Trojan.DownLoader12.28951

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'14#.#6.196.117':139
'14#.#6.9.187':139
'14#.#6.148.196':139
'14#.#6.233.92':139
'14#.#6.196.232':139
'14#.#6.110.92':139
'14#.#6.15.188':139
'14#.#6.112.26':139
'14#.#6.12.97':139
'14#.#6.157.201':139
'14#.#6.240.168':139
'14#.#6.231.87':139
'14#.#6.62.231':139
'14#.#6.60.39':445
'14#.#6.99.110':445
'14#.#6.97.240':445
'14#.#6.6.126':139
'14#.#6.170.206':139
'14#.#6.71.214':139
'14#.#6.95.59':139
'14#.#6.57.75':139
'14#.#6.196.232':445
'14#.#6.148.196':445
'14#.#6.233.92':445
'14#.#6.170.206':445
'14#.#6.240.168':445
'14#.#6.157.201':445
'14#.#6.112.26':445
'14#.#6.12.97':445
'14#.#6.196.117':445
'14#.#6.9.187':445
'14#.#6.6.126':445
'14#.#6.1.121':139
'14#.#6.224.226':139
'14#.#6.100.150':139
'14#.#6.172.19':139
'14#.#6.5.172':139
'14#.#6.57.75':445
'14#.#6.71.214':445
'14#.#6.95.59':445
'14#.#6.231.87':445
'14#.#6.62.231':445
'14#.#6.192.252':445
'14#.#6.192.252':139
'14#.#6.99.110':139
'14#.#6.87.50':139
'14#.#6.203.61':139
'14#.#6.131.166':139
'14#.#6.33.156':445
'14#.#6.112.45':445
'14#.#6.27.219':445
'14#.#6.97.240':139
'14#.#6.60.39':139
'14#.#6.43.54':139
'14#.#6.90.204':139
'14#.#6.72.112':139
'14#.#6.25.118':139
'14#.#6.152.139':139
'14#.#6.118.42':139
'14#.#6.41.106':139
'14#.#6.68.65':139
'14#.#6.62.175':139
'14#.#6.111.141':139
'14#.#6.194.95':139
'14#.#6.62.175':445
'14#.#6.41.106':445
'14#.#6.194.95':445
'14#.#6.72.112':445
'14#.#6.111.141':445
'14#.#6.131.166':445
'14#.#6.87.50':445
'14#.#6.203.61':445
'14#.#6.68.65':445
'14#.#6.43.54':445
'14#.#6.90.204':445
'14#.#6.162.84':445
'14#.#6.72.37':445
'14#.#6.148.244':445
'14#.#6.104.162':445
'14#.#6.35.48':445
'14#.#6.118.42':445
'14#.#6.25.118':445
'14#.#6.152.139':445
'14#.#6.45.177':445
'14#.#6.63.35':445
'14#.#6.110.92':445
'14#.#6.124.63':445
'14#.#6.51.204':445
'14#.#6.175.120':445
'14#.#6.108.172':445
'14#.#6.9.238':445
'14#.#6.212.78':139
'14#.#6.247.38':139
'14#.#6.88.22':445
'14#.#6.251.77':445
'14#.#6.15.88':445
'14#.#6.24.87':445
'14#.#6.32.47':445
'14#.#6.13.19':445
'14#.#6.113.251':445
'14#.76.8.8':445
'14#.#6.175.7':445
'14#.#6.44.193':445
'14#.#6.194.14':445
'14#.#6.243.80':445
'14#.#6.38.70':445
'14#.#6.80.227':445
'14#.#6.21.125':139
'14#.#6.114.229':139
'14#.#6.171.97':139
'14#.#6.72.162':139
'14#.#6.41.141':139
'14#.#6.155.214':139
'14#.#6.245.155':139
'14#.#6.169.3':139
'14#.#6.238.114':139
'14#.#6.245.238':139
'14#.#6.43.123':139
'14#.#6.231.141':139
'14#.#6.224.64':139
'14#.#6.18.86':139
'14#.#6.37.12':139
'14#.#6.87.149':139
'14#.#6.67.207':139
'14#.#6.168.84':139
'14#.#6.185.33':139
'14#.#6.111.224':139
'14#.#6.236.219':139
'14#.#6.19.32':445
'14#.#6.19.32':139
'14#.76.8.8':139
'14#.#6.170.24':139
'14#.#6.49.130':139
'14#.#6.251.50':139
'14#.#6.13.19':139
'14#.#6.38.70':139
'14#.#6.32.47':139
'14#.#6.175.7':139
'14#.#6.113.251':139
'14#.#6.32.16':139
'14#.#6.100.150':445
'14#.#6.1.121':445
'14#.#6.5.172':445
'14#.#6.15.188':445
'14#.#6.172.19':445
'14#.#6.188.22':139
'14#.#6.136.213':139
'14#.#6.35.129':139
'14#.#6.224.226':445
'14#.#6.128.224':139
'14#.#6.35.129':445
'14#.#6.188.22':445
'14#.#6.128.224':445
'14#.#6.15.88':139
'14#.#6.88.22':139
'14#.#6.251.50':445
'14#.#6.170.24':445
'14#.#6.49.130':445
'14#.#6.136.213':445
'14#.#6.32.16':445
'14#.#6.251.77':139
'14#.#6.194.14':139
'14#.#6.24.87':139
'14#.#6.44.193':139
'14#.#6.80.227':139
'14#.#6.243.80':139
'14#.#6.124.63':139
'14#.#6.51.204':139
'14#.#6.175.120':139
'14#.#6.108.172':139
'14#.#6.9.238':139
'14#.#6.63.35':139
'14#.#6.162.132':445
'14#.#6.125.95':445
'14#.#6.46.166':445
'14#.#6.132.243':445
'14#.#6.63.65':445
'14#.#6.77.119':445
'14#.#6.45.72':445
'14#.#6.130.170':445
'14#.#6.9.163':445
'14#.#6.170.9':445
'14#.#6.127.210':445
'14#.#6.250.148':139
'14#.#6.44.81':139
'14#.#6.56.67':139
'14#.#6.142.207':139
'14#.#6.89.142':139
'14#.#6.91.149':445
'14#.#6.188.23':445
'14#.#6.156.1':139
'14#.#6.2.147':139
'14#.#6.74.88':139
'14#.#6.43.37':445
'14#.#6.202.68':445
'14#.#6.37.27':445
'14#.#6.241.19':445
'14#.#6.26.241':445
'14#.#6.186.36':445
'14#.#6.74.219':445
'14#.#6.248.113':445
'14#.#6.254.202':445
'14#.#6.45.92':445
'14#.#6.19.209':445
'14#.#6.191.51':445
'14#.#6.221.49':445
'14#.#6.51.186':445
'14#.#6.116.64':445
'14#.#6.186.167':445
'14#.#6.230.28':445
'14#.#6.208.229':445
'14#.#6.150.75':445
'14#.#6.172.84':445
'14#.#6.75.202':445
'14#.#6.28.187':139
'14#.#6.186.167':139
'14#.#6.51.186':139
'14#.#6.116.64':139
'14#.#6.77.119':139
'14#.#6.45.72':139
'14#.#6.172.84':139
'14#.#6.150.75':139
'14#.#6.75.202':139
'14#.#6.191.51':139
'14#.#6.221.49':139
'14#.#6.130.170':139
'14#.#6.46.166':139
'14#.#6.127.210':139
'14#.#6.91.149':139
'14#.#6.125.95':139
'14#.#6.188.23':139
'14#.#6.9.163':139
'14#.#6.170.9':139
'14#.#6.162.132':139
'14#.#6.63.65':139
'14#.#6.132.243':139
'14#.#6.176.8':139
'14#.#6.216.55':139
'14#.#6.74.219':139
'14#.#6.186.36':139
'14#.#6.225.185':139
'14#.#6.183.1':139
'14#.#6.26.155':139
'14#.#6.74.227':139
'14#.#6.63.37':139
'14#.#6.161.137':139
'14#.#6.248.113':139
'14#.#6.241.19':139
'14#.#6.26.241':139
'14#.#6.19.209':139
'14#.#6.230.28':139
'14#.#6.208.229':139
'14#.#6.254.202':139
'14#.#6.45.92':139
'14#.#6.202.68':139
'14#.#6.37.27':139
'14#.#6.43.37':139
'14#.#6.225.185':445
'14#.#6.70.166':445
'14#.#6.172.127':445
'14#.#6.87.23':445
'14#.76.44.0':445
'14#.#6.31.138':445
'14#.#6.50.79':445
'14#.#6.195.93':445
'14#.#6.40.195':445
'14#.#6.227.172':445
'14#.#6.44.211':445
'14#.#6.198.155':445
'14#.#6.219.220':139
'14#.#6.43.151':139
'14#.#6.187.243':139
'14#.#6.160.112':139
'14#.#6.31.194':139
'14#.#6.233.5':139
'14#.#6.0.202':139
'14#.#6.101.250':139
'14#.#6.18.233':139
'14#.#6.250.18':139
'14#.#6.112.45':139
'14#.#6.104.162':139
'14#.#6.33.156':139
'14#.#6.0.202':445
'14#.#6.27.219':139
'14#.#6.72.37':139
'14#.#6.45.177':139
'14#.#6.162.84':139
'14#.#6.35.48':139
'14#.#6.148.244':139
'14#.#6.233.5':445
'14#.#6.31.194':445
'14#.#6.187.243':445
'14#.#6.160.112':445
'14#.#6.210.225':445
'14#.#6.99.24':445
'14#.#6.250.18':445
'14#.#6.101.250':445
'14#.#6.18.233':445
'14#.#6.43.151':445
'14#.#6.219.220':445
'14#.#6.99.24':139
'14#.#6.74.88':445
'14#.#6.156.1':445
'14#.#6.2.147':445
'14#.#6.250.148':445
'14#.#6.44.81':445
'14#.#6.186.167':9988
'14#.#6.221.49':9988
'14#.#6.51.186':9988
'14#.#6.116.64':9988
'14#.#6.77.119':9988
'14#.#6.56.67':445
'14#.#6.161.137':445
'14#.#6.74.227':445
'14#.#6.63.37':445
'14#.#6.176.8':445
'14#.#6.216.55':445
'14#.#6.142.207':445
'14#.#6.89.142':445
'14#.#6.28.187':445
'14#.#6.183.1':445
'14#.#6.26.155':445
'14#.#6.172.127':139
'14#.#6.227.172':139
'14#.#6.70.166':139
'14#.#6.31.138':139
'14#.#6.87.23':139
'14#.#6.195.93':139
'14#.#6.210.225':139
'14#.#6.50.79':139
'14#.#6.44.211':139
'14#.#6.40.195':139
'14#.76.44.0':139
'14#.#6.19.209':9988
'14#.#6.241.19':9988
'14#.#6.208.229':9988
'14#.#6.172.84':9988
'14#.#6.150.75':9988
'14#.#6.186.36':9988
'14#.#6.198.155':139
'14#.#6.202.68':9988
'14#.#6.43.37':9988
'14#.#6.26.241':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней