Trojan.DownLoader12.28947

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##8.144.97':139
'62.#58.1.68':139
'62.##8.202.53':139
'62.##8.14.222':139
'62.##8.37.243':139
'62.##8.211.112':445
'62.##8.38.140':445
'62.##8.248.44':139
'62.##8.12.165':139
'62.##8.1.186':139
'62.##8.25.93':139
'62.##8.140.22':139
'62.##8.90.44':139
'62.#58.0.66':139
'62.##8.119.76':139
'62.##8.188.73':139
'62.##8.221.191':139
'62.##8.183.64':139
'62.##8.91.175':139
'62.##8.30.193':139
'62.##8.114.172':445
'62.##8.62.72':445
'62.##8.15.233':445
'62.##8.139.111':445
'62.##8.61.109':445
'62.##8.79.168':445
'62.#58.0.66':445
'62.##8.224.41':445
'62.##8.174.143':445
'62.##8.146.174':445
'62.##8.23.210':445
'62.##8.145.179':445
'62.##8.196.172':445
'62.##8.169.18':445
'62.##8.172.169':445
'62.##8.232.71':445
'62.##8.247.232':445
'62.##8.69.206':445
'62.##8.234.168':445
'62.##8.105.9':445
'62.##8.196.30':445
'62.#58.4.1':445
'62.##8.69.118':445
'62.##8.23.239':445
'62.##8.42.194':445
'62.##8.116.32':445
'62.##8.211.112':139
'62.##8.59.246':445
'62.##8.175.163':445
'62.##8.80.108':445
'62.##8.175.163':139
'62.##8.80.108':139
'62.#58.4.1':139
'62.##8.69.118':139
'62.##8.196.30':139
'62.##8.46.76':445
'62.##8.111.146':445
'62.##8.155.0':445
'62.##8.59.246':139
'62.##8.116.32':139
'62.##8.15.233':139
'62.##8.114.172':139
'62.##8.61.109':139
'62.##8.247.232':139
'62.##8.139.111':139
'62.##8.224.41':139
'62.##8.79.168':139
'62.##8.146.174':139
'62.##8.62.72':139
'62.##8.174.143':139
'62.##8.196.172':139
'62.##8.23.210':139
'62.##8.172.169':139
'62.##8.38.140':139
'62.##8.169.18':139
'62.##8.69.206':139
'62.##8.232.71':139
'62.##8.105.9':139
'62.##8.145.179':139
'62.##8.234.168':139
'62.##8.96.181':139
'62.##8.165.168':139
'62.##8.83.245':139
'62.##8.248.191':139
'62.##8.148.71':139
'62.##8.151.9':139
'62.##8.117.170':139
'62.##8.102.117':139
'62.##8.20.88':139
'62.##8.68.211':139
'62.##8.81.95':139
'62.##8.70.162':139
'62.##8.133.166':139
'62.##8.176.199':445
'62.#58.5.51':139
'62.##8.122.10':139
'62.##8.80.215':139
'62.##8.4.121':139
'62.##8.104.81':139
'62.##8.60.243':139
'62.##8.221.116':139
'62.##8.11.174':139
'62.##8.116.85':139
'62.##8.61.234':139
'62.##8.91.28':139
'62.##8.152.103':139
'62.##8.70.24':139
'62.##8.31.175':139
'62.##8.29.103':139
'62.##8.174.186':139
'62.##8.176.8':139
'62.##8.44.147':139
'62.##8.8.172':139
'62.##8.110.66':139
'62.#58.2.52':139
'62.##8.98.37':139
'62.##8.193.98':139
'62.##8.246.63':139
'62.##8.29.33':139
'62.##8.84.164':139
'62.#58.1.68':445
'62.##8.12.165':445
'62.##8.144.97':445
'62.##8.37.243':445
'62.##8.202.53':445
'62.##8.20.219':139
'62.##8.215.20':139
'62.##8.93.216':139
'62.##8.1.186':445
'62.##8.248.44':445
'62.##8.140.22':445
'62.##8.91.175':445
'62.##8.25.93':445
'62.##8.119.76':445
'62.##8.90.44':445
'62.##8.221.191':445
'62.##8.14.222':445
'62.##8.188.73':445
'62.##8.30.193':445
'62.##8.183.64':445
'62.##8.5.132':445
'62.##8.232.156':445
'62.##8.33.184':445
'62.##8.20.219':445
'62.##8.215.20':445
'62.##8.49.181':445
'62.##8.84.193':445
'62.##8.254.124':445
'62.##8.21.243':445
'62.##8.190.145':445
'62.##8.21.243':139
'62.##8.190.145':139
'62.##8.232.156':139
'62.##8.33.184':139
'62.##8.5.132':139
'62.##8.176.199':139
'62.##8.93.216':445
'62.##8.84.193':139
'62.##8.254.124':139
'62.##8.49.181':139
'62.##8.42.194':139
'62.##8.243.68':445
'62.##8.13.35':445
'62.##8.68.148':445
'62.##8.56.226':139
'62.##8.148.132':445
'62.#58.41.2':445
'62.##8.152.239':445
'62.##8.24.16':445
'62.##8.92.211':445
'62.##8.250.87':445
'62.##8.102.67':139
'62.##8.164.102':139
'62.##8.111.50':139
'62.##8.141.209':139
'62.##8.81.61':139
'62.##8.120.60':139
'62.##8.202.120':139
'62.##8.60.93':139
'62.##8.201.153':139
'62.##8.93.232':139
'62.##8.246.2':445
'62.##8.13.246':445
'62.##8.3.129':445
'62.##8.18.32':445
'62.##8.129.87':445
'62.##8.233.200':445
'62.##8.248.148':445
'62.##8.201.39':445
'62.#58.52.3':445
'62.##8.39.38':445
'62.##8.48.36':445
'62.##8.194.244':445
'62.##8.251.110':445
'62.##8.116.1':445
'62.##8.245.115':445
'62.##8.239.190':445
'62.##8.208.239':445
'62.##8.190.176':445
'62.##8.245.86':445
'62.##8.142.65':445
'62.##8.194.244':139
'62.##8.245.86':139
'62.##8.48.36':139
'62.##8.245.115':139
'62.##8.251.110':139
'62.##8.208.239':139
'62.##8.18.32':139
'62.##8.239.190':139
'62.##8.142.65':139
'62.##8.190.176':139
'62.##8.13.35':139
'62.##8.92.211':139
'62.##8.243.68':139
'62.##8.148.132':139
'62.##8.68.148':139
'62.##8.152.239':139
'62.##8.116.1':139
'62.#58.41.2':139
'62.##8.250.87':139
'62.##8.24.16':139
'62.##8.2.244':139
'62.##8.48.96':139
'62.#58.4.10':139
'62.##8.79.32':139
'62.##8.140.223':139
'62.##8.162.131':139
'62.##8.48.31':139
'62.##8.239.155':139
'62.##8.21.140':139
'62.##8.172.74':139
'62.##8.13.246':139
'62.#58.52.3':139
'62.##8.246.2':139
'62.##8.129.87':139
'62.##8.3.129':139
'62.##8.248.148':139
'62.##8.53.94':139
'62.##8.233.200':139
'62.##8.39.38':139
'62.##8.201.39':139
'62.##8.253.102':139
'62.##8.216.101':139
'62.##8.80.11':139
'62.##8.7.198':139
'62.##8.227.171':139
'62.##8.217.185':445
'62.##8.18.100':445
'62.##8.178.2':445
'62.##8.100.126':139
'62.##8.204.29':139
'62.##8.117.208':139
'62.##8.62.118':139
'62.##8.115.2':139
'62.##8.18.100':139
'62.#58.6.6':139
'62.#58.6.58':139
'62.##8.16.63':139
'62.#58.71.1':139
'62.##8.121.103':139
'62.##8.153.117':139
'62.##8.216.101':445
'62.##8.100.126':445
'62.##8.253.102':445
'62.##8.227.171':445
'62.##8.80.11':445
'62.##8.111.146':139
'62.##8.23.239':139
'62.##8.46.76':139
'62.##8.204.29':445
'62.##8.155.0':139
'62.##8.62.118':445
'62.##8.121.103':445
'62.##8.117.208':445
'62.#58.6.6':445
'62.##8.115.2':445
'62.##8.16.63':445
'62.##8.7.198':445
'62.#58.6.58':445
'62.##8.153.117':445
'62.#58.71.1':445
'62.##8.111.50':445
'62.##8.102.67':445
'62.##8.81.61':445
'62.##8.48.31':445
'62.##8.141.209':445
'62.##8.60.93':445
'62.##8.120.60':445
'62.##8.93.232':445
'62.##8.164.102':445
'62.##8.201.153':445
'62.#58.4.10':445
'62.##8.2.244':445
'62.##8.140.223':445
'62.##8.53.94':445
'62.##8.79.32':445
'62.##8.239.155':445
'62.##8.162.131':445
'62.##8.172.74':445
'62.##8.48.96':445
'62.##8.21.140':445
'62.#58.4.10':9988
'62.##8.172.74':9988
'62.##8.53.94':9988
'62.##8.13.246':9988
'62.##8.248.148':9988
'62.##8.178.2':139
'62.##8.217.185':139
'62.##8.120.60':9988
'62.##8.111.50':9988
'62.##8.102.67':9988
'62.##8.243.68':9988
'62.##8.68.148':9988
'62.##8.148.132':9988
'62.##8.202.120':445
'62.##8.56.226':445
'62.##8.142.65':9988
'62.##8.246.2':9988
'62.##8.245.86':9988
'62.##8.13.35':9988
'62.#58.41.2':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней