Trojan.DownLoader12.28957

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'20#.#03.201.9':445
'20#.#03.204.105':445
'20#.#03.10.2':445
'20#.#03.177.42':445
'20#.#03.209.169':445
'20#.#03.107.179':445
'20#.#03.89.254':445
'20#.#03.23.185':445
'20#.#03.58.155':445
'20#.#03.184.58':445
'20#.#03.67.15':445
'20#.#03.68.166':445
'20#.#03.56.188':445
'20#.#03.29.146':445
'20#.#03.227.194':445
'20#.#03.163.76':445
'20#.#03.226.214':445
'20#.#03.254.104':445
'20#.#03.12.69':445
'20#.#03.45.12':445
'20#.#03.235.165':445
'20#.#03.72.79':445
'20#.#03.222.99':445
'20#.#03.158.211':445
'20#.#03.99.158':445
'20#.#03.172.193':445
'20#.#03.144.232':445
'20#.#03.146.222':445
'20#.#03.22.161':445
'20#.#03.25.194':445
'20#.#03.95.176':445
'20#.#03.133.149':445
'20#.#03.78.117':445
'20#.#03.72.254':445
'20#.#03.99.89':445
'20#.#03.109.69':445
'20#.#03.113.40':445
'20#.#03.93.139':445
'20#.#03.11.169':445
'20#.#03.34.236':445
'20#.#03.221.202':445
'20#.#03.95.176':139
'20#.#03.133.149':139
'20#.#03.78.117':139
'20#.#03.72.254':139
'20#.#03.99.89':139
'20#.#03.109.69':139
'20#.#03.113.40':139
'20#.#03.93.139':139
'20#.#03.11.169':139
'20#.#03.34.236':139
'20#.#03.201.9':139
'20#.#03.204.105':139
'20#.#03.10.2':139
'20#.#03.177.42':139
'20#.#03.209.169':139
'20#.#03.107.179':139
'20#.#03.89.254':139
'20#.#03.23.185':139
'20#.#03.58.155':139
'20#.#03.184.58':139
'20#.#03.97.78':139
'20#.#03.194.226':139
'20#.#03.47.20':139
'20#.#03.208.110':139
'20#.#03.94.104':139
'20#.#03.62.209':445
'20#.#03.146.28':445
'20#.#03.182.94':445
'20#.#03.244.140':445
'20#.#03.68.32':445
'20#.#03.235.165':139
'20#.#03.72.79':139
'20#.#03.222.99':139
'20#.#03.158.211':139
'20#.#03.99.158':139
'20#.#03.172.193':139
'20#.#03.144.232':139
'20#.#03.146.222':139
'20#.#03.22.161':139
'20#.#03.25.194':139
'20#.#03.132.89':139
'20#.#03.170.28':139
'20#.#03.88.215':139
'20#.#03.98.86':139
'20#.#03.190.246':139
'20#.#03.57.179':445
'20#.#03.177.51':445
'20#.#03.25.11':445
'20#.#03.52.19':445
'20#.#03.253.30':445
'20#.#03.81.10':139
'20#.#03.11.244':139
'20#.#03.180.35':139
'20#.#03.22.103':139
'20#.#03.162.171':139
'20#.#03.205.210':139
'20#.#03.196.99':139
'20#.#03.124.88':139
'20#.#03.143.228':139
'20#.#03.231.140':139
'20#.#03.153.52':445
'20#.#03.142.112':445
'20#.#03.132.35':445
'20#.#03.187.24':445
'20#.#03.229.135':445
'20#.#03.17.42':445
'20#.#03.163.154':445
'20#.#03.77.213':445
'20#.#03.95.46':445
'20#.#03.249.171':445
'20#.#03.141.197':445
'20#.#03.165.141':445
'20#.#03.197.41':445
'20#.#03.30.177':445
'20#.#03.42.30':445
'20#.#03.190.8':445
'20#.#03.24.87':445
'20#.#03.14.19':445
'20#.#03.45.25':445
'20#.#03.187.47':445
'20#.#03.51.245':139
'20#.#03.141.197':139
'20#.#03.165.141':139
'20#.#03.197.41':139
'20#.#03.30.177':139
'20#.#03.42.30':139
'20#.#03.190.8':139
'20#.#03.24.87':139
'20#.#03.14.19':139
'20#.#03.45.25':139
'20#.#03.187.47':139
'20#.#03.97.78':445
'20#.#03.194.226':445
'20#.#03.47.20':445
'20#.#03.208.110':445
'20#.#03.94.104':445
'20#.#03.57.179':139
'20#.#03.177.51':139
'20#.#03.25.11':139
'20#.#03.52.19':139
'20#.#03.253.30':139
'20#.#03.203.28':139
'20#.#03.31.73':139
'20#.#03.20.4':139
'20#.#03.37.164':139
'20#.#03.24.94':139
'20#.#03.201.24':139
'20#.#03.158.199':139
'20#.#03.52.22':139
'20#.#03.58.26':139
'20#.#03.249.116':139
'20#.#03.153.52':139
'20#.#03.142.112':139
'20#.#03.132.35':139
'20#.#03.187.24':139
'20#.#03.229.135':139
'20#.#03.17.42':139
'20#.#03.163.154':139
'20#.#03.77.213':139
'20#.#03.95.46':139
'20#.#03.249.171':139
