Trojan.DownLoader12.28956

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'82.##.88.195':445
'82.##.80.114':445
'82.##.167.231':445
'82.##.171.25':445
'82.##.237.170':445
'82.##.168.141':445
'82.##.182.241':445
'82.#0.78.45':445
'82.#0.53.74':445
'82.##.218.238':445
'82.##.38.177':445
'82.##.74.180':445
'82.##.64.242':445
'82.##.157.170':445
'82.##.101.68':445
'82.##.34.101':445
'82.##.208.166':445
'82.##.30.130':445
'82.##.118.74':445
'82.##.232.24':445
'82.##.180.20':445
'82.##.105.225':445
'82.##.89.248':445
'82.##.195.89':445
'82.##.24.195':445
'82.##.240.22':139
'82.#0.19.71':139
'82.##.228.189':139
'82.##.13.153':445
'82.#0.32.72':445
'82.##.195.218':139
'82.##.54.197':139
'82.##.115.54':139
'82.##.25.115':139
'82.##.85.147':139
'82.##.201.86':139
'82.##.153.48':139
'82.##.79.219':445
'82.##.153.95':445
'82.##.248.195':445
'82.##.212.117':445
'82.##.253.117':445
'82.#0.79.78':445
'82.##.118.205':445
'82.#0.42.81':445
'82.##.119.21':445
'82.#0.70.95':445
'82.#0.53.7':445
'82.#0.14.73':445
'82.##.69.117':445
'82.##.51.229':445
'82.##.89.248':139
'82.##.195.89':139
'82.##.24.195':139
'82.##.157.170':139
'82.##.101.68':139
'82.##.34.101':139
'82.##.64.242':139
'82.##.171.25':139
'82.##.237.170':139
'82.##.232.24':139
'82.##.180.20':139
'82.##.105.225':139
'82.##.118.74':139
'82.##.204.49':445
'82.##.225.245':445
'82.##.181.22':445
'82.##.223.181':445
'82.##.245.185':445
'82.##.154.245':445
'82.##.51.229':139
'82.##.208.166':139
'82.##.30.130':139
'82.##.220.11':445
'82.##.33.140':445
'82.#0.40.67':445
'82.#0.53.7':139
'82.#0.14.73':139
'82.##.69.117':139
'82.##.153.95':139
'82.##.248.195':139
'82.##.212.117':139
'82.##.79.219':139
'82.##.13.153':139
'82.#0.32.72':139
'82.#0.42.81':139
'82.##.119.21':139
'82.#0.70.95':139
'82.##.118.205':139
'82.##.167.231':139
'82.##.218.238':139
'82.##.38.177':139
'82.##.168.141':139
'82.##.88.195':139
'82.##.80.114':139
'82.#0.53.74':139
'82.##.253.117':139
'82.#0.79.78':139
'82.##.74.180':139
'82.##.182.241':139
'82.#0.78.45':139
'82.##.195.218':445
'82.##.107.100':445
'82.#0.21.46':445
'82.#0.35.31':445
'82.##.240.235':445
'82.##.174.97':445
'82.##.101.23':445
'82.#0.117.6':445
'82.#0.86.51':445
'82.##.137.19':445
'82.##.88.236':445
'82.##.175.243':445
'82.#0.94.71':445
'82.##.130.10':445
'82.#0.1.179':445
'82.##.198.209':445
'82.##.218.213':445
'82.#0.3.106':445
'82.##.120.37':445
'82.##.108.213':445
'82.##.100.202':445
'82.##.123.251':445
'82.##.157.191':445
'82.##.57.218':445
'82.#0.98.58':445
'82.#0.21.99':445
'82.#0.89.70':139
'82.##.83.171':139
'82.##.99.183':139
'82.##.174.81':445
'82.##.146.119':445
'82.##.18.134':139
'82.##.115.71':139
'82.##.86.115':139
'82.##.135.142':139
'82.##.228.145':139
'82.##.52.135':139
'82.#0.28.15':139
'82.##.109.181':445
'82.##.151.254':445
'82.##.95.149':445
'82.##.213.156':445
'82.##.63.223':445
'82.##.104.114':445
'82.##.106.114':445
'82.##.53.196':445
'82.#0.40.44':445
'82.##.150.106':445
'82.##.113.253':445
'82.##.196.226':445
'82.##.148.25':445
'82.#0.85.26':445
'82.##.57.218':139
'82.#0.98.58':139
'82.#0.21.99':139
'82.#0.1.179':139
'82.##.198.209':139
'82.##.218.213':139
'82.##.130.10':139
'82.##.240.235':139
'82.##.174.97':139
'82.##.100.202':139
'82.##.123.251':139
'82.##.157.191':139
'82.##.108.213':139
'82.##.85.147':445
'82.##.201.86':445
'82.##.153.48':445
'82.##.240.22':445
'82.#0.19.71':445
'82.##.228.189':445
'82.#0.85.26':139
'82.#0.3.106':139
'82.##.120.37':139
'82.##.54.197':445
'82.##.115.54':445
'82.##.25.115':445
'82.##.113.253':139
'82.##.196.226':139
'82.##.148.25':139
'82.##.151.254':139
'82.##.95.149':139
'82.##.213.156':139
'82.##.109.181':139
'82.##.174.81':139
'82.##.146.119':139
'82.##.53.196':139
'82.#0.40.44':139
'82.##.150.106':139
'82.##.106.114':139
'82.#0.35.31':139
'82.##.88.236':139
'82.##.175.243':139
'82.##.101.23':139
'82.##.107.100':139
'82.#0.21.46':139
'82.##.137.19':139
'82.##.63.223':139
'82.##.104.114':139
'82.#0.94.71':139
'82.#0.117.6':139
'82.#0.86.51':139
'82.##.61.124':445
'82.#0.55.45':445
'82.##.54.174':445
'82.#0.1.47':445
'82.#0.50.14':445
'82.##.139.171':445
'82.##.227.181':445
'82.##.87.242':445
'82.##.165.88':445
'82.##.17.208':445
'82.##.121.72':445
'82.##.174.243':445
'82.#0.86.81':445
'82.##.124.206':445
'82.##.125.168':445
'82.##.238.11':445
'82.##.57.149':445
'82.##.137.127':445
'82.##.169.33':445
'82.##.23.248':445
'82.#0.57.36':445
'82.##.57.153':445
'82.##.250.56':445
'82.##.29.206':445
'82.#0.44.66':445
'82.#0.79.14':445
'82.#0.3.77':445
'82.##.241.34':445
'82.#0.2.175':445
'82.#0.22.81':445
'82.##.222.22':445
'82.##.157.135':445
'82.##.127.90':445
'82.##.144.172':445
'82.#0.99.95':445
'82.##.231.130':445
'82.##.204.231':445
'82.##.190.204':445
'82.##.80.166':445
'82.##.29.115':445
'82.#0.99.81':445
'82.##.163.54':445
'82.##.232.131':445
'82.##.59.232':445
'82.##.30.154':445
'82.#0.96.71':445
'82.#0.57.90':445
'82.##.166.57':445
'82.#0.41.71':445
'82.##.128.21':445
'82.##.117.221':445
'82.#0.6.128':139
'82.#0.55.45':139
'82.##.54.174':139
'82.#0.1.47':139
'82.#0.50.14':139
'82.##.139.171':139
'82.##.227.181':139
'82.##.87.242':139
'82.##.165.88':139
'82.##.17.208':139
'82.##.121.72':139
'82.##.174.243':139
'82.#0.86.81':139
'82.##.124.206':139
'82.##.137.127':139
'82.##.238.11':139
'82.##.57.149':139
'82.##.125.168':139
'82.##.169.33':139
'82.##.23.248':139
'82.#0.57.36':139
'82.##.57.153':139
'82.##.250.56':139
'82.##.29.206':139
'82.#0.44.66':139
'82.#0.79.14':139
'82.#0.3.77':139
'82.##.241.34':139
'82.#0.2.175':139
'82.#0.22.81':139
'82.##.222.22':139
'82.##.157.135':139
'82.##.127.90':139
'82.##.144.172':139
'82.#0.99.95':139
'82.##.231.130':139
'82.##.204.231':139
'82.##.190.204':139
'82.##.80.166':139
'82.#0.99.81':139
'82.##.29.115':139
'82.##.163.54':139
'82.##.232.131':139
'82.##.59.232':139
'82.##.30.154':139
'82.#0.96.71':139
'82.#0.57.90':139
'82.##.166.57':139
'82.#0.41.71':139
'82.##.128.21':139
'82.##.117.221':139
'82.#0.6.128':445
'82.##.201.19':445
'82.##.19.221':445
'82.#0.58.66':445
'82.##.235.129':445
'82.#0.20.5':445
'82.##.194.72':445
'82.##.18.218':445
'82.##.163.244':445
'82.##.75.243':445
'82.##.167.123':445
'82.##.151.135':445
'82.##.63.151':445
'82.##.80.149':445
'82.##.244.186':445
'82.##.101.55':445
'82.##.163.194':445
'82.##.80.159':445
'82.##.58.209':445
'82.##.176.180':445
'82.##.194.254':445
'82.##.159.194':445
'82.##.218.18':445
'82.##.170.93':445
'82.#0.18.22':445
'82.##.254.249':445
'82.##.223.181':139
'82.##.245.185':139
'82.##.154.245':139
'82.##.51.133':445
'82.##.153.116':445
'82.##.61.124':139
'82.##.220.11':139
'82.##.33.140':139
'82.#0.40.67':139
'82.##.204.49':139
'82.##.225.245':139
'82.##.181.22':139
'82.##.125.193':445
'82.##.112.86':445
'82.##.108.135':445
'82.##.107.125':445
'82.##.83.124':445
'82.##.238.83':445
'82.##.214.170':445
'82.##.252.156':445
'82.##.43.252':445
'82.##.197.67':445
'82.##.27.159':445
'82.##.120.106':445
'82.##.156.120':445
'82.##.199.194':445
'82.##.170.93':139
'82.#0.18.22':139
'82.##.254.249':139
'82.##.244.186':139
'82.##.101.55':139
'82.##.163.194':139
'82.##.80.149':139
'82.##.235.129':139
'82.#0.20.5':139
'82.##.194.254':139
'82.##.159.194':139
'82.##.218.18':139
'82.##.176.180':139
'82.##.174.243':9988
'82.##.87.242':9988
'82.#0.96.71':9988
'82.#0.44.66':9988
'82.#0.57.36':9988
'82.##.57.149':9988
'82.##.199.194':139
'82.##.80.159':139
'82.##.58.209':139
'82.#0.22.81':9988
'82.##.157.135':9988
'82.##.144.172':9988
'82.##.27.159':139
'82.##.120.106':139
'82.##.156.120':139
'82.##.112.86':139
'82.##.108.135':139
'82.##.107.125':139
'82.##.125.193':139
'82.##.51.133':139
'82.##.153.116':139
'82.##.252.156':139
'82.##.43.252':139
'82.##.197.67':139
'82.##.214.170':139
'82.#0.58.66':139
'82.##.167.123':139
'82.##.151.135':139
'82.##.194.72':139
'82.##.201.19':139
'82.##.19.221':139
'82.##.75.243':139
'82.##.83.124':139
'82.##.238.83':139
'82.##.63.151':139
'82.##.18.218':139
'82.##.163.244':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней