Trojan.DownLoader12.28891

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'21#.#3.30.77':445
'21#.#3.83.136':445
'21#.#3.59.231':445
'21#.#3.188.1':445
'21#.#3.78.188':445
'21#.#3.208.42':445
'21#.#3.112.11':445
'21#.#3.200.173':445
'21#.#3.11.210':445
'21#.#3.205.47':445
'21#.#3.223.227':445
'21#.#3.53.18':445
'21#.#3.236.225':445
'21#.#3.251.199':445
'21#.#3.241.162':445
'21#.#3.205.230':445
'21#.13.28.1':445
'21#.#3.129.16':445
'21#.#3.168.244':445
'21#.#3.11.230':445
'21#.#3.178.197':445
'21#.#3.109.16':445
'21#.#3.36.137':445
'21#.#3.49.253':445
'21#.#3.167.78':139
'21#.#3.24.49':445
'21#.#3.12.68':445
'21#.#3.58.46':445
'21#.#3.29.76':139
'21#.13.1.27':139
'21#.#3.203.215':139
'21#.#3.193.100':139
'21#.#3.13.16':139
'21#.#3.83.224':139
'21#.#3.221.210':445
'21#.#3.3.222':445
'21#.#3.239.201':445
'21#.#3.24.187':445
'21#.#3.190.132':445
'21#.#3.111.94':445
'21#.#3.24.49':139
'21#.#3.49.253':139
'21#.#3.58.46':139
'21#.#3.67.216':445
'21#.#3.12.68':139
'21#.#3.208.42':139
'21#.#3.205.47':139
'21#.#3.83.136':139
'21#.#3.59.231':139
'21#.#3.30.77':139
'21#.#3.223.227':139
'21#.#3.36.137':139
'21#.#3.24.187':139
'21#.#3.200.173':139
'21#.#3.11.210':139
'21#.#3.112.11':139
'21#.13.28.1':139
'21#.#3.178.197':139
'21#.#3.236.225':139
'21#.#3.251.199':139
'21#.#3.53.18':139
'21#.#3.109.16':139
'21#.#3.188.1':139
'21#.#3.78.188':139
'21#.#3.168.244':139
'21#.#3.11.230':139
'21#.#3.129.16':139
'21#.#3.190.132':139
'21#.#3.110.168':445
'21#.#3.239.252':445
'21#.#3.168.187':445
'21#.#3.14.137':445
'21#.#3.88.204':445
'21#.#3.110.13':445
'21#.#3.147.112':445
'21#.#3.207.36':445
'21#.#3.38.115':445
'21#.#3.148.172':445
'21#.#3.10.92':445
'21#.#3.111.94':139
'21#.#3.67.216':139
'21#.#3.3.222':139
'21#.#3.239.201':139
'21#.#3.221.210':139
'21#.#3.51.176':445
'21#.#3.165.78':445
'21#.#3.177.61':445
'21#.#3.254.20':445
'21#.#3.69.98':445
'21#.#3.102.88':445
'21#.#3.72.49':139
'21#.#3.73.95':445
'21#.#3.218.135':445
'21#.#3.242.207':445
'21#.13.15.7':445
'21#.#3.87.190':445
'21#.#3.152.218':445
'21#.#3.185.145':445
'21#.#3.113.9':445
'21#.#3.172.153':445
'21#.#3.50.228':445
'21#.#3.50.91':445
'21#.13.39.2':445
'21#.#3.255.38':445
'21#.#3.87.129':445
'21#.#3.203.215':445
'21#.#3.72.49':445
'21#.#3.93.129':445
'21#.#3.183.21':445
'21#.13.9.74':445
'21#.#3.171.90':445
'21#.#3.174.141':445
'21#.#3.91.28':445
'21#.#3.38.24':445
'21#.#3.63.143':445
'21#.#3.124.95':445
'21#.#3.142.196':445
'21#.#3.252.178':445
'21#.#3.36.46':445
'21#.#3.125.4':445
'21#.13.6.41':139
'21#.#3.72.139':139
'21#.#3.76.51':139
'21#.#3.200.110':445
'21#.#3.106.200':139
'21#.#3.195.61':445
'21#.#3.12.181':445
'21#.#3.214.21':445
'21#.#3.119.138':445
'21#.#3.49.119':445
'21#.#3.42.181':445
'21#.#3.222.116':445
'21#.#3.139.16':445
'21#.#3.3.192':445
'21#.#3.103.11':445
'21#.#3.32.56':445
'21#.#3.152.218':139
'21#.#3.50.228':139
'21#.#3.218.135':139
'21#.#3.242.207':139
'21#.#3.73.95':139
'21#.#3.50.91':139
'21#.#3.38.24':139
'21#.#3.119.138':139
'21#.#3.113.9':139
'21#.#3.172.153':139
'21#.#3.185.145':139
'21#.#3.93.129':139
'21#.#3.174.141':139
'21#.#3.255.38':139
'21#.#3.87.129':139
'21#.13.39.2':139
'21#.#3.91.28':139
'21#.13.15.7':139
'21#.#3.87.190':139
'21#.13.9.74':139
'21#.#3.171.90':139
'21#.#3.183.21':139
'21#.#3.49.119':139
'21#.#3.125.4':139
'21#.#3.200.110':139
'21#.#3.124.95':139
'21#.#3.142.196':139
'21#.#3.63.143':139
'21#.#3.167.78':445
'21#.#3.193.100':445
'21#.13.1.27':445
'21#.#3.83.224':445
'21#.#3.29.76':445
'21#.#3.13.16':445
'21#.#3.42.181':139
'21#.#3.103.11':139
'21#.#3.12.181':139
'21#.#3.214.21':139
'21#.#3.195.61':139
'21#.#3.32.56':139
'21#.#3.252.178':139
'21#.#3.36.46':139
'21#.#3.139.16':139
'21#.#3.3.192':139
'21#.#3.222.116':139
'21#.#3.59.131':445
'21#.#3.155.213':445
'21#.#3.131.7':445
'21#.#3.194.140':445
'21#.#3.4.106':445
'21#.13.3.25':445
'21#.#3.130.232':445
'21#.#3.211.154':445
'21#.#3.239.113':445
'21#.#3.137.106':445
'21#.#3.113.135':445
'21#.#3.79.181':139
'21#.#3.144.137':139
'21#.#3.27.28':139
'21#.#3.132.16':139
'21#.#3.213.178':139
'21#.#3.11.98':139
'21#.#3.134.249':445
'21#.#3.156.135':445
'21#.#3.37.18':445
'21#.#3.133.196':445
'21#.#3.203.9':445
'21#.#3.157.48':445
'21#.#3.217.146':445
'21#.#3.47.60':445
'21#.#3.146.84':445
'21#.#3.100.4':445
'21#.#3.92.131':445
'21#.#3.88.125':445
'21#.#3.142.224':445
'21#.#3.231.10':445
'21#.#3.225.133':445
'21#.#3.5.218':445
'21#.#3.133.90':445
'21#.13.9.67':445
'21#.#3.109.138':445
'21#.#3.18.196':445
'21#.#3.74.157':445
'21#.#3.59.117':445
'21#.#3.150.203':445
'21#.#3.254.203':445
'21#.#3.197.19':445
'21#.#3.34.149':445
'21#.#3.207.171':445
'21#.#3.94.137':445
'21#.#3.130.232':139
'21#.#3.211.154':139
'21#.#3.239.113':139
'21#.#3.137.106':139
'21#.#3.113.135':139
'21#.#3.157.48':139
'21#.13.9.67':139
'21#.#3.109.138':139
'21#.#3.18.196':139
'21#.#3.74.157':139
'21#.#3.59.117':139
'21#.#3.134.249':139
'21#.#3.156.135':139
'21#.#3.203.9':139
'21#.#3.133.196':139
'21#.#3.37.18':139
'21#.#3.194.140':139
'21#.#3.155.213':139
'21#.13.3.25':139
'21#.#3.59.131':139
'21#.#3.4.106':139
'21#.#3.131.7':139
'21#.#3.150.203':139
'21#.#3.142.224':139
'21#.#3.231.10':139
'21#.#3.225.133':139
'21#.#3.5.218':139
'21#.#3.133.90':139
'21#.#3.114.45':139
'21#.#3.242.179':139
'21#.#3.4.155':139
'21#.#3.24.23':139
'21#.#3.62.129':139
'21#.#3.99.251':139
'21#.#3.254.203':139
'21#.#3.197.19':139
'21#.#3.34.149':139
'21#.#3.207.171':139
'21#.#3.94.137':139
'21#.#3.100.4':139
'21#.#3.47.60':139
'21#.#3.88.125':139
'21#.#3.217.146':139
'21#.#3.92.131':139
'21#.#3.146.84':139
'21#.#3.114.45':445
'21#.#3.231.1':445
'21#.#3.46.231':445
'21#.#3.195.117':445
'21#.#3.255.59':445
'21#.#3.167.108':445
'21#.13.14.3':445
'21#.#3.232.124':139
'21#.#3.77.84':139
'21#.#3.77.121':139
'21#.#3.144.136':445
'21#.#3.149.65':139
'21#.#3.50.247':445
'21#.#3.144.178':445
'21#.#3.227.224':445
'21#.#3.96.29':445
'21#.#3.162.150':445
'21#.#3.138.6':445
'21#.#3.203.31':445
'21#.#3.206.30':445
'21#.#3.239.29':445
'21#.#3.141.134':445
'21#.#3.91.229':445
'21#.#3.149.65':445
'21#.#3.110.13':139
'21#.#3.148.172':139
'21#.#3.239.252':139
'21#.#3.168.187':139
'21#.#3.110.168':139
'21#.#3.10.92':139
'21#.#3.241.162':139
'21#.#3.205.230':139
'21#.#3.207.36':139
'21#.#3.38.115':139
'21#.#3.147.112':139
'21#.#3.51.176':139
'21#.#3.69.98':139
'21#.#3.77.84':445
'21#.#3.77.121':445
'21#.#3.232.124':445
'21#.#3.102.88':139
'21#.#3.14.137':139
'21#.#3.88.204':139
'21#.#3.177.61':139
'21#.#3.254.20':139
'21#.#3.165.78':139
'21#.#3.59.131':9988
'21#.#3.18.196':9988
'21#.#3.131.7':9988
'21#.#3.211.154':9988
'21#.#3.203.9':9988
'21#.#3.134.249':9988
'21#.#3.59.117':9988
'21#.#3.130.232':9988
'21#.#3.156.135':9988
'21#.#3.137.106':9988
'21#.#3.113.135':9988
'21#.#3.242.179':445
'21#.#3.4.155':445
'21#.#3.24.23':445
'21#.#3.62.129':445
'21#.#3.99.251':445
'21#.#3.132.16':445
'21#.#3.144.137':445
'21#.#3.11.98':445
'21#.#3.79.181':445
'21#.#3.213.178':445
'21#.#3.27.28':445
'21#.#3.157.48':9988
'21#.#3.255.59':139
'21#.#3.167.108':139
'21#.#3.206.30':139
'21#.#3.239.29':139
'21#.#3.203.31':139
'21#.#3.195.117':139
'21#.#3.144.136':139
'21#.#3.171.31':445
'21#.13.14.3':139
'21#.#3.231.1':139
'21#.#3.46.231':139
'21#.#3.96.29':139
'21#.#3.162.150':139
'21#.#3.171.31':139
'21#.13.3.25':9988
'21#.#3.4.106':9988
'21#.#3.227.224':139
'21#.#3.141.134':139
'21#.#3.91.229':139
'21#.#3.138.6':139
'21#.#3.50.247':139
'21#.#3.144.178':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней