204':445
'81.##.105.97':445
'81.##.250.104':445
'81.##.223.169':445
'81.##.120.133':139
'81.##.231.19':445
'81.##.231.19':139
'81.#5.8.84':445
'81.##.19.158':445
'81.##.152.80':139
'81.##.18.161':139
'81.##.234.149':139
'81.#5.94.8':139
'81.##.113.186':139
'81.##.229.123':139
'81.##.250.104':139
'81.##.83.204':139
'81.##.105.97':139
'81.##.161.47':139
'81.##.54.143':139
'81.#5.99.2':139
'81.##.170.61':139
'81.##.112.229':139
'81.##.55.235':139
'81.#5.8.238':139
'81.##.163.164':139
'81.##.223.59':139
'81.##.203.233':139
'81.##.140.34':139
'81.#5.61.55':139
'81.##.91.204':139
'81.##.157.179':139
'81.##.125.157':445
'81.##.162.137':445
'81.##.132.233':445
'81.##.52.146':445
'81.#5.0.50':445
'81.#5.5.149':445
'81.##.135.184':445
'81.##.118.135':445
'81.#5.39.93':445
'81.#5.4.163':445
'81.##.212.206':445
'81.##.19.158':139
'81.##.172.219':445
'81.#5.8.84':139
'81.##.99.203':139
'81.##.223.169':139
'81.##.161.174':445
'81.##.173.223':445
'81.##.87.103':445
'81.##.234.215':445
'81.##.189.161':445
'81.##.215.189':445
'81.##.171.232':445
'81.##.58.142':445
'81.##.232.193':445
'81.##.211.124':445
'81.##.49.112':445
'81.#5.71.42':445
'81.#5.45.20':445
'81.#5.94.65':445
'81.##.215.32':445
'81.##.137.183':445
'81.##.129.113':445
'81.##.179.209':445
'81.##.146.180':445
'81.##.209.162':445
'81.##.24.121':445
'81.##.102.226':445
'81.##.88.220':445
'81.##.151.65':445
'81.##.161.15':445
'81.##.54.127':445
'81.#5.77.79':445
'81.##.135.130':445
'81.##.21.199':445
'81.##.181.173':445
'81.##.255.222':445
'81.#5.4.127':445
'81.#5.47.40':445
'81.#5.16.98':445
'81.##.246.46':445
'81.##.154.174':139
'81.#5.93.59':139
'81.##.99.195':445
'81.#5.57.38':445
'81.#5.71.66':445
'81.##.169.170':445
'81.##.115.157':445
'81.##.94.252':445
'81.##.164.21':445
'81.##.73.164':445
'81.##.50.126':445
'81.#5.8.191':445
'81.##.21.176':445
'81.#5.92.69':445
'81.##.20.145':445
'81.##.160.20':445
'81.##.129.113':139
'81.##.215.32':139
'81.##.137.183':139
'81.##.58.142':139
'81.#5.71.42':139
'81.#5.45.20':139
'81.##.73.164':139
'81.##.94.252':139
'81.##.164.21':139
'81.#5.94.65':139
'81.##.21.199':139
'81.##.135.130':139
'81.##.54.127':139
'81.#5.77.79':139
'81.##.146.180':139
'81.##.88.220':139
'81.##.151.65':139
'81.##.232.193':139
'81.##.171.232':139
'81.##.49.112':139
'81.##.161.15':139
'81.##.211.124':139
'81.##.169.170':139
'81.#5.71.66':139
'81.##.99.195':139
'81.#5.57.38':139
'81.##.255.222':139
'81.##.246.46':139
'81.##.219.233':445
'81.##.104.39':445
'81.##.118.104':445
'81.#5.4.109':445
'81.##.233.219':445
'81.##.29.179':445
'81.##.160.20':139
'81.#5.92.69':139
'81.##.20.145':139
'81.##.115.157':139
'81.##.50.126':139
'81.#5.8.191':139
'81.#5.4.127':139
'81.##.181.173':139
'81.#5.16.98':139
'81.##.21.176':139
'81.#5.47.40':139
'81.##.48.208':139
'81.#5.22.38':445
'81.##.217.20':445
'81.##.158.59':445
'81.##.149.221':445
'81.##.13.219':445
'81.#5.6.91':445
'81.##.245.189':445
'81.##.171.169':445
'81.#5.190.7':445
'81.##.100.54':445
'81.#5.7.160':445
'81.##.30.186':139
'81.##.204.30':139
'81.##.186.65':139
'81.##.199.91':139
'81.##.13.130':139
'81.##.74.216':139
'81.##.138.67':445
'81.##.67.152':445
'81.##.165.230':445
'81.#5.226.4':445
'81.##.39.223':445
'81.##.38.169':445
'81.##.146.254':445
'81.##.149.59':445
'81.##.226.105':445
'81.##.45.164':445
'81.##.105.185':445
'81.#5.98.21':445
'81.##.249.219':445
'81.#5.6.7':445
'81.#5.4.69':445
'81.##.195.218':445
'81.#5.78.74':445
'81.#5.7.243':445
'81.##.200.168':445
'81.##.142.38':445
'81.##.64.183':445
'81.##.235.191':445
'81.##.72.212':445
'81.#5.1.108':445
'81.##.72.228':445
'81.##.63.153':445
'81.##.201.140':445
'81.#5.8.16':445
'81.##.245.189':139
'81.##.171.169':139
'81.#5.190.7':139
'81.##.100.54':139
'81.#5.7.160':139
'81.##.38.169':139
'81.#5.7.243':139
'81.##.200.168':139
'81.##.142.38':139
'81.##.64.183':139
'81.##.235.191':139
'81.##.39.223':139
'81.##.138.67':139
'81.##.67.152':139
'81.##.165.230':139
'81.#5.226.4':139
'81.##.149.221':139
'81.##.217.20':139
'81.#5.6.91':139
'81.#5.22.38':139
'81.##.13.219':139
'81.##.158.59':139
'81.##.72.212':139
'81.##.249.219':139
'81.#5.6.7':139
'81.#5.4.69':139
'81.##.195.218':139
'81.#5.78.74':139
'81.#5.97.65':139
'81.##.219.65':139
'81.##.77.137':139
'81.##.121.63':139
'81.##.170.136':139
'81.##.249.103':139
'81.#5.1.108':139
'81.##.72.228':139
'81.##.63.153':139
'81.##.201.140':139
'81.#5.8.16':139
'81.##.45.164':139
'81.##.149.59':139
'81.#5.98.21':139
'81.##.146.254':139
'81.##.105.185':139
'81.##.226.105':139
'81.##.210.219':445
'81.##.217.210':445
'81.##.183.184':445
'81.##.180.187':445
'81.##.155.154':445
'81.##.87.218':445
'81.#5.2.197':139
'81.##.66.249':139
'81.##.147.92':445
'81.##.247.87':445
'81.##.137.111':445
'81.##.27.145':445
'81.##.64.136':445
'81.##.182.236':445
'81.##.147.92':139
'81.#5.90.1':445
'81.##.204.166':445
'81.##.178.205':445
'81.##.150.119':445
'81.##.188.92':445
'81.##.170.127':445
'81.##.123.230':445
'81.#5.2.197':445
'81.#5.4.163':139
'81.##.212.206':139
'81.#5.5.149':139
'81.##.125.157':139
'81.##.162.137':139
'81.#5.39.93':139
'81.#5.2.153':139
'81.##.168.163':139
'81.##.41.119':139
'81.##.135.184':139
'81.##.118.135':139
'81.##.189.161':139
'81.##.215.189':139
'81.##.161.174':139
'81.##.66.249':445
'81.##.172.219':139
'81.##.234.215':139
'81.#5.0.50':139
'81.##.132.233':139
'81.##.52.146':139
'81.##.173.223':139
'81.##.87.103':139
'81.#5.7.160':9988
'81.##.67.152':9988
'81.##.38.169':9988
'81.##.74.216':445
'81.##.142.38':9988
'81.##.138.67':9988
'81.##.158.59':9988
'81.##.171.169':9988
'81.##.13.219':9988
'81.##.165.230':9988
'81.#5.190.7':9988
'81.##.121.63':445
'81.##.219.65':445
'81.##.249.103':445
'81.#5.97.65':445
'81.##.170.136':445
'81.##.77.137':445
'81.##.30.186':445
'81.##.204.30':445
'81.##.186.65':445
'81.##.199.91':445
'81.##.13.130':445
'81.#5.22.38':9988
'81.##.180.187':139
'81.##.155.154':139
'81.##.150.119':139
'81.##.188.92':139
'81.##.178.205':139
'81.##.183.184':139
'81.##.247.87':139
'81.##.137.111':139
'81.##.87.218':139
'81.##.210.219':139
'81.##.217.210':139
'81.##.200.168':9988
'81.#5.90.1':139
'81.#5.6.91':9988
'81.##.64.183':9988
'81.##.39.223':9988
'81.##.182.236':139
'81.##.170.127':139
'81.##.123.230':139
'81.##.204.166':139
'81.##.27.145':139
'81.##.64.136':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней