Trojan.DownLoader12.28928

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'60.##6.218.158':139
'60.##6.224.108':139
'60.##6.158.86':139
'60.##6.95.151':139
'60.##6.183.13':139
'60.##6.182.241':139
'60.##6.124.77':139
'60.##6.204.84':139
'60.##6.105.188':139
'60.##6.200.135':139
'60.##6.77.159':139
'60.##6.36.248':445
'60.##6.135.163':445
'60.##6.7.135':445
'60.##6.163.116':445
'60.##6.143.82':445
'60.##6.246.25':139
'60.##6.157.196':139
'60.#26.3.9':139
'60.##6.46.152':445
'60.#26.8.47':139
'60.##6.105.188':445
'60.##6.200.135':445
'60.##6.224.108':445
'60.##6.158.86':445
'60.##6.218.158':445
'60.##6.182.198':445
'60.##6.142.155':445
'60.##6.124.77':445
'60.##6.204.84':445
'60.##6.182.241':445
'60.##6.183.13':445
'60.##6.25.70':139
'60.#26.8.47':445
'60.##6.129.98':139
'60.##6.182.198':139
'60.##6.142.155':139
'60.##6.77.159':445
'60.##6.95.151':445
'60.##6.157.196':445
'60.#26.3.9':445
'60.##6.246.25':445
'60.##6.173.253':445
'60.##6.36.248':139
'60.##6.135.163':139
'60.##6.7.135':139
'60.##6.163.116':139
'60.##6.143.82':139
'60.##6.245.104':445
'60.##6.37.211':445
'60.##6.37.175':445
'60.##6.46.152':139
'60.##6.14.109':445
'60.##6.173.253':139
'60.##6.184.195':139
'60.##6.145.86':139
'60.##6.188.51':139
'60.##6.24.231':139
'60.##6.91.191':139
'60.##6.250.167':139
'60.##6.0.111':139
'60.##6.73.156':139
'60.##6.33.203':139
'60.##6.202.202':139
'60.##6.184.195':445
'60.##6.145.86':445
'60.##6.188.51':445
'60.##6.24.231':445
'60.##6.91.191':445
'60.##6.250.167':445
'60.##6.0.111':445
'60.##6.73.156':445
'60.##6.33.203':445
'60.##6.202.202':445
'60.##6.113.239':445
'60.##6.91.45':445
'60.##6.34.19':445
'60.##6.75.125':445
'60.##6.72.81':445
'60.##6.102.72':445
'60.##6.250.41':445
'60.##6.112.241':445
'60.##6.30.207':445
'60.##6.227.33':445
'60.##6.36.33':445
'60.##6.6.129':445
'60.##6.72.60':445
'60.##6.71.186':445
'60.##6.77.98':445
'60.##6.64.153':445
'60.##6.61.112':445
'60.##6.77.165':445
'60.##6.137.27':445
'60.##6.245.225':445
'60.##6.51.69':445
'60.##6.177.19':445
'60.##6.160.61':445
'60.##6.12.157':445
'60.##6.71.190':445
'60.##6.128.1':445
'60.##6.253.125':445
'60.##6.58.178':445
'60.##6.19.136':445
'60.##6.100.47':445
'60.##6.184.7':445
'60.##6.47.20':445
'60.##6.151.32':139
'60.##6.20.162':139
'60.##6.7.203':139
'60.##6.189.46':139
'60.##6.80.13':139
'60.##6.102.239':139
'60.##6.85.118':139
'60.##6.20.202':139
'60.##6.155.177':139
'60.##6.184.118':139
'60.##6.132.205':139
'60.##6.184.20':139
'60.##6.33.184':139
'60.##6.20.114':139
'60.##6.18.80':445
'60.##6.16.55':445
'60.##6.70.90':139
'60.##6.237.147':139
'60.##6.47.183':139
'60.##6.152.33':139
'60.##6.182.151':139
'60.##6.169.231':445
'60.##6.160.61':139
'60.##6.12.157':139
'60.##6.71.190':139
'60.##6.128.1':139
'60.##6.253.125':139
'60.##6.58.178':139
'60.##6.19.136':139
'60.##6.100.47':139
'60.##6.184.7':139
'60.##6.47.20':139
'60.##6.169.231':139
'60.##6.107.181':139
'60.##6.56.29':139
'60.##6.68.47':139
'60.##6.129.98':445
'60.##6.25.70':445
'60.##6.9.194':139
'60.##6.3.183':139
'60.##6.41.167':139
'60.##6.89.138':139
'60.##6.167.142':139
'60.##6.107.181':445
'60.##6.56.29':445
'60.##6.68.47':445
'60.##6.18.80':139
'60.##6.16.55':139
'60.##6.9.194':445
'60.##6.3.183':445
'60.##6.41.167':445
'60.##6.89.138':445
'60.##6.167.142':445
'60.##6.77.165':139
'60.##6.71.186':139
'60.##6.6.129':139
'60.##6.64.153':139
'60.##6.177.19':139
'60.##6.77.98':139
'60.##6.137.27':139
'60.##6.61.112':139
'60.##6.51.69':139
'60.##6.72.60':139
'60.##6.245.225':139
'60.##6.113.239':139
'60.##6.217.138':445
'60.##6.9.202':445
'60.##6.62.169':445
'60.#26.7.20':445
'60.##6.3.147':445
'60.##6.202.11':445
'60.##6.27.89':445
'60.##6.66.107':445
'60.#26.77.3':445
'60.##6.111.161':445
'60.##6.42.75':445
'60.##6.167.216':139
'60.##6.15.222':139
'60.#26.34.3':139
'60.##6.80.57':139
'60.##6.56.149':139
'60.##6.78.166':445
'60.##6.37.122':445
'60.#26.70.6':139
'60.##6.82.106':139
'60.##6.225.37':139
'60.##6.121.238':445
'60.##6.172.182':445
'60.##6.137.111':445
'60.##6.26.20':445
'60.##6.124.30':445
'60.##6.93.124':445
'60.##6.182.19':445
'60.##6.203.42':445
'60.##6.107.172':445
'60.##6.223.212':445
'60.##6.20.203':445
'60.##6.212.116':445
'60.##6.106.222':445
'60.##6.117.41':445
'60.##6.222.49':445
'60.##6.40.222':445
'60.##6.34.215':445
'60.##6.119.156':445
'60.#26.14.3':445
'60.##6.76.250':445
'60.##6.134.195':445
'60.##6.244.217':139
'60.##6.40.222':139
'60.##6.117.41':139
'60.##6.222.49':139
'60.##6.202.11':139
'60.##6.27.89':139
'60.##6.134.195':139
'60.#26.14.3':139
'60.##6.76.250':139
'60.##6.212.116':139
'60.##6.106.222':139
'60.##6.66.107':139
'60.#26.7.20':139
'60.##6.3.147':139
'60.##6.42.75':139
'60.##6.78.166':139
'60.##6.37.122':139
'60.#26.77.3':139
'60.##6.111.161':139
'60.##6.9.202':139
'60.##6.62.169':139
'60.##6.217.138':139
'60.##6.168.15':139
'60.##6.215.59':139
'60.##6.67.182':139
'60.##6.93.124':139
'60.##6.182.19':139
'60.##6.130.167':139
'60.##6.207.130':139
'60.##6.35.93':139
'60.##6.131.228':139
'60.##6.92.88':139
'60.##6.203.42':139
'60.##6.26.20':139
'60.##6.124.30':139
'60.##6.20.203':139
'60.##6.34.215':139
'60.##6.119.156':139
'60.##6.107.172':139
'60.##6.223.212':139
'60.##6.172.182':139
'60.##6.137.111':139
'60.##6.121.238':139
'60.##6.226.56':445
'60.##6.100.6':445
'60.##6.57.130':445
'60.##6.134.48':445
'60.##6.12.180':445
'60.##6.3.102':445
'60.##6.162.141':445
'60.##6.32.116':445
'60.##6.18.247':445
'60.##6.30.199':445
'60.##6.202.128':445
'60.##6.141.81':139
'60.##6.245.170':139
'60.##6.201.162':139
'60.##6.3.102':139
'60.##6.162.141':139
'60.##6.44.193':139
'60.##6.98.142':445
'60.##6.190.245':139
'60.##6.158.181':139
'60.##6.24.82':139
'60.##6.91.45':139
'60.##6.34.19':139
'60.##6.75.125':139
'60.##6.72.81':139
'60.##6.102.72':139
'60.##6.250.41':139
'60.##6.112.241':139
'60.##6.30.207':139
'60.##6.227.33':139
'60.##6.36.33':139
'60.##6.37.211':139
'60.##6.158.181':445
'60.##6.24.82':445
'60.##6.245.170':445
'60.##6.201.162':445
'60.##6.141.81':445
'60.##6.37.175':139
'60.##6.245.104':139
'60.##6.14.109':139
'60.##6.190.245':445
'60.##6.44.193':445
'60.##6.32.116':139
'60.##6.82.106':445
'60.##6.225.37':445
'60.##6.15.222':445
'60.#26.34.3':445
'60.##6.167.216':445
'60.##6.78.166':9988
'60.##6.42.75':9988
'60.##6.37.122':9988
'60.#26.70.6':445
'60.#26.7.20':9988
'60.##6.56.149':445
'60.##6.131.228':445
'60.##6.92.88':445
'60.##6.215.59':445
'60.##6.67.182':445
'60.##6.168.15':445
'60.##6.244.217':445
'60.##6.80.57':445
'60.##6.207.130':445
'60.##6.35.93':445
'60.##6.130.167':445
'60.##6.134.48':139
'60.##6.12.180':139
'60.##6.202.128':139
'60.##6.172.182':9988
'60.##6.98.142':139
'60.##6.18.247':139
'60.##6.30.199':139
'60.##6.100.6':139
'60.##6.57.130':139
'60.##6.226.56':139
'60.##6.124.30':9988
'60.##6.40.222':9988
'60.##6.117.41':9988
'60.#26.77.3':9988
'60.##6.3.147':9988
'60.##6.62.169':9988
'60.##6.26.20':9988
'60.##6.20.203':9988
'60.##6.34.215':9988
'60.##6.134.195':9988
'60.#26.14.3':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней