Trojan.DownLoader12.28959

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'24.#4.8.55':445
'24.##.86.119':445
'24.##.232.10':445
'24.#4.45.52':139
'24.#4.40.68':139
'24.##.193.40':139
'24.##.145.140':445
'24.##.253.81':445
'24.##.248.16':445
'24.##.152.146':445
'24.##.107.146':445
'24.##.73.177':445
'24.##.160.186':445
'24.##.254.55':139
'24.##.68.116':139
'24.#4.85.68':139
'24.##.252.32':139
'24.##.253.81':139
'24.##.152.146':139
'24.##.248.16':139
'24.#4.92.99':139
'24.##.118.237':139
'24.##.19.179':139
'24.##.165.62':139
'24.##.163.105':139
'24.##.172.10':139
'24.##.230.171':139
'24.#4.85.68':445
'24.##.209.152':139
'24.#4.51.24':139
'24.##.244.165':139
'24.##.78.129':139
'24.#4.15.48':139
'24.##.246.30':139
'24.##.220.218':139
'24.##.252.174':139
'24.##.192.104':139
'24.##.179.191':139
'24.##.183.29':139
'24.#4.65.16':139
'24.##.234.11':139
'24.##.19.194':139
'24.##.163.105':445
'24.##.172.10':445
'24.##.230.171':445
'24.##.68.116':445
'24.##.252.32':445
'24.#4.92.99':445
'24.##.118.237':445
'24.#4.40.68':445
'24.#4.45.52':445
'24.##.193.40':445
'24.##.19.179':445
'24.##.165.62':445
'24.##.254.55':445
'24.##.87.117':139
'24.#4.8.161':139
'24.#4.33.73':139
'24.##.84.178':139
'24.##.18.194':139
'24.#4.3.57':139
'24.##.38.237':139
'24.##.102.44':445
'24.##.62.146':445
'24.##.216.63':445
'24.##.237.233':445
'24.#4.80.48':445
'24.##.236.187':445
'24.##.193.83':139
'24.##.66.253':139
'24.##.229.253':139
'24.##.222.66':139
'24.#4.56.67':139
'24.##.231.29':139
'24.##.178.94':139
'24.#4.80.74':139
'24.##.168.209':139
'24.##.124.250':139
'24.#4.59.89':139
'24.##.65.190':139
'24.#4.50.89':139
'24.##.112.151':139
'24.#4.56.67':445
'24.#4.8.161':445
'24.#4.33.73':445
'24.##.38.237':445
'24.##.18.194':445
'24.#4.3.57':445
'24.##.87.117':445
'24.#4.8.55':139
'24.##.107.146':139
'24.##.73.177':139
'24.##.160.186':139
'24.##.86.119':139
'24.##.232.10':139
'24.##.145.140':139
'24.##.84.178':445
'24.##.229.253':445
'24.##.222.66':445
'24.#4.80.74':445
'24.##.231.29':445
'24.##.178.94':445
'24.##.66.253':445
'24.##.65.190':445
'24.##.124.250':445
'24.#4.59.89':445
'24.##.193.83':445
'24.#4.50.89':445
'24.##.112.151':445
'24.##.168.209':445
'24.##.232.112':139
'24.##.126.253':445
'24.##.53.239':445
'24.#4.76.30':445
'24.#4.67.56':445
'24.##.131.13':445
'24.##.130.14':445
'24.##.230.40':445
'24.##.239.252':445
'24.#4.173.8':445
'24.#4.5.161':445
'24.##.214.232':445
'24.##.225.214':445
'24.##.65.203':445
'24.##.12.167':445
'24.##.20.219':139
'24.##.21.109':139
'24.##.84.254':139
'24.##.239.252':139
'24.#4.173.8':139
'24.#4.5.161':139
'24.#4.1.104':139
'24.##.223.177':445
'24.##.25.224':445
'24.#4.38.62':445
'24.##.39.238':139
'24.#4.35.98':445
'24.##.121.20':445
'24.##.20.219':445
'24.##.135.220':139
'24.##.155.72':139
'24.##.236.212':139
'24.#4.29.54':139
'24.##.63.233':139
'24.##.68.109':139
'24.##.26.237':139
'24.##.13.121':139
'24.##.12.249':139
'24.#4.58.71':139
'24.#4.3.88':139
'24.##.56.206':139
'24.##.165.39':139
'24.##.85.123':139
'24.##.39.238':445
'24.##.175.186':139
'24.##.100.160':139
'24.##.21.109':445
'24.##.84.254':445
'24.#4.1.104':445
'24.##.218.100':139
'24.##.180.41':139
'24.##.170.132':139
'24.##.60.208':139
'24.##.48.252':139
'24.##.118.68':139
'24.##.70.170':139
'24.#4.51.24':445
'24.##.244.165':445
'24.##.220.218':445
'24.#4.15.48':445
'24.##.246.30':445
'24.##.209.152':445
'24.##.183.29':445
'24.##.192.104':445
'24.##.179.191':445
'24.##.232.112':445
'24.#4.65.16':445
'24.##.234.11':445
'24.##.252.174':445
'24.##.78.129':445
'24.##.62.231':139
'24.##.44.230':139
'24.##.45.242':139
'24.##.113.33':139
'24.##.142.189':139
'24.##.26.160':139
'24.##.20.131':139
'24.##.178.65':139
'24.##.49.193':139
'24.##.19.194':445
'24.##.90.113':139
'24.#4.43.64':139
'24.##.193.168':139
'24.##.113.33':445
'24.#4.67.56':139
'24.##.131.13':139
'24.##.130.14':139
'24.##.25.224':139
'24.#4.38.62':139
'24.##.12.167':139
'24.##.126.253':139
'24.##.214.232':139
'24.##.225.214':139
'24.##.65.203':139
'24.##.53.239':139
'24.#4.76.30':139
'24.##.230.40':139
'24.##.223.177':139
'24.##.44.230':445
'24.##.45.242':445
'24.##.20.131':445
'24.##.142.189':445
'24.##.26.160':445
'24.##.62.231':445
'24.##.90.113':445
'24.##.49.193':445
'24.#4.35.98':139
'24.##.121.20':139
'24.#4.43.64':445
'24.##.193.168':445
'24.##.178.65':445
'24.##.216.63':139
'24.##.178.62':445
'24.##.232.107':445
'24.#4.11.42':445
'24.##.142.101':445
'24.##.31.142':445
'24.##.104.117':445
'24.##.109.181':445
'24.#4.0.88':445
'24.#4.40.96':445
'24.##.190.179':445
'24.#4.29.84':445
'24.#4.61.46':445
'24.#4.40.60':445
'24.#4.177.8':445
'24.#4.27.7':445
'24.##.221.32':445
'24.##.194.220':445
'24.##.190.176':445
'24.##.246.215':445
'24.##.60.252':445
'24.#4.77.65':445
'24.##.127.161':445
'24.##.103.31':445
'24.##.66.179':445
'24.##.221.77':445
'24.##.191.65':445
'24.##.194.37':445
'24.#4.43.88':445
'24.##.132.114':445
'24.#4.98.64':445
'24.##.60.252':9988
'24.##.50.203':445
'24.##.74.161':445
'24.##.114.75':445
'24.#4.27.7':9988
'24.#4.177.8':9988
'24.##.104.117':9988
'24.#4.61.46':9988
'24.##.221.32':9988
'24.##.241.162':9988
'24.##.221.77':9988
'24.##.10.208':445
'24.##.241.192':445
'24.#4.62.62':445
'24.#4.17.26':445
'24.#4.0.135':445
'24.#4.2.200':445
'24.##.89.239':445
'24.##.122.226':445
'24.#4.31.67':445
'24.##.102.184':445
'24.##.45.101':445
'24.##.138.171':445
'24.##.184.186':445
'24.##.215.127':445
'24.#4.177.8':139
'24.##.142.101':139
'24.##.31.142':139
'24.##.127.161':139
'24.##.103.31':139
'24.##.66.179':139
'24.##.104.117':139
'24.##.109.181':139
'24.#4.29.84':139
'24.#4.40.60':139
'24.##.178.62':139
'24.##.232.107':139
'24.#4.11.42':139
'24.##.194.37':139
'24.##.177.120':139
'24.##.190.176':139
'24.##.246.215':139
'24.##.241.162':139
'24.##.60.252':139
'24.##.37.122':139
'24.##.93.210':139
'24.#4.77.65':139
'24.##.221.77':139
'24.##.191.65':139
'24.#4.27.7':139
'24.##.221.32':139
'24.##.194.220':139
'24.#4.61.46':139
'24.##.10.208':139
'24.##.50.203':139
'24.##.74.161':139
'24.#4.31.67':139
'24.##.102.184':139
'24.##.45.101':139
'24.##.114.75':139
'24.##.93.210':445
'24.##.177.120':445
'24.##.241.162':445
'24.##.132.114':139
'24.#4.98.64':139
'24.##.37.122':445
'24.##.215.127':139
'24.#4.43.88':139
'24.#4.0.135':139
'24.#4.2.200':139
'24.#4.0.88':139
'24.#4.40.96':139
'24.##.190.179':139
'24.##.89.239':139
'24.##.122.226':139
'24.##.138.171':139
'24.##.184.186':139
'24.##.241.192':139
'24.#4.62.62':139
'24.#4.17.26':139
'24.#4.40.96':9988
'24.##.18.130':139
'24.##.123.108':139
'24.##.255.168':139
'24.##.16.249':139
'24.##.107.226':139
'24.##.130.74':139
'24.#4.49.0':139
'24.##.253.177':139
'24.#4.63.29':139
'24.##.28.204':445
'24.##.60.251':139
'24.#4.91.33':139
'24.##.128.47':139
'24.##.222.152':139
'24.#4.23.26':139
'24.#4.45.79':139
'24.##.28.199':139
'24.##.15.173':445
'24.##.230.148':445
'24.##.28.204':139
'24.##.217.127':139
'24.##.56.152':139
'24.##.143.248':139
'24.##.152.151':139
'24.#4.76.50':139
'24.#4.221.4':139
'24.##.153.22':139
'24.#4.23.26':445
'24.##.60.251':445
'24.#4.91.33':445
'24.##.128.47':445
'24.##.123.108':445
'24.##.255.168':445
'24.#4.49.0':445
'24.##.253.177':445
'24.##.236.187':139
'24.##.102.44':139
'24.##.62.146':139
'24.#4.63.29':445
'24.##.237.233':139
'24.#4.80.48':139
'24.##.18.130':445
'24.#4.76.50':445
'24.#4.221.4':445
'24.##.153.22':445
'24.#4.45.79':445
'24.##.28.199':445
'24.##.217.127':445
'24.##.56.152':445
'24.##.16.249':445
'24.##.107.226':445
'24.##.130.74':445
'24.##.143.248':445
'24.##.152.151':445
'24.##.222.152':445
'24.##.225.11':139
'24.##.69.158':139
'24.##.124.75':139
'24.##.171.51':139
'24.##.149.171':139
'24.##.180.149':139
'24.##.81.108':139
'24.##.95.239':139
'24.#4.82.9':139
'24.##.109.64':139
'24.#4.52.82':139
'24.#4.75.67':139
'24.##.146.179':139
'24.##.51.131':139
'24.##.152.60':139
'24.##.133.197':139
'24.##.146.254':139
'24.#4.43.88':9988
'24.#4.2.200':9988
'24.##.138.171':9988
'24.##.100.147':139
'24.##.107.73':139
'24.##.52.244':139
'24.#4.132.2':139
'24.##.175.23':139
'24.##.104.34':139
'24.##.62.152':139
'24.##.56.252':139
'24.##.69.158':445
'24.##.124.75':445
'24.##.81.108':445
'24.##.149.171':445
'24.##.180.149':445
'24.##.225.11':445
'24.#4.52.82':445
'24.#4.82.9':445
'24.##.109.64':445
'24.##.56.252':445
'24.#4.75.67':445
'24.##.146.179':445
'24.##.95.239':445
'24.##.171.51':445
'24.##.133.197':445
'24.##.146.254':445
'24.##.100.147':445
'24.##.15.173':139
'24.##.230.148':139
'24.##.152.60':445
'24.##.175.23':445
'24.##.52.244':445
'24.#4.132.2':445
'24.##.51.131':445
'24.##.104.34':445
'24.##.62.152':445
'24.##.107.73':445

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней