Trojan.DownLoader12.28855

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'19#.#4.84.166':139
'19#.#4.73.217':139
'19#.#4.38.74':139
'19#.#4.89.163':445
'19#.#4.126.99':445
'19#.#4.156.243':139
'19#.#4.139.18':139
'19#.#4.45.37':139
'19#.#4.221.182':139
'19#.#4.156.243':445
'19#.#4.92.190':139
'19#.#4.236.117':139
'19#.#4.166.2':139
'19#.14.1.85':445
'19#.#4.91.149':445
'19#.#4.106.124':445
'19#.#4.0.198':445
'19#.#4.166.60':445
'19#.#4.84.211':445
'19#.#4.155.190':445
'19#.#4.247.52':445
'19#.#4.109.42':445
'19#.#4.52.241':445
'19#.#4.85.105':445
'19#.#4.255.215':445
'19#.#4.90.93':445
'19#.#4.129.188':139
'19#.#4.145.89':139
'19#.#4.125.65':139
'19#.#4.98.85':139
'19#.#4.33.99':139
'19#.#4.174.17':139
'19#.#4.82.213':139
'19#.#4.154.52':139
'19#.#4.8.170':139
'19#.#4.200.160':139
'19#.#4.19.65':139
'19#.#4.28.137':139
'19#.#4.40.16':139
'19#.#4.139.18':445
'19#.#4.92.190':445
'19#.#4.236.117':445
'19#.#4.84.166':445
'19#.#4.73.217':445
'19#.#4.38.74':445
'19#.#4.166.2':445
'19#.#4.23.122':139
'19#.#4.88.155':139
'19#.#4.85.209':139
'19#.#4.45.37':445
'19#.#4.221.182':445
'19#.#4.184.150':139
'19#.#4.168.39':445
'19#.#4.91.149':139
'19#.#4.106.124':139
'19#.#4.155.190':139
'19#.#4.166.60':139
'19#.#4.84.211':139
'19#.14.1.85':139
'19#.#4.85.105':139
'19#.#4.109.42':139
'19#.#4.52.241':139
'19#.#4.89.163':139
'19#.#4.255.215':139
'19#.#4.90.93':139
'19#.#4.247.52':139
'19#.14.25.3':139
'19#.#4.21.177':139
'19#.#4.81.38':139
'19#.#4.78.225':139
'19#.#4.21.53':139
'19#.#4.101.79':139
'19#.#4.184.80':139
'19#.#4.173.114':139
'19#.#4.168.39':139
'19#.#4.0.198':139
'19#.#4.218.9':139
'19#.#4.48.251':139
'19#.#4.255.91':139
'19#.#4.21.53':445
'19#.#4.101.79':445
'19#.14.25.3':445
'19#.#4.160.78':445
'19#.#4.224.155':445
'19#.#4.78.225':445
'19#.#4.21.177':445
'19#.#4.48.251':445
'19#.#4.255.91':445
'19#.#4.173.114':445
'19#.#4.81.38':445
'19#.#4.184.80':445
'19#.#4.218.9':445
'19#.#4.202.148':445
'19#.#4.18.174':445
'19#.#4.10.206':445
'19#.#4.126.99':139
'19#.#4.48.204':445
'19#.#4.241.9':445
'19#.#4.193.57':445
'19#.#4.138.228':445
'19#.#4.253.138':445
'19#.#4.29.94':445
'19#.#4.98.167':445
'19#.#4.166.23':445
'19#.#4.228.37':445
'19#.#4.79.71':139
'19#.#4.106.209':139
'19#.#4.16.213':139
'19#.#4.44.228':139
'19#.#4.88.213':139
'19#.#4.144.141':139
'19#.#4.49.115':139
'19#.#4.44.228':445
'19#.#4.88.213':445
'19#.#4.144.141':445
'19#.#4.219.191':139
'19#.#4.53.236':139
'19#.#4.78.223':445
'19#.#4.106.51':445
'19#.14.9.16':445
'19#.#4.13.31':445
'19#.#4.245.215':445
'19#.14.75.8':445
'19#.#4.6.233':445
'19#.#4.143.74':445
'19#.#4.136.103':445
'19#.#4.189.84':445
'19#.#4.78.223':139
'19#.#4.16.118':445
'19#.#4.207.253':445
'19#.#4.69.39':445
'19#.#4.54.188':139
'19#.#4.55.114':139
'19#.#4.189.82':139
'19#.14.5.38':139
'19#.#4.133.4':139
'19#.#4.57.108':139
'19#.#4.247.123':139
'19#.#4.43.175':139
'19#.#4.163.241':139
'19#.#4.207.174':139
'19#.#4.137.237':139
'19#.#4.98.244':139
'19#.#4.106.247':139
'19#.#4.49.115':445
'19#.#4.219.191':445
'19#.#4.53.236':445
'19#.#4.79.71':445
'19#.#4.106.209':445
'19#.#4.16.213':445
'19#.#4.39.160':139
'19#.14.83.4':139
'19#.#4.31.39':139
'19#.#4.37.37':139
'19#.#4.142.7':139
'19#.#4.62.188':139
'19#.#4.118.102':139
'19#.#4.51.21':445
'19#.14.9.16':139
'19#.#4.13.31':139
'19#.#4.143.74':139
'19#.14.75.8':139
'19#.#4.6.233':139
'19#.#4.106.51':139
'19#.#4.16.118':139
'19#.#4.189.84':139
'19#.#4.184.150':445
'19#.#4.23.122':445
'19#.#4.207.253':139
'19#.#4.69.39':139
'19#.#4.136.103':139
'19#.#4.192.179':139
'19#.#4.151.192':139
'19#.#4.105.252':139
'19#.#4.221.46':139
'19#.#4.250.169':139
'19#.#4.224.176':139
'19#.#4.123.188':139
'19#.14.21.0':139
'19#.#4.51.21':139
'19#.#4.245.215':139
'19#.#4.162.33':139
'19#.#4.170.254':139
'19#.#4.0.171':139
'19#.#4.250.169':445
'19#.#4.224.176':445
'19#.#4.192.179':445
'19#.#4.8.170':445
'19#.#4.200.160':445
'19#.#4.221.46':445
'19#.#4.151.192':445
'19#.#4.170.254':445
'19#.#4.0.171':445
'19#.14.21.0':445
'19#.#4.105.252':445
'19#.#4.123.188':445
'19#.#4.162.33':445
'19#.#4.33.99':445
'19#.#4.174.17':445
'19#.#4.129.188':445
'19#.#4.88.155':445
'19#.#4.85.209':445
'19#.#4.98.85':445
'19#.#4.145.89':445
'19#.#4.28.137':445
'19#.#4.40.16':445
'19#.#4.154.52':445
'19#.#4.125.65':445
'19#.#4.82.213':445
'19#.#4.19.65':445
'19#.#4.224.155':139
'19#.#4.92.100':445
'19#.#4.110.92':445
'19#.#4.119.110':445
'19#.#4.116.191':445
'19#.#4.192.116':445
'19#.#4.100.192':445
'19#.#4.225.227':445
'19#.#4.90.11':445
'19#.#4.12.33':445
'19#.#4.231.36':445
'19#.14.17.9':445
'19#.14.53.3':445
'19#.14.7.58':445
'19#.#4.138.118':445
'19#.14.3.16':445
'19#.#4.37.214':445
'19#.#4.123.182':445
'19#.#4.175.64':445
'19#.#4.119.69':445
'19#.#4.7.244':445
'19#.#4.22.225':445
'19#.#4.225.29':445
'19#.#4.222.58':445
'19#.14.32.5':445
'19#.#4.87.113':445
'19#.#4.82.50':445
'19#.#4.114.24':445
'19#.#4.248.111':445
'19#.14.6.96':445
'19#.#4.228.253':445
'19#.#4.2.109':445
'19#.#4.111.109':445
'19#.#4.165.84':445
'19#.#4.7.244':9988
'19#.#4.225.29':9988
'19#.#4.92.100':9988
'19#.#4.63.236':445
'19#.#4.11.162':445
'19#.#4.132.254':445
'19#.#4.46.126':445
'19#.#4.55.65':445
'19#.#4.72.25':445
'19#.#4.184.214':445
'19#.#4.12.46':445
'19#.#4.214.78':445
'19#.#4.47.57':445
'19#.#4.255.24':445
'19#.#4.89.124':445
'19#.#4.189.75':445
'19#.#4.7.175':445
'19#.#4.101.8':445
'19#.#4.57.150':445
'19#.#4.44.138':445
'19#.#4.192.116':139
'19#.#4.100.192':139
'19#.#4.92.100':139
'19#.#4.225.29':139
'19#.#4.222.58':139
'19#.#4.116.191':139
'19#.#4.110.92':139
'19#.14.53.3':139
'19#.14.7.58':139
'19#.#4.12.33':139
'19#.#4.119.110':139
'19#.#4.225.227':139
'19#.14.17.9':139
'19#.#4.11.45':139
'19#.#4.44.138':139
'19#.#4.119.69':139
'19#.#4.138.118':139
'19#.#4.175.64':139
'19#.#4.123.182':139
'19#.14.3.16':139
'19#.#4.87.113':139
'19#.#4.82.50':139
'19#.#4.22.225':139
'19#.#4.37.214':139
'19#.#4.7.244':139
'19#.14.32.5':139
'19#.#4.2.109':139
'19#.#4.111.109':139
'19#.#4.114.24':139
'19#.#4.89.124':139
'19#.#4.189.75':139
'19#.#4.228.253':139
'19#.14.6.96':139
'19#.#4.11.162':139
'19#.#4.132.254':139
'19#.#4.11.45':445
'19#.#4.248.111':139
'19#.#4.165.84':139
'19#.#4.63.236':139
'19#.#4.184.214':139
'19#.#4.12.46':139
'19#.#4.46.126':139
'19#.#4.90.11':139
'19#.#4.231.36':139
'19#.#4.214.78':139
'19#.#4.55.65':139
'19#.#4.101.8':139
'19#.#4.57.150':139
'19#.#4.255.24':139
'19#.#4.72.25':139
'19#.#4.47.57':139
'19#.#4.7.175':139
'19#.#4.31.54':445
'19#.#4.122.2':445
'19#.#4.131.156':445
'19#.#4.156.225':445
'19#.#4.57.138':445
'19#.#4.80.73':445
'19#.#4.175.192':139
'19#.#4.123.209':139
'19#.#4.250.10':139
'19#.#4.1.148':139
'19#.#4.87.137':139
'19#.#4.106.31':139
'19#.#4.145.50':139
'19#.#4.85.244':445
'19#.#4.164.86':445
'19#.#4.200.163':445
'19#.#4.172.81':445
'19#.#4.161.138':445
'19#.#4.127.50':445
'19#.#4.81.80':445
'19#.#4.151.122':445
'19#.#4.224.30':445
'19#.#4.59.161':445
'19#.#4.94.24':445
'19#.#4.70.57':445
'19#.#4.49.82':445
'19#.#4.18.174':139
'19#.#4.10.206':139
'19#.#4.193.57':139
'19#.#4.48.204':139
'19#.#4.241.9':139
'19#.#4.202.148':139
'19#.#4.98.167':139
'19#.#4.253.138':139
'19#.#4.29.94':139
'19#.#4.160.78':139
'19#.#4.166.23':139
'19#.#4.228.37':139
'19#.#4.138.228':139
'19#.#4.175.192':445
'19#.#4.87.137':445
'19#.#4.106.31':445
'19#.#4.175.10':139
'19#.#4.165.116':139
'19#.#4.232.81':139
'19#.#4.145.50':445
'19#.#4.175.10':445
'19#.#4.165.116':445
'19#.#4.232.81':445
'19#.#4.123.209':445
'19#.#4.250.10':445
'19#.#4.1.148':445
'19#.#4.31.236':445
'19#.#4.136.100':139
'19#.#4.30.251':139
'19#.#4.114.199':139
'19#.#4.140.203':139
'19#.#4.218.240':139
'19#.#4.164.219':139
'19#.#4.31.236':139
'19#.#4.85.244':139
'19#.#4.164.86':139
'19#.#4.200.163':139
'19#.#4.172.81':139
'19#.#4.161.138':139
'19#.#4.127.50':139
'19#.#4.165.84':9988
'19#.#4.248.111':9988
'19#.#4.57.150':9988
'19#.#4.12.33':9988
'19#.#4.231.36':9988
'19#.#4.132.254':9988
'19#.#4.226.132':139
'19#.#4.130.16':139
'19#.#4.182.113':139
'19#.#4.145.182':139
'19#.#4.223.75':139
'19#.14.8.86':139
'19#.14.43.8':139
'19#.14.43.8':445
'19#.#4.130.16':445
'19#.#4.182.113':445
'19#.#4.226.132':445
'19#.#4.223.75':445
'19#.14.8.86':445
'19#.#4.145.182':445
'19#.#4.136.100':445
'19#.#4.30.251':445
'19#.#4.114.199':445
'19#.#4.140.203':445
'19#.#4.218.240':445
'19#.#4.164.219':445
'19#.#4.49.82':139
'19#.#4.151.122':139
'19#.#4.224.30':139
'19#.#4.81.80':139
'19#.#4.94.24':139
'19#.#4.70.57':139
'19#.#4.59.161':139
'19#.#4.31.54':139
'19#.#4.122.2':139
'19#.#4.131.156':139
'19#.#4.156.225':139
'19#.#4.57.138':139
'19#.#4.80.73':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней