Trojan.DownLoader12.28923

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#5.110.75':445
'21#.#5.30.206':445
'21#.#5.190.39':445
'21#.#5.110.135':445
'21#.#5.161.110':445
'21#.#5.31.228':445
'21#.#5.238.141':139
'21#.#5.179.241':139
'21#.#5.175.66':139
'21#.#5.61.99':445
'21#.#5.121.209':445
'21#.#5.50.83':445
'21#.#5.18.115':445
'21#.#5.135.203':445
'21#.#5.190.128':445
'21#.#5.202.190':445
'21#.#5.153.195':445
'21#.#5.246.188':445
'21#.#5.178.6':445
'21#.#5.192.94':445
'21#.#5.82.208':445
'21#.#5.247.129':445
'21#.#5.248.11':445
'21#.#5.41.157':445
'21#.#5.255.79':445
'21#.#5.179.241':445
'21#.#5.213.85':445
'21#.#5.221.221':445
'21#.35.86.4':445
'21#.#5.78.170':139
'21#.#5.176.193':445
'21#.#5.31.73':445
'21#.#5.73.88':445
'21#.#5.41.157':139
'21#.#5.221.221':139
'21#.#5.248.11':139
'21#.#5.213.85':139
'21#.#5.255.79':139
'21#.#5.31.73':139
'21#.#5.175.66':445
'21#.#5.238.141':445
'21#.35.86.4':139
'21#.#5.73.88':139
'21#.#5.176.193':139
'21#.#5.128.127':445
'21#.#5.192.94':139
'21#.#5.246.188':139
'21#.#5.247.129':139
'21#.#5.153.195':139
'21#.#5.82.208':139
'21#.#5.178.6':139
'21#.#5.110.75':139
'21#.#5.30.206':139
'21#.#5.190.39':139
'21#.#5.110.135':139
'21#.#5.161.110':139
'21#.#5.18.124':139
'21#.#5.71.69':139
'21#.#5.125.156':139
'21#.#5.78.125':139
'21#.#5.79.158':139
'21#.#5.128.127':139
'21#.#5.50.83':139
'21#.#5.18.115':139
'21#.#5.135.203':139
'21#.#5.190.128':139
'21#.#5.202.190':139
'21#.#5.39.130':445
'21#.#5.76.221':445
'21#.#5.19.90':445
'21#.35.96.3':445
'21#.#5.50.138':445
'21#.#5.162.223':445
'21#.#5.18.124':445
'21#.#5.71.69':445
'21#.#5.125.156':445
'21#.#5.78.125':445
'21#.#5.79.158':445
'21#.#5.19.30':445
'21#.#5.74.42':445
'21#.#5.121.209':139
'21#.#5.31.228':139
'21#.#5.61.99':139
'21#.#5.14.129':445
'21#.#5.81.203':445
'21#.#5.47.177':445
'21#.#5.159.54':445
'21#.#5.140.199':445
'21#.#5.206.238':445
'21#.#5.95.118':445
'21#.#5.178.51':445
'21#.#5.226.181':445
'21#.#5.48.71':445
'21#.#5.13.106':445
'21#.#5.173.177':445
'21#.#5.248.105':445
'21#.#5.187.248':445
'21#.#5.63.75':445
'21#.#5.130.125':445
'21#.#5.70.54':445
'21#.#5.166.189':445
'21#.#5.215.65':445
'21#.#5.189.158':445
'21#.#5.24.90':445
'21#.#5.9.131':445
'21#.#5.0.154':445
'21#.#5.196.211':445
'21#.#5.162.52':445
'21#.#5.122.39':445
'21#.#5.48.210':445
'21#.#5.169.245':445
'21#.#5.4.158':139
'21#.#5.117.243':139
'21#.#5.6.102':139
'21#.#5.94.82':139
'21#.#5.115.41':139
'21#.#5.223.117':139
'21#.#5.105.40':139
'21#.#5.77.168':139
'21#.#5.39.206':139
'21#.#5.131.223':139
'21#.#5.141.197':139
'21#.#5.97.46':445
'21#.#5.134.208':445
'21#.35.7.87':445
'21#.#5.78.155':445
'21#.#5.117.16':445
'21#.#5.251.17':445
'21#.#5.105.19':445
'21#.#5.28.148':139
'21#.#5.168.201':445
'21#.#5.252.65':445
'21#.#5.98.91':445
'21#.#5.148.229':445
'21#.#5.122.39':139
'21#.#5.196.211':139
'21#.#5.169.245':139
'21#.#5.0.154':139
'21#.#5.48.210':139
'21#.#5.162.52':139
'21#.#5.95.118':139
'21#.#5.178.51':139
'21#.#5.226.181':139
'21#.#5.48.71':139
'21#.#5.13.106':139
'21#.#5.203.122':139
'21#.#5.27.157':139
'21#.#5.11.222':139
'21#.#5.89.79':139
'21#.#5.7.181':139
'21#.#5.148.229':139
'21#.#5.166.189':139
'21#.#5.215.65':139
'21#.#5.189.158':139
'21#.#5.24.90':139
'21#.#5.9.131':139
'21#.#5.168.201':139
'21#.#5.105.19':139
'21#.#5.98.91':139
'21#.#5.251.17':139
'21#.#5.252.65':139
'21#.#5.78.170':445
'21#.#5.203.122':445
'21#.#5.27.157':445
'21#.#5.11.222':445
'21#.#5.89.79':445
'21#.#5.7.181':445
'21#.#5.63.75':139
'21#.#5.248.105':139
'21#.#5.70.54':139
'21#.#5.173.177':139
'21#.#5.130.125':139
'21#.#5.187.248':139
'21#.#5.97.46':139
'21#.#5.134.208':139
'21#.35.7.87':139
'21#.#5.78.155':139
'21#.#5.117.16':139
'21#.#5.162.223':139
'21#.#5.179.251':445
'21#.#5.208.203':445
'21#.#5.187.51':445
'21#.#5.22.75':445
'21#.#5.80.224':445
'21#.#5.92.160':445
'21#.#5.78.84':445
'21#.#5.96.203':445
'21#.#5.252.230':445
'21#.#5.163.92':445
'21#.#5.49.163':445
'21#.#5.235.140':139
'21#.#5.149.38':139
'21#.#5.224.38':139
'21#.#5.95.189':139
'21#.#5.219.32':139
'21#.#5.68.230':139
'21#.#5.252.231':445
'21#.#5.72.35':445
'21#.#5.26.34':445
'21#.#5.135.116':445
'21#.#5.115.73':445
'21#.#5.109.251':445
'21#.#5.182.109':445
'21#.#5.124.54':445
'21#.#5.204.221':445
'21#.#5.106.175':445
'21#.#5.138.182':445
'21#.#5.40.204':445
'21#.#5.80.254':445
'21#.#5.204.238':445
'21#.#5.120.21':445
'21#.#5.239.25':445
'21#.#5.53.97':445
'21#.#5.60.147':445
'21#.#5.159.91':445
'21#.#5.81.80':445
'21#.#5.103.3':445
'21#.#5.89.60':445
'21#.#5.32.208':445
'21#.#5.221.32':445
'21#.#5.208.73':445
'21#.#5.244.88':445
'21#.#5.176.172':445
'21#.#5.35.33':139
'21#.#5.78.84':139
'21#.#5.96.203':139
'21#.#5.252.230':139
'21#.#5.163.92':139
'21#.#5.49.163':139
'21#.#5.81.80':139
'21#.#5.60.147':139
'21#.#5.89.60':139
'21#.#5.53.97':139
'21#.#5.103.3':139
'21#.#5.159.91':139
'21#.#5.115.73':139
'21#.#5.72.35':139
'21#.#5.252.231':139
'21#.#5.26.34':139
'21#.#5.135.116':139
'21#.#5.22.75':139
'21#.#5.208.203':139
'21#.#5.92.160':139
'21#.#5.179.251':139
'21#.#5.80.224':139
'21#.#5.187.51':139
'21#.#5.40.204':139
'21#.#5.80.254':139
'21#.#5.204.238':139
'21#.#5.120.21':139
'21#.#5.239.25':139
'21#.#5.69.82':139
'21#.#5.71.63':139
'21#.#5.174.55':139
'21#.#5.105.18':139
'21#.#5.13.46':139
'21#.#5.18.88':139
'21#.#5.32.208':139
'21#.#5.221.32':139
'21#.#5.208.73':139
'21#.#5.244.88':139
'21#.#5.176.172':139
'21#.#5.204.221':139
'21#.#5.182.109':139
'21#.#5.138.182':139
'21#.#5.109.251':139
'21#.#5.106.175':139
'21#.#5.124.54':139
'21#.#5.126.73':139
'21#.#5.78.91':139
'21#.#5.154.121':139
'21#.#5.36.33':139
'21#.#5.111.36':139
'21#.#5.117.75':139
'21#.#5.86.114':445
'21#.#5.46.236':445
'21#.#5.69.135':445
'21#.#5.108.249':139
'21#.#5.232.143':139
'21#.#5.113.8':445
'21#.#5.72.76':445
'21#.#5.112.139':445
'21#.#5.195.198':445
'21#.#5.123.195':445
'21#.#5.168.216':445
'21#.#5.46.236':139
'21#.#5.86.89':139
'21#.#5.86.114':139
'21#.#5.48.199':445
'21#.#5.69.135':139
'21#.#5.159.54':139
'21#.#5.81.203':139
'21#.#5.206.238':139
'21#.#5.14.129':139
'21#.#5.140.199':139
'21#.#5.47.177':139
'21#.#5.39.130':139
'21#.#5.76.221':139
'21#.#5.19.90':139
'21#.35.96.3':139
'21#.#5.50.138':139
'21#.#5.154.121':445
'21#.#5.126.73':445
'21#.#5.111.36':445
'21#.#5.86.89':445
'21#.#5.36.33':445
'21#.#5.78.91':445
'21#.#5.19.30':139
'21#.#5.74.42':139
'21#.#5.232.143':445
'21#.#5.117.75':445
'21#.#5.108.249':445
'21#.#5.248.198':445
'21#.#5.81.80':9988
'21#.#5.159.91':9988
'21#.#5.80.224':9988
'21#.#5.149.38':445
'21#.#5.68.230':445
'21#.#5.115.73':9988
'21#.#5.106.175':9988
'21#.#5.163.92':9988
'21#.#5.252.231':9988
'21#.#5.135.116':9988
'21#.#5.92.160':9988
'21#.#5.105.18':445
'21#.#5.71.63':445
'21#.#5.18.88':445
'21#.#5.69.82':445
'21#.#5.13.46':445
'21#.#5.174.55':445
'21#.#5.224.38':445
'21#.#5.235.140':445
'21#.#5.219.32':445
'21#.#5.35.33':445
'21#.#5.95.189':445
'21#.#5.72.76':139
'21#.#5.168.216':139
'21#.#5.113.8':139
'21#.#5.123.195':139
'21#.#5.112.139':139
'21#.#5.48.199':139
'21#.#5.12.207':445
'21#.35.6.15':445
'21#.#5.71.170':445
'21#.#5.47.128':445
'21#.#5.5.182':445
'21#.#5.109.251':9988
'21#.#5.47.128':139
'21#.#5.96.203':9988
'21#.#5.78.84':9988
'21#.#5.187.51':9988
'21#.#5.5.182':139
'21#.#5.248.198':139
'21#.#5.195.198':139
'21#.35.6.15':139
'21#.#5.71.170':139
'21#.#5.12.207':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней