Trojan.DownLoader12.28898

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\System\ado\tsektjkj.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\NetMeeting\rsewzjqn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'62.##.208.219':445
'62.##.68.211':445
'62.##.187.127':445
'62.##.149.17':445
'62.##.137.75':445
'62.##.189.250':445
'62.##.235.220':445
'62.##.40.222':445
'62.##.110.104':445
'62.##.153.171':445
'62.#6.93.98':445
'62.##.140.82':445
'62.#6.49.27':445
'62.##.109.63':445
'62.##.145.15':445
'62.##.107.145':445
'62.##.112.166':445
'62.#6.75.60':445
'62.##.153.42':445
'62.##.105.37':445
'62.#6.1.19':445
'62.##.220.138':445
'62.##.52.194':445
'62.#6.56.88':445
'62.##.144.99':445
'62.##.122.163':445
'62.##.91.230':445
'62.##.53.144':445
'62.##.163.53':445
'62.##.44.127':445
'62.##.245.252':445
'62.#6.8.102':445
'62.#6.61.9':445
'62.##.252.106':445
'62.##.228.217':445
'62.##.101.30':445
'62.##.160.69':445
'62.##.32.229':445
'62.#6.2.214':445
'62.##.228.217':139
'62.##.32.229':139
'62.##.245.252':139
'62.#6.8.102':139
'62.#6.2.214':139
'62.##.44.127':139
'62.##.52.194':139
'62.##.101.30':139
'62.##.160.69':139
'62.##.252.106':139
'62.##.137.75':139
'62.##.40.222':139
'62.##.208.219':139
'62.##.68.211':139
'62.##.110.104':139
'62.##.105.37':139
'62.#6.61.9':139
'62.##.189.250':139
'62.##.235.220':139
'62.#6.56.88':139
'62.##.175.249':139
'62.##.63.108':139
'62.##.216.117':139
'62.##.196.246':139
'62.##.54.200':139
'62.##.30.124':445
'62.##.115.242':445
'62.##.223.133':445
'62.##.222.159':445
'62.##.128.211':139
'62.##.144.99':139
'62.##.53.144':139
'62.#6.1.19':139
'62.##.220.138':139
'62.##.163.53':139
'62.#6.68.70':139
'62.#6.26.44':139
'62.##.122.163':139
'62.##.91.230':139
'62.#6.68.70':445
'62.##.18.177':139
'62.#6.11.19':139
'62.##.184.182':139
'62.##.104.200':139
'62.#6.4.11':139
'62.##.85.166':139
'62.#6.26.26':139
'62.##.210.152':139
'62.##.81.128':139
'62.##.146.172':139
'62.##.209.49':139
'62.##.188.55':139
'62.#6.44.29':139
'62.#6.50.44':139
'62.##.23.177':139
'62.##.241.214':139
'62.##.64.181':139
'62.##.249.90':139
'62.##.214.177':139
'62.##.250.209':445
'62.##.248.251':445
'62.#6.31.45':445
'62.##.156.162':445
'62.##.153.36':445
'62.##.181.174':445
'62.##.208.155':445
'62.##.130.94':445
'62.##.120.181':445
'62.#6.9.4':445
'62.##.54.144':445
'62.#6.90.33':445
'62.##.74.185':445
'62.#6.68.93':445
'62.##.155.50':445
'62.##.228.241':445
'62.##.169.18':445
'62.#6.2.162':445
'62.#6.57.2':445
'62.##.163.176':445
'62.##.228.241':139
'62.#6.57.2':139
'62.#6.90.33':139
'62.##.74.185':139
'62.##.163.176':139
'62.##.54.144':139
'62.##.156.162':139
'62.##.169.18':139
'62.#6.2.162':139
'62.##.155.50':139
'62.##.216.117':445
'62.##.196.246':445
'62.#6.26.44':445
'62.##.128.211':445
'62.##.175.249':445
'62.##.250.209':139
'62.#6.68.93':139
'62.##.63.108':445
'62.##.54.200':445
'62.##.153.36':139
'62.#6.97.36':139
'62.##.138.96':139
'62.##.44.161':139
'62.#6.36.44':139
'62.##.222.137':139
'62.##.24.204':139
'62.#6.29.44':139
'62.##.203.222':139
'62.##.159.203':139
'62.##.103.241':139
'62.##.181.174':139
'62.##.120.181':139
'62.##.248.251':139
'62.#6.31.45':139
'62.#6.9.4':139
'62.##.127.32':139
'62.##.200.146':139
'62.##.208.155':139
'62.##.130.94':139
'62.##.24.205':445
'62.##.114.87':445
'62.##.12.154':139
'62.##.63.132':139
'62.#6.37.47':445
'62.##.186.182':445
'62.##.87.186':445
'62.##.105.36':445
'62.##.119.79':445
'62.##.118.251':139
'62.##.201.96':139
'62.##.191.106':139
'62.#6.3.130':139
'62.##.53.125':139
'62.##.135.192':139
'62.##.59.156':139
'62.##.77.127':139
'62.#6.41.61':139
'62.##.73.130':139
'62.##.76.229':445
'62.##.245.17':445
'62.##.233.103':445
'62.##.229.31':445
'62.##.11.163':445
'62.##.123.250':445
'62.#6.217.2':445
'62.##.124.154':445
'62.##.28.223':445
'62.#6.15.2':445
'62.##.32.124':445
'62.##.104.61':445
'62.##.69.215':445
'62.##.195.110':445
'62.##.248.195':445
'62.##.131.248':445
'62.##.226.212':445
'62.##.52.237':445
'62.##.12.130':445
'62.##.58.125':445
'62.##.131.248':139
'62.##.12.130':139
'62.##.104.61':139
'62.##.69.215':139
'62.##.58.125':139
'62.##.32.124':139
'62.##.229.31':139
'62.##.226.212':139
'62.##.52.237':139
'62.##.248.195':139
'62.#6.37.47':139
'62.##.105.36':139
'62.##.114.87':139
'62.##.24.205':139
'62.##.119.79':139
'62.##.76.229':139
'62.##.195.110':139
'62.##.186.182':139
'62.##.87.186':139
'62.##.11.163':139
'62.##.188.30':139
'62.##.149.84':139
'62.##.109.254':139
'62.#6.50.34':139
'62.##.109.187':139
'62.#6.83.36':139
'62.##.163.193':139
'62.##.74.199':139
'62.##.152.154':139
'62.##.116.23':139
'62.##.123.250':139
'62.##.28.223':139
'62.##.245.17':139
'62.##.233.103':139
'62.#6.15.2':139
'62.#6.49.61':139
'62.#6.101.1':139
'62.#6.217.2':139
'62.##.124.154':139
'62.#6.49.61':445
'62.##.160.192':139
'62.##.139.10':139
'62.#6.15.1':139
'62.##.85.240':139
'62.##.12.224':445
'62.##.208.202':445
'62.##.29.186':445
'62.##.73.169':445
'62.##.244.171':445
'62.##.29.186':139
'62.#6.217.2':9988
'62.##.124.154':9988
'62.##.11.163':9988
'62.##.123.250':9988
'62.#6.101.1':9988
'62.##.244.171':139
'62.##.208.202':139
'62.##.12.224':139
'62.##.73.169':139
'62.#6.15.1':445
'62.#6.75.60':139
'62.##.153.42':139
'62.##.140.82':139
'62.##.145.15':139
'62.##.107.145':139
'62.##.187.127':139
'62.##.149.17':139
'62.##.112.166':139
'62.##.153.171':139
'62.#6.93.98':139
'62.##.139.10':445
'62.##.223.133':139
'62.##.85.240':445
'62.##.160.192':445
'62.##.222.159':139
'62.#6.49.27':139
'62.##.109.63':139
'62.##.30.124':139
'62.##.115.242':139
'62.##.53.125':445
'62.##.201.96':445
'62.##.163.193':445
'62.#6.3.130':445
'62.##.191.106':445
'62.##.73.130':445
'62.##.59.156':445
'62.##.135.192':445
'62.#6.41.61':445
'62.#6.83.36':445
'62.##.109.254':445
'62.#6.50.34':445
'62.#6.101.1':445
'62.##.116.23':445
'62.##.188.30':445
'62.##.74.199':445
'62.##.152.154':445
'62.##.149.84':445
'62.##.109.187':445
'62.##.77.127':445
'62.##.131.248':9988
'62.##.12.130':9988
'62.##.76.229':9988
'62.##.69.215':9988
'62.##.58.125':9988
'62.##.32.124':9988
'62.##.229.31':9988
'62.##.226.212':9988
'62.##.52.237':9988
'62.##.87.186':9988
'62.##.63.132':445
'62.##.114.87':9988
'62.##.118.251':445
'62.##.12.154':445
'62.##.24.205':9988
'62.##.119.79':9988
'62.##.186.182':9988
'62.#6.37.47':9988
'62.##.105.36':9988

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней