Trojan.DownLoader12.28927

Техническая информация

Для обеспечения автозапуска и распространения:

Создает или изменяет следующие файлы:

%WINDIR%\Tasks\SA.DAT

Вредоносные функции:

Запускает на исполнение:

'<SYSTEM32>\svchost.exe' -k netsvcs

Изменения в файловой системе:

Создает следующие файлы:

%CommonProgramFiles%\Microsoft Shared\Stationery\brvrjrke.exe
%CommonProgramFiles%\System\ado\tsektjkj.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\ehbebsrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\nsqjttkv.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\njbsvtll.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\sjwzlskk.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\res\lhbtcvlt.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\hltjtlne.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\jjjthqtn.exe
%PROGRAM_FILES%\FireFox\chrome\toolkit\content\global\cpow\ketssrzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bcwvzwbh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\czjevcet.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\xrljqjzn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\vkjljzrn.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bhrhnkht.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\tlcwjrwt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bnbtzwxt.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\bzqlkhrh.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\qjllsjhl.exe
%CommonProgramFiles%\Microsoft Shared\Stationery\elwtjnbj.exe

Сетевая активность:

Подключается к:

'13#.#8.234.163':445
'13#.#8.125.226':445
'13#.#8.161.152':445
'13#.#8.86.45':445
'13#.#8.152.201':445
'13#.#8.245.125':445
'13#.#8.42.48':445
'13#.#8.55.223':445
'13#.#8.169.137':445
'13#.#8.13.177':445
'13#.#8.234.235':445
'13#.#8.239.30':445
'13#.#8.185.106':445
'13#.#8.117.251':445
'13#.#8.64.41':445
'13#.#8.66.249':445
'13#.#8.89.219':445
'13#.68.13.8':445
'13#.#8.11.12':445
'13#.#8.137.15':445
'13#.#8.24.196':445
'13#.#8.29.128':445
'13#.#8.109.233':139
'13#.#8.122.221':139
'13#.#8.233.201':139
'13#.#8.15.56':445
'13#.#8.248.254':445
'13#.#8.66.130':139
'13#.#8.197.184':139
'13#.#8.4.103':139
'13#.#8.38.60':139
'13#.#8.13.110':139
'13#.#8.44.25':139
'13#.#8.119.248':445
'13#.#8.141.237':445
'13#.#8.183.111':445
'13#.#8.206.84':445
'13#.#8.76.248':445
'13#.#8.229.229':139
'13#.#8.229.229':445
'13#.#8.135.122':445
'13#.#8.248.254':139
'13#.#8.135.122':139
'13#.#8.15.56':139
'13#.#8.161.131':445
'13#.#8.245.125':139
'13#.#8.13.177':139
'13#.#8.125.226':139
'13#.#8.161.152':139
'13#.#8.234.163':139
'13#.#8.234.235':139
'13#.#8.206.84':139
'13#.#8.76.248':139
'13#.#8.55.223':139
'13#.#8.169.137':139
'13#.#8.42.48':139
'13#.#8.89.219':139
'13#.#8.24.196':139
'13#.#8.185.106':139
'13#.#8.117.251':139
'13#.#8.239.30':139
'13#.#8.29.128':139
'13#.#8.86.45':139
'13#.#8.152.201':139
'13#.#8.11.12':139
'13#.#8.137.15':139
'13#.68.13.8':139
'13#.#8.7.174':445
'13#.#8.16.193':445
'13#.#8.161.156':445
'13#.#8.68.76':445
'13#.#8.174.103':445
'13#.#8.20.90':445
'13#.#8.21.107':445
'13#.#8.131.21':445
'13#.#8.107.19':445
'13#.#8.176.124':445
'13#.#8.114.138':445
'13#.#8.149.51':445
'13#.68.2.46':445
'13#.#8.141.237':139
'13#.#8.183.111':139
'13#.#8.119.248':139
'13#.#8.170.229':445
'13#.#8.21.106':445
'13#.#8.238.170':445
'13#.#8.245.71':445
'13#.#8.96.11':445
'13#.#8.229.69':445
'13#.#8.235.12':445
'13#.#8.42.121':445
'13#.#8.215.165':445
'13#.#8.245.72':445
'13#.#8.92.244':445
'13#.#8.205.61':445
'13#.#8.254.40':445
'13#.#8.229.1':445
'13#.#8.68.239':445
'13#.#8.212.205':445
'13#.#8.106.76':445
'13#.#8.176.237':445
'13#.#8.183.176':445
'13#.#8.45.199':445
'13#.#8.197.184':445
'13#.#8.4.103':445
'13#.#8.108.44':445
'13#.#8.105.13':445
'13#.#8.146.241':445
'13#.#8.31.50':445
'13#.#8.48.17':445
'13#.#8.139.74':445
'13#.#8.45.246':445
'13#.#8.100.42':445
'13#.#8.246.64':445
'13#.#8.19.147':445
'13#.#8.127.163':445
'13#.#8.218.154':445
'13#.#8.65.236':139
'13#.#8.63.106':139
'13#.#8.60.217':139
'13#.#8.76.170':445
'13#.#8.23.29':139
'13#.#8.168.227':445
'13#.#8.30.90':445
'13#.#8.54.199':445
'13#.#8.23.142':445
'13#.#8.182.227':445
'13#.#8.254.172':445
'13#.#8.105.157':445
'13#.#8.163.142':445
'13#.68.7.0':445
'13#.#8.170.31':445
'13#.#8.90.17':445
'13#.#8.38.60':445
'13#.#8.205.61':139
'13#.#8.212.205':139
'13#.#8.42.121':139
'13#.#8.215.165':139
'13#.#8.235.12':139
'13#.#8.106.76':139
'13#.#8.23.142':139
'13#.#8.182.227':139
'13#.#8.229.1':139
'13#.#8.68.239':139
'13#.#8.254.40':139
'13#.#8.108.44':139
'13#.#8.48.17':139
'13#.#8.183.176':139
'13#.#8.45.199':139
'13#.#8.176.237':139
'13#.#8.139.74':139
'13#.#8.245.72':139
'13#.#8.92.244':139
'13#.#8.146.241':139
'13#.#8.31.50':139
'13#.#8.105.13':139
'13#.#8.218.154':139
'13#.#8.76.170':139
'13#.#8.100.42':139
'13#.#8.246.64':139
'13#.#8.45.246':139
'13#.#8.233.201':445
'13#.#8.13.110':445
'13#.#8.44.25':445
'13#.#8.66.130':445
'13#.#8.109.233':445
'13#.#8.122.221':445
'13#.#8.254.172':139
'13#.#8.170.31':139
'13#.#8.30.90':139
'13#.#8.54.199':139
'13#.#8.168.227':139
'13#.#8.90.17':139
'13#.#8.19.147':139
'13#.#8.127.163':139
'13#.#8.163.142':139
'13#.68.7.0':139
'13#.#8.105.157':139
'13#.#8.194.74':445
'13#.#8.192.215':445
'13#.#8.166.109':445
'13#.#8.190.168':445
'13#.#8.155.92':445
'13#.#8.195.64':445
'13#.#8.190.209':445
'13#.#8.149.191':445
'13#.#8.31.209':445
'13#.#8.162.186':445
'13#.#8.132.205':445
'13#.#8.8.173':139
'13#.#8.41.24':139
'13#.#8.174.234':139
'13#.#8.170.150':139
'13#.#8.20.173':139
'13#.#8.160.228':139
'13#.#8.109.23':445
'13#.#8.38.78':445
'13#.#8.130.202':445
'13#.#8.78.29':445
'13#.#8.250.130':445
'13#.#8.37.100':445
'13#.#8.23.218':445
'13#.#8.242.205':445
'13#.#8.214.207':445
'13#.#8.2.215':445
'13#.#8.79.72':445
'13#.#8.78.133':445
'13#.#8.49.76':445
'13#.#8.205.203':445
'13#.#8.18.197':445
'13#.#8.190.11':445
'13#.#8.175.32':445
'13#.#8.189.149':445
'13#.#8.28.96':445
'13#.#8.32.42':445
'13#.#8.122.97':445
'13#.#8.198.189':445
'13#.#8.171.227':445
'13#.#8.143.148':445
'13#.#8.53.254':445
'13#.#8.50.50':445
'13#.#8.92.162':445
'13#.#8.218.248':139
'13#.#8.190.209':139
'13#.#8.149.191':139
'13#.#8.31.209':139
'13#.#8.162.186':139
'13#.#8.132.205':139
'13#.#8.32.42':139
'13#.#8.189.149':139
'13#.#8.198.189':139
'13#.#8.175.32':139
'13#.#8.122.97':139
'13#.#8.28.96':139
'13#.#8.130.202':139
'13#.#8.250.130':139
'13#.#8.38.78':139
'13#.#8.109.23':139
'13#.#8.78.29':139
'13#.#8.190.168':139
'13#.#8.194.74':139
'13#.#8.195.64':139
'13#.#8.192.215':139
'13#.#8.155.92':139
'13#.#8.166.109':139
'13#.#8.78.133':139
'13#.#8.49.76':139
'13#.#8.205.203':139
'13#.#8.18.197':139
'13#.#8.190.11':139
'13#.68.9.15':139
'13#.#8.115.36':139
'13#.#8.143.114':139
'13#.#8.226.137':139
'13#.#8.0.240':139
'13#.#8.77.222':139
'13#.#8.171.227':139
'13#.#8.143.148':139
'13#.#8.53.254':139
'13#.#8.50.50':139
'13#.#8.92.162':139
'13#.#8.214.207':139
'13#.#8.23.218':139
'13#.#8.79.72':139
'13#.#8.37.100':139
'13#.#8.2.215':139
'13#.#8.242.205':139
'13#.#8.14.78':139
'13#.#8.194.243':139
'13#.#8.176.253':445
'13#.#8.134.29':445
'13#.#8.77.134':445
'13#.#8.118.248':139
'13#.#8.118.248':445
'13#.#8.154.211':445
'13#.#8.194.243':445
'13#.#8.154.211':139
'13#.#8.14.78':445
'13#.#8.94.126':445
'13#.#8.14.81':445
'13#.#8.92.171':445
'13#.#8.81.81':445
'13#.#8.120.161':445
'13#.#8.242.212':445
'13#.#8.91.141':445
'13#.#8.29.69':445
'13#.#8.86.76':445
'13#.#8.68.30':445
'13#.#8.76.13':445
'13#.#8.176.124':139
'13#.#8.114.138':139
'13#.#8.20.90':139
'13#.#8.7.174':139
'13#.#8.16.193':139
'13#.#8.107.19':139
'13#.#8.64.41':139
'13#.#8.66.249':139
'13#.#8.161.131':139
'13#.#8.21.107':139
'13#.#8.131.21':139
'13#.#8.96.11':139
'13#.#8.229.69':139
'13#.#8.170.229':139
'13#.#8.149.51':139
'13#.68.2.46':139
'13#.#8.245.71':139
'13#.#8.174.103':139
'13#.#8.161.156':139
'13#.#8.68.76':139
'13#.#8.21.106':139
'13#.#8.238.170':139
'13#.#8.143.249':445
'13#.#8.190.209':9988
'13#.#8.149.191':9988
'13#.#8.31.209':9988
'13#.#8.41.24':445
'13#.#8.160.228':445
'13#.#8.162.186':9988
'13#.#8.132.205':9988
'13#.#8.78.29':9988
'13#.#8.175.32':9988
'13#.#8.28.96':9988
'13#.#8.130.202':9988
'13#.#8.226.137':445
'13#.#8.115.36':445
'13#.#8.77.222':445
'13#.68.9.15':445
'13#.#8.0.240':445
'13#.#8.143.114':445
'13#.#8.174.234':445
'13#.#8.8.173':445
'13#.#8.20.173':445
'13#.#8.218.248':445
'13#.#8.170.150':445
'13#.#8.68.30':139
'13#.#8.76.13':139
'13#.#8.242.212':139
'13#.#8.94.126':139
'13#.#8.14.81':139
'13#.#8.86.76':139
'13#.#8.77.134':139
'13#.#8.176.253':139
'13#.#8.134.29':139
'13#.#8.91.141':139
'13#.#8.29.69':139
'13#.#8.122.97':9988
'13#.#8.194.74':9988
'13#.#8.109.23':9988
'13#.#8.195.64':9988
'13#.#8.32.42':9988
'13#.#8.192.215':9988
'13#.#8.120.161':139
'13#.#8.92.171':139
'13#.#8.81.81':139
'13#.#8.155.92':9988
'13#.#8.143.249':139

Технологии

Термины

Обучение и просвещение

Мифы

Техническая информация

Рекомендации по лечению

Демо бесплатно на 14 дней