'20#.#03.226.214':139
'20#.#03.215.216':445
'20#.#03.16.9':445
'20#.#03.248.2':445
'20#.#03.85.38':445
'20#.#03.19.51':445
'20#.#03.80.197':445
'20#.#03.129.80':445
'20#.#03.55.187':445
'20#.#03.84.95':445
'20#.#03.27.84':445
'20#.#03.112.96':139
'20#.#03.162.219':139
'20#.#03.96.64':139
'20#.#03.192.200':139
'20#.#03.64.180':139
'20#.#03.112.22':139
'20#.#03.35.90':139
'20#.#03.176.104':139
'20#.#03.102.11':139
'20#.#03.104.244':139
'20#.#03.39.200':445
'20#.#03.173.155':445
'20#.#03.150.32':445
'20#.#03.157.89':445
'20#.#03.97.219':445
'20#.#03.3.64':445
'20#.#03.113.3':445
'20#.#03.11.209':445
'20#.#03.99.168':445
'20#.#03.80.142':445
'20#.#03.130.126':445
'20#.#03.237.78':445
'20#.#03.18.57':445
'20#.#03.198.82':445
'20#.#03.153.70':445
'20#.#03.41.49':445
'20#.#03.89.156':445
'20#.#03.39.12':445
'20#.#03.73.253':445
'20#.#03.13.253':445
'20#.#03.54.206':139
'20#.#03.130.126':139
'20#.#03.237.78':139
'20#.#03.18.57':139
'20#.#03.198.82':139
'20#.#03.153.70':139
'20#.#03.41.49':139
'20#.#03.89.156':139
'20#.#03.39.12':139
'20#.#03.73.253':139
'20#.#03.13.253':139
'20#.#03.215.216':139
'20#.#03.16.9':139
'20#.#03.248.2':139
'20#.#03.85.38':139
'20#.#03.19.51':139
'20#.#03.80.197':139
'20#.#03.129.80':139
'20#.#03.55.187':139
'20#.#03.84.95':139
'20#.#03.27.84':139
'20#.#03.125.97':139
'20#.#03.99.41':139
'20#.#03.117.65':139
'20#.#03.199.43':139
'20#.#03.127.178':139
'20#.#03.200.56':139
'20#.#03.205.111':139
'20#.#03.242.206':139
'20#.#03.184.174':139
'20#.#03.9.184':139
'20#.#03.39.200':139
'20#.#03.173.155':139
'20#.#03.150.32':139
'20#.#03.157.89':139
'20#.#03.97.219':139
'20#.#03.3.64':139
'20#.#03.113.3':139
'20#.#03.11.209':139
'20#.#03.99.168':139
'20#.#03.80.142':139
'20#.#03.15.120':445
'20#.#03.188.213':445
'20#.#03.154.28':445
'20#.#03.36.205':139
'20#.#03.141.19':139
'20#.#03.85.37':445
'20#.#03.116.110':445
'20#.#03.38.185':445
'20#.#03.7.192':445
'20#.#03.251.50':445
'20#.#03.251.50':139
'20#.#03.38.185':139
'20#.#03.7.192':139
'20#.#03.15.120':139
'20#.#03.188.213':139
'20#.#03.225.150':139
'20#.#03.65.108':139
'20#.#03.150.194':139
'20#.#03.85.37':139
'20#.#03.116.110':139
'20#.#03.56.188':139
'20#.#03.67.15':139
'20#.#03.227.194':139
'20#.#03.221.202':139
'20#.#03.29.146':139
'20#.#03.254.104':139
'20#.#03.163.76':139
'20#.#03.45.12':139
'20#.#03.68.166':139
'20#.#03.12.69':139
'20#.#03.36.205':445
'20#.#03.141.19':445
'20#.#03.65.108':445
'20#.#03.150.194':445
'20#.#03.225.150':445
'20#.#03.62.209':139
'20#.#03.146.28':139
'20#.#03.182.94':139
'20#.#03.244.140':139
'20#.#03.68.32':139
'20#.#03.154.28':139
'20#.#03.96.64':445
'20#.#03.112.96':445
'20#.#03.64.180':445
'20#.#03.54.206':445
'20#.#03.192.200':445
'20#.#03.176.104':445
'20#.#03.112.22':445
'20#.#03.104.244':445
'20#.#03.162.219':445
'20#.#03.102.11':445
'20#.#03.125.97':445
'20#.#03.99.41':445
'20#.#03.117.65':445
'20#.#03.199.43':445
'20#.#03.127.178':445
'20#.#03.200.56':445
'20#.#03.205.111':445
'20#.#03.242.206':445
'20#.#03.184.174':445
'20#.#03.9.184':445
'20#.#03.13.253':9988
'20#.#03.39.200':9988
'20#.#03.73.253':9988
'20#.#03.18.57':9988
'20#.#03.130.126':9988
'20#.#03.242.206':9988
'20#.#03.205.111':9988
'20#.#03.9.184':9988
'20#.#03.125.97':9988
'20#.#03.99.41':9988
'20#.#03.248.2':9988
'20#.#03.19.51':9988
'20#.#03.215.216':9988
'20#.#03.35.90':445
'20#.#03.85.38':9988
'20#.#03.55.187':9988
'20#.#03.198.82':9988
'20#.#03.27.84':9988
'20#.#03.16.9':9988
'20#.#03.84.95':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней