Trojan.DownLoader12.28918

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#19.131.251':139
'19#.#19.188.57':139
'19#.#19.235.43':139
'19#.#19.133.248':139
'19#.#19.35.240':139
'19#.#19.19.10':139
'19#.#19.172.10':139
'19#.#19.10.61':139
'19#.#19.211.130':139
'19#.#19.161.26':139
'19#.#19.87.187':139
'19#.#19.235.146':139
'19#.#19.67.100':139
'19#.#19.220.80':139
'19#.#19.97.180':445
'19#.#19.80.214':445
'19#.#19.73.207':139
'19#.#19.141.106':139
'19#.#19.108.233':139
'19#.#19.110.154':139
'19#.#19.46.59':139
'19#.#19.35.240':445
'19#.#19.235.43':445
'19#.#19.133.248':445
'19#.#19.141.106':445
'19#.#19.87.187':445
'19#.#19.161.26':445
'19#.#19.10.61':445
'19#.#19.211.130':445
'19#.#19.131.251':445
'19#.#19.188.57':445
'19#.#19.73.207':445
'19#.#19.40.75':139
'19#.#19.220.80':445
'19#.#19.182.119':139
'19#.#19.227.116':139
'19#.#19.119.130':139
'19#.#19.46.59':445
'19#.#19.108.233':445
'19#.#19.110.154':445
'19#.#19.235.146':445
'19#.#19.67.100':445
'19#.#19.37.105':445
'19#.#19.37.105':139
'19#.#19.97.180':139
'19#.#19.242.226':139
'19#.#19.40.142':139
'19#.#19.143.48':139
'19#.#19.2.204':445
'19#.#19.56.99':445
'19#.#19.217.168':445
'19#.#19.80.214':139
'19#.#19.33.227':445
'19#.#19.12.15':139
'19#.#19.252.150':139
'19#.#19.150.252':139
'19#.#19.7.235':139
'19#.#19.208.42':139
'19#.#19.198.188':139
'19#.#19.94.155':139
'19#.#19.25.41':139
'19#.#19.120.198':139
'19#.#19.218.150':139
'19#.#19.11.70':139
'19#.#19.120.198':445
'19#.#19.94.155':445
'19#.#19.11.70':445
'19#.#19.150.252':445
'19#.#19.218.150':445
'19#.#19.143.48':445
'19#.#19.242.226':445
'19#.#19.40.142':445
'19#.#19.25.41':445
'19#.#19.12.15':445
'19#.#19.252.150':445
'19#.#19.37.104':445
'19#.#19.197.97':445
'19#.#19.172.25':445
'19#.#19.119.146':445
'19#.#19.25.67':445
'19#.#19.198.188':445
'19#.#19.7.235':445
'19#.#19.208.42':445
'19#.#19.97.162':445
'19#.#19.88.108':445
'19#.#19.90.208':445
'19#.#19.234.146':445
'19#.#19.248.50':445
'19#.#19.50.193':445
'19#.#19.51.100':445
'19#.#19.58.181':139
'19#.#19.89.15':139
'19#.#19.32.197':445
'19#.#19.21.234':445
'19#.#19.236.21':445
'19#.#19.232.24':445
'19#.#19.113.26':445
'19#.#19.136.100':445
'19#.#19.233.150':445
'19#.#19.214.215':445
'19#.#19.77.12':445
'19#.#19.4.145':445
'19#.#19.104.46':445
'19#.#19.72.1':445
'19#.#19.240.166':445
'19#.#19.173.191':445
'19#.#19.143.129':139
'19#.#19.229.96':139
'19#.#19.129.246':139
'19#.#19.132.21':139
'19#.#19.246.27':139
'19#.#19.134.121':139
'19#.#19.172.134':139
'19#.#19.43.234':139
'19#.#19.2.159':139
'19#.#19.65.37':139
'19#.#19.50.110':139
'19#.#19.106.60':139
'19#.#19.249.42':139
'19#.#19.8.11':139
'19#.#19.116.197':139
'19#.#19.66.170':139
'19#.#19.124.33':139
'19#.#19.103.98':139
'19#.#19.188.154':139
'19#.#19.94.128':139
'19#.#19.49.166':139
'19#.#19.162.89':445
'19#.#19.162.89':139
'19#.#19.214.215':139
'19#.#19.30.49':139
'19#.#19.80.169':139
'19#.#19.115.81':139
'19#.#19.136.100':139
'19#.#19.240.166':139
'19#.#19.113.26':139
'19#.#19.77.12':139
'19#.#19.233.150':139
'19#.#19.253.138':139
'19#.#19.119.130':445
'19#.#19.182.119':445
'19#.#19.227.116':445
'19#.#19.19.10':445
'19#.#19.172.10':445
'19#.#19.88.143':139
'19#.#19.82.239':139
'19#.#19.19.88':139
'19#.#19.40.75':445
'19#.#19.26.33':139
'19#.#19.19.88':445
'19#.#19.88.143':445
'19#.#19.26.33':445
'19#.#19.236.21':139
'19#.#19.32.197':139
'19#.#19.115.81':445
'19#.#19.30.49':445
'19#.#19.80.169':445
'19#.#19.82.239':445
'19#.#19.253.138':445
'19#.#19.21.234':139
'19#.#19.104.46':139
'19#.#19.232.24':139
'19#.#19.4.145':139
'19#.#19.173.191':139
'19#.#19.72.1':139
'19#.#19.90.208':139
'19#.#19.234.146':139
'19#.#19.248.50':139
'19#.#19.50.193':139
'19#.#19.51.100':139
'19#.#19.37.58':445
'19#.#19.37.0':445
'19#.#19.57.208':445
'19#.#19.138.226':445
'19#.#19.208.158':445
'19#.#19.68.32':445
'19#.#19.157.237':445
'19#.#19.9.197':445
'19#.#19.117.195':445
'19#.#19.196.147':445
'19#.#19.73.194':445
'19#.#19.188.104':139
'19#.#19.37.220':139
'19#.#19.15.150':139
'19#.#19.67.194':139
'19#.#19.179.67':139
'19#.#19.238.199':445
'19#.#19.70.160':445
'19#.#19.140.28':139
'19#.#19.172.169':139
'19#.#19.137.32':139
'19#.#19.149.147':445
'19#.#19.100.220':445
'19#.#19.147.138':445
'19#.#19.254.97':445
'19#.#19.132.169':445
'19#.#19.140.84':445
'19#.#19.174.224':445
'19#.#19.194.148':445
'19#.#19.86.248':445
'19#.#19.148.87':445
'19#.#19.185.215':445
'19#.#19.61.113':445
'19#.#19.73.172':445
'19#.#19.191.50':445
'19#.#19.145.93':445
'19#.#19.7.47':445
'19#.#19.122.37':445
'19#.#19.215.150':445
'19#.#19.92.211':445
'19#.#19.100.241':445
'19#.#19.243.179':445
'19#.#19.145.68':139
'19#.#19.7.47':139
'19#.#19.191.50':139
'19#.#19.145.93':139
'19#.#19.68.32':139
'19#.#19.157.237':139
'19#.#19.243.179':139
'19#.#19.92.211':139
'19#.#19.100.241':139
'19#.#19.61.113':139
'19#.#19.73.172':139
'19#.#19.9.197':139
'19#.#19.138.226':139
'19#.#19.208.158':139
'19#.#19.73.194':139
'19#.#19.70.160':139
'19#.#19.238.199':139
'19#.#19.117.195':139
'19#.#19.196.147':139
'19#.#19.37.0':139
'19#.#19.57.208':139
'19#.#19.37.58':139
'19#.#19.7.199':139
'19#.#19.32.182':139
'19#.#19.55.220':139
'19#.#19.140.84':139
'19#.#19.174.224':139
'19#.#19.69.82':139
'19#.#19.34.163':139
'19#.#19.133.184':139
'19#.#19.125.11':139
'19#.#19.122.124':139
'19#.#19.194.148':139
'19#.#19.254.97':139
'19#.#19.132.169':139
'19#.#19.185.215':139
'19#.#19.122.37':139
'19#.#19.215.150':139
'19#.#19.86.248':139
'19#.#19.148.87':139
'19#.#19.100.220':139
'19#.#19.147.138':139
'19#.#19.149.147':139
'19#.#19.121.50':445
'19#.#19.119.118':445
'19#.#19.59.186':445
'19#.#19.43.65':445
'19#.#19.101.95':445
'19#.#19.74.130':445
'19#.#19.198.73':445
'19#.#19.130.82':445
'19#.#19.32.21':445
'19#.#19.242.198':445
'19#.#19.173.139':445
'19#.#19.21.226':139
'19#.#19.121.210':139
'19#.#19.38.191':139
'19#.219.6.3':139
'19#.#19.73.87':139
'19#.#19.60.88':139
'19#.#19.148.117':139
'19#.#19.226.158':139
'19#.#19.252.252':139
'19#.#19.38.200':139
'19#.#19.119.146':139
'19#.#19.25.67':139
'19#.#19.56.99':139
'19#.#19.217.168':139
'19#.#19.2.204':139
'19#.#19.97.162':139
'19#.#19.88.108':139
'19#.#19.197.97':139
'19#.#19.172.25':139
'19#.#19.37.104':139
'19#.#19.33.227':139
'19#.#19.21.226':445
'19#.#19.121.210':445
'19#.#19.38.191':445
'19#.219.6.3':445
'19#.#19.73.87':445
'19#.#19.60.88':445
'19#.#19.148.117':445
'19#.#19.226.158':445
'19#.#19.252.252':445
'19#.#19.38.200':445
'19#.#19.198.73':139
'19#.#19.172.169':445
'19#.#19.137.32':445
'19#.#19.37.220':445
'19#.#19.15.150':445
'19#.#19.188.104':445
'19#.#19.238.199':9988
'19#.#19.208.158':9988
'19#.#19.73.194':9988
'19#.#19.140.28':445
'19#.#19.138.226':9988
'19#.#19.179.67':445
'19#.#19.125.11':445
'19#.#19.122.124':445
'19#.#19.32.182':445
'19#.#19.55.220':445
'19#.#19.7.199':445
'19#.#19.145.68':445
'19#.#19.67.194':445
'19#.#19.34.163':445
'19#.#19.133.184':445
'19#.#19.69.82':445
'19#.#19.59.186':139
'19#.#19.121.50':139
'19#.#19.101.95':139
'19#.#19.173.139':139
'19#.#19.43.65':139
'19#.#19.130.82':139
'19#.#19.74.130':139
'19#.#19.242.198':139
'19#.#19.119.118':139
'19#.#19.32.21':139
'19#.#19.194.148':9988
'19#.#19.7.47':9988
'19#.#19.191.50':9988
'19#.#19.9.197':9988
'19#.#19.57.208':9988
'19#.#19.37.58':9988
'19#.#19.254.97':9988
'19#.#19.132.169':9988
'19#.#19.185.215':9988
'19#.#19.243.179':9988
'19#.#19.122.37':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней