Trojan.DownLoader12.28871

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#7.19.38':445
'21#.#7.172.88':445
'21#.#7.154.48':445
'21#.#7.101.121':445
'21#.#7.55.139':445
'21#.#7.96.240':445
'21#.#7.41.171':445
'21#.#7.190.54':445
'21#.#7.239.189':445
'21#.#7.75.18':445
'21#.#7.66.199':445
'21#.#7.80.23':445
'21#.#7.235.179':445
'21#.#7.44.69':445
'21#.#7.215.46':445
'21#.#7.57.137':445
'21#.#7.92.83':445
'21#.#7.87.214':445
'21#.#7.69.177':445
'21#.#7.164.230':445
'21#.#7.48.71':445
'21#.#7.63.137':445
'21#.#7.181.113':445
'21#.#7.58.242':445
'21#.#7.155.63':445
'21#.#7.8.235':445
'21#.#7.39.45':445
'21#.#7.179.114':445
'21#.#7.85.19':445
'21#.#7.133.200':445
'21#.#7.161.92':445
'21#.#7.56.43':445
'21#.#7.180.232':445
'21#.#7.92.180':445
'21#.#7.158.78':445
'21#.#7.210.56':445
'21#.#7.9.210':445
'21#.#7.122.71':445
'21#.#7.56.60':445
'21#.#7.74.37':139
'21#.#7.56.43':139
'21#.#7.158.78':139
'21#.#7.92.180':139
'21#.#7.161.92':139
'21#.#7.122.71':139
'21#.#7.9.210':139
'21#.#7.133.200':139
'21#.#7.56.60':139
'21#.#7.210.56':139
'21#.#7.180.232':139
'21#.#7.172.88':139
'21#.#7.55.139':139
'21#.#7.101.121':139
'21#.#7.19.38':139
'21#.#7.190.54':139
'21#.#7.41.171':139
'21#.#7.164.230':139
'21#.#7.239.189':139
'21#.#7.96.240':139
'21#.#7.181.113':139
'21#.#7.91.10':139
'21#.#7.84.91':139
'21#.#7.96.36':139
'21#.#7.91.78':139
'21#.#7.185.254':139
'21#.#7.53.119':139
'21#.#7.21.142':139
'21#.#7.69.63':139
'21#.#7.242.69':139
'21#.#7.11.241':139
'21#.#7.63.137':139
'21#.#7.155.63':139
'21#.#7.58.242':139
'21#.#7.48.71':139
'21#.#7.179.114':139
'21#.#7.39.45':139
'21#.#7.211.6':139
'21#.#7.85.19':139
'21#.#7.8.235':139
'21#.#7.43.195':139
'21#.#7.76.80':139
'21#.#7.136.233':139
'21#.#7.238.133':139
'21#.#7.91.118':139
'21#.#7.8.250':139
'21#.#7.56.161':139
'21#.#7.92.211':139
'21#.#7.20.158':139
'21#.#7.54.180':139
'21#.#7.98.189':139
'21#.#7.199.219':139
'21#.#7.233.137':139
'21#.#7.158.233':139
'21#.#7.146.12':139
'21#.#7.17.28':139
'21#.#7.84.100':139
'21#.#7.27.21':139
'21#.#7.43.116':139
'21#.#7.165.10':139
'21#.#7.125.39':445
'21#.#7.227.124':445
'21#.#7.246.93':445
'21#.#7.65.231':445
'21#.#7.197.82':445
'21#.#7.243.101':445
'21#.#7.19.198':445
'21#.#7.8.114':445
'21#.#7.60.243':445
'21#.#7.160.114':445
'21#.#7.207.20':139
'21#.#7.72.17':445
'21#.#7.181.188':139
'21#.#7.124.154':139
'21#.#7.116.72':445
'21#.#7.96.137':445
'21#.#7.15.75':445
'21#.#7.101.116':445
'21#.#7.54.108':445
'21#.#7.194.56':139
'21#.#7.72.17':139
'21#.#7.116.72':139
'21#.#7.21.142':445
'21#.#7.74.37':445
'21#.#7.101.116':139
'21#.#7.15.75':139
'21#.#7.160.114':139
'21#.#7.54.108':139
'21#.#7.96.137':139
'21#.#7.53.119':445
'21#.#7.96.36':445
'21#.#7.91.78':445
'21#.#7.211.6':445
'21#.#7.11.241':445
'21#.#7.91.10':445
'21#.#7.69.63':445
'21#.#7.242.69':445
'21#.#7.84.91':445
'21#.#7.185.254':445
'21#.#7.246.93':139
'21#.#7.177.247':139
'21#.#7.163.126':139
'21#.#7.36.123':139
'21#.#7.23.181':139
'21#.#7.187.233':139
'21#.#7.60.50':139
'21#.#7.107.176':139
'21#.#7.210.187':139
'21#.#7.224.177':139
'21#.#7.88.36':139
'21#.#7.227.124':139
'21#.#7.197.82':139
'21#.#7.65.231':139
'21#.#7.125.39':139
'21#.#7.8.114':139
'21#.#7.19.198':139
'21#.#7.88.105':139
'21#.#7.60.243':139
'21#.#7.243.101':139
'21#.#7.162.78':445
'21#.#7.16.37':445
'21#.#7.8.198':139
'21#.#7.28.235':445
'21#.#7.0.139':445
'21#.#7.17.170':445
'21#.#7.121.194':445
'21#.#7.206.122':445
'21#.#7.169.205':445
'21#.#7.234.247':139
'21#.#7.118.21':139
'21#.#7.108.207':139
'21#.#7.121.77':139
'21#.#7.164.102':139
'21#.#7.68.146':139
'21#.#7.156.138':139
'21#.#7.247.155':139
'21#.#7.176.68':139
'21#.#7.73.181':139
'21#.#7.234.88':445
'21#.#7.37.96':445
'21#.#7.73.213':445
'21#.#7.139.9':445
'21#.#7.163.55':445
'21#.#7.171.248':445
'21#.#7.59.231':445
'21#.#7.201.27':445
'21#.#7.10.53':445
'21#.#7.70.75':445
'21#.#7.56.183':445
'21#.#7.135.70':445
'21#.#7.14.226':445
'21#.#7.156.221':445
'21#.#7.212.141':445
'21#.#7.187.211':445
'21#.#7.190.145':445
'21#.#7.178.51':445
'21#.#7.197.195':445
'21#.#7.124.173':445
'21#.#7.77.66':139
'21#.#7.14.226':139
'21#.#7.187.211':139
'21#.#7.212.141':139
'21#.#7.135.70':139
'21#.#7.197.195':139
'21#.#7.178.51':139
'21#.#7.56.183':139
'21#.#7.124.173':139
'21#.#7.190.145':139
'21#.#7.156.221':139
'21#.#7.162.78':139
'21#.#7.0.139':139
'21#.#7.28.235':139
'21#.#7.16.37':139
'21#.#7.206.122':139
'21#.#7.121.194':139
'21#.#7.234.88':139
'21#.#7.169.205':139
'21#.#7.17.170':139
'21#.#7.139.9':139
'21#.#7.145.179':139
'21#.#7.122.145':139
'21#.#7.143.32':139
'21#.#7.72.192':139
'21#.#7.83.201':139
'21#.#7.151.67':139
'21#.#7.142.101':139
'21#.#7.145.133':139
'21#.#7.140.169':139
'21#.#7.187.213':139
'21#.#7.73.213':139
'21#.#7.171.248':139
'21#.#7.163.55':139
'21#.#7.37.96':139
'21#.#7.10.53':139
'21#.#7.201.27':139
'21#.#7.151.142':139
'21#.#7.70.75':139
'21#.#7.59.231':139
'21#.#7.102.69':139
'21#.#7.145.58':139
'21#.#7.107.36':139
'21#.#7.169.132':139
'21#.#7.189.73':139
'21#.#7.86.58':445
'21#.97.89.5':445
'21#.#7.79.93':445
'21#.#7.7.194':445
'21#.#7.212.81':139
'21#.#7.79.93':139
'21#.#7.7.194':139
'21#.#7.187.213':9988
'21#.#7.83.201':9988
'21#.#7.86.58':139
'21#.#7.119.68':139
'21#.#7.82.111':139
'21#.97.89.5':139
'21#.#7.81.231':139
'21#.#7.81.231':445
'21#.#7.215.46':139
'21#.#7.87.214':139
'21#.#7.66.199':139
'21#.#7.80.23':139
'21#.#7.69.177':139
'21#.#7.75.18':139
'21#.#7.154.48':139
'21#.#7.57.137':139
'21#.#7.92.83':139
'21#.#7.44.69':139
'21#.#7.212.81':445
'21#.#7.107.36':445
'21#.#7.119.68':445
'21#.#7.82.111':445
'21#.#7.169.132':445
'21#.#7.189.73':445
'21#.#7.235.179':139
'21#.#7.102.69':445
'21#.#7.145.58':445
'21#.#7.151.142':9988
'21#.#7.121.77':445
'21#.#7.164.102':445
'21#.#7.142.101':445
'21#.#7.77.66':445
'21#.#7.118.21':445
'21#.#7.176.68':445
'21#.#7.73.181':445
'21#.#7.108.207':445
'21#.#7.68.146':445
'21#.#7.151.67':445
'21#.#7.143.32':445
'21#.#7.72.192':445
'21#.#7.151.142':445
'21#.#7.187.213':445
'21#.#7.145.179':445
'21#.#7.145.133':445
'21#.#7.140.169':445
'21#.#7.122.145':445
'21#.#7.83.201':445
'21#.#7.156.138':445
'21#.#7.212.141':9988
'21#.#7.124.173':9988
'21#.#7.234.88':9988
'21#.#7.156.221':9988
'21#.#7.190.145':9988
'21#.#7.10.53':9988
'21#.#7.201.27':9988
'21#.#7.178.51':9988
'21#.#7.56.183':9988
'21#.#7.121.194':9988
'21#.#7.8.198':445
'21#.#7.0.139':9988
'21#.#7.247.155':445
'21#.#7.234.247':445
'21#.#7.28.235':9988
'21#.#7.169.205':9988
'21#.#7.17.170':9988
'21#.#7.16.37':9988
'21#.#7.206.122':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней