Trojan.DownLoader12.28878

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#08.170.20':139
'20#.#08.189.169':139
'20#.#08.77.190':139
'20#.#08.20.186':139
'20#.#08.3.160':445
'20#.#08.151.38':445
'20#.#08.118.206':445
'20#.#08.71.198':139
'20#.#08.68.225':139
'20#.#08.20.18':139
'20#.#08.77.190':445
'20#.#08.20.186':445
'20#.#08.170.20':445
'20#.#08.189.169':445
'20#.#08.159.206':445
'20#.#08.94.156':445
'20#.#08.91.248':445
'20#.#08.186.120':445
'20#.#08.129.136':445
'20#.#08.52.170':445
'20#.#08.227.252':445
'20#.#08.4.54':445
'20#.#08.36.219':445
'20#.#08.146.225':445
'20#.#08.189.196':445
'20#.#08.218.183':445
'20#.#08.24.165':445
'20#.#08.62.24':445
'20#.#08.186.169':445
'20#.#08.116.171':139
'20#.#08.201.116':139
'20#.#08.97.145':139
'20#.#08.128.1':139
'20#.#08.193.100':139
'20#.#08.38.109':139
'20#.#08.56.133':139
'20#.#08.48.182':139
'20#.#08.35.98':139
'20#.#08.159.30':139
'20#.#08.197.102':139
'20#.#08.47.127':139
'20#.#08.29.47':139
'20#.#08.112.182':139
'20#.#08.204.240':139
'20#.#08.105.92':139
'20#.#08.3.35':139
'20#.#08.205.95':139
'20#.#08.137.49':139
'20#.#08.100.19':139
'20#.#08.172.99':139
'20#.#08.217.107':139
'20#.#08.134.250':139
'20#.#08.88.208':139
'20#.#08.240.88':139
'20#.#08.154.31':139
'20#.#08.10.206':139
'20#.#08.30.103':139
'20#.#08.121.183':139
'20#.#08.170.163':445
'20#.#08.24.165':139
'20#.#08.62.24':139
'20#.#08.186.169':139
'20#.#08.186.120':139
'20#.#08.129.136':139
'20#.#08.94.156':139
'20#.#08.91.248':139
'20#.#08.159.206':139
'20#.#08.3.160':139
'20#.#08.151.38':139
'20#.#08.189.196':139
'20#.#08.218.183':139
'20#.#08.36.219':139
'20#.#08.146.225':139
'20#.#08.4.54':139
'20#.#08.98.10':139
'20#.#08.33.71':139
'20#.#08.143.202':139
'20#.#08.53.113':139
'20#.#08.241.101':139
'20#.#08.48.28':139
'20#.#08.198.40':139
'20#.#08.170.163':139
'20#.#08.52.170':139
'20#.#08.227.252':139
'20#.#08.163.12':139
'20#.#08.123.52':139
'20#.#08.236.60':139
'20#.#08.120.187':139
'20#.#08.48.28':445
'20#.#08.198.40':445
'20#.#08.53.113':445
'20#.#08.241.101':445
'20#.#08.200.246':445
'20#.#08.152.130':445
'20#.#08.84.158':445
'20#.#08.236.60':445
'20#.#08.120.187':445
'20#.#08.163.12':445
'20#.#08.123.52':445
'20#.#08.98.10':445
'20#.#08.33.71':445
'20#.#08.143.202':445
'20#.#08.243.235':445
'20#.#08.160.67':445
'20#.#08.235.33':445
'20#.#08.24.194':445
'20#.#08.233.55':445
'20#.#08.118.206':139
'20#.#08.91.224':445
'20#.#08.55.235':445
'20#.#08.85.115':445
'20#.#08.142.108':445
'20#.#08.235.97':445
'20#.#08.107.36':445
'20#.#08.151.40':445
'20#.#08.169.230':445
'20#.#08.85.228':445
'20#.#08.66.63':139
'20#.#08.35.41':139
'20#.#08.11.36':139
'20#.#08.52.28':139
'20#.#08.71.45':139
'20#.#08.154.40':139
'20#.#08.96.113':139
'20#.#08.166.153':139
'20#.#08.49.203':139
'20#.#08.183.171':139
'20#.#08.39.63':139
'20#.#08.65.206':139
'20#.#08.214.169':139
'20#.#08.251.115':139
'20#.#08.241.165':139
'20#.#08.209.154':139
'20#.#08.170.209':139
'20#.#08.147.170':139
'20#.#08.99.86':139
'20#.#08.147.148':445
'20#.#08.189.76':445
'20#.#08.238.189':445
'20#.#08.69.167':139
'20#.#08.19.246':139
'20#.#08.99.61':139
'20#.#08.147.170':445
'20#.#08.99.86':445
'20#.#08.209.154':445
'20#.#08.170.209':445
'20#.#08.214.252':139
'20#.#08.61.215':139
'20#.#08.233.148':139
'20#.#08.243.177':139
'20#.#08.112.206':139
'20#.#08.247.13':139
'20#.#08.83.206':139
'20#.#08.181.243':139
'20#.#08.127.3':139
'20#.#08.98.96':139
'20#.#08.243.176':139
'20#.#08.106.107':139
'20#.#08.179.41':139
'20#.#08.176.165':139
'20#.#08.206.63':139
'20#.#08.208.140':139
'20#.#08.96.26':139
'20#.#08.38.9':139
'20#.#08.218.26':139
'20#.#08.223.177':139
'20#.#08.109.223':139
'20#.#08.50.192':139
'20#.#08.29.80':139
'20#.#08.111.47':139
'20#.#08.218.44':139
'20#.#08.63.252':139
'20#.#08.206.34':139
'20#.#08.165.78':139
'20#.#08.2.54':139
'20#.#08.93.98':445
'20#.#08.172.99':445
'20#.#08.217.107':445
'20#.#08.137.49':445
'20#.#08.100.19':445
'20#.#08.71.198':445
'20#.#08.68.225':445
'20#.#08.20.18':445
'20#.#08.30.103':445
'20#.#08.121.183':445
'20#.#08.154.31':445
'20#.#08.10.206':445
'20#.#08.105.92':445
'20#.#08.3.35':445
'20#.#08.205.95':445
'20#.#08.238.189':139
'20#.#08.185.199':139
'20#.#08.150.185':139
'20#.#08.140.102':139
'20#.#08.117.209':139
'20#.#08.246.243':139
'20#.#08.96.98':139
'20#.#08.182.68':139
'20#.#08.93.98':139
'20#.#08.147.148':139
'20#.#08.189.76':139
'20#.#08.214.107':139
'20#.#08.189.85':139
'20#.#08.179.45':139
'20#.#08.28.83':139
'20#.#08.96.98':445
'20#.#08.182.68':445
'20#.#08.117.209':445
'20#.#08.246.243':445
'20#.#08.48.182':445
'20#.#08.35.98':445
'20#.#08.159.30':445
'20#.#08.179.45':445
'20#.#08.28.83':445
'20#.#08.214.107':445
'20#.#08.189.85':445
'20#.#08.185.199':445
'20#.#08.150.185':445
'20#.#08.140.102':445
'20#.#08.197.102':445
'20#.#08.193.100':445
'20#.#08.38.109':445
'20#.#08.56.133':445
'20#.#08.204.240':445
'20#.#08.134.250':445
'20#.#08.88.208':445
'20#.#08.240.88':445
'20#.#08.47.127':445
'20#.#08.29.47':445
'20#.#08.112.182':445
'20#.#08.97.145':445
'20#.#08.128.1':445
'20#.#08.116.171':445
'20#.#08.201.116':445
'20#.#08.84.158':139
'20#.#08.121.249':445
'20#.#08.184.171':445
'20#.#08.99.246':445
'20#.#08.94.15':445
'20#.#08.94.37':445
'20#.#08.79.189':445
'20#.#08.6.227':445
'20#.#08.165.50':445
'20#.#08.22.175':445
'20#.#08.211.137':445
'20#.#08.179.14':445
'20#.#08.165.178':445
'20#.#08.74.100':445
'20#.#08.155.124':445
'20#.#08.18.96':445
'20#.#08.44.202':445
'20#.#08.154.118':445
'20#.#08.253.185':445
'20#.#08.55.103':445
'20#.#08.167.191':445
'20#.#08.101.91':445
'20#.#08.177.100':445
'20#.#08.188.10':445
'20#.#08.58.7':445
'20#.#08.73.57':445
'20#.#08.111.237':445
'20#.#08.116.253':445
'20#.#08.147.164':445
'20#.#08.237.72':445
'20#.#08.55.103':9988
'20#.#08.154.118':9988
'20#.#08.253.185':9988
'20#.#08.96.141':9988
'20#.#08.25.87':9988
'20#.#08.157.96':9988
'20#.#08.13.234':9988
'20#.#08.95.223':9988
'20#.#08.239.95':9988
'20#.#08.60.233':139
'20#.#08.131.18':9988
'20#.#08.188.10':9988
'20#.#08.79.189':9988
'20#.#08.184.171':9988
'20#.#08.123.13':9988
'20#.#08.208.25':445
'20#.#08.188.42':445
'20#.#08.84.35':445
'20#.#08.25.232':445
'20#.#08.131.18':445
'20#.#08.142.111':445
'20#.#08.121.84':445
'20#.#08.60.5':445
'20#.#08.124.77':445
'20#.#08.37.209':445
'20#.#08.126.21':445
'20#.#08.134.229':445
'20#.#08.95.223':445
'20#.#08.239.95':445
'20#.#08.25.87':445
'20#.#08.188.10':139
'20#.#08.58.7':139
'20#.#08.73.57':139
'20#.#08.111.237':139
'20#.#08.116.253':139
'20#.#08.147.164':139
'20#.#08.237.72':139
'20#.#08.94.15':139
'20#.#08.121.249':139
'20#.#08.184.171':139
'20#.#08.6.227':139
'20#.#08.18.96':139
'20#.#08.94.37':139
'20#.#08.79.189':139
'20#.#08.253.185':139
'20#.#08.13.234':139
'20#.#08.123.13':139
'20#.#08.86.126':139
'20#.#08.96.141':139
'20#.#08.178.13':139
'20#.#08.157.96':139
'20#.#08.74.66':139
'20#.#08.55.103':139
'20#.#08.44.202':139
'20#.#08.154.118':139
'20#.#08.177.100':139
'20#.#08.25.87':139
'20#.#08.167.191':139
'20#.#08.101.91':139
'20#.#08.60.5':139
'20#.#08.124.77':139
'20#.#08.37.209':139
'20#.#08.126.21':139
'20#.#08.134.229':139
'20#.#08.95.223':139
'20#.#08.239.95':139
'20#.#08.13.234':445
'20#.#08.123.13':445
'20#.#08.86.126':445
'20#.#08.96.141':445
'20#.#08.178.13':445
'20#.#08.157.96':445
'20#.#08.74.66':445
'20#.#08.84.35':139
'20#.#08.179.14':139
'20#.#08.165.50':139
'20#.#08.22.175':139
'20#.#08.155.124':139
'20#.#08.165.178':139
'20#.#08.99.246':139
'20#.#08.74.100':139
'20#.#08.25.232':139
'20#.#08.208.25':139
'20#.#08.188.42':139
'20#.#08.121.84':139
'20#.#08.211.137':139
'20#.#08.131.18':139
'20#.#08.142.111':139
'20#.#08.3.213':445
'20#.#08.149.89':445
'20#.#08.121.210':445
'20#.#08.191.216':445
'20#.#08.24.142':445
'20#.#08.10.171':445
'20#.#08.253.5':445
'20#.#08.40.137':445
'20#.#08.55.218':445
'20#.#08.9.55':445
'20#.#08.72.137':445
'20#.#08.66.119':445
'20#.#08.210.78':445
'20#.#08.49.202':445
'20#.#08.103.60':445
'20#.#08.228.154':445
'20#.#08.34.32':445
'20#.#08.38.33':445
'20#.#08.41.123':445
'20#.#08.34.92':445
'20#.#08.13.170':445
'20#.#08.145.4':445
'20#.#08.208.65':445
'20#.#08.212.215':445
'20#.#08.5.210':445
'20#.#08.118.75':445
'20#.#08.12.61':445
'20#.#08.151.11':445
'20#.#08.75.151':445
'20#.#08.151.40':139
'20#.#08.169.230':139
'20#.#08.85.228':139
'20#.#08.24.194':139
'20#.#08.233.55':139
'20#.#08.160.67':139
'20#.#08.235.33':139
'20#.#08.243.235':139
'20#.#08.200.246':139
'20#.#08.152.130':139
'20#.#08.235.97':139
'20#.#08.107.36':139
'20#.#08.85.115':139
'20#.#08.142.108':139
'20#.#08.55.235':139
'20#.#08.6.86':445
'20#.#08.14.121':139
'20#.#08.32.15':139
'20#.#08.177.114':445
'20#.#08.76.252':445
'20#.#08.67.99':445
'20#.#08.179.209':445
'20#.#08.7.79':445
'20#.#08.180.150':445
'20#.#08.91.224':139
'20#.#08.32.15':445
'20#.#08.7.79':139
'20#.#08.180.150':139
'20#.#08.14.121':445
'20#.#08.1.251':445
'20#.#08.12.61':139
'20#.#08.151.11':139
'20#.#08.75.151':139
'20#.#08.38.33':139
'20#.#08.41.123':139
'20#.#08.228.154':139
'20#.#08.34.32':139
'20#.#08.103.60':139
'20#.#08.10.171':139
'20#.#08.24.142':139
'20#.#08.5.210':139
'20#.#08.118.75':139
'20#.#08.208.65':139
'20#.#08.212.215':139
'20#.#08.145.4':139
'20#.#08.51.180':139
'20#.#08.209.139':139
'20#.#08.59.219':139
'20#.#08.251.28':139
'20#.#08.2.194':139
'20#.#08.65.94':139
'20#.#08.119.49':139
'20#.#08.34.92':139
'20#.#08.1.251':139
'20#.#08.13.170':139
'20#.#08.32.163':139
'20#.#08.253.177':139
'20#.#08.135.77':139
'20#.#08.185.93':139
'20#.#08.65.94':445
'20#.#08.119.49':445
'20#.#08.251.28':445
'20#.#08.2.194':445
'20#.#08.179.209':139
'20#.#08.6.86':139
'20#.#08.60.233':445
'20#.#08.135.77':445
'20#.#08.185.93':445
'20#.#08.32.163':445
'20#.#08.253.177':445
'20#.#08.51.180':445
'20#.#08.209.139':445
'20#.#08.59.219':445
'20#.#08.177.114':139
'20#.#08.121.210':139
'20#.#08.66.119':139
'20#.#08.210.78':139
'20#.#08.149.89':139
'20#.#08.253.5':139
'20#.#08.191.216':139
'20#.#08.3.213':139
'20#.#08.9.55':139
'20#.#08.76.252':139
'20#.#08.67.99':139
'20#.#08.55.218':139
'20#.#08.49.202':139
'20#.#08.72.137':139
'20#.#08.40.137':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